PHP QR Code
"; 26 | 27 | //set it to writable location, a place for temp generated PNG files 28 | $PNG_TEMP_DIR = dirname(__FILE__).DIRECTORY_SEPARATOR.'temp'.DIRECTORY_SEPARATOR; 29 | 30 | //html PNG location prefix 31 | $PNG_WEB_DIR = 'temp/'; 32 | 33 | include "qrlib.php"; 34 | 35 | //ofcourse we need rights to create temp dir 36 | if (!file_exists($PNG_TEMP_DIR)) 37 | mkdir($PNG_TEMP_DIR); 38 | 39 | 40 | $filename = $PNG_TEMP_DIR.'test.png'; 41 | 42 | //processing form input 43 | //remember to sanitize user input in real-life solution !!! 44 | $errorCorrectionLevel = 'L'; 45 | if (isset($_REQUEST['level']) && in_array($_REQUEST['level'], array('L','M','Q','H'))) 46 | $errorCorrectionLevel = $_REQUEST['level']; 47 | 48 | $matrixPointSize = 4; 49 | if (isset($_REQUEST['size'])) 50 | $matrixPointSize = min(max((int)$_REQUEST['size'], 1), 10); 51 | 52 | 53 | if (isset($_REQUEST['data'])) { 54 | 55 | //it's very important! 56 | if (trim($_REQUEST['data']) == '') 57 | die('data cannot be empty! back'); 58 | 59 | // user data 60 | $filename = $PNG_TEMP_DIR.'test'.md5($_REQUEST['data'].'|'.$errorCorrectionLevel.'|'.$matrixPointSize).'.png'; 61 | QRcode::png($_REQUEST['data'], $filename, $errorCorrectionLevel, $matrixPointSize, 2); 62 | 63 | } else { 64 | 65 | //default data 66 | echo 'You can provide data in GET parameter: like that
'; 67 | QRcode::png('PHP QR Code :)', $filename, $errorCorrectionLevel, $matrixPointSize, 2); 68 | 69 | } 70 | 71 | //display generated file 72 | echo '
'; 73 | 74 | //config form 75 | echo '
'; 90 | 91 | // benchmark 92 | QRtools::timeBenchmark(); 93 | 94 | -------------------------------------------------------------------------------- /lib/phpqrcode/qrbitstream.php: -------------------------------------------------------------------------------- 1 | 9 | * 10 | * PHP QR Code is distributed under LGPL 3 11 | * Copyright (C) 2010 Dominik Dzienia
| BENCHMARK | |
| till '.$markerId.': | '.number_format($thisTime-$lastTime, 6).'s |
|---|---|
| TOTAL: | '.number_format($lastTime-$startTime, 6).'s |
54 | Scan the following QR Code with your Google Authenticator app:
55 |
61 |
98 |
99 |
101 |
102 |
103 |
104 |
143 |
144 |
145 |
--------------------------------------------------------------------------------
/nginx/auth.php:
--------------------------------------------------------------------------------
1 | $value) {
52 | if (is_array($value)) {
53 | $vs = array();
54 |
55 | foreach ($value AS $k => $v) {
56 | if (is_array($v)) {
57 | continue;
58 | }
59 |
60 | $vs[] = '[' . $k . "] => '" . $v . "'";
61 | }
62 |
63 | $value = implode(",\n", $vs);
64 | }
65 |
66 | fwrite ($debugHandle,$key.": ".$value."\n");
67 | }
68 |
69 | fwrite ($debugHandle,"END");
70 | fclose($debugHandle);
71 | }
72 | }
73 |
74 | if (!defined('SESSION_NAME') OR !SESSION_NAME) {
75 | // don't authenticate if config.php is broken!!
76 | http_response_code(401);
77 | }
78 |
79 | //====================================================
80 | // Restore an existing session
81 | session_name(SESSION_NAME);
82 | session_start();
83 |
84 | //====================================================
85 | // Check if the authentication has been completed
86 | if (isset($_SESSION["authenticated"]) && $_SESSION["authenticated"] === true) {
87 | http_response_code(200);
88 | }
89 | else {
90 | // Else return an HTTP 401 status code
91 | session_destroy();
92 | http_response_code(401);
93 | }
94 | ?>
95 |
--------------------------------------------------------------------------------
/user/changePasswordForm.php:
--------------------------------------------------------------------------------
1 | FORBIDDEN - This page cannot be called directly";
16 | http_response_code(403);
17 | exit();
18 | }
19 |
20 | ?>
21 |
45 |
--------------------------------------------------------------------------------
/user/logout.php:
--------------------------------------------------------------------------------
1 |
24 |
25 |
26 |
27 |
28 |
62 |
97 |
63 |
96 |
64 |
";
93 | }
94 | ?>
95 |
65 |
66 | LOGIN
67 |
68 |
69 |
90 | ".$error."
37 |
47 |
48 |
--------------------------------------------------------------------------------
/user/user.php:
--------------------------------------------------------------------------------
1 | ERROR - You must be logged in to access this page";
26 | http_response_code(401);
27 | exit();
28 | }
29 |
30 | //-----------------------------------------------------
31 | // Import required libraries
32 | require_once(DBMANAGER_LIB);
33 | require_once(NOCSRF_LIB);
34 |
35 | //------------------------------------------------------
36 | // Retrieve the currently logged user from the session
37 | $username = $_SESSION["username"];
38 |
39 | //------------------------------------------------------
40 | // Main processing
41 | try {
42 | $dbManager = new DBManager(USER_SQL_DATABASE_FILE);
43 |
44 | //------------------------------------------------------
45 | // Check if an action was requested on the admin page
46 | if (isset($_POST["action"])) {
47 |
48 | //---------------------------------------------
49 | // Check for a CSRF attempt
50 | if (NoCSRF::check('csrf_token', $_POST, false, 60*10, false) === false) {
51 | echo "
38 |
46 |
39 |
45 |
40 |
44 |
41 | LOGGED OUT
42 |
43 | CSRF attempt detected
"; 52 | http_response_code(403); 53 | exit(); 54 | } 55 | 56 | // Generate a new CSRF token to use in form hidden field 57 | $token = NoCSRF::generate('csrf_token'); 58 | 59 | //--------------------------------------------- 60 | // Parse all possible actions 61 | switch($_POST["action"]) { 62 | // Show the change password form for the selected user 63 | case "chgPwdForm": 64 | $overlay = "changePasswordForm.php"; 65 | break; 66 | 67 | // Show the change password form for the selected user 68 | case "changePassword": 69 | if (isset($_POST["password"])) { 70 | if($dbManager->updatePassword($username,$_POST['password'])) { 71 | $message = "[SUCCESS] Password successfully changed for user ".$username; 72 | } 73 | else { 74 | $message = "[ERROR] Could not change password for user ".$username.". Impossible to write into the user database"; 75 | } 76 | } 77 | break; 78 | 79 | // Show the QRCode, for current GAuth secret, for selected user 80 | case "showQRCode": 81 | require_once(GAUTH_LIB); 82 | 83 | // Create GoogleAuth object 84 | $gauth = new GoogleAuthenticator(); 85 | 86 | if (($secret = $dbManager->getGauthSecret($username))) { 87 | // Create the QRCode as PNG image 88 | $randomString = bin2hex(openssl_random_pseudo_bytes (15)); 89 | $qrcodeimg = QRCODE_TEMP_DIR.$randomString.".png"; 90 | $gauth->getQRCode($username,$secret,$qrcodeimg,QRCODE_TITLE); 91 | 92 | $overlay = LIB_DIR."/showQRCode.php"; 93 | } 94 | break; 95 | 96 | // Renew the GAuth secret for selected user and show the corresponding QRCode 97 | case "renewGAuthSecret": 98 | require_once(GAUTH_LIB); 99 | 100 | // Create GoogleAuth object 101 | $gauth = new GoogleAuthenticator(); 102 | $secret = $gauth->createSecret(); 103 | 104 | if (($dbManager->updateGauthSecret($username,$secret))) { 105 | // Create the QRCode as PNG image 106 | $randomString = bin2hex(openssl_random_pseudo_bytes (15)); 107 | $qrcodeimg = QRCODE_TEMP_DIR.$randomString.".png"; 108 | $gauth->getQRCode($username,$secret,$qrcodeimg,QRCODE_TITLE); 109 | 110 | $overlay = LIB_DIR."/showQRCode.php"; 111 | } 112 | break; 113 | } 114 | } 115 | else { 116 | // Generate CSRF token to use in form hidden field 117 | $token = NoCSRF::generate('csrf_token'); 118 | } 119 | } catch (Exception $e) { 120 | echo "ERROR - Impossible to open the user database
"; 121 | exit(); 122 | } 123 | ?> 124 | 125 | 126 | 127 | 128 |
137 |
156 |
157 |
158 |
138 |
155 |
139 |
154 |
140 |
145 | 151 |
152 | ".$message."
"; ?>
153 |
141 |
142 | USER MANAGEMENT
143 |
144 | 145 | 151 |
152 | ".$message."
";
161 | require_once($overlay);
162 | echo"
";
163 | }
164 | ?>
165 |
167 |
168 |
169 |
174 |
175 |
176 |
--------------------------------------------------------------------------------