yanglc
/
OneManager-php
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix: load sha1.js

pull/276/head
qkqpttgf 2021-03-11 20:01:49 +08:00 committed by GitHub
parent 4c0daaca80
commit 8ef5e3d4a6
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 17 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

26
common.php
View File

@ -457,7 +457,10 @@ function compareadminmd5($admincookie, $name, $pass)
function compareadminsha1($adminsha1, $timestamp, $pass) function compareadminsha1($adminsha1, $timestamp, $pass)
{ {
if (!is_numeric($timestamp)) return 'Timestamp not Number'; if (!is_numeric($timestamp)) return 'Timestamp not Number';
if (abs(time()-$timestamp) > 5*60) return 'The timestamp in server is ' . time() . ' (' . date("Y-m-d\TH:i:s\Z") . '),<br>and your posted timestamp is ' . $timestamp . ' (' . date("Y-m-d\TH:i:s\Z", $timestamp) . ')'; if (abs(time()-$timestamp) > 5*60) {
date_default_timezone_set('UTC');
return 'The timestamp in server is ' . time() . ' (' . date("Y-m-d\TH:i:s\Z") . '),<br>and your posted timestamp is ' . $timestamp . ' (' . date("Y-m-d\TH:i:s\Z", $timestamp) . ')';
}
if ($adminsha1 == sha1($timestamp . $pass)) return ''; if ($adminsha1 == sha1($timestamp . $pass)) return '';
else return 'Error password'; else return 'Error password';
} }
@ -899,18 +902,23 @@ function adminform($name = '', $pass = '', $path = '')
</div> </div>
</body>'; </body>';
$html .= ' $html .= '
<script src="https://cdn.bootcdn.net/ajax/libs/js-sha1/0.6.0/sha1.min.js"></script>
<script> <script>
document.getElementById("password1").focus(); document.getElementById("password1").focus();
function sha1loginpass(f) { function sha1loginpass(f) {
if (f.password1.value=="") return false; if (f.password1.value=="") return false;
timestamp = new Date().getTime() + ""; try {
timestamp = timestamp.substr(0, timestamp.length-3); timestamp = new Date().getTime() + "";
f.timestamp.value = timestamp; timestamp = timestamp.substr(0, timestamp.length-3);
f.password1.value = sha1(timestamp + "" + f.password1.value); f.timestamp.value = timestamp;
return true; f.password1.value = sha1(timestamp + "" + f.password1.value);
return true;
} catch {
alert("sha1.js not loaded.");
return false;
}
} }
</script>'; </script>
<script src="https://cdn.bootcss.com/js-sha1/0.6.0/sha1.min.js"></script>';
$html .= '</html>'; $html .= '</html>';
return output($html, $statusCode); return output($html, $statusCode);
} }
@ -1406,7 +1414,7 @@ function EnvOpt($needUpdate = 0)
} }
} }
$html .= ' $html .= '
<script src="https://cdn.bootcdn.net/ajax/libs/js-sha1/0.6.0/sha1.min.js"></script> <script src="https://cdn.bootcss.com/js-sha1/0.6.0/sha1.min.js"></script>
<table> <table>
<form id="change_pass" name="change_pass" action="" method="POST" onsubmit="return changePassword(this);"> <form id="change_pass" name="change_pass" action="" method="POST" onsubmit="return changePassword(this);">
<tr> <tr>