[Summary view] [Print] [Text view]

   1  <?php
   2  
   3  /*
   4   * This file is part of the Symfony package.
   5   *
   6   * (c) Fabien Potencier <fabien@symfony.com>
   7   *
   8   * For the full copyright and license information, please view the LICENSE
   9   * file that was distributed with this source code.
  10   */
  11  
  12  namespace Symfony\Polyfill\Php56;
  13  
  14  use Symfony\Polyfill\Util\Binary;
  15  
  16  /**
  17   * @internal
  18   */
  19  final class Php56
  20  {
  21      const LDAP_ESCAPE_FILTER = 1;
  22      const LDAP_ESCAPE_DN = 2;
  23  
  24      public static function hash_equals($knownString, $userInput)
  25      {
  26          if (!\is_string($knownString)) {
  27              trigger_error('Expected known_string to be a string, '.\gettype($knownString).' given', E_USER_WARNING);
  28  
  29              return false;
  30          }
  31  
  32          if (!\is_string($userInput)) {
  33              trigger_error('Expected user_input to be a string, '.\gettype($userInput).' given', E_USER_WARNING);
  34  
  35              return false;
  36          }
  37  
  38          $knownLen = Binary::strlen($knownString);
  39          $userLen = Binary::strlen($userInput);
  40  
  41          if ($knownLen !== $userLen) {
  42              return false;
  43          }
  44  
  45          $result = 0;
  46  
  47          for ($i = 0; $i < $knownLen; ++$i) {
  48              $result |= \ord($knownString[$i]) ^ \ord($userInput[$i]);
  49          }
  50  
  51          return 0 === $result;
  52      }
  53  
  54      /**
  55       * Stub implementation of the {@link ldap_escape()} function of the ldap
  56       * extension.
  57       *
  58       * Escape strings for safe use in LDAP filters and DNs.
  59       *
  60       * @author Chris Wright <ldapi@daverandom.com>
  61       *
  62       * @param string $subject
  63       * @param string $ignore
  64       * @param int    $flags
  65       *
  66       * @return string
  67       *
  68       * @see http://stackoverflow.com/a/8561604
  69       */
  70      public static function ldap_escape($subject, $ignore = '', $flags = 0)
  71      {
  72          static $charMaps = null;
  73  
  74          if (null === $charMaps) {
  75              $charMaps = array(
  76                  self::LDAP_ESCAPE_FILTER => array('\\', '*', '(', ')', "\x00"),
  77                  self::LDAP_ESCAPE_DN => array('\\', ',', '=', '+', '<', '>', ';', '"', '#', "\r"),
  78              );
  79  
  80              $charMaps[0] = array();
  81  
  82              for ($i = 0; $i < 256; ++$i) {
  83                  $charMaps[0][\chr($i)] = sprintf('\\%02x', $i);
  84              }
  85  
  86              for ($i = 0, $l = \count($charMaps[self::LDAP_ESCAPE_FILTER]); $i < $l; ++$i) {
  87                  $chr = $charMaps[self::LDAP_ESCAPE_FILTER][$i];
  88                  unset($charMaps[self::LDAP_ESCAPE_FILTER][$i]);
  89                  $charMaps[self::LDAP_ESCAPE_FILTER][$chr] = $charMaps[0][$chr];
  90              }
  91  
  92              for ($i = 0, $l = \count($charMaps[self::LDAP_ESCAPE_DN]); $i < $l; ++$i) {
  93                  $chr = $charMaps[self::LDAP_ESCAPE_DN][$i];
  94                  unset($charMaps[self::LDAP_ESCAPE_DN][$i]);
  95                  $charMaps[self::LDAP_ESCAPE_DN][$chr] = $charMaps[0][$chr];
  96              }
  97          }
  98  
  99          // Create the base char map to escape
 100          $flags = (int) $flags;
 101          $charMap = array();
 102  
 103          if ($flags & self::LDAP_ESCAPE_FILTER) {
 104              $charMap += $charMaps[self::LDAP_ESCAPE_FILTER];
 105          }
 106  
 107          if ($flags & self::LDAP_ESCAPE_DN) {
 108              $charMap += $charMaps[self::LDAP_ESCAPE_DN];
 109          }
 110  
 111          if (!$charMap) {
 112              $charMap = $charMaps[0];
 113          }
 114  
 115          // Remove any chars to ignore from the list
 116          $ignore = (string) $ignore;
 117  
 118          for ($i = 0, $l = \strlen($ignore); $i < $l; ++$i) {
 119              unset($charMap[$ignore[$i]]);
 120          }
 121  
 122          // Do the main replacement
 123          $result = strtr($subject, $charMap);
 124  
 125          // Encode leading/trailing spaces if self::LDAP_ESCAPE_DN is passed
 126          if ($flags & self::LDAP_ESCAPE_DN) {
 127              if (' ' === $result[0]) {
 128                  $result = '\\20'.substr($result, 1);
 129              }
 130  
 131              if (' ' === $result[\strlen($result) - 1]) {
 132                  $result = substr($result, 0, -1).'\\20';
 133              }
 134          }
 135  
 136          return $result;
 137      }
 138  }