SiteSecret.php

Go to the documentation of this file.

<?php
namespace Elgg\Database;

class SiteSecret {

    private $datalist;

    public function __construct(Datalist $datalist) {
        $this->datalist = $datalist;
    }

    private $test_secret = '';

    public function setTestingSecret($secret) {
        $this->test_secret = $secret;
    }

    function init() {
        $secret = 'z' . _elgg_services()->crypto->getRandomString(31);

        if ($this->datalist->set('__site_secret__', $secret)) {
            return $secret;
        }

        return false;
    }

    function get($raw = false) {
        if ($this->test_secret) {
            $secret = $this->test_secret;
        } else {
            $secret = $this->datalist->get('__site_secret__');
        }
        if (!$secret) {
            $secret = $this->init();
        }

        if ($raw) {
            // try to return binary key
            if ($secret[0] === 'z') {
                // new keys are "z" + base64URL
                $base64 = strtr(substr($secret, 1), '-_', '+/');
                $key = base64_decode($base64);
                if ($key !== false) {
                    // on failure, at least return string key :/
                    return $key;
                }
            } else {
                // old keys are hex
                return hex2bin($secret);
            }
        }

        return $secret;
    }

    function getStrength() {
        $secret = $this->get();
        if ($secret[0] !== 'z') {
            $rand_max = getrandmax();
            if ($rand_max < pow(2, 16)) {
                return 'weak';
            }
            if ($rand_max < pow(2, 32)) {
                return 'moderate';
            }
        }
        return 'strong';
    }
}