├── run-tests.bat
├── .travis.yml
├── tests
    ├── Utility.php
    └── Security.php
├── CHANGELOG.md
├── wishlist.txt
├── LICENSE
├── composer.json
├── src
    ├── Image.php
    ├── BaseFuture.php
    ├── Utility.php
    └── Security.php
├── run-tests.sh
├── README.md
└── autoload.php


/run-tests.bat:
--------------------------------------------------------------------------------
1 | @echo off
2 | REM todo: interface with gpg4win to verify the signature
3 | php vendor\phpunit\phpunit\phpunit --bootstrap autoload.php tests


--------------------------------------------------------------------------------
/.travis.yml:
--------------------------------------------------------------------------------
 1 | language: php
 2 | 
 3 | php:
 4 | 
 5 | - 5.3
 6 | - 5.4
 7 | - 5.5
 8 | - 5.6
 9 | 
10 | 
11 | install:
12 | 
13 | - composer self-update
14 | - chmod +x ./run-tests.sh
15 | 
16 | script: ./run-tests.sh
17 | 


--------------------------------------------------------------------------------
/tests/Utility.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | use \Sarciszewski\PHPFuture as Future;
 3 | 
 4 | class TestSecurity extends PHPUnit_Framework_TestCase
 5 | {
 6 |     /**
 7 |      * @covers \Sarciszewski\PHPFuture\Utilty::arrayColumn()
 8 |      */
 9 |     public function testArrayColumn()
10 |     {
11 |         $x = [
12 |             ['a' => 1, 'b' => 1],
13 |             ['a' => 2, 'b' => 3],
14 |             ['a' => 3, 'b' => 2]
15 |         ];
16 | 
17 |         $y = [
18 |             1 => 1,
19 |             2 => 3,
20 |             3 => 2
21 |         ];
22 | 
23 |         $this->assertEquals(
24 |             $y,
25 |             Future\Utility::arrayColumn($x, 'b', 'a')
26 |         );
27 |     }
28 | }
29 | 


--------------------------------------------------------------------------------
/CHANGELOG.md:
--------------------------------------------------------------------------------
 1 | # Changelog
 2 | 
 3 | ## 0.3.0
 4 | 
 5 | Widened scope to include 5.3 because of LTS operating systems.
 6 | Also added a `BaseFuture` class to prevent code duplication.
 7 | 
 8 | ### New functions polyfilled
 9 | 
10 | * **PHP 5.4**
11 |     * `getimagesizefromstring()`
12 |     * `hex2bin()`
13 | 
14 | ### New interfaces polyfilled
15 | 
16 | * **PHP 5.4**
17 |     * `JsonSerializable`
18 |     * `SessionHandlerInterface`
19 | 
20 | ## 0.2.0
21 | 
22 | ### New functions polyfilled
23 | 
24 | * **PHP 5.5**
25 |     * `array_column()`
26 |     * `boolval()`
27 |     * `hash_pbkdf2()`
28 |     * `openssl_pbkdf2()`
29 | 
30 | ## 0.1.1
31 | 
32 | Added unit test coverage.
33 | 
34 | ## 0.1.0
35 | 
36 | Initial release. Just polyfilled hash_equals()


--------------------------------------------------------------------------------
/wishlist.txt:
--------------------------------------------------------------------------------
 1 | PHP 5.4
 2 |     
 3 |     CLASSES/INTERFACES
 4 |     ==================
 5 |     CallbackFilterIterator
 6 |     RecursiveCallbackFilterIterator
 7 |     
 8 |     SessionHandler
 9 |     Transliterator
10 |     Spoofchecker
11 | 
12 | PHP 5.5
13 | 
14 |     FUNCTIONS
15 |     =========
16 |     curl_escape()
17 |     curl_unescape()
18 |     pg_escape_literal()
19 |     pg_escape_identifier()
20 |     
21 |     CLASSES/INTERFACES
22 |     ==================
23 |     DateTimeImmutable
24 |     DateTimeInterface
25 |     IntlCalendar
26 |     IntlGregorianCalendar
27 |     IntlTimeZone
28 |     IntlBreakIterator
29 |     IntlRuleBasedBreakIterator
30 |     IntlCodePointBreakIterator 
31 | 
32 | PHP 5.6
33 | 
34 |     gmp_root()
35 |     gmp_rootrem()
36 |     ldap_escape()
37 |     ldap_modify_batch()
38 | 


--------------------------------------------------------------------------------
/LICENSE:
--------------------------------------------------------------------------------
 1 | The MIT License (MIT)
 2 | 
 3 | Copyright (c) 2015 Resonant Core, LLC
 4 | 
 5 | Permission is hereby granted, free of charge, to any person obtaining a copy
 6 | of this software and associated documentation files (the "Software"), to deal
 7 | in the Software without restriction, including without limitation the rights
 8 | to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 9 | copies of the Software, and to permit persons to whom the Software is
10 | furnished to do so, subject to the following conditions:
11 | 
12 | The above copyright notice and this permission notice shall be included in all
13 | copies or substantial portions of the Software.
14 | 
15 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
16 | IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
17 | FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
18 | AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
19 | LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
20 | OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
21 | SOFTWARE.
22 | 
23 | 


--------------------------------------------------------------------------------
/composer.json:
--------------------------------------------------------------------------------
 1 | {
 2 |     "name":         "sarciszewski/php-future",
 3 |     "description":  "Polyfill new (5.6+) features into old (5.4+) versions of PHP",
 4 |     "keywords": [
 5 |             "security",
 6 |             "future",
 7 |             "compatibility",
 8 |             "hash_equals"
 9 |         ],
10 |     "license":      "MIT",
11 |     "type":         "library",
12 |     "authors": [
13 |             {
14 |                 "name":     "Scott Arciszewski",
15 |                 "email":    "scott@paragonie.com",
16 |                 "homepage": "https://appsec.solutions",
17 |                 "role":     "Developer"
18 |             }
19 |         ],
20 |     "support": {
21 |         "issues":   "https://github.com/sarciszewski/php-future/issues",
22 |         "email":    "info@paragonie.com",
23 |         "source":   "https://github.com/sarciszewski/php-future"
24 |     },
25 |     "autoload": {
26 |         "files": ["autoload.php"]
27 |     },
28 |     "require": {
29 |         "paragonie/random_compat": "^1|^2|^9",
30 |         "paragonie/sodium_compat": "^1|^2",
31 |         "ircmaxell/password_compat": "^1.0"
32 |     },
33 |     "require-dev": {
34 |         "phpunit/phpunit": "4.5.*"
35 |     }
36 | }
37 | 


--------------------------------------------------------------------------------
/tests/Security.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | use \Sarciszewski\PHPFuture as Future;
 3 | 
 4 | class TestSecurity extends PHPUnit_Framework_TestCase
 5 | {
 6 |     /**
 7 |      * @covers \Sarciszewski\PHPFuture\Security::hashEquals()
 8 |      */
 9 |     public function testHashEquals()
10 |     {
11 |         $a = 'd4ef98335dc5512500ea74a70a26dbd2759acc0ac116f0d747d05848a8365da9';
12 |         $b = 'd4ef98335dc5512500ea74a70a26dbd2759acc0ac116f0d747d05848a8365da9';
13 |         
14 |         // Obvious test case:
15 |         $this->assertTrue(\hash_equals($a, $b));
16 |         
17 |         $a = 'd4ef98335dc5512500ea74a70a26dbd2759acc0ac116f0d747d05848a8365da9';
18 |         $b = 'd4ef98335dc5512500ea74a70a26dbd2759acc0ac116f0d747d05848a8365da1';
19 |         
20 |         $this->assertFalse(\hash_equals($a, $b));
21 |     }
22 | 
23 |     /**
24 |      * @covers \Sarciszewski\PHPFuture\Security::pbkdf2()
25 |      * ref https://www.ietf.org/rfc/rfc6070.txt
26 |      */
27 |     public function testPBKDF2()
28 |     {
29 |         $a = Future\Security::pbkdf2("sha1", "password", "salt", 2, 20, true);
30 |         $this->assertEquals(
31 |             $a,
32 |             hex2bin('ea6c014dc72d6f8ccd1ed92ace1d41f0d8de8957')
33 |         );
34 | 
35 |         $b = Future\Security::pbkdf2("sha1", "password", "salt", 2, 20, false);
36 |         $this->assertEquals(
37 |             $b,
38 |             'ea6c014dc72d6f8ccd1ed92ace1d41f0d8de8957'
39 |         );
40 | 
41 |         
42 |         
43 |     }
44 | }
45 | 


--------------------------------------------------------------------------------
/src/Image.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | namespace Sarciszewski\PHPFuture;
 3 | 
 4 | /**
 5 |  * The MIT License (MIT)
 6 |  *
 7 |  * Copyright (c) 2015 Scott Arciszewski
 8 |  *
 9 |  * Permission is hereby granted, free of charge, to any person obtaining a copy
10 |  * of this software and associated documentation files (the "Software"), to deal
11 |  * in the Software without restriction, including without limitation the rights
12 |  * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
13 |  * copies of the Software, and to permit persons to whom the Software is
14 |  * furnished to do so, subject to the following conditions:
15 |  *
16 |  * The above copyright notice and this permission notice shall be included in all
17 |  * copies or substantial portions of the Software.
18 |  *
19 |  * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
20 |  * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
21 |  * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
22 |  * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
23 |  * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
24 |  * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
25 |  * SOFTWARE.
26 |  */
27 | class Image extends BaseFuture
28 | {
29 |     /**
30 |      * Get the size of an image from a string
31 |      *
32 |      * @param string $imagedata - Binary image data
33 |      * @param &array $imageinfo - Reference to a metadata array
34 |      *
35 |      * @return array
36 |      */
37 |     public static function imageSizeFromString($imagedata, &$imageinfo = null)
38 |     {
39 |         $uri = 'data://application/octet-stream;base64,'.\base64_encode($imagedata);
40 |         if ($imageinfo !== null) {
41 |             return \getimagesize($uri, $imageinfo);
42 |         }
43 |         return \getimagesize($uri);
44 |     }
45 | }
46 | 


--------------------------------------------------------------------------------
/src/BaseFuture.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | namespace Sarciszewski\PHPFuture;
 3 | 
 4 | /**
 5 |  * The MIT License (MIT)
 6 |  *
 7 |  * Copyright (c) 2015 Scott Arciszewski
 8 |  *
 9 |  * Permission is hereby granted, free of charge, to any person obtaining a copy
10 |  * of this software and associated documentation files (the "Software"), to deal
11 |  * in the Software without restriction, including without limitation the rights
12 |  * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
13 |  * copies of the Software, and to permit persons to whom the Software is
14 |  * furnished to do so, subject to the following conditions:
15 |  *
16 |  * The above copyright notice and this permission notice shall be included in all
17 |  * copies or substantial portions of the Software.
18 |  *
19 |  * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
20 |  * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
21 |  * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
22 |  * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
23 |  * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
24 |  * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
25 |  * SOFTWARE.
26 |  */
27 | class BaseFuture
28 | {
29 |     /**
30 |      * Multi-byte-safe string length calculation
31 |      *
32 |      * @param string $str
33 |      * @return int
34 |      */
35 |     protected static function ourStrlen($str)
36 |     {
37 |         // Premature optimization: cache the function_exists() result
38 |         static $exists = null;
39 |         if ($exists === null) {
40 |             $exists = \function_exists('\\mb_strlen');
41 |         }
42 | 
43 |         // If it exists, we need to make sure we're using 8bit mode
44 |         if ($exists) {
45 |             return \mb_strlen($str, '8bit');
46 |         }
47 |         return \strlen($str);
48 |     }
49 | 
50 |     /**
51 |      * Multi-byte-safe substring calculation
52 |      *
53 |      * @param string $str
54 |      * @param int $start
55 |      * @param int $length (optional)
56 |      * @return string
57 |      */
58 |     protected static function ourSubstr($str, $start = 0, $length = null)
59 |     {
60 |         // Premature optimization: cache the function_exists() result
61 |         static $exists = null;
62 |         if ($exists === null) {
63 |             $exists = \function_exists('\\mb_substr');
64 |         }
65 | 
66 |         // If it exists, we need to make sure we're using 8bit mode
67 |         if ($exists) {
68 |             return \mb_substr($str, $start, $length, '8bit');
69 |         } elseif ($length !== null) {
70 |             return \substr($str, $start, $length);
71 |         }
72 |         return \substr($str, $start);
73 |     }
74 | }
75 | 


--------------------------------------------------------------------------------
/run-tests.sh:
--------------------------------------------------------------------------------
 1 | #!/bin/bash
 2 | 
 3 | clean=1 # Clean up?
 4 | gpg --fingerprint D8406D0D82947747293778314AA394086372C20A
 5 | if [ $? -ne 0 ]; then
 6 |     echo -e "\033[33mDownloading PGP Public Key...\033[0m"
 7 |     gpg --recv-keys D8406D0D82947747293778314AA394086372C20A
 8 |     # Sebastian Bergmann <sb@sebastian-bergmann.de>
 9 |     gpg --fingerprint D8406D0D82947747293778314AA394086372C20A
10 |     if [ $? -ne 0 ]; then
11 |         echo -e "\033[31mCould not download PGP public key for verification\033[0m"
12 |         exit
13 |     fi
14 | fi
15 | if [ "$clean" -eq 1 ]; then
16 |     # Let's clean them up, if they exist
17 |     if [ -f phpunit.phar ]; then
18 |         rm -f phpunit.phar
19 |     fi
20 |     if [ -f phpunit.phar.asc ]; then
21 |         rm -f phpunit.phar.asc
22 |     fi
23 | fi
24 | 
25 | # Let's grab the latest release and its signature
26 | if [ ! -f phpunit.phar ]; then
27 |     wget https://phar.phpunit.de/phpunit.phar
28 | fi
29 | if [ ! -f phpunit.phar.asc ]; then
30 |     wget https://phar.phpunit.de/phpunit.phar.asc
31 | fi
32 | 
33 | # Verify before running
34 | gpg --verify phpunit.phar.asc phpunit.phar
35 | if [ $? -eq 0 ]; then
36 |     echo
37 |     echo -e "\033[33mBegin Unit Testing\033[0m"
38 |     # Run the testing suite
39 |     php phpunit.phar --bootstrap autoload.php tests
40 |     # Cleanup
41 |     if [ "$clean" -eq 1 ]; then
42 |         echo -e "\033[32mCleaning Up!\033[0m"
43 |         rm -f phpunit.phar
44 |         rm -f phpunit.phar.asc
45 |     fi
46 | else
47 |     echo
48 |     chmod -x phpunit.phar
49 |     mv phpunit.phar /tmp/bad-phpunit.phar
50 |     mv phpunit.phar.asc /tmp/bad-phpunit.phar.asc
51 |     echo -e "\033[31mSignature did not match! Check /tmp/bad-phpunit.phar for trojans\033[0m"
52 |     exit 1
53 | fi
54 | 
55 | # The MIT License (MIT)
56 | # 
57 | # Copyright (c) 2015 Resonant Core, LLC
58 | # 
59 | # Permission is hereby granted, free of charge, to any person obtaining a copy
60 | # of this software and associated documentation files (the "Software"), to deal
61 | # in the Software without restriction, including without limitation the rights
62 | # to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
63 | # copies of the Software, and to permit persons to whom the Software is
64 | # furnished to do so, subject to the following conditions:
65 | # 
66 | # The above copyright notice and this permission notice shall be included in all
67 | # copies or substantial portions of the Software.
68 | # 
69 | # THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
70 | # IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
71 | # FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
72 | # AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
73 | # LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
74 | # OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
75 | # SOFTWARE.
76 | 


--------------------------------------------------------------------------------
/src/Utility.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | namespace Sarciszewski\PHPFuture;
 4 | 
 5 | /**
 6 |  * The MIT License (MIT)
 7 |  *
 8 |  * Copyright (c) 2015 Scott Arciszewski
 9 |  *
10 |  * Permission is hereby granted, free of charge, to any person obtaining a copy
11 |  * of this software and associated documentation files (the "Software"), to deal
12 |  * in the Software without restriction, including without limitation the rights
13 |  * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
14 |  * copies of the Software, and to permit persons to whom the Software is
15 |  * furnished to do so, subject to the following conditions:
16 |  *
17 |  * The above copyright notice and this permission notice shall be included in all
18 |  * copies or substantial portions of the Software.
19 |  *
20 |  * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
21 |  * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
22 |  * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
23 |  * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
24 |  * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
25 |  * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
26 |  * SOFTWARE.
27 |  */
28 | class Utility extends BaseFuture
29 | {
30 |     /**
31 |      * Return the values from a single column in the input array
32 |      *
33 |      * @param array $array A multi-dimensional array (record set) from which to pull a column of values.
34 |      * @param string|int $column_key The column of values to return.
35 |      * @param string|int|null $index_key The column to use as the index/keys for the returned array.
36 |      *
37 |      * @return array
38 |      */
39 |     public static function arrayColumn(array $array, $column_key, $index_key = null)
40 |     {
41 |         $aReturn = array();
42 |         if ($column_key === null) {
43 |             // No column key? Grab the whole row...
44 |             if ($index_key === null) {
45 |                 return $array;
46 |             }
47 |             foreach ($array as $sub) {
48 |                 $aReturn[$sub[$index_key]] = $sub;
49 |             }
50 |         } elseif (empty($index_key)) {
51 |             foreach ($array as $sub) {
52 |                 $aReturn[] = $sub[$column_key];
53 |             }
54 |         } else {
55 |             foreach ($array as $sub) {
56 |                 $aReturn[$sub[$index_key]] = $sub[$column_key];
57 |             }
58 |         }
59 |         return $aReturn;
60 |     }
61 | 
62 |     /**
63 |      * Convert a hexadecimal string into raw binary
64 |      *
65 |      * @param string $data Hexadecimal data
66 |      *
67 |      * @return string
68 |      */
69 |     public static function hexToBin($data)
70 |     {
71 |         if (self::ourStrlen($data) % 2 !== 0) {
72 |             \trigger_error("hex2bin(): Hexadecimal input string must have an even length", E_USER_WARNING);
73 |             return false;
74 |         }
75 |         return \pack('H*', $data);
76 |     }
77 | }
78 | 


--------------------------------------------------------------------------------
/README.md:
--------------------------------------------------------------------------------
 1 | # php-future
 2 | 
 3 | [![Build Status](https://travis-ci.org/sarciszewski/php-future.svg?branch=master)](https://travis-ci.org/sarciszewski/php-future)
 4 | 
 5 | This library backports some new features into old versions of PHP.
 6 | 
 7 | This **MIT Licensed** project is produced and maintained for the good of the PHP developer community.
 8 | 
 9 | ## WARNING ABOUT APPLICATION SECURITY
10 | 
11 | This should ONLY be used in the case that you cannot upgrade PHP for specific reasons within your business rules. For best application security you should always run the latest version of PHP where ever possible. This is intended as a stop gap for those that cannot upgrade and can be used while working toward upgrading to the latest version.
12 | 
13 | ## ATTENTION PHP 5.2 / 5.3 USERS
14 | 
15 | As a general rule, we do not provide support for [any unsupported versions of PHP](http://php.net/eol.php). This means 5.4.x as of this writing.
16 | 
17 | If your operating system supports a 5.3.x version that is EOL'd (e.g. PHP 5.3.10 on Ubuntu 12.04 has security fixes backported), we will make exceptions. **The purpose of this library is not to encourage complacency and insecurity. Patch your systems.**
18 | 
19 | We do not support PHP 5.2.x anywhere. Please upgrade to a newer version of PHP.
20 | 
21 | ## Features polyfilled by this library
22 | 
23 | * PHP 5.4
24 |   * N/A
25 | * PHP 5.5
26 |   * `array_column()`
27 |   * `boolval()`
28 |   * `hash_pbkdf2()`
29 |   * `openssl_pbkdf2()`
30 | * PHP 5.6
31 |   * `hash_equals()`
32 | * PHP 7.0
33 |   * N/A
34 | 
35 | See [wishlist.txt](wishlist.txt) for features we will be providing as time goes on. **To add to this list, either send a pull request, a [tweet](https://twitter.com/vodooKobra), or [an email](https://scott.arciszewski.me/contact) and we'll consider it for inclusion.**
36 | 
37 | ### Out of scope:
38 | 
39 | * Password API - Go directly to https://github.com/ircmaxell/password_compat for these implementations
40 |   * `password_hash()`
41 |   * `password_verify()`
42 | * PHP 7 CSPRNG - Go directly to https://github.com/paragonie/random_compat for these implementations
43 |   * `random_bytes()`
44 |   * `random_int()`
45 | 
46 | ## Why?
47 | 
48 | When our consultants submit security enhancements to open source projects, the
49 | maintainers sometimes complain that some features are only in newer versions of 
50 | PHP so they can't require them. We wrote this to provide compatibility across
51 | all versions of PHP and prevent these issues from occurring.
52 | 
53 | In the future, we will attempt to backport *some* PHP 7 features for use in
54 | versions 5.5 and 5.6, where possible.
55 | 
56 | ## How it Works
57 | 
58 | Features that only exist in future versions are exposed in the global namespace.
59 | These functions call the appropriate classes/methods from the `src` folder. This
60 | ensures that PHP only load the codes when it actually needs it.
61 | 
62 | ## How to use this library
63 | 
64 | ### Composer
65 | 
66 | ```sh
67 | composer require sarciszewski/php-future
68 | ```
69 | 
70 | ### Any script
71 | 
72 | Just include our `autoload.php` script outside of our `src` directory and you're
73 | good to go. For example:
74 | 
75 | ```php
76 | require_once "vendor/sarciszewski/php-future/autoload.php";
77 | ```
78 | 


--------------------------------------------------------------------------------
/src/Security.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | namespace Sarciszewski\PHPFuture;
 3 | 
 4 | /**
 5 |  * The MIT License (MIT)
 6 |  * 
 7 |  * Copyright (c) 2015 Scott Arciszewski
 8 |  * 
 9 |  * Permission is hereby granted, free of charge, to any person obtaining a copy
10 |  * of this software and associated documentation files (the "Software"), to deal
11 |  * in the Software without restriction, including without limitation the rights
12 |  * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
13 |  * copies of the Software, and to permit persons to whom the Software is
14 |  * furnished to do so, subject to the following conditions:
15 |  * 
16 |  * The above copyright notice and this permission notice shall be included in all
17 |  * copies or substantial portions of the Software.
18 |  * 
19 |  * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
20 |  * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
21 |  * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
22 |  * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
23 |  * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
24 |  * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
25 |  * SOFTWARE.
26 |  */
27 | class Security extends BaseFuture
28 | {
29 |     /**
30 |      * Equivalent to hash_equals() in PHP 5.6 
31 |      * 
32 |      * @param string $knownString
33 |      * @param string $userString
34 |      * 
35 |      * @return bool
36 |      */
37 |     public static function hashEquals($knownString, $userString)
38 |     {
39 |         // We have to roll our own
40 |         $kLen = self::ourStrlen($knownString);
41 |         $uLen = self::ourStrlen($userString);
42 |         if ($kLen !== $uLen) {
43 |             return false;
44 |         }
45 |         $result = 0;
46 |         for ($i = 0; $i < $kLen; $i++) {
47 |             $result |= (ord($knownString[$i]) ^ ord($userString[$i]));
48 |         }
49 |         // They are only identical strings if $result is exactly 0...
50 |         return 0 === $result;
51 |     }
52 |     
53 |     /**
54 |      * Password Based Key Derivation Function #2
55 |      *
56 |      * Underlying feature for hash_pbkdf2() and openssl_pbkdf2() for PHP < 5.5
57 |      *
58 |      * @param string $algo
59 |      * @param string $password
60 |      * @param string $salt
61 |      * @param int $iterations
62 |      * @param int $length
63 |      * 
64 |      * @return string
65 |      */
66 |     public static function pbkdf2($algo, $password, $salt, $iterations, $length = 0)
67 |     {
68 |         if (!\in_array($algo, \hash_algos(), true)) {
69 |             throw new \Exception('PBKDF2 ERROR: Invalid hash algorithm.');
70 |         }
71 | 
72 |         $hashlen = self::ourStrlen(\hash($algo, "", true));
73 |         if ($hashlen === 0) {
74 |             return '';
75 |         }
76 | 
77 |         $block_count = \ceil($length / $hashlen);
78 | 
79 |         $output = '';
80 |         for ($i = 1; $i <= $block_count; ++$i) {
81 |             $last = $salt.\pack('N', $i);
82 |             $xorsum = \hash_hmac($algo, $last, $password, true);
83 |             $last = $xorsum;
84 |             for ($j = 1; $j < $iterations; ++$j) {
85 |                 $xorsum ^= ($last = \hash_hmac($algo, $last, $password, true));
86 |             }
87 |             $output .= $xorsum;
88 |         }
89 |         return self::ourSubstr($output, 0, $length);
90 |     }
91 | }
92 | 


--------------------------------------------------------------------------------
/autoload.php:
--------------------------------------------------------------------------------
  1 | <?php
  2 | use \Sarciszewski\PHPFuture as Future;
  3 | spl_autoload_register(function ($class) {
  4 |     
  5 |     // project-specific namespace prefix
  6 |     $prefix = 'Sarciszewski\\PHPFuture\\';
  7 | 
  8 |     // base directory for the namespace prefix
  9 |     $base_dir = __DIR__ . '/src/';
 10 |     
 11 |     // does the class use the namespace prefix?
 12 |     $len = strlen($prefix);
 13 |     if (strncmp($prefix, $class, $len) !== 0) {
 14 |         // no, move to the next registered autoloader
 15 |         return;
 16 |     }
 17 |     
 18 |     // get the relative class name
 19 |     $relative_class = substr($class, $len);
 20 |     
 21 |     // replace the namespace prefix with the base directory, replace namespace
 22 |     // separators with directory separators in the relative class name, append
 23 |     // with .php
 24 |     $file = $base_dir . str_replace('\\', '/', $relative_class) . '.php';
 25 |     
 26 |     // if the file exists, require it
 27 |     if (file_exists($file)) {
 28 |         require $file;
 29 |     }
 30 | });
 31 | 
 32 | 
 33 | if (!interface_exists('JsonSerializable')) {
 34 |     /**
 35 |      * From PHP 5.4
 36 |      *
 37 |      * @ref http://us3.php.net/manual/en/class.jsonserializable.php
 38 |      */
 39 |     interface JsonSerializable
 40 |     {
 41 |         public function jsonSerialize();
 42 |     }
 43 | }
 44 | 
 45 | if (!interface_exists('SessionHandlerInterface')) {
 46 | 
 47 |     /**
 48 |      * From PHP 5.4
 49 |      *
 50 |      * @ref http://php.net/manual/en/class.sessionhandlerinterface.php
 51 |      */
 52 |     interface SessionHandlerInterface
 53 |     {
 54 |         public function close();
 55 |         public function destroy($session_id);
 56 |         public function gc($maxlifetime);
 57 |         public function open($save_path, $name);
 58 |         public function read($session_id);
 59 |         public function write($session_id, $session_data);
 60 |     }
 61 | }
 62 | 
 63 | 
 64 | if (!function_exists('array_column')) {
 65 |     /**
 66 |      * Get the boolean value of a variable
 67 |      */
 68 |     function array_column(array $array, $column_key, $index_key = null)
 69 |     {
 70 |         return Future\Utility::arrayColumn($array, $column_key, $index_key);
 71 |     }
 72 | }
 73 | 
 74 | if (!function_exists('boolval')) {
 75 |     /**
 76 |      * Get the boolean value of a variable
 77 |      */
 78 |     function boolval($mixed_var)
 79 |     {
 80 |         return !!$mixed_var;
 81 |     }
 82 | }
 83 | 
 84 | if (!function_exists('hex2bin')) {
 85 |     /**
 86 |      * From PHP 5.4
 87 |      *
 88 |      * @ref https://php.net/hex2bin
 89 |      *
 90 |      * @param string $data
 91 |      *
 92 |      * @return string
 93 |      */
 94 |     function hex2bin($data)
 95 |     {
 96 |         return Future\Utility::hexToBin($data);
 97 |     }
 98 | }
 99 | 
100 | if (!function_exists('hash_equals')) {
101 |     /**
102 |      * From PHP 5.6
103 |      * 
104 |      * @ref https://php.net/hash_equals
105 |      *
106 |      * @param string $known_string
107 |      * @param string $user_string
108 |      *
109 |      * @return boolean
110 |      */
111 |     function hash_equals($known_string, $user_string)
112 |     {
113 |         return Future\Security::hashEquals(
114 |             $known_string,
115 |             $user_string
116 |         );
117 |     }
118 | }
119 | 
120 | if (!function_exists('hash_pbkdf2')) {
121 |     /**
122 |      * From PHP 5.5
123 |      *
124 |      * @ref https://php.net/hash_pbkdf2
125 |      *
126 |      * @param string $algo
127 |      * @param string $password
128 |      * @param string $salt
129 |      * @param int $iterations
130 |      * @param int $length
131 |      * @param boolean $raw_output
132 |      *
133 |      * @return string
134 |      */
135 |     function hash_pbkdf2($algo, $password, $salt, $iterations, $length = 0, $raw_output = false)
136 |     {
137 |         $key = Future\Security::pbkdf2(
138 |             $algo,
139 |             $password,
140 |             $salt,
141 |             $iterations,
142 |             $length
143 |         );
144 |         if ($raw_output) {
145 |             return bin2hex($key);
146 |         }
147 |         return $key;
148 |     }
149 | }
150 | 
151 | if (!function_exists('getimagesizefromstring')) {
152 |     /**
153 |      * From PHP 5.4
154 |      *
155 |      * @ref https://php.net/getimagesizefromstring
156 |      *
157 |      * @param string $imagedata
158 |      * @param &array $imageinfo
159 |      *
160 |      * @return array
161 |      */
162 |     function getimagesizefromstring($imagedata, &$imageinfo = null)
163 |     {
164 |         if ($imageinfo !== null) {
165 |             return Future\Image::imageSizeFromString($imagedata, $imageinfo);
166 |         }
167 |         return Future\Image::imageSizeFromString($imagedata);
168 |     }
169 | }
170 | 
171 | if (!function_exists('openssl_pbkdf2')) {
172 |     /**
173 |      * From PHP 5.5
174 |      *
175 |      * @ref https://php.net/openssl_pbkdf2
176 |      *
177 |      * @param string $password
178 |      * @param string $salt
179 |      * @param int $length
180 |      * @param int $iterations
181 |      * @param string $algo
182 |      *
183 |      * @return string
184 |      */
185 |     function openssl_pbkdf2($password, $salt, $length, $iterations, $algo = 'sha1')
186 |     {
187 |         $key = Future\Security::pbkdf2(
188 |             $algo,
189 |             $password,
190 |             $salt,
191 |             $iterations,
192 |             $length
193 |         );
194 |         return $key;
195 |     }
196 | }
197 | 


--------------------------------------------------------------------------------