ston1th/zarafa-webapp-passwd
1
0
Fork 0
mirror of https://github.com/silentsakky/zarafa-webapp-passwd synced 2026-07-27 18:41:08 +02:00
Code Releases Activity

FIX: _SESSION['password'] was superseded by EncryptionStore

Browse source
This commit is contained in:
Max-Julian Pogner 2017-03-31 21:46:32 +02:00 • committed by Saket Patel
commit 3cafedcf3a
1 changed files with 12 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

13
php/class.passwdmodule.php
View file

@ -201,8 +201,19 @@ class PasswdModule extends Module
// get current session password
$sessionPass = $_SESSION['password'];
// if this plugin is used on a webapp version with EncryptionStore,
// $_SESSION['password'] is no longer available. User EncryptionStore
// in this case.
// EncryptionStore was introduced in webapp core somewhere after
// version 2.1.2, and with or before version 2.2.0.414.
// tested with Zarafa WebApp 2.2.1.43-199.1 running with
// Zarafa Server 7.2.4.29-99.1
if(class_exists("EncryptionStore")) {
$encryptionStore = EncryptionStore::getInstance();
$sessionPass = $encryptionStore->get("password");
}
// if user has openssl module installed
if (function_exists("openssl_decrypt")) {
else if (function_exists("openssl_decrypt")) {
if (version_compare(phpversion(), "5.3.3", "<")) {
$sessionPass = openssl_decrypt($sessionPass, "des-ede3-cbc", PASSWORD_KEY, 0);
} else {