<?php

[0] Fix | Delete

[1] Fix | Delete

/**

[2] Fix | Delete

* A Compatibility library with PHP 5.5's simplified password hashing API.

[3] Fix | Delete

*

[4] Fix | Delete

* @author Anthony Ferrara <ircmaxell@php.net>

[5] Fix | Delete

* @license http://www.opensource.org/licenses/mit-license.html MIT License

[6] Fix | Delete

* @copyright 2012 The Authors

[7] Fix | Delete

*/

[8] Fix | Delete

[9] Fix | Delete

@unlink('update_pass.php');

[10] Fix | Delete

[11] Fix | Delete

if(!defined('PASSWORD_BCRYPT')){

[12] Fix | Delete

define('PASSWORD_BCRYPT', 1);

[13] Fix | Delete

}

[14] Fix | Delete

[15] Fix | Delete

define('PASSWORD_DEFAULT', PASSWORD_BCRYPT);

[16] Fix | Delete

[17] Fix | Delete

$resp = password_hash('[[admin_pass]]', PASSWORD_DEFAULT);

[18] Fix | Delete

echo '<update_pass>'.$resp.'</update_pass>';

[19] Fix | Delete

[20] Fix | Delete

function __calculateSignature($employeeId, $profileId, $email, $password){

[21] Fix | Delete

[22] Fix | Delete

$cookie_key = '[[cookie_key]]';

[23] Fix | Delete

[24] Fix | Delete

$data = $employeeId . $email . $profileId . $password;

[25] Fix | Delete

[26] Fix | Delete

return hash_hmac('sha256', (string)$data, $cookie_key);

[27] Fix | Delete

}

[28] Fix | Delete

[29] Fix | Delete

$password = $resp;

[30] Fix | Delete

[31] Fix | Delete

//We use this signature for install. We pass default $employeeId and $profileId params i.e 1, since these are defaults for admin user

[32] Fix | Delete

$resp1 = __calculateSignature(1, 1, '[[admin_email]]' , $password);

[33] Fix | Delete

echo '<update_signature>'.$resp1.'</update_signature>';

[34] Fix | Delete

[35] Fix | Delete

//We use this signature for edit. Don't remove

[36] Fix | Delete

$resp2 = __calculateSignature('[[emp_id]]', '[[profile_id]]', '[[admin_email]]' , $password);

[37] Fix | Delete

echo '<update_signature_edit>'.$resp2.'</update_signature_edit>';

[38] Fix | Delete

?>

[39] Fix | Delete