diff options
Diffstat (limited to 'poc/poc02-compiling-cake/src/vendor/cake_1.1.20.7692/cake/libs/controller/components/security.php')
| -rw-r--r-- | poc/poc02-compiling-cake/src/vendor/cake_1.1.20.7692/cake/libs/controller/components/security.php | 202 |
1 files changed, 0 insertions, 202 deletions
diff --git a/poc/poc02-compiling-cake/src/vendor/cake_1.1.20.7692/cake/libs/controller/components/security.php b/poc/poc02-compiling-cake/src/vendor/cake_1.1.20.7692/cake/libs/controller/components/security.php deleted file mode 100644 index 52a8582..0000000 --- a/poc/poc02-compiling-cake/src/vendor/cake_1.1.20.7692/cake/libs/controller/components/security.php +++ /dev/null @@ -1,202 +0,0 @@ -<?php -/* SVN FILE: $Id: security.php 6305 2008-01-02 02:33:56Z phpnut $ */ -/** - * Short description for file. - * - * Long description for file - * - * PHP versions 4 and 5 - * - * CakePHP(tm) : Rapid Development Framework <http://www.cakephp.org/> - * Copyright 2005-2008, Cake Software Foundation, Inc. - * 1785 E. Sahara Avenue, Suite 490-204 - * Las Vegas, Nevada 89104 - * - * Licensed under The MIT License - * Redistributions of files must retain the above copyright notice. - * - * @filesource - * @copyright Copyright 2005-2008, Cake Software Foundation, Inc. - * @link http://www.cakefoundation.org/projects/info/cakephp CakePHP(tm) Project - * @package cake - * @subpackage cake.cake.libs.controller.components - * @since CakePHP(tm) v 0.10.8.2156 - * @version $Revision: 6305 $ - * @modifiedby $LastChangedBy: phpnut $ - * @lastmodified $Date: 2008-01-01 21:33:56 -0500 (Tue, 01 Jan 2008) $ - * @license http://www.opensource.org/licenses/mit-license.php The MIT License - */ -/** - * Short description for file. - * - * Long description for file - * - * @package cake - * @subpackage cake.cake.libs.controller.components - */ -class SecurityComponent extends Object { -/** - * Holds an instance of the core Security object - * - * @var object Security - * @access public - */ - var $Security = null; -/** - * The controller method that will be called if this request is black-hole'd - * - * @var string - * @access public - */ - var $blackHoleCallback = null; -/** - * List of controller actions for which a POST request is required - * - * @var array - * @access public - * @see SecurityComponent::requirePost() - */ - var $requirePost = array(); -/** - * List of actions that require a valid authentication key - * - * @var array - * @access public - * @see SecurityComponent::requireAuth() - */ - var $requireAuth = array(); -/** - * Controllers from which actions of the current controller are allowed to receive - * requests. - * - * @var array - * @see SecurityComponent::requireAuth() - */ - var $allowedControllers = array(); -/** - * Actions from which actions of the current controller are allowed to receive - * requests. - * - * @var array - * @see SecurityComponent::requireAuth() - */ - var $allowedActions = array(); -/** - * Other components used by the Security component - * - * @var array - * @access public - */ - var $components = array('RequestHandler', 'Session'); -/** - * Security class constructor - */ - function __construct () { - $this->Security = Security::getInstance(); - } -/** - * Component startup. All security checking happens here. - * - * @param object $controller - * @return unknown - * @access public - */ - function startup(&$controller) { - if (is_array($this->requirePost) && !empty($this->requirePost)) { - - if (in_array($controller->action, $this->requirePost)) { - - if (!$this->RequestHandler->isPost()) { - - if (!$this->blackHole($controller)) { - return null; - } - } - } - } - - if (is_array($this->requireAuth) && !empty($this->requireAuth) && !empty($controller->params['form'])) { - if (in_array($controller->action, $this->requireAuth)) { - - if (!isset($controller->params['data']['_Token'])) { - - if (!$this->blackHole($controller)) { - return null; - } - } - $token = $controller->params['data']['_Token']['key']; - - if ($this->Session->check('_Token')) { - $tData = $this->Session->read('_Token'); - if (!(intval($tData['expires']) > strtotime('now')) || $tData['key'] !== $token) { - - if (!$this->blackHole($controller)) { - return null; - } - } - - if (!empty($tData['allowedControllers']) && !in_array($controller->params['controller'], $tData['allowedControllers']) ||!empty($tData['allowedActions']) && !in_array($controller->params['action'], $tData['allowedActions'])) { - if (!$this->blackHole($controller)) { - return null; - } - } - } else { - if (!$this->blackHole($controller)) { - return null; - } - } - } - } - - if (!isset($controller->params['requested']) || $controller->params['requested'] != 1) { - // Add auth key for new form posts - $authKey = Security::generateAuthKey(); - $expires = strtotime('+'.Security::inactiveMins().' minutes'); - $token = array( - 'key' => $authKey, - 'expires' => $expires, - 'allowedControllers' => $this->allowedControllers, - 'allowedActions' => $this->allowedActions - ); - if (!isset($controller->params['data'])) { - $controller->params['data'] = array(); - } - $controller->params['_Token'] = $token; - $this->Session->write('_Token', $token); - } - } -/** - * Black-hole an invalid request with a 404 error or custom callback - * - * @param object $controller - * @return callback in controller - * @access public - */ - function blackHole(&$controller) { - if ($this->blackHoleCallback == null) { - header('HTTP/1.0 404 Not Found'); - exit(); - } elseif (method_exists($controller, $this->blackHoleCallback)) { - return $controller->{$this->blackHoleCallback}(); - } - } -/** - * Sets the actions that require a POST request, or empty for all actions - * - * @access public - * @return void - */ - function requirePost() { - $this->requirePost = func_get_args(); - } -/** - * Sets the actions that require an authenticated request, or empty for all actions - * - * @access public - * @return void - */ - function requireAuth() { - $this->requireAuth = func_get_args(); - } -} -?>
\ No newline at end of file |