scores/webservice
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Update security

Browse Source
This commit is contained in:
Michael RICOIS 2013-03-21 12:59:41 +00:00
parent bdd7ca2de1
commit 2937e0633e
1 changed files with 12 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
library/WsScore/WsScore.php
View File

@ -497,7 +497,7 @@ class WsScore
}
/**
* checkAccesWS
* Check if user has the right to access WebService
* @throws SoapFault
*/
protected function checkAccesWS()
@ -510,7 +510,7 @@ class WsScore
}
/**
* checPerm
* Check if the user has the right to acces this functionality
* @param string $perm
* @throws SoapFault
*/
@ -576,12 +576,15 @@ class WsScore
return false;
}
// Récupération des informations de connexion
if ( $result->password == $password
|| md5($result->password) == $password
|| md5($result->login.'|'.$result->password) == $password
|| ( substr($password,0,7)=='iponly:' && checkPlagesIp($result->filtre_ip, substr($password,7))) )
{
// Check password with database informations
if ( $result->password == $password //password sent in clear
|| md5($result->password) == $password //password sent with md5
|| md5($result->login.'|'.$result->password) == $password //password sent concat with login and crypt by md5
// Block access with IPs
|| ( substr($password,0,7)=='iponly:'
&& !empty($result->filtre_ip)
&& checkPlagesIp($result->filtre_ip, substr($password,7))) ) {
$timeout = $result->timeout;
if ($timeout==0) $timeout = 1800;
$this->tabInfoUser = array(