Current File : //proc/self/root/home/tjamichg/cursos.tjamich.gob.mx/main/webservices/http-auth.php
<?php
/* For licensing terms, see /license.txt */
/**
* @package chamilo.webservices
*/
$realm = 'The batcave';
// Just a random id
$nonce = uniqid();
// Get the digest from the http header
$digest = getDigest();
// If there was no digest, show login
if (is_null($digest)) {
requireLogin($realm, $nonce);
}
$digestParts = digestParse($digest);
$validUser = 'admin';
$validPass = 'admin';
// Based on all the info we gathered we can figure out what the response should be
$A1 = md5("{$digestParts['username']}:{$realm}:{$validPass}");
$A2 = md5("{$_SERVER['REQUEST_METHOD']}:{$digestParts['uri']}");
$validResponse = md5("{$A1}:{$digestParts['nonce']}:{$digestParts['nc']}:{$digestParts['cnonce']}:{$digestParts['qop']}:{$A2}");
if ($digestParts['response'] != $validResponse) {
requireLogin($realm, $nonce);
} else {
// We're in!
echo 'a7532ae474e5e66a0c16eddab02e02a7';
exit();
}
// This function returns the digest string
function getDigest()
{
// mod_php
if (isset($_SERVER['PHP_AUTH_DIGEST'])) {
$digest = $_SERVER['PHP_AUTH_DIGEST'];
// most other servers
} elseif (isset($_SERVER['HTTP_AUTHENTICATION'])) {
if (strpos(
strtolower($_SERVER['HTTP_AUTHENTICATION']),
'digest'
) === 0) {
$digest = substr($_SERVER['HTTP_AUTHORIZATION'], 7);
}
} elseif (isset($_SERVER['HTTP_WWW_AUTHENTICATE'])) {
$digest = $_SERVER['HTTP_WWW_AUTHENTICATE'];
}
return $digest;
}
// This function forces a login prompt
function requireLogin($realm, $nonce)
{
header('WWW-Authenticate: Digest realm="'.$realm.'",qop="auth",nonce="'.$nonce.'",opaque="'.md5($realm).'"');
header('HTTP/1.1 401');
echo 'Authentication Canceled';
exit();
}
// This function extracts the separate values from the digest string
function digestParse($digest)
{
// protect against missing data
$needed_parts = ['nonce' => 1, 'nc' => 1, 'cnonce' => 1, 'qop' => 1, 'username' => 1, 'uri' => 1, 'response' => 1];
$data = [];
preg_match_all('@(\w+)=(?:(?:")([^"]+)"|([^\s,$]+))@', $digest, $matches, PREG_SET_ORDER);
foreach ($matches as $m) {
$data[$m[1]] = $m[2] ? $m[2] : $m[3];
unset($needed_parts[$m[1]]);
}
return $needed_parts ? false : $data;
}
Mini Shell