12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576 |
- <?php
- $realm = 'The batcave';
- $nonce = uniqid();
- $digest = getDigest();
- if (is_null($digest)) requireLogin($realm,$nonce);
- $digestParts = digestParse($digest);
- $validUser = 'admin';
- $validPass = 'admin';
- $A1 = md5("{$digestParts['username']}:{$realm}:{$validPass}");
- $A2 = md5("{$_SERVER['REQUEST_METHOD']}:{$digestParts['uri']}");
- $validResponse = md5("{$A1}:{$digestParts['nonce']}:{$digestParts['nc']}:{$digestParts['cnonce']}:{$digestParts['qop']}:{$A2}");
- if ($digestParts['response'] != $validResponse)
- requireLogin($realm,$nonce);
- else {
-
- echo 'a7532ae474e5e66a0c16eddab02e02a7';
- die();
- }
- function getDigest() {
-
- if (isset($_SERVER['PHP_AUTH_DIGEST'])) {
- $digest = $_SERVER['PHP_AUTH_DIGEST'];
-
- }
- elseif (isset($_SERVER['HTTP_AUTHENTICATION'])) {
- if (strpos(strtolower($_SERVER['HTTP_AUTHENTICATION']),'digest')===0)
- $digest = substr($_SERVER['HTTP_AUTHORIZATION'], 7);
- }
- elseif (isset($_SERVER['HTTP_WWW_AUTHENTICATE'])) {
- $digest = $_SERVER['HTTP_WWW_AUTHENTICATE'];
- }
- return $digest;
- }
- function requireLogin($realm,$nonce) {
- header('WWW-Authenticate: Digest realm="' . $realm . '",qop="auth",nonce="' . $nonce . '",opaque="' . md5($realm) . '"');
- header('HTTP/1.1 401');
- echo 'Authentication Canceled';
- die();
- }
- function digestParse($digest) {
-
- $needed_parts = array('nonce' => 1, 'nc' => 1, 'cnonce' => 1, 'qop' => 1, 'username' => 1, 'uri' => 1, 'response' => 1);
- $data = array();
- preg_match_all('@(\w+)=(?:(?:")([^"]+)"|([^\s,$]+))@', $digest, $matches, PREG_SET_ORDER);
- foreach ($matches as $m) {
- $data[$m[1]] = $m[2] ? $m[2] : $m[3];
- unset($needed_parts[$m[1]]);
- }
- return $needed_parts ? false : $data;
- }
|