mirrors/flexisip-account-manager
1
0
Fork 0
mirror of https://gitlab.linphone.org/BC/public/flexisip-account-manager.git synced 2026-01-17 10:08:05 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Validate the existence of the required parameters when setting passwords

Browse source
This commit is contained in:
Timothée Jaussoin 2020-01-08 15:21:16 +01:00
parent 065f0d3d8d
commit 3fb07ca34b
2 changed files with 18 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
src/misc/results_values.php
View file

@ -28,6 +28,10 @@ define("OK_ACCOUNT", "OK_ACCOUNT");
define("MISSING_PHONE_PARAM", "ERROR_PHONE_PARAMETER_NOT_FOUND");
define("MISSING_USERNAME_PARAM", "ERROR_USERNAME_PARAMETER_NOT_FOUND");
define("MISSING_EMAIL_PARAM", "ERROR_EMAIL_PARAMETER_NOT_FOUND");
define("MISSING_OLD_HASH", "ERROR_OLD_HASH_NOT_FOUND");
define("MISSING_NEW_HASH", "ERROR_NEW_HASH_NOT_FOUND");
define("MISSING_MD5_HASH", "ERROR_MD5_HASH_NOT_FOUND");
define("MISSING_SHA256_HASH", "ERROR_SHA256_HASH_NOT_FOUND");
define("EMAIL_UNCHANGED", "ERROR_EMAIL_NEW_SAME_AS_OLD");
/* Parameter not available because already in use */

14
src/xmlrpc/passwords.php
View file

@ -42,6 +42,10 @@ function xmlrpc_update_password($method, $args)
if (!check_parameter($username)) {
return MISSING_USERNAME_PARAM;
} elseif (!check_parameter($hashed_old_password, "old password")) {
return MISSING_OLD_HASH;
} elseif (!check_parameter($hashed_new_password, "md5 password")) {
return MISSING_NEW_HASH;
} elseif ($algo == null) {
return ALGO_NOT_SUPPORTED;
}
@ -83,6 +87,16 @@ function xmlrpc_update_passwords($method, $args)
$sha256_hashed_password = $args[3];
$domain = get_domain($args[4]);
if (!check_parameter($username)) {
return MISSING_USERNAME_PARAM;
} elseif (!check_parameter($hashed_password, "old password")) {
return MISSING_OLD_HASH;
} elseif (!check_parameter($md5_hashed_password, "md5 password")) {
return MISSING_MD5_HASH;
} elseif (!check_parameter($sha256_hashed_password, "sha256 password")) {
return MISSING_SHA256_HASH;
}
Logger::getInstance()->message("[XMLRPC] xmlrpc_update_passwords(" . $username . ", " . $domain . ")");
$database = new Database();