Changeset 543280

Timestamp:

05/12/2012 11:25:51 AM (13 years ago)

Author:

hel.io

Message:

Implemented encryption for passwords

File:

• smtp/trunk/smtp.php (modified) (4 diffs)

smtp/trunk/smtp.php

@@ -2 +2 @@
 /*
 Plugin Name: SMTP
-Version: 1.0
-Plugin URI: http://hel.io/wordpress/smtp
+Version: 1.1
+Plugin URI: http://hel.io/wordpress/smtp/
 Description: Allows you to configure and use a SMTP server (such as Gmail) for sending emails.
 Author: Sorin Iclanzan
 Author URI: http://hel.io/
 */
+
+// Key used for encrypting and decrypting passwords
+define( CRYPT_KEY, '-J5:2Yqd?Ri9wLjN' );
 
 // This is run when you activate the plugin, adding the default options to the database
@@ -149 +152 @@
 function smtp_password() {
     $options = get_option('smtp_options');
-    echo "<input id='password' name='smtp_options[password]' type='text' class='regular-text' value='{$options['password']}' />";
+    echo "<input id='password' name='smtp_options[password]' type='password' value='' " . $options['password'] ? "placeholder='&bull;&bull;&bull;&bull;&bull;&bull;&bull;&bull;&bull;&bull;'" : "" . " />";
 }
 
@@ -173 +176 @@
     if ($input['password'] == '')
         $input['password'] = $smtp_options['password'];
+    else
+        $input['password'] = encrypt_string( $input['password'], CRYPT_KEY );
     
     return $input;
+}
+
+/*
+ * Encrypt $string using $key
+ */
+function encrypt_string( $string, $key ) {
+    return base64_encode(mcrypt_encrypt(MCRYPT_RIJNDAEL_256, md5($key), $string, MCRYPT_MODE_CBC, md5(md5($key))));
+}
+
+/*
+ * Decrypt $string using $key
+ */
+function decrypt_string( $string, $key ) {
+    return rtrim(mcrypt_decrypt(MCRYPT_RIJNDAEL_256, md5($key), base64_decode($encrypted), MCRYPT_MODE_CBC, md5(md5($key))), "\0");
 }
 
@@ -206 +225 @@
         $phpmailer->SMTPAuth = true;
         $phpmailer->Username = $smtp_options['username'];
-        $phpmailer->Password = $smtp_options['password'];
+        $phpmailer->Password = decrypt_string( $smtp_options['password'], CRYPT_KEY );
     }
 }