mirror/php-e107
1
0
Fork 0
mirror of https://github.com/e107inc/e107.git synced 2025-07-31 20:00:37 +02:00
Code Issues Releases Wiki Activity

Fixed Downloads security NGINX MD5 generation

Browse Source 
- FIX: Blocker bug generating the wrong MD5 string for NGINX
       secure_link_md5
- FIX: Bad instructions in LAN_DL_SECURITY_DESCRIPTION
This commit is contained in:
Nick Liu
2018-05-01 05:26:40 -05:00
parent 0d7f7dc543
commit e36b029f78
2 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
e107_plugins/download/handlers/NginxSecureLinkMd5Decorator.php
View File

@@ -43,7 +43,7 @@ class NginxSecureLinkMd5Decorator implements SecureLinkDecorator
);
$query_string = $url_parts['query'];
parse_str($query_string, $query_args);
$query_args['md5'] = md5($evaluation);
$query_args['md5'] = str_replace(array('+', '/', '='), array('-', '_', ''), base64_encode(md5($evaluation, true)));
if (strpos($prefs['download_security_expression'], '$secure_link_expires') !== false)
$query_args['expires'] = $expiry;
require_once(__DIR__.'/../includes/shim_http_build_url.php');

2
e107_plugins/download/languages/English/English_admin.php
View File

@@ -231,7 +231,7 @@ define("DOWLAN_HELP_10", "Help for upload options");
// define("DOWLAN_CAPTION", "Configure Download");
define("LAN_DL_SECURITY_DESCRIPTION", "Downloads can make use of server-side URL protection features to prevent hotlinking and/or enforce link expiry. " .
"The download server needs to be configured first before setting the options below.");
"This section should be configured before the download server is configured to reduce the chance of disruption to downloaders.");
define("LAN_DL_SECURITY_MODE", "URL protection mode");
define("LAN_DL_SECURITY_MODE_NONE", "None (Default)");
define("LAN_DL_SECURITY_MODE_NGINX_SECURELINKMD5", "NGINX secure_link_md5");