beenull
/
abook_carddav_squirrelmail
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

use sha256 instead of plaintext IMAP password to encrypt CardDAV password

This commit is contained in:
Alexey Shpakovsky 2021-06-08 00:19:28 +02:00
parent 3298cccedb
commit c56ab8de32
No known key found for this signature in database
GPG Key ID: 5797A726A2A4230A
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
setup.php
View File

@ -33,7 +33,7 @@ function abook_get_password($data, $opt){
require_once(SM_PATH . 'functions/strings.php');
switch ($opt) {
case '0': return sqauth_read_password();
case '1': return OneTimePadDecrypt($data, base64_encode(sqauth_read_password()));
case '1': return OneTimePadDecrypt($data, base64_encode(hash("sha256",sqauth_read_password(),true)));
case '2': return $data;
}
}
@ -46,7 +46,7 @@ function abook_set_password($password, $opt){
if(preg_match('/^\**$/', $password)) { return; }
require_once(SM_PATH . 'functions/auth.php');
require_once(SM_PATH . 'functions/strings.php');
$data = OneTimePadEncrypt($password, base64_encode(sqauth_read_password()));
$data = OneTimePadEncrypt($password, base64_encode(hash("sha256",sqauth_read_password(),true)));
break;
case '2':
if(preg_match('/^\**$/', $password)) { return; }
@ -207,6 +207,6 @@ function plugin_abook_carddav_password_opt_save($option){
* @return string
*/
function abook_carddav_version() {
return '1.1';
return '2.0';
}
?>