Changeset 2085458

Timestamp:

05/10/2019 03:32:09 PM (7 years ago)

Author:

koelle

Message:

some changes

Location:

projectmanager/trunk

Files:

• admin/admin.php (modified) (1 diff)
• admin/settings.php (modified) (1 diff)
• admin/show-project.php (modified) (2 diffs)
• lib/dataset.php (modified) (2 diffs)
• lib/project.php (modified) (2 diffs)

projectmanager/trunk/admin/admin.php

@@ -642 +642 @@
             }
 
+            if ( isset($_GET['generateEncryptionKey']) ) {
+                $tab = 6;
+            }
+            
             $menu_page_url = ( $project->navi_link == 1 ) ? menu_page_url(sprintf( "project-settings_%d", $project->id ), 0) : menu_page_url('projectmanager', 0)."&subpage=settings&project_id=".$project->id;
 

projectmanager/trunk/admin/settings.php

@@ -343 +343 @@
                         <th scope="row"><label for="no_edit"><?php _e( 'Disable dataset editing', 'projectmanager' ) ?></label></th><td><input type="checkbox" id="no_edit" name="settings[no_edit]" value="1"<?php checked(intval($project->no_edit), 1) ?> /></td>
                     </tr>
+                    <tr valign="top">
+                        <th scope="row"><label for="encrypt_data"><?php _e('Encrypt data', 'projectmanager') ?></label></th>
+                        <td>
+                            <input type="checkbox" id="encrypt_data" name="settings[encrypt_data]" value="1"<?php checked(intval($project->encrypt_data), 1) ?> />
+                            <p class="tagline-description description">
+                            <?php if (defined('PROJECTMANAGER_KEY')) : ?>
+                                <?php _e('Encryption key defined in wp-config.php', 'projectmanager') ?>
+                            <?php else : ?>
+                                <?php _e('You have to define a constant <em>PROJECTMANAGER_KEY</em> in wp-config.php for encryption to work!', 'projectmanager') ?>
+                            <?php endif; ?>
+                            </p>
+                            <p class="encrpytion-info"><a href="<?php echo $menu_page_url ?>&amp;generateEncryptionKey" class="button-secondary"><?php _e('Generate encryption key', 'projectmanager') ?></a></p>
+                            <?php if (isset($_GET['generateEncryptionKey'])) : ?>
+                                <p class="encryption-info"><pre>define('PROJECTMANAGER_KEY', '<?php echo htmlspecialchars($project->generateEncryptionKey()); ?>');</pre></p>
+                                
+                                <?php if (defined('PROJECTMANAGER_KEY')) : ?>
+                                <p class="tagline-description description"><strong><?php _e('Before changing the key make sure to deactivate encryption, otherwise you will loose all encrypted data!', 'projectmanager') ?></strong></p>
+                                <?php endif; ?>
+                            <?php endif; ?>
+                        </td>
+                    </tr>
                     </table>
                     

projectmanager/trunk/admin/show-project.php

@@ -137 +137 @@
         </div>
     </div>
-
     <?php if ( $datasets ) : ?>
     <table class="widefat wp-list-table sortable-table dataset-list" id="datasets">
@@ -185 +184 @@
             </td>-->
             <?php if ( $project->dataset_activation == 1 ) : ?>
-            
             <td class="column-status status-<?php echo $dataset->status ?>" data-colname="<?php _e( 'Status', 'projectmanager' ) ?>"><?php _e($dataset->status, 'projectmanager') ?></td>
             <?php endif; ?>

projectmanager/trunk/lib/dataset.php

@@ -380 +380 @@
             
         return true;
+    }
+    
+    
+    /**
+     * encrypt data
+     *
+     * @param string $data data to encrypt
+     * @return base64 encoded encrypted string
+     */
+    public function encryptData($data) {
+        if ( defined('PROJECTMANAGER_KEY') ) {
+            // generate random 16 bytes IV
+            //$iv = openssl_random_pseudo_bytes(16);
+            $iv = random_bytes(16);
+            // add $iv in front of encrypted data and base64 encode
+            $data = base64_encode($iv.openssl_encrypt($data, "aes-256-cbc", PROJECTMANAGER_KEY, OPENSSL_RAW_DATA, $iv));
+        }
+        
+        return $data;
+    }
+    
+    
+    /**
+     * decrypt data
+     *
+     * @param string $data encrypted data to decrypt
+     * @return string unencrypted data
+     */
+    public function decryptData($data) {
+        if ( defined('PROJECTMANAGER_KEY') ) {
+            // decode encrypted data to byte code
+            $data = base64_decode($data);
+            // extract IV from first 16 bytes
+            $iv = substr($data, 0, 16);
+            // decrypt data
+            $data = openssl_decrypt(substr($data, 16, strlen($data)-16), "aes-256-cbc", PROJECTMANAGER_KEY, OPENSSL_RAW_DATA, $iv);
+        }
+        
+        return $data;
     }
     
@@ -663 +702 @@
         }
         
-        /*
-        switch ( $extension ) {
-            case 'ods':
-            case 'doc':
-            case 'docx':
-                $out .= "document_word.png";
-                break;
-            case 'xls':
-            case 'ods':
-                $out .= "document_excel.png";
-                break;
-            case 'csv':
-                $out .= "document_excel_csv.png";
-                break;
-            case 'ppt':
-            case 'odp':
-            case 'pptx':
-                $out .= "document_powerpoint.png";
-                break;
-            case 'zip':
-            case 'rar':
-            case 'tar':
-            case 'gzip':
-            case 'tar.gz':
-            case 'bzip2':
-            case 'tar.bz2':
-                $out .= "document_zipper.png";
-                break;
-            case 'divx':
-            case 'mpg':
-            case 'mp4':
-            case 'wmv':
-            case 'avi':
-            case 'mp4':
-            case 'mpg':
-            case 'mpeg':
-            case 'm4v':
-            case '3gp':
-            case 'mov':
-            case 'qt':
-            case 'mkv':
-            case 'vob':
-                $out .= "film.png";
-                break;
-            case 'mp3':
-            case 'ogg':
-            case 'wma':
-            case 'aac':
-            case 'm4a':
-            case 'm4p':
-            case 'wav':
-                $out .= "document_music.png";
-                break;
-            case 'flv':
-            case 'f4v':
-            case 'f4p':
-            case 'f4a':
-            case 'f4b':
-                $out .= "document-flash-movie.png";
-                break;
-            case 'gif':
-            case 'png':
-            case 'jpg':
-            case 'jpeg':
-            case 'raw':
-            case 'tiff':
-            case 'tif':
-            case 'bmp':
-                $out .= "image.png";
-                break;
-            case 'svg':
-            case 'ai':
-                $out .= "document-illustrator.png";
-                break;
-            case 'psd':
-            case 'eps':
-            case 'ps':
-                $out .= "document-photoshop.png";
-                break;
-            case 'html':
-            case 'htm':
-                $out .= "globe.png";
-                break;
-            case 'php':
-                $out .= "document-php.png";
-                break;
-            case 'txt':
-                $out .= "document_text.png";
-                break;
-            case 'pdf':
-                $out .= "pdf.png";
-                break;
-            default:
-                $out .= "document.png";
-                break;
-        }
-        */
         return esc_url($out);
     }

projectmanager/trunk/lib/project.php

@@ -180 +180 @@
      */
     public $no_edit = 0;
+    
+    /**
+     * set data encryption
+     *
+     * @var int 0 (no) or 1 (yes)
+     */
+    public $encrypt_data = 0;
     
     /**
@@ -2731 +2738 @@
         return $html;
     }
+    
+    
+    /**
+     * Generate cryptographically secure random encryption key
+     *
+     * @return string
+     * Characters: abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ123456789^!§$%&/()=?`´-_<>[]{}*+#,;.:~|
+     */ 
+    public function generateEncryptionKey($length = 64, $alphabet = 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ123456789^!$%&/()=?-_<>[]{}*+#,;.:~| ') {
+        if ( $length < 1 ) {
+            throw new InvalidArgumentException('Length must be a positive integer');
+        }
+        
+        $str = '';
+        $alphamax = strlen($alphabet) - 1;
+        if ( $alphamax < 1 ) {
+            throw new InvalidArgumentException('Invalid alphabet');
+        }
+        for ($i = 0; $i <= $alphamax; $i++) {
+            $str .= $alphabet[random_int(0, $alphamax)];
+        }
+        
+        return $str;
+    }
 }