From 071edecfe079e32591db3a528824ef550ebba1d2 Mon Sep 17 00:00:00 2001
From: Miles Lott <milosch@alumni.egroupware.org>
Date: Sat, 20 Nov 2004 15:09:20 +0000
Subject: [PATCH] Add new file to check configured items, including files
 directory and mcrypt tests; use with newconfig.php, to be renamed to
 config.php if this works for everyone.

---
 setup/inc/hook_config_validate.inc.php | 140 +++++++++++++++++++++++++
 1 file changed, 140 insertions(+)
 create mode 100644 setup/inc/hook_config_validate.inc.php

diff --git a/setup/inc/hook_config_validate.inc.php b/setup/inc/hook_config_validate.inc.php
new file mode 100644
index 0000000000..1c91a9e825
--- /dev/null
+++ b/setup/inc/hook_config_validate.inc.php
@@ -0,0 +1,140 @@
+<?php
+  /**************************************************************************\
+  * eGroupWare                                                               *
+  * http://www.egroupware.org                                                *
+  * Written by Miles Lott <milos@groupwhere.org>                             *
+  * ------------------------------------------------------------------------ *
+  *  This program is free software; you can redistribute it and/or modify it *
+  *  under the terms of the GNU General Public License as published by the   *
+  *  Free Software Foundation; either version 2 of the License, or (at your  *
+  *  option) any later version.                                              *
+  \**************************************************************************/
+
+  /* $Id$ */
+
+	/*
+	  Set a global flag to indicate this file was found by setup/config.php.
+	  config.php will unset it after parsing the form values.
+	*/
+	$GLOBALS['phpgw_info']['server']['found_validation_hook'] = True;
+
+	function in_docroot($path='')
+	{
+		$docroots = array(PHPGW_SERVER_ROOT,$_SERVER['DOCUMENT_ROOT']);
+
+		foreach($docroots as $docroot)
+		{
+			$len = strlen($docroot);
+
+			if($docroot == substr($path,0,$len))
+			{
+				$rest = substr($path,$len);
+
+				if(!strlen($rest) || $rest[0] == DIRECTORY_SEPARATOR)
+				{
+					return True;
+				}
+			}
+		}
+		return False;
+	}
+
+	function files_dir($settings)
+	{
+		if(in_docroot($settings['files_dir']))
+		{
+			$GLOBALS['config_error'] = 'Path to user and group files HAS TO BE OUTSIDE of the webservers document-root!!!';
+		}
+	}
+
+	function _mcrypt_test_module_mode($module,$mode)
+	{
+		/* Data */
+		$key = 'this is a very long key, even too long for the cipher';
+		$plain_text = 'very important data';
+
+		/* Open module, and create IV */
+		if(!$GLOBALS['td'] = @mcrypt_module_open($module, '',$mode, ''))
+		{
+			@mcrypt_module_close($GLOBALS['td']);
+			return False;
+		}
+		$key = substr($key, 0, mcrypt_enc_get_key_size($GLOBALS['td']));
+		$iv_size = mcrypt_enc_get_iv_size($GLOBALS['td']);
+		$iv = @mcrypt_create_iv($iv_size, MCRYPT_RAND);
+
+		/* Initialize encryption handle */
+		if(mcrypt_generic_init($GLOBALS['td'], $key, $iv) != -1)
+		{
+			/* Encrypt data */
+			$c_t = mcrypt_generic($GLOBALS['td'], $plain_text);
+			mcrypt_generic_deinit($GLOBALS['td']);
+
+			// close the module
+			mcrypt_module_close($GLOBALS['td']);
+
+			/* Reinitialize buffers for decryption */
+			/* Open module */
+			$GLOBALS['td'] = mcrypt_module_open($module, '', $mode, '');
+			$key = substr($key, 0, mcrypt_enc_get_key_size($GLOBALS['td']));
+
+			mcrypt_generic_init($GLOBALS['td'], $key, $iv);
+			$p_t = trim(mdecrypt_generic($GLOBALS['td'], $c_t)); //trim to remove padding
+
+			/* Clean up */
+			mcrypt_generic_end($GLOBALS['td']);
+			mcrypt_module_close($GLOBALS['td']);
+		}
+		@mcrypt_module_close($GLOBALS['td']);
+
+		if(strncmp($p_t, $plain_text, strlen($plain_text)) == 0)
+		{
+			return True;
+		}
+		else
+		{
+			return False;
+		}
+	}
+
+	/* run a self-test through every listed cipher and mode - from robert at peakepro dot com (php.net manual) */
+	function mcrypt_check_sanity()
+	{
+		$modes = mcrypt_list_modes();
+		$algorithms = mcrypt_list_algorithms();
+
+		foreach($algorithms as $cipher)
+		{
+			if(mcrypt_module_self_test($cipher))
+			{
+				$GLOBALS['ciphers'][$cipher] = array();
+				foreach($modes as $mode)
+				{
+					if(_mcrypt_test_module_mode($cipher,$mode))
+					{
+						$result = True;
+					}
+					else
+					{
+						$result = False;
+					}
+					@$GLOBALS['ciphers'][$cipher][$mode] = $result;
+				}
+			}
+		}
+		ksort($GLOBALS['ciphers']);
+		/* _debug_array($GLOBALS['ciphers']); */
+	}
+
+	function mcrypt_algo($settings)
+	{
+		/* _debug_array($settings);exit; */
+		if(@function_exists('mcrypt_list_modes'))
+		{
+			mcrypt_check_sanity();
+			if(!@$GLOBALS['ciphers'][$settings['mcrypt_algo']][$settings['mcrypt_mode']])
+			{
+				$GLOBALS['config_error'] = 'Invalid Mcrypt Algorithm/Mode combination';
+			}
+		}
+	}