X-Git-Url: http://git.roojs.org/?p=Pman.Core;a=blobdiff_plain;f=DataObjects%2FCore_setting.php;h=97ec8bd3742a1f88bc0646132f2a02af0931bb29;hp=ea19562bd0b14f372adc9938bc6510e82660ca46;hb=HEAD;hpb=7342a6a6827597377ed6a6af8efcf446f9593509 diff --git a/DataObjects/Core_setting.php b/DataObjects/Core_setting.php index ea19562b..e1eea761 100644 --- a/DataObjects/Core_setting.php +++ b/DataObjects/Core_setting.php @@ -9,14 +9,17 @@ class Pman_Core_DataObjects_Core_setting extends DB_DataObject function initKeys() { // return false when fail - $dir = $this->getKeyDirectory(); + if(!$dir) { + return false; // only fail case? + } + if( file_exists("{$dir}/pub.key") || file_exists("{$dir}/pri.key") ){ - return; + return true; } $ssl = openssl_pkey_new(array( @@ -31,6 +34,8 @@ class Pman_Core_DataObjects_Core_setting extends DB_DataObject file_put_contents("{$dir}/pub.key",$pub_key); file_put_contents("{$dir}/pri.key",$pri_key); + + return true; } function lookup($m,$n) @@ -40,25 +45,39 @@ class Pman_Core_DataObjects_Core_setting extends DB_DataObject 'module' => $m, 'name' => $n )); + if($s->find(true)) { return $s; } + return false; } function beforeInsert($q, $roo) { - exit; + if (isset($q['is_encrypt'])) { + $roo->jerr("no direct access for setting encrypted data at present?"); + } + // we store column data in here now - so it has to be insertable. + //exit; } function getKeyDirectory() { $client_dir = HTML_FlexyFramework::get()->Pman['storedir']; + $key_dir = $client_dir.'/keys'; - if(!file_exists($key_dir)) { - $this->checkWritable(get_class($this),__FUNCTION__,$client_dir); - exec("mkdir -m775 {$key_dir}"); + + if(file_exists($key_dir)) { + return $key_dir; } + + if(!is_writable($key_dir)) { + return false; + } + + mkdir($key_dir, 0755, true); + return $key_dir; } @@ -70,25 +89,25 @@ class Pman_Core_DataObjects_Core_setting extends DB_DataObject return; } + $this->initKeys(); + $c = $this->lookup($a['module'], $a['name']); - if($c) { - return; - } - $this->initKeys(); + $o = $c ? clone($c) : false; - $s = DB_DataObject::factory('core_setting'); + $c = $c ? $c : DB_DataObject::factory('core_setting'); - $s->setFrom(array( + $c->setFrom(array( 'module' => $a['module'], 'name' => $a['name'], 'description' => $a['description'], 'val' => (!isset($a['is_encrypt']) || $a['is_encrypt'] == 1) ? $this->encrypt($a['val']) : $a['val'], - 'is_encrypt' => isset($a['is_encrypt']) ? $a['is_encrypt'] : 1 + 'is_encrypt' => isset($a['is_encrypt']) ? $a['is_encrypt'] : 1, + 'is_valid' => 1 )); - $s->insert(); + $o ? $c->update($o) : $c->insert(); } //one key for encrypting all the settings @@ -97,13 +116,12 @@ class Pman_Core_DataObjects_Core_setting extends DB_DataObject $key_dir = "{$this->getKeyDirectory()}/pub.key"; if(!file_exists($key_dir)) { - print_r("Cannot find {$key_dir}"); - exit; + return false; } $pub_key = file_get_contents($key_dir); if(!$pub_key) { - return; + return false; } openssl_public_encrypt($v, $ciphertext, $pub_key); return $ciphertext; @@ -114,27 +132,32 @@ class Pman_Core_DataObjects_Core_setting extends DB_DataObject $key_dir = "{$this->getKeyDirectory()}/pri.key"; if(!file_exists($key_dir)) { - print_r("Cannot find {$key_dir}"); - exit; + return false; } $pri_key = file_get_contents($key_dir); + if(!$pri_key) { - return; + return false; } openssl_private_decrypt($v, $plaintext, $pri_key); + return $plaintext; } - function checkWritable($cls_name,$func_name,$dir) + function getDecryptVal() { - if(!is_writable($dir)) { - print_r("Cannot run {$cls_name} :: {$func_name}\n"); - print_r("Directory: {$dir} is not writable by current user\n"); - exit; + + if(empty($this->val)) { + return false; } - return true; + if(empty($this->is_encrypt)) { + return $this->val; + } + + return $this->decrypt($this->val); } + }