┌────────────────────────────────┐ │ ░░░ ░░▓ ░▓▓ ███ ▓▓░ ▓░░ │ │ ~ M O O N ~ │ └────────────────────────────────┘
prd-web-01.centraldc.gr
LOCATION:
/var/www/html/graviera-pro/wp-content/plugins/fluentform/app/Helpers
☗ ROOT
↻ REFRESH
✎ EDIT FILE
EDITING: Protector.php
<?php namespace FluentForm\App\Helpers; class Protector { /** * Get the salt for the encryption and decryption. */ public static function getSalt() { $salt = get_option('_fluentform_security_salt'); if (!$salt) { $salt = wp_generate_password(); update_option('_fluentform_security_salt', $salt, 'no'); } return $salt; } /** * Encryp a text using a predefined salt. * * @param string $text * * @return string $text */ public static function encrypt($text) { $key = static::getSalt(); $cipher = 'AES-128-CBC'; $ivlen = openssl_cipher_iv_length($cipher); $iv = openssl_random_pseudo_bytes($ivlen); $ciphertext_raw = openssl_encrypt($text, $cipher, $key, $options = OPENSSL_RAW_DATA, $iv); $hmac = hash_hmac('sha256', $iv . $ciphertext_raw, $key, $as_binary = true); return base64_encode($iv . $hmac . $ciphertext_raw); } /** * Decrypt a text using a predefined salt. * * @param string $text * * @return string $text */ public static function decrypt($text) { $key = static::getSalt(); $c = base64_decode($text, true); $cipher = 'AES-128-CBC'; $ivlen = openssl_cipher_iv_length($cipher); $sha2len = 32; if ($c === false || strlen($c) < $ivlen + $sha2len) { return null; } $iv = substr($c, 0, $ivlen); $hmac = substr($c, $ivlen, $sha2len); $ciphertext_raw = substr($c, $ivlen + $sha2len); // Verify with current HMAC (IV + ciphertext) $calcmac = hash_hmac('sha256', $iv . $ciphertext_raw, $key, $as_binary = true); if (!hash_equals($hmac, $calcmac)) { // Fallback: verify with legacy HMAC (ciphertext only) for tokens generated before v6.2.0 IV authentication fix. if (!apply_filters('fluentform/allow_legacy_token_decrypt', false)) { return null; } $legacymac = hash_hmac('sha256', $ciphertext_raw, $key, $as_binary = true); if (!hash_equals($hmac, $legacymac)) { return null; } } $original_plaintext = openssl_decrypt($ciphertext_raw, $cipher, $key, $options = OPENSSL_RAW_DATA, $iv); return $original_plaintext !== false ? $original_plaintext : null; } }
CANCEL
Name
Type
Size
Modified
Actions
↩ ..
DIR
—
—
📁 Traits/
DIR
—
2026-05-20 08:40
📄 Helper.php
PHP
48.4 KB
2026-05-20 08:40
EDIT
📄 IntegrationManagerHelper.php
PHP
4 KB
2026-05-20 08:40
EDIT
📄 Protector.php
PHP
2.4 KB
2026-05-20 08:40
EDIT
📄 Str.php
PHP
2.7 KB
2026-05-20 08:40
EDIT