mexon/friendica
1
0
Fork 0
Code Pull requests Activity

Merge pull request #6077 from nupplaphil/move_random_digits

Browse source 
Move random digits
This commit is contained in:
Hypolite Petovan 2018-11-05 15:23:24 -05:00 committed by GitHub
parent 0472c7b57d 6949841947
commit 26acf3d78e
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
8 changed files with 81 additions and 17 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
boot.php
View file

@ -673,16 +673,6 @@ function curPageURL()
return $pageURL;
}
function random_digits($digits)
{
$rn = '';
for ($i = 0; $i < $digits; $i++) {
/// @TODO Avoid rand/mt_rand, when it comes to cryptography, they are generating predictable (seedable) numbers.
$rn .= rand(0, 9);
}
return $rn;
}
function get_server()
{
$server = Config::get("system", "directory");

3
include/conversation.php
View file

@ -27,6 +27,7 @@ use Friendica\Util\DateTimeFormat;
use Friendica\Util\Proxy as ProxyUtils;
use Friendica\Util\Temporal;
use Friendica\Util\XML;
use Friendica\Util\Crypto;
function item_extract_images($body) {
@ -1166,7 +1167,7 @@ function status_editor(App $a, $x, $notes_cid = 0, $popup = false)
'$notes_cid' => $notes_cid,
'$sourceapp' => L10n::t($a->sourcename),
'$cancel' => L10n::t('Cancel'),
'$rand_num' => random_digits(12),
'$rand_num' => Crypto::randomDigits(12),
// ACL permissions box
'$acl' => $x['acl'],

3
mod/editpost.php
View file

@ -12,6 +12,7 @@ use Friendica\Core\System;
use Friendica\Model\FileTag;
use Friendica\Model\Item;
use Friendica\Database\DBA;
use Friendica\Util\Crypto;
function editpost_content(App $a)
{
@ -131,7 +132,7 @@ function editpost_content(App $a)
'$jotplugins' => $jotplugins,
'$sourceapp' => L10n::t($a->sourcename),
'$cancel' => L10n::t('Cancel'),
'$rand_num' => random_digits(12),
'$rand_num' => Crypto::randomDigits(12),
//jot nav tab (used in some themes)
'$message' => L10n::t('Message'),

7
mod/photos.php
View file

@ -26,6 +26,7 @@ use Friendica\Model\User;
use Friendica\Network\Probe;
use Friendica\Object\Image;
use Friendica\Protocol\DFRN;
use Friendica\Util\Crypto;
use Friendica\Util\DateTimeFormat;
use Friendica\Util\Map;
use Friendica\Util\Security;
@ -1500,7 +1501,7 @@ function photos_content(App $a)
'$preview' => L10n::t('Preview'),
'$sourceapp' => L10n::t($a->sourcename),
'$ww' => '',
'$rand_num' => random_digits(12)
'$rand_num' => Crypto::randomDigits(12)
]);
}
}
@ -1539,7 +1540,7 @@ function photos_content(App $a)
'$preview' => L10n::t('Preview'),
'$sourceapp' => L10n::t($a->sourcename),
'$ww' => '',
'$rand_num' => random_digits(12)
'$rand_num' => Crypto::randomDigits(12)
]);
}
@ -1599,7 +1600,7 @@ function photos_content(App $a)
'$preview' => L10n::t('Preview'),
'$sourceapp' => L10n::t($a->sourcename),
'$ww' => '',
'$rand_num' => random_digits(12)
'$rand_num' => Crypto::randomDigits(12)
]);
}
}

1
src/Core/System.php
View file

@ -265,7 +265,6 @@ class System extends BaseObject
function notice($s)
function info($s)
function is_site_admin()
function random_digits($digits)
function get_server()
function get_temppath()
function get_cachefile($file, $writemode = true)

3
src/Object/Post.php
View file

@ -18,6 +18,7 @@ use Friendica\Database\DBA;
use Friendica\Model\Contact;
use Friendica\Model\Item;
use Friendica\Model\Term;
use Friendica\Util\Crypto;
use Friendica\Util\DateTimeFormat;
use Friendica\Util\Proxy as ProxyUtils;
use Friendica\Util\Temporal;
@ -815,7 +816,7 @@ class Post extends BaseObject
'$indent' => $indent,
'$sourceapp' => L10n::t($a->sourcename),
'$ww' => $conv->getMode() === 'network' ? $ww : '',
'$rand_num' => random_digits(12)
'$rand_num' => Crypto::randomDigits(12)
]);
}

21
src/Util/Crypto.php
View file

@ -476,4 +476,25 @@ class Crypto
return self::decryptAES256CBC(base64url_decode($data['data']), $k, $i);
}
/**
* Creates cryptographic secure random digits
*
* @param string $digits The count of digits
* @return int The random Digits
*
* @throws \Exception In case 'random_int' isn't usable
*/
public static function randomDigits($digits)
{
$rn = '';
// generating cryptographically secure pseudo-random integers
for ($i = 0; $i < $digits; $i++) {
$rn .= random_int(0, 9);
}
return $rn;
}
}

50
tests/src/Util/CryptoTest.php Normal file
View file

@ -0,0 +1,50 @@
<?php
// this is in the same namespace as Crypto for mocking 'rand' and 'random_init'
namespace Friendica\Util;
use PHPUnit\Framework\TestCase;
class CryptoTest extends TestCase
{
/**
* Replaces random_int results with given mocks
*
*/
private function assertRandomInt($min, $max)
{
global $phpMock;
$phpMock['random_int'] = function($mMin, $mMax) use ($min, $max) {
$this->assertEquals($min, $mMin);
$this->assertEquals($max, $mMax);
return 1;
};
}
public function testRandomDigitsRandomInt()
{
$this->assertRandomInt(0, 9);
$test = Crypto::randomDigits(1);
$this->assertEquals(1, strlen($test));
$this->assertEquals(1, $test);
$test = Crypto::randomDigits(8);
$this->assertEquals(8, strlen($test));
$this->assertEquals(11111111, $test);
}
}
/**
* A workaround to replace the PHP native random_int() (>= 7.0) with a mocked function
*
* @return int
*/
function random_int($min, $max)
{
global $phpMock;
if (isset($phpMock['random_int'])) {
$result = call_user_func_array($phpMock['random_int'], func_get_args());
return $result;
}
}