includes/password/MWOldPassword.php

   1 <?php
   2 /**
   3  * Implements the MWOldPassword class for the MediaWiki software.
   4  *
   5  * This program is free software; you can redistribute it and/or modify
   6  * it under the terms of the GNU General Public License as published by
   7  * the Free Software Foundation; either version 2 of the License, or
   8  * (at your option) any later version.
   9  *
  10  * This program is distributed in the hope that it will be useful,
  11  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  12  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  13  * GNU General Public License for more details.
  14  *
  15  * You should have received a copy of the GNU General Public License along
  16  * with this program; if not, write to the Free Software Foundation, Inc.,
  17  * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
  18  * http://www.gnu.org/copyleft/gpl.html
  19  *
  20  * @file
  21  */
  22
  23 declare( strict_types = 1 );
  24
  25 namespace MediaWiki\Password;
  26
  27 /**
  28  * The old style of MediaWiki password hashing. It involves
  29  * running MD5 on the password.
  30  *
  31  * @since 1.24
  32  */
  33 class MWOldPassword extends ParameterizedPassword {
  34         protected function getDefaultParams(): array {
  35                 return [];
  36         }
  37
  38         protected function getDelimiter(): string {
  39                 return ':';
  40         }
  41
  42         public function crypt( string $plaintext ): void {
  43                 if ( count( $this->args ) === 1 ) {
  44                         // Accept (but do not generate) salted passwords with :A: prefix.
  45                         // These are actually B-type passwords, but an error in a previous
  46                         // version of MediaWiki caused them to be written with an :A:
  47                         // prefix.
  48                         $this->hash = md5( $this->args[0] . '-' . md5( $plaintext ) );
  49                 } else {
  50                         $this->args = [];
  51                         $this->hash = md5( $plaintext );
  52                 }
  53
  54                 if ( strlen( $this->hash ) < 32 ) {
  55                         throw new PasswordError( 'Error when hashing password.' );
  56                 }
  57         }
  58 }
  59
  60 /** @deprecated since 1.43 use MediaWiki\\Password\\MWOldPassword */
  61 class_alias( MWOldPassword::class, 'MWOldPassword' );