fanbinit/rhymix
1
0
Fork 0
mirror of https://github.com/Lastorder-DC/rhymix.git synced 2026-01-07 10:41:40 +09:00
Code Issues Projects Releases Packages Wiki Activity

Disable password algorithms that are too large for the password field

Browse source
This commit is contained in:
Kijin Sung 2022-03-22 00:15:46 +09:00
parent 03d456c674
commit 46136660a8
2 changed files with 17 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

15
modules/member/member.admin.view.php
View file

@ -164,7 +164,20 @@ class memberAdminView extends member
*/
public function dispMemberAdminConfig()
{
Context::set('password_hashing_algos', Rhymix\Framework\Password::getSupportedAlgorithms());
// Get supported password algorithms.
$oDB = DB::getInstance();
$column_info = $oDB->getColumnInfo('member', 'password');
$password_maxlength = intval($column_info->size);
$password_algos = Rhymix\Framework\Password::getSupportedAlgorithms();
if ($password_maxlength < 128 && isset($password_algos['sha512']))
{
$password_algos['sha512'] = false;
}
if ($password_maxlength < 64 && isset($password_algos['sha256']))
{
$password_algos['sha256'] = false;
}
Context::set('password_hashing_algos', $password_algos);
$this->setTemplateFile('default_config');
}

4
modules/member/tpl/default_config.html
View file

@ -80,7 +80,9 @@
<label class="x_control-label">{$lang->cmd_password_hashing_algorithm}</label>
<div class="x_controls">
<select name="password_hashing_algorithm" id="password_hashing_algorithm" style="width:auto">
<option value="{$key}" selected="selected"|cond="$config->password_hashing_algorithm==$key" loop="$password_hashing_algos=>$key,$val">{$val}</option>
<!--@foreach($password_hashing_algos as $key => $val)-->
<option value="{$key}" selected="selected"|cond="$config->password_hashing_algorithm === $key" disabled="disabled"|cond="$val === false">{$val ?: $key}</option>
<!--@endforeach-->
</select>
<p class="x_help-block">{$lang->about_password_hashing_algorithm}</p>
</div>