[*] Installer : added cookie mode instead of session for the installer
This commit is contained in:
+17
-17
@@ -44,15 +44,13 @@ class CookieCore
|
||||
/** @var array cipher tool instance */
|
||||
protected $_cipherTool;
|
||||
|
||||
/** @var array cipher tool initialization key */
|
||||
protected $_key;
|
||||
|
||||
/** @var array cipher tool initilization vector */
|
||||
protected $_iv;
|
||||
|
||||
protected $_modified = false;
|
||||
|
||||
protected $_allow_writing;
|
||||
|
||||
protected $_salt;
|
||||
|
||||
protected $_standalone;
|
||||
|
||||
/**
|
||||
* Get data if the cookie exists and else initialize an new one
|
||||
@@ -60,24 +58,26 @@ class CookieCore
|
||||
* @param $name Cookie name before encrypting
|
||||
* @param $path
|
||||
*/
|
||||
public function __construct($name, $path = '', $expire = null, $shared_urls = null)
|
||||
public function __construct($name, $path = '', $expire = null, $shared_urls = null, $standalone = false)
|
||||
{
|
||||
$this->_content = array();
|
||||
$this->_standalone = $standalone;
|
||||
$this->_expire = is_null($expire) ? time() + 1728000 : (int)$expire;
|
||||
$this->_name = md5(_PS_VERSION_.$name);
|
||||
$this->_path = trim(Context::getContext()->shop->physical_uri.$path, '/\\').'/';
|
||||
$this->_name = md5(($this->_standalone ? '' : _PS_VERSION_).$name);
|
||||
$this->_path = trim(($this->_standalone ? '' : Context::getContext()->shop->physical_uri).$path, '/\\').'/';
|
||||
if ($this->_path{0} != '/') $this->_path = '/'.$this->_path;
|
||||
$this->_path = rawurlencode($this->_path);
|
||||
$this->_path = str_replace('%2F', '/', $this->_path);
|
||||
$this->_path = str_replace('%7E', '~', $this->_path);
|
||||
$this->_key = _COOKIE_KEY_;
|
||||
$this->_iv = _COOKIE_IV_;
|
||||
$this->_domain = $this->getDomain($shared_urls);
|
||||
$this->_allow_writing = true;
|
||||
if (Configuration::get('PS_CIPHER_ALGORITHM'))
|
||||
$this->_cipherTool = new Rijndael(_RIJNDAEL_KEY_, _RIJNDAEL_IV_);
|
||||
$this->_salt = $this->_standalone ? str_pad('', 8, md5('ps'.__FILE__)) : _COOKIE_IV_;
|
||||
if ($this->_standalone)
|
||||
$this->_cipherTool = new Blowfish(str_pad('', 56, md5('ps'.__FILE__)), str_pad('', 56, md5('iv'.__FILE__)));
|
||||
elseif (!Configuration::get('PS_CIPHER_ALGORITHM'))
|
||||
$this->_cipherTool = new Blowfish(_COOKIE_KEY_, _COOKIE_IV_);
|
||||
else
|
||||
$this->_cipherTool = new Blowfish($this->_key, $this->_iv);
|
||||
$this->_cipherTool = new Rijndael(_RIJNDAEL_KEY_, _RIJNDAEL_IV_);
|
||||
$this->update();
|
||||
}
|
||||
|
||||
@@ -270,7 +270,7 @@ class CookieCore
|
||||
//printf("\$content = %s<br />", $content);
|
||||
|
||||
/* Get cookie checksum */
|
||||
$checksum = crc32($this->_iv.substr($content, 0, strrpos($content, '¤') + 2));
|
||||
$checksum = crc32($this->_salt.substr($content, 0, strrpos($content, '¤') + 2));
|
||||
//printf("\$checksum = %s<br />", $checksum);
|
||||
|
||||
/* Unserialize cookie content */
|
||||
@@ -297,7 +297,7 @@ class CookieCore
|
||||
$this->_content['date_add'] = date('Y-m-d H:i:s');
|
||||
|
||||
//checks if the language exists, if not choose the default language
|
||||
if (!Language::getLanguage((int)$this->id_lang))
|
||||
if (!$this->_standalone && !Language::getLanguage((int)$this->id_lang))
|
||||
$this->id_lang = Configuration::get('PS_LANG_DEFAULT');
|
||||
|
||||
}
|
||||
@@ -344,7 +344,7 @@ class CookieCore
|
||||
$cookie .= $key.'|'.$value.'¤';
|
||||
|
||||
/* Add checksum to cookie */
|
||||
$cookie .= 'checksum|'.crc32($this->_iv.$cookie);
|
||||
$cookie .= 'checksum|'.crc32($this->_salt.$cookie);
|
||||
$this->_modified = false;
|
||||
/* Cookies are encrypted for evident security reasons */
|
||||
return $this->_setcookie($cookie);
|
||||
|
||||
Reference in New Issue
Block a user