cacert/cacert-webdb
9
0
Fork 0
Code Issues Pull requests 3 Projects Releases 4 Wiki Activity

Hashserver interface

Browse source
This commit is contained in:
root 2008-09-04 13:53:00 +00:00
parent 051258953c
commit 772e927d6a
1 changed files with 28 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

28
www/alert_hash_collision.php Normal file
View file

@ -0,0 +1,28 @@
<?php
include("../includes/hash_password.php");
define('REPORT_WEAK_SCRIPT', './report-weak');
if (@$_GET['shared_secret'] != SHARED_SECRET)
die('not authenticated');
if (!preg_match('/^[0-9a-f]{40}$/i', $_POST['pkhash']))
die('malformed or nonexistant pkhash');
if (!preg_match('/^(mem|org)-[0-9]+$/', @$_POST['usernym']))
die('malformed or nonexistant usernym');
// alert seems ok
if (preg_match('/^mem-[0-9]+$/', @$_POST['usernym']))
{
mysql_query("update emailcerts set coll_found=1 where memid='".substr(@$_POST['usernym'],4)."' and pkhash!='' and pkhash='".$_POST['pkhash']."';");
mysql_query("update domaincerts set coll_found=1 where memid='".substr(@$_POST['usernym'],4)."' and pkhash!='' and pkhash='".$_POST['pkhash']."';");
}
else
{
mysql_query("update orgemailcerts set coll_found=1 where memid='".substr(@$_POST['usernym'],4)."' and pkhash!='' and pkhash='".$_POST['pkhash']."';");
mysql_query("update orgdomaincerts set coll_found=1 where memid='".substr(@$_POST['usernym'],4)."' and pkhash!='' and pkhash='".$_POST['pkhash']."';");
}
//exec(REPORT_WEAK . ' ' . $_POST['usernym'] . ' ' . lower($_POST['pkhash']));
?>