dolibarr
16.0.5
|
Set of function used for dolibarr security (common function included into filefunc.inc.php) Warning, this file must not depends on other library files, except function.lib.php because it is used at low code level. More...
Go to the source code of this file.
Functions | |
dol_encode ($chain, $key='1') | |
Encode a string with base 64 algorithm + specific delta change. More... | |
dol_decode ($chain, $key='1') | |
Decode a base 64 encoded + specific delta change. More... | |
dol_hash ($chain, $type='0') | |
Returns a hash of a string. More... | |
dol_verifyHash ($chain, $hash, $type='0') | |
Compute a hash and compare it to the given one For backward compatibility reasons, if the hash is not in the password_hash format, we will try to match against md5 and sha1md5 If constant MAIN_SECURITY_HASH_ALGO is defined, we use this function as hashing function. More... | |
dolGetLdapPasswordHash ($password, $type='md5') | |
Returns a specific ldap hash of a password. More... | |
restrictedArea ($user, $features, $objectid=0, $tableandshare='', $feature2='', $dbt_keyfield='fk_soc', $dbt_select='rowid', $isdraft=0, $mode=0) | |
Check permissions of a user to show a page and an object. More... | |
checkUserAccessToObject ($user, array $featuresarray, $object=0, $tableandshare='', $feature2='', $dbt_keyfield='', $dbt_select='rowid', $parenttableforentity='') | |
Check that access by a given user to an object is ok. More... | |
accessforbidden ($message='', $printheader=1, $printfooter=1, $showonlymessage=0, $params=null) | |
Show a message to say access is forbidden and stop program Calling this function terminate execution of PHP. More... | |
getMaxFileSizeArray () | |
Return the max allowed for file upload. More... | |
Set of function used for dolibarr security (common function included into filefunc.inc.php) Warning, this file must not depends on other library files, except function.lib.php because it is used at low code level.
Definition in file security.lib.php.
accessforbidden | ( | $message = '' , |
|
$printheader = 1 , |
|||
$printfooter = 1 , |
|||
$showonlymessage = 0 , |
|||
$params = null |
|||
) |
Show a message to say access is forbidden and stop program Calling this function terminate execution of PHP.
string | $message | Force error message |
int | $printheader | Show header before |
int | $printfooter | Show footer after |
int | $showonlymessage | Show only message parameter. Otherwise add more information. |
array | null | $params | More parameters provided to hook |
Definition at line 933 of file security.lib.php.
checkUserAccessToObject | ( | $user, | |
array | $featuresarray, | ||
$object = 0 , |
|||
$tableandshare = '' , |
|||
$feature2 = '' , |
|||
$dbt_keyfield = '' , |
|||
$dbt_select = 'rowid' , |
|||
$parenttableforentity = '' |
|||
) |
Check that access by a given user to an object is ok.
This function is also called by restrictedArea() that check before if module is enabled and if permission of user for $action is ok.
User | $user | User to check |
array | $featuresarray | Features/modules to check. Example: ('user','service','member','project','task',...) |
int | string | Object | $object | Full object or object ID or list of object id. For example if we want to check a particular record (optional) is linked to a owned thirdparty (optional). |
string | $tableandshare | 'TableName&SharedElement' with Tablename is table where object is stored. SharedElement is an optional key to define where to check entity for multicompany modume. Param not used if objectid is null (optional). |
string | $feature2 | Feature to check, second level of permission (optional). Can be or check with 'level1|level2'. |
string | $dbt_keyfield | Field name for socid foreign key if not fk_soc. Not used if objectid is null (optional) |
string | $dbt_select | Field name for select if not rowid. Not used if objectid is null (optional) |
string | $parenttableforentity | Parent table for entity. Example 'fk_website@website' |
Definition at line 645 of file security.lib.php.
dol_decode | ( | $chain, | |
$key = '1' |
|||
) |
Decode a base 64 encoded + specific delta change.
This function is called by filefunc.inc.php at each page call.
string | $chain | string to decode |
string | $key | rule to use for delta ('0', '1' or 'myownkey') |
Definition at line 69 of file security.lib.php.
dol_encode | ( | $chain, | |
$key = '1' |
|||
) |
Encode a string with base 64 algorithm + specific delta change.
string | $chain | string to encode |
string | $key | rule to use for delta ('0', '1' or 'myownkey') |
Definition at line 38 of file security.lib.php.
dol_hash | ( | $chain, | |
$type = '0' |
|||
) |
Returns a hash of a string.
If constant MAIN_SECURITY_HASH_ALGO is defined, we use this function as hashing function (recommanded value is 'password_hash') If constant MAIN_SECURITY_SALT is defined, we use it as a salt (used only if hashing algorightm is something else than 'password_hash').
string | $chain | String to hash |
string | $type | Type of hash ('0':auto will use MAIN_SECURITY_HASH_ALGO else md5, '1':sha1, '2':sha1+md5, '3':md5, '4': for OpenLdap, '5':sha256, '6':password_hash). Use '3' here, if hash is not needed for security purpose, for security need, prefer '0'. |
Definition at line 104 of file security.lib.php.
Referenced by SMTPs\setAttachment(), SMTPs\setBodyContent(), and SMTPs\setImageInline().
dol_verifyHash | ( | $chain, | |
$hash, | |||
$type = '0' |
|||
) |
Compute a hash and compare it to the given one For backward compatibility reasons, if the hash is not in the password_hash format, we will try to match against md5 and sha1md5 If constant MAIN_SECURITY_HASH_ALGO is defined, we use this function as hashing function.
If constant MAIN_SECURITY_SALT is defined, we use it as a salt.
string | $chain | String to hash (not hashed string) |
string | $hash | hash to compare |
string | $type | Type of hash ('0':auto, '1':sha1, '2':sha1+md5, '3':md5, '4': for OpenLdap, '5':sha256). Use '3' here, if hash is not needed for security purpose, for security need, prefer '0'. |
Definition at line 151 of file security.lib.php.
dolGetLdapPasswordHash | ( | $password, | |
$type = 'md5' |
|||
) |
Returns a specific ldap hash of a password.
string | $password | Password to hash |
string | $type | Type of hash |
Definition at line 177 of file security.lib.php.
getMaxFileSizeArray | ( | ) |
Return the max allowed for file upload.
Analyze among: upload_max_filesize, post_max_size, MAIN_UPLOAD_DOC
Definition at line 993 of file security.lib.php.
restrictedArea | ( | $user, | |
$features, | |||
$objectid = 0 , |
|||
$tableandshare = '' , |
|||
$feature2 = '' , |
|||
$dbt_keyfield = 'fk_soc' , |
|||
$dbt_select = 'rowid' , |
|||
$isdraft = 0 , |
|||
$mode = 0 |
|||
) |
Check permissions of a user to show a page and an object.
Check read permission. If GETPOST('action','aZ09') defined, we also check write and delete permission. This method check permission on module then call checkUserAccessToObject() for permission on object (according to entity and socid of user).
User | $user | User to check |
string | $features | Features to check (it must be module $object->element. Can be a 'or' check with 'levela|levelb'. Examples: 'societe', 'contact', 'produit&service', 'produit|service', ...) This is used to check permission $user->rights->features->... |
int | $objectid | Object ID if we want to check a particular record (optional) is linked to a owned thirdparty (optional). |
string | $tableandshare | 'TableName&SharedElement' with Tablename is table where object is stored. SharedElement is an optional key to define where to check entity for multicompany module. Param not used if objectid is null (optional). |
string | $feature2 | Feature to check, second level of permission (optional). Can be a 'or' check with 'sublevela|sublevelb'. This is used to check permission $user->rights->features->feature2... |
string | $dbt_keyfield | Field name for socid foreign key if not fk_soc. Not used if objectid is null (optional) |
string | $dbt_select | Field name for select if not rowid. Not used if objectid is null (optional) |
int | $isdraft | 1=The object with id=$objectid is a draft |
int | $mode | Mode (0=default, 1=return with not die) |
Definition at line 234 of file security.lib.php.