1
|
<?php
|
2
|
|
3
|
/*
|
4
|
* This file is part of the Symfony package.
|
5
|
*
|
6
|
* (c) Fabien Potencier <fabien@symfony.com>
|
7
|
*
|
8
|
* For the full copyright and license information, please view the LICENSE
|
9
|
* file that was distributed with this source code.
|
10
|
*/
|
11
|
|
12
|
namespace Symfony\Polyfill\Php56;
|
13
|
|
14
|
use Symfony\Polyfill\Util\Binary;
|
15
|
|
16
|
/**
|
17
|
* @internal
|
18
|
*/
|
19
|
final class Php56
|
20
|
{
|
21
|
const LDAP_ESCAPE_FILTER = 1;
|
22
|
const LDAP_ESCAPE_DN = 2;
|
23
|
|
24
|
public static function hash_equals($knownString, $userInput)
|
25
|
{
|
26
|
if (!is_string($knownString)) {
|
27
|
trigger_error('Expected known_string to be a string, '.gettype($knownString).' given', E_USER_WARNING);
|
28
|
|
29
|
return false;
|
30
|
}
|
31
|
|
32
|
if (!is_string($userInput)) {
|
33
|
trigger_error('Expected user_input to be a string, '.gettype($userInput).' given', E_USER_WARNING);
|
34
|
|
35
|
return false;
|
36
|
}
|
37
|
|
38
|
$knownLen = Binary::strlen($knownString);
|
39
|
$userLen = Binary::strlen($userInput);
|
40
|
|
41
|
if ($knownLen !== $userLen) {
|
42
|
return false;
|
43
|
}
|
44
|
|
45
|
$result = 0;
|
46
|
|
47
|
for ($i = 0; $i < $knownLen; ++$i) {
|
48
|
$result |= ord($knownString[$i]) ^ ord($userInput[$i]);
|
49
|
}
|
50
|
|
51
|
return 0 === $result;
|
52
|
}
|
53
|
|
54
|
/**
|
55
|
* Stub implementation of the {@link ldap_escape()} function of the ldap
|
56
|
* extension.
|
57
|
*
|
58
|
* Escape strings for safe use in LDAP filters and DNs.
|
59
|
*
|
60
|
* @author Chris Wright <ldapi@daverandom.com>
|
61
|
*
|
62
|
* @param string $subject
|
63
|
* @param string $ignore
|
64
|
* @param int $flags
|
65
|
*
|
66
|
* @return string
|
67
|
*
|
68
|
* @see http://stackoverflow.com/a/8561604
|
69
|
*/
|
70
|
public static function ldap_escape($subject, $ignore = '', $flags = 0)
|
71
|
{
|
72
|
static $charMaps = null;
|
73
|
|
74
|
if (null === $charMaps) {
|
75
|
$charMaps = array(
|
76
|
self::LDAP_ESCAPE_FILTER => array('\\', '*', '(', ')', "\x00"),
|
77
|
self::LDAP_ESCAPE_DN => array('\\', ',', '=', '+', '<', '>', ';', '"', '#', "\r"),
|
78
|
);
|
79
|
|
80
|
$charMaps[0] = array();
|
81
|
|
82
|
for ($i = 0; $i < 256; ++$i) {
|
83
|
$charMaps[0][chr($i)] = sprintf('\\%02x', $i);
|
84
|
}
|
85
|
|
86
|
for ($i = 0, $l = count($charMaps[self::LDAP_ESCAPE_FILTER]); $i < $l; ++$i) {
|
87
|
$chr = $charMaps[self::LDAP_ESCAPE_FILTER][$i];
|
88
|
unset($charMaps[self::LDAP_ESCAPE_FILTER][$i]);
|
89
|
$charMaps[self::LDAP_ESCAPE_FILTER][$chr] = $charMaps[0][$chr];
|
90
|
}
|
91
|
|
92
|
for ($i = 0, $l = count($charMaps[self::LDAP_ESCAPE_DN]); $i < $l; ++$i) {
|
93
|
$chr = $charMaps[self::LDAP_ESCAPE_DN][$i];
|
94
|
unset($charMaps[self::LDAP_ESCAPE_DN][$i]);
|
95
|
$charMaps[self::LDAP_ESCAPE_DN][$chr] = $charMaps[0][$chr];
|
96
|
}
|
97
|
}
|
98
|
|
99
|
// Create the base char map to escape
|
100
|
$flags = (int) $flags;
|
101
|
$charMap = array();
|
102
|
|
103
|
if ($flags & self::LDAP_ESCAPE_FILTER) {
|
104
|
$charMap += $charMaps[self::LDAP_ESCAPE_FILTER];
|
105
|
}
|
106
|
|
107
|
if ($flags & self::LDAP_ESCAPE_DN) {
|
108
|
$charMap += $charMaps[self::LDAP_ESCAPE_DN];
|
109
|
}
|
110
|
|
111
|
if (!$charMap) {
|
112
|
$charMap = $charMaps[0];
|
113
|
}
|
114
|
|
115
|
// Remove any chars to ignore from the list
|
116
|
$ignore = (string) $ignore;
|
117
|
|
118
|
for ($i = 0, $l = strlen($ignore); $i < $l; ++$i) {
|
119
|
unset($charMap[$ignore[$i]]);
|
120
|
}
|
121
|
|
122
|
// Do the main replacement
|
123
|
$result = strtr($subject, $charMap);
|
124
|
|
125
|
// Encode leading/trailing spaces if self::LDAP_ESCAPE_DN is passed
|
126
|
if ($flags & self::LDAP_ESCAPE_DN) {
|
127
|
if ($result[0] === ' ') {
|
128
|
$result = '\\20'.substr($result, 1);
|
129
|
}
|
130
|
|
131
|
if ($result[strlen($result) - 1] === ' ') {
|
132
|
$result = substr($result, 0, -1).'\\20';
|
133
|
}
|
134
|
}
|
135
|
|
136
|
return $result;
|
137
|
}
|
138
|
}
|