adam/Piwigo
1
0
Fork 0
mirror of https://github.com/Piwigo/Piwigo.git synced 2026-07-21 00:53:04 +02:00
Code Issues Packages Projects Releases Wiki Activity

feature 1915: add protection on user registration against robots

Browse Source 
git-svn-id: http://piwigo.org/svn/trunk@7495 68402e56-0260-453c-a942-63ccdbb3a9ee
This commit is contained in:
rvelices
2010-10-30 11:32:11 +00:00
parent 6f841013d9
commit d8ec9b9fdd
7 changed files with 51 additions and 40 deletions
Download Patch File Download Diff File Expand all files Collapse all files
include/functions.inc.php
+27 -15
View File
@@ -1333,25 +1333,37 @@ function secure_directory($dir)
}
/**
* returns a "secret key" that is to be sent back when a user enters a comment
* returns a "secret key" that is to be sent back when a user posts a form
*
* @param int image_id
* @param int valid_after_seconds - key validity start time from now
*/
function get_comment_post_key($image_id)
function get_ephemeral_key($valid_after_seconds, $aditionnal_data_to_hash = '')
{
global $conf;
global $conf;
$time = round(microtime(true), 1);
return $time.':'.$valid_after_seconds.':'
.hash_hmac(
'md5',
$time.substr($_SERVER['REMOTE_ADDR'],0,5).$valid_after_seconds.$aditionnal_data_to_hash,
$conf['secret_key']);
}
$time = time();
return sprintf(
'%s:%s',
$time,
hash_hmac(
'md5',
$time.':'.$image_id,
$conf['secret_key']
)
);
function verify_ephemeral_key($key, $aditionnal_data_to_hash = '')
{
global $conf;
$time = microtime(true);
$key = explode( ':', @$key );
if ( count($key)!=3
or $key[0]>$time-(float)$key[1] // page must have been retrieved more than X sec ago
or $key[0]<$time-3600 // 60 minutes expiration
or hash_hmac(
'md5', $key[0].substr($_SERVER['REMOTE_ADDR'],0,5).$key[1].$aditionnal_data_to_hash, $conf['secret_key']
) != $key[2]
)
{
return false;
}
return true;
}
/**