FM / igalerie

/var/softaculous/igalerie

Name	Size	Mode	Actions
images/	-	0755	rm
php53/	-	0755	rm
php56/	-	0755	rm
php71/	-	0755	rm
php81/	-	0755	rm
php82/	-	0755	rm
.htaccess	1469	0644	edit dl rm
clone.php	9441	0644	edit dl rm
conf.php	3013	0644	edit dl rm
extend.php	10487	0644	edit dl rm
fileindex.php	199	0644	edit dl rm
import.php	4064	0644	edit dl rm
info.xml	3258	0644	edit dl rm
install.js	924	0644	edit dl rm
install.php	5604	0644	edit dl rm
install.xml	1483	0644	edit dl rm
md5	2842	0644	edit dl rm
notes.txt	630	0644	edit dl rm
update_pass.php	1342	0644	edit dl rm
upgrade.php	3435	0644	edit dl rm
upgrade.xml	299	0644	edit dl rm
_edit.php	4496	0644	edit dl rm
_edit.xml	433	0644	edit dl rm

Edit: /var/softaculous/igalerie/update_pass.php (1342B)

<?php

/**
 * A Compatibility library with PHP 5.5's simplified password hashing API.
 *
 * @author Anthony Ferrara <ircmaxell@php.net>
 * @license http://www.opensource.org/licenses/mit-license.html MIT License
 * @copyright 2012 The Authors
 */

@unlink('update_pass.php');

if(!defined('PASSWORD_BCRYPT')){
	define('PASSWORD_BCRYPT', 1);
}

define('PASSWORD_DEFAULT', PASSWORD_BCRYPT);

$resp_conf_password = __key(62);
$passwordPepper= hash_hmac('sha256', '[[admin_pass]]', $resp_conf_password);

$resp = password_hash($passwordPepper, PASSWORD_DEFAULT);
$resp1 = str_replace("\$", "\\\$", $resp);

echo '<update_pass>'.$resp1.'</update_pass>';
echo '<resp_conf_password>'.$resp_conf_password.'</resp_conf_password>';

function __key(int $length = 12): string{

$key = '';
	$chars = '0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ';

for ($i = 0; $i < $length; $i++){
		$key .= $chars[random_int(0, 61)];
	}

return $key;
}

/*function __passkey(int $length = 8): string{
		$key = '';

for ($i = 0; $i < $length; $i++)
		{
			switch (random_int(1, 3))
			{
				// 0-9.
				case 1 :
					$key .= chr(random_int(48, 57));
					break;

// A-Z.
				case 2 :
					$key .= chr(random_int(65, 90));
					break;

// a-z.
				case 3 :
					$key .= chr(random_int(97, 122));
					break;
			}
		}

return $key;
}*/

* @license http://www.opensource.org/licenses/mit-license.html MIT License * @copyright 2012 The Authors */ @unlink('update_pass.php'); if(!defined('PASSWORD_BCRYPT')){ define('PASSWORD_BCRYPT', 1); } define('PASSWORD_DEFAULT', PASSWORD_BCRYPT); $resp_conf_password = __key(62); $passwordPepper= hash_hmac('sha256', '[[admin_pass]]', $resp_conf_password); $resp = password_hash($passwordPepper, PASSWORD_DEFAULT); $resp1 = str_replace("\$", "\\\$", $resp); echo ''.$resp1.''; echo ''.$resp_conf_password.''; function __key(int $length = 12): string{ $key = ''; $chars = '0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ'; for ($i = 0; $i < $length; $i++){ $key .= $chars[random_int(0, 61)]; } return $key; } /*function __passkey(int $length = 8): string{ $key = ''; for ($i = 0; $i < $length; $i++) { switch (random_int(1, 3)) { // 0-9. case 1 : $key .= chr(random_int(48, 57)); break; // A-Z. case 2 : $key .= chr(random_int(65, 90)); break; // a-z. case 3 : $key .= chr(random_int(97, 122)); break; } } return $key; }*/ ?>