19

var/www/html/janet-photography.de/wp-includes | uid:33

class-phpass.php [X]

<?php
/**
 * Portable PHP password hashing framework.
 * @package phpass
 * @since 2.5.0
 * @version 0.5 / WordPress
 * @link https://www.openwall.com/phpass/
 */

#
# Portable PHP password hashing framework.
#
# Version 0.5.4 / WordPress.
#
# Written by Solar Designer <solar at openwall.com> in 2004-2006 and placed in
# the public domain.  Revised in subsequent years, still public domain.
#
# There's absolutely no warranty.
#
# The homepage URL for this framework is:
#
#	http://www.openwall.com/phpass/
#
# Please be sure to update the Version line if you edit this file in any way.
# It is suggested that you leave the main version number intact, but indicate
# your project name (after the slash) and add your own revision information.
#
# Please do not change the "private" password hashing method implemented in
# here, thereby making your hashes incompatible.  However, if you must, please
# change the hash type identifier (the "$P$") to something different.
#
# Obviously, since this code is in the public domain, the above are not
# requirements (there can be none), but merely suggestions.
#

/**
 * Portable PHP password hashing framework.
 *
 * @package phpass
 * @version 0.5 / WordPress
 * @link https://www.openwall.com/phpass/
 * @since 2.5.0
 */
class PasswordHash {
	var $itoa64;
	var $iteration_count_log2;
	var $portable_hashes;
	var $random_state;

function __construct($iteration_count_log2, $portable_hashes)
	{
		$this->itoa64 = './0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz';

if ($iteration_count_log2 < 4 || $iteration_count_log2 > 31) {
			$iteration_count_log2 = 8;
		}
		$this->iteration_count_log2 = $iteration_count_log2;

$this->portable_hashes = $portable_hashes;

$this->random_state = microtime();
		if (function_exists('getmypid')) {
			$this->random_state .= getmypid();
		}
	}

function PasswordHash($iteration_count_log2, $portable_hashes)
	{
		self::__construct($iteration_count_log2, $portable_hashes);
	}

function get_random_bytes($count)
	{
		$output = '';
		if (@is_readable('/dev/urandom') &&
		    ($fh = @fopen('/dev/urandom', 'rb'))) {
			$output = fread($fh, $count);
			fclose($fh);
		}

if (strlen($output) < $count) {
			$output = '';
			for ($i = 0; $i < $count; $i += 16) {
				$this->random_state =
				    md5(microtime() . $this->random_state);
				$output .= md5($this->random_state, TRUE);
			}
			$output = substr($output, 0, $count);
		}

return $output;
	}

return $output;
	}

function gensalt_private($input)
	{
		$output = '$P$';
		$output .= $this->itoa64[min($this->iteration_count_log2 + 5,
		    30)];
		$output .= $this->encode64($input, 6);

return $output;
	}

function crypt_private($password, $setting)
	{
		$output = '*0';
		if (substr($setting, 0, 2) === $output) {
			$output = '*1';
		}

$id = substr($setting, 0, 3);
		# We use "$P$", phpBB3 uses "$H$" for the same thing
		if ($id !== '$P$' && $id !== '$H$') {
			return $output;
		}

$count_log2 = strpos($this->itoa64, $setting[3]);
		if ($count_log2 < 7 || $count_log2 > 30) {
			return $output;
		}

$count = 1 << $count_log2;

$salt = substr($setting, 4, 8);
		if (strlen($salt) !== 8) {
			return $output;
		}

# We were kind of forced to use MD5 here since it's the only
		# cryptographic primitive that was available in all versions
		# of PHP in use.  To implement our own low-level crypto in PHP
		# would have resulted in much worse performance and
		# consequently in lower iteration counts and hashes that are
		# quicker to crack (by non-PHP code).
		$hash = md5($salt . $password, TRUE);
		do {
			$hash = md5($hash . $password, TRUE);
		} while (--$count);

$output = substr($setting, 0, 12);
		$output .= $this->encode64($hash, 16);

return $output;
	}

function gensalt_blowfish($input)
	{
		# This one needs to use a different order of characters and a
		# different encoding scheme from the one in encode64() above.
		# We care because the last character in our encoded string will
		# only represent 2 bits.  While two known implementations of
		# bcrypt will happily accept and correct a salt string which
		# has the 4 unused bits set to non-zero, we do not want to take
		# chances and we also do not want to waste an additional byte
		# of entropy.
		$itoa64 = './ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789';

$output = '$2a$';
		$output .= chr((int)(ord('0') + $this->iteration_count_log2 / 10));
		$output .= chr(ord('0') + $this->iteration_count_log2 % 10);
		$output .= '$';

$i = 0;
		do {
			$c1 = ord($input[$i++]);
			$output .= $itoa64[$c1 >> 2];
			$c1 = ($c1 & 0x03) << 4;
			if ($i >= 16) {
				$output .= $itoa64[$c1];
				break;
			}

$c2 = ord($input[$i++]);
			$c1 |= $c2 >> 4;
			$output .= $itoa64[$c1];
			$c1 = ($c2 & 0x0f) << 2;

$c2 = ord($input[$i++]);
			$c1 |= $c2 >> 6;
			$output .= $itoa64[$c1];
			$output .= $itoa64[$c2 & 0x3f];
		} while (1);

return $output;
	}

function HashPassword($password)
	{
		if ( strlen( $password ) > 4096 ) {
			return '*';
		}

$random = '';

if (CRYPT_BLOWFISH === 1 && !$this->portable_hashes) {
			$random = $this->get_random_bytes(16);
			$hash =
			    crypt($password, $this->gensalt_blowfish($random));
			if (strlen($hash) === 60) {
				return $hash;
			}
		}

if (strlen($random) < 6) {
			$random = $this->get_random_bytes(6);
		}
		$hash =
		    $this->crypt_private($password,
		    $this->gensalt_private($random));
		if (strlen($hash) === 34) {
			return $hash;
		}

# Returning '*' on error is safe here, but would _not_ be safe
		# in a crypt(3)-like function used _both_ for generating new
		# hashes and for validating passwords against existing hashes.
		return '*';
	}

function CheckPassword($password, $stored_hash)
	{
		if ( strlen( $password ) > 4096 ) {
			return false;
		}

$hash = $this->crypt_private($password, $stored_hash);
		if ($hash[0] === '*') {
			$hash = crypt($password, $stored_hash);
		}

# This is not constant-time.  In order to keep the code simple,
		# for timing safety we currently rely on the salts being
		# unpredictable, which they are at least in the non-fallback
		# cases (that is, when we use /dev/urandom and bcrypt).
		return $hash === $stored_hash;
	}
}

abilities-api/	-	O R D
ai-client/	-	O R D
assets/	-	O R D
block-bindings/	-	O R D
block-patterns/	-	O R D
block-supports/	-	O R D
blocks/	-	O R D
build/	-	O R D
certificates/	-	O R D
css/	-	O R D
customize/	-	O R D
fonts/	-	O R D
html-api/	-	O R D
ID3/	-	O R D
images/	-	O R D
interactivity-api/	-	O R D
IXR/	-	O R D
js/	-	O R D
l10n/	-	O R D
php-ai-client/	-	O R D
php-compat/	-	O R D
PHPMailer/	-	O R D
pomo/	-	O R D
Requests/	-	O R D
rest-api/	-	O R D
SimplePie/	-	O R D
sitemaps/	-	O R D
sodium_compat/	-	O R D
style-engine/	-	O R D
Text/	-	O R D
theme-compat/	-	O R D
widgets/	-	O R D
.t_hich	4	V E R D
.test_zjeclv	0	V E R D
ai-client.php	2.5K	V E R D
atomlib.php	11.9K	V E R D
block-i18n.json	316	V E R D
canonical.php	33.8K	V E R D
category-template.php	55.6K	V E R D
class-avif-info.php	29.3K	V E R D
class-http.php	367	V E R D
class-phpass.php	6.6K	V E R D
class-requests.php	2.2K	V E R D
class-simplepie.php	453	V E R D
class-walker-category-dropdown.php	2.4K	V E R D
class-walker-category.php	8.3K	V E R D
class-walker-nav-menu.php	11.8K	V E R D
class-walker-page-dropdown.php	2.6K	V E R D
class-wp-admin-bar.php	17.6K	V E R D
class-wp-ajax-response.php	5.1K	V E R D
class-wp-application-passwords.php	16.7K	V E R D
class-wp-block-bindings-registry.php	8.1K	V E R D
class-wp-block-bindings-source.php	2.9K	V E R D
class-wp-block-editor-context.php	1.3K	V E R D
class-wp-block-list.php	4.6K	V E R D
class-wp-block-metadata-registry.php	11.6K	V E R D
class-wp-block-parser-block.php	2.5K	V E R D
class-wp-block-parser-frame.php	1.9K	V E R D
class-wp-block-parser.php	11.3K	V E R D
class-wp-block-pattern-categories-registry.php	4.3K	V E R D
class-wp-block-patterns-registry.php	10.1K	V E R D
class-wp-block-processor.php	68.3K	V E R D
class-wp-block-styles-registry.php	6.3K	V E R D
class-wp-block-supports.php	6.4K	V E R D
class-wp-block-template.php	2K	V E R D
class-wp-block-templates-registry.php	6.9K	V E R D
class-wp-block-type-registry.php	4.9K	V E R D
class-wp-block-type.php	16.8K	V E R D
class-wp-block.php	24.1K	V E R D
class-wp-classic-to-block-menu-converter.php	3.9K	V E R D
class-wp-comment-query.php	47.5K	V E R D
class-wp-connector-registry.php	14.1K	V E R D
class-wp-customize-control.php	25.5K	V E R D
class-wp-customize-manager.php	198.1K	V E R D
class-wp-customize-nav-menus.php	56.6K	V E R D
class-wp-customize-panel.php	10.5K	V E R D
class-wp-customize-section.php	10.9K	V E R D
class-wp-customize-setting.php	29.3K	V E R D
class-wp-customize-widgets.php	70.9K	V E R D
class-wp-date-query.php	35.1K	V E R D
class-wp-duotone.php	40K	V E R D
class-wp-error.php	7.3K	V E R D
class-wp-fatal-error-handler.php	8K	V E R D
class-wp-feed-cache-transient.php	3.2K	V E R D
class-wp-feed-cache.php	969	V E R D
class-wp-http-cookie.php	7.1K	V E R D
class-wp-http-curl.php	13K	V E R D
class-wp-http-encoding.php	3.7K	V E R D
class-wp-http-ixr-client.php	3.4K	V E R D
class-wp-http-proxy.php	5.8K	V E R D
class-wp-http-requests-hooks.php	2K	V E R D
class-wp-http-requests-response.php	4.1K	V E R D
class-wp-http-response.php	2.9K	V E R D
class-wp-http-streams.php	16.4K	V E R D
class-wp-icons-registry.php	7.7K	V E R D
class-wp-image-editor-gd.php	20.2K	V E R D
class-wp-image-editor-imagick.php	36.1K	V E R D
class-wp-image-editor.php	17K	V E R D
class-wp-list-util.php	7.3K	V E R D
class-wp-locale-switcher.php	6.6K	V E R D
class-wp-locale.php	16.5K	V E R D
class-wp-meta-query.php	29.8K	V E R D
class-wp-metadata-lazyloader.php	6.7K	V E R D
class-wp-navigation-fallback.php	9K	V E R D
class-wp-network-query.php	19.3K	V E R D
class-wp-object-cache.php	17.1K	V E R D
class-wp-oembed-controller.php	6.7K	V E R D
class-wp-paused-extensions-storage.php	4.9K	V E R D
class-wp-plugin-dependencies.php	24.6K	V E R D
class-wp-post-type.php	30K	V E R D
class-wp-recovery-mode-cookie-service.php	6.7K	V E R D
class-wp-recovery-mode-email-service.php	10.9K	V E R D
class-wp-recovery-mode-key-service.php	4.8K	V E R D
class-wp-recovery-mode-link-service.php	3.4K	V E R D
class-wp-recovery-mode.php	11.2K	V E R D
class-wp-script-modules.php	39.6K	V E R D
class-wp-scripts.php	35.9K	V E R D
class-wp-session-tokens.php	7.1K	V E R D
class-wp-simplepie-file.php	3.5K	V E R D
class-wp-simplepie-sanitize-kses.php	1.9K	V E R D
class-wp-site-query.php	30.7K	V E R D
class-wp-speculation-rules.php	7.4K	V E R D
class-wp-tax-query.php	19.1K	V E R D
class-wp-term-query.php	39.8K	V E R D
class-wp-text-diff-renderer-inline.php	979	V E R D
class-wp-text-diff-renderer-table.php	18.5K	V E R D
class-wp-textdomain-registry.php	10.2K	V E R D
class-wp-theme-json-data.php	1.8K	V E R D
class-wp-theme-json-resolver.php	34.9K	V E R D
class-wp-theme-json-schema.php	7.2K	V E R D
class-wp-theme-json.php	169.6K	V E R D
class-wp-token-map.php	27.9K	V E R D
class-wp-url-pattern-prefixer.php	4.7K	V E R D
class-wp-user-meta-session-tokens.php	2.9K	V E R D
class-wp-user-query.php	43.1K	V E R D
class-wp-user-request.php	2.3K	V E R D
class-wp-widget-factory.php	3.3K	V E R D
class-wp-xmlrpc-server.php	210K	V E R D
class.wp-dependencies.php	373	V E R D
class.wp-scripts.php	343	V E R D
class.wp-styles.php	338	V E R D
comment-template.php	100.8K	V E R D
connectors.php	23.5K	V E R D
date.php	400	V E R D
default-filters.php	36.5K	V E R D
feed-rdf.php	2.6K	V E R D
feed-rss2.php	3.7K	V E R D
fonts.php	9.6K	V E R D
functions.wp-scripts.php	20K	V E R D
global-styles-and-settings.php	20.3K	V E R D
https-detection.php	5.7K	V E R D
https-migration.php	4.6K	V E R D
kses.php	81K	V E R D
l10n.php	69.7K	V E R D
link-template.php	156.4K	V E R D
locale.php	162	V E R D
media-template.php	61.8K	V E R D
media.php	219.7K	V E R D
ms-default-filters.php	6.5K	V E R D
ms-files.php	2.8K	V E R D
ms-site.php	40.8K	V E R D
post-formats.php	6.9K	V E R D
script-loader.php	159.3K	V E R D
script-modules.php	11.7K	V E R D
style-engine.php	7.4K	V E R D
taxonomy.php	173K	V E R D
template-canvas.php	544	V E R D
theme-i18n.json	1.8K	V E R D
user.php	174.6K	V E R D
utf8.php	7.1K	V E R D
vars.php	6.5K	V E R D
version.php	1.1K	V E R D
view-transitions.php	602	V E R D
wp-db-repair.php	3.7K	V E R D
wp-diff.php	799	V E R D