FM / thbees

/var/softaculous/thbees

Name	Size	Mode	Actions
images/	-	0755	rm
php53/	-	0755	rm
php56/	-	0755	rm
php71/	-	0755	rm
php81/	-	0755	rm
php82/	-	0755	rm
.htaccess	1344	0644	edit dl rm
clone.php	14163	0644	edit dl rm
edit.php	6617	0644	edit dl rm
edit.xml	447	0644	edit dl rm
extend.php	2053	0644	edit dl rm
fileindex.php	386	0644	edit dl rm
import.php	4011	0644	edit dl rm
info.xml	3393	0644	edit dl rm
install.js	1150	0644	edit dl rm
install.php	10921	0644	edit dl rm
install.xml	1428	0644	edit dl rm
md5	3714	0644	edit dl rm
notes.txt	1509	0644	edit dl rm
settings.inc.php	610	0644	edit dl rm
update_pass.php	1213	0644	edit dl rm
update_rijndael.php	1207	0644	edit dl rm

Edit: /var/softaculous/thbees/update_pass.php (1213B)

<?php

/**
 * A Compatibility library with PHP 5.5's simplified password hashing API.
 *
 * @author Anthony Ferrara <ircmaxell@php.net>
 * @license http://www.opensource.org/licenses/mit-license.html MIT License
 * @copyright 2012 The Authors
 */

@unlink('update_pass.php');

if(!defined('PASSWORD_BCRYPT')){
	define('PASSWORD_BCRYPT', 1);
}

define('PASSWORD_DEFAULT', PASSWORD_BCRYPT);

$resp = password_hash('[[admin_pass]]', PASSWORD_DEFAULT);
echo '<update_pass>'.$resp.'</update_pass>';

function __calculateSignature($employeeId, $profileId, $email, $password){

$cookie_key = '[[cookie_key]]';

$data = $employeeId . $email . $profileId . $password;

return hash_hmac('sha256', (string)$data, $cookie_key);
}

$password = $resp;

//We use this signature for install. We pass default $employeeId and $profileId params i.e 1, since these are defaults for admin user
$resp1 = __calculateSignature(1, 1,  '[[admin_email]]' , $password);
echo '<update_signature>'.$resp1.'</update_signature>';

//We use this signature for edit. Don't remove
$resp2 = __calculateSignature('[[emp_id]]', '[[profile_id]]',  '[[admin_email]]' , $password);
echo '<update_signature_edit>'.$resp2.'</update_signature_edit>';
?>

* @license http://www.opensource.org/licenses/mit-license.html MIT License * @copyright 2012 The Authors */ @unlink('update_pass.php'); if(!defined('PASSWORD_BCRYPT')){ define('PASSWORD_BCRYPT', 1); } define('PASSWORD_DEFAULT', PASSWORD_BCRYPT); $resp = password_hash('[[admin_pass]]', PASSWORD_DEFAULT); echo ''.$resp.''; function __calculateSignature($employeeId, $profileId, $email, $password){ $cookie_key = '[[cookie_key]]'; $data = $employeeId . $email . $profileId . $password; return hash_hmac('sha256', (string)$data, $cookie_key); } $password = $resp; //We use this signature for install. We pass default $employeeId and $profileId params i.e 1, since these are defaults for admin user $resp1 = __calculateSignature(1, 1, '[[admin_email]]' , $password); echo ''.$resp1.''; //We use this signature for edit. Don't remove $resp2 = __calculateSignature('[[emp_id]]', '[[profile_id]]', '[[admin_email]]' , $password); echo ''.$resp2.''; ?>