WP File Manager

Current Path: /home/argothem/www/flood/spip/Chiffrer/

Name	Action
..
Chiffrement.php	Edit
Cles.php	Edit
Password.php	Edit
SpipCles.php	Edit
dilempres[1].pdf	Edit
gazdz.html	Edit
gazdz.webp	Edit
machiavel_le_prince_essai-20250326132144-20250329131237-20250331182049-20250429034101-20250501192101-20250510162210-20250512094235-20250514202900-20250516103235-20250518112545.pdf	Edit
machiavel_le_prince_essai-20250326132144-20250329131237-20250331182049-20250429034101-20250501192101-20250510162210-20250512094235-20250514202900-20250516103235-20250521212705.pdf	Edit
machiavel_le_prince_essai-20250326132144-20250329131237-20250331182049-20250429034101-20250501192101-20250510162210-20250512094235-20250514202900-20250516103235-20250525173256.pdf	Edit
machiavel_le_prince_essai-20250326132144-20250329131237-20250331182049-20250429034101-20250501192101-20250510162210-20250512094235-20250514202900-20250519102658-20250524103120.pdf	Edit
machiavel_le_prince_essai-20250326132144-20250329131237-20250331182049-20250429034101-20250501192101-20250510162210-20250512094235-20250514202900-20250522152333-20250703172702-20250705213010.pdf	Edit
machiavel_le_prince_essai-20250326132144-20250329131237-20250331182049-20250429034101-20250501192101-20250510162210-20250512094235-20250514202900-20250522152333-20250703172702.pdf	Edit
machiavel_le_prince_essai-20250326132144-20250329131237-20250331182049-20250429034101-20250501192101-20250510162210-20250512094235-20250514202900-20250522152333.pdf	Edit
machiavel_le_prince_essai-20250326132144-20250329131237-20250331182049-20250429034101-20250501192101-20250510162210-20250512094235-20250514213104-20250516152155-20250518082609.pdf	Edit
machiavel_le_prince_essai-20250326132144-20250329131237-20250331182049-20250429034101-20250501192101-20250510162210-20250512094235-20250514213104-20250516152155.pdf	Edit
machiavel_le_prince_essai-20250326132144-20250329131237-20250331182049-20250429034101-20250501192101-20250510162210-20250512094235-20250514213104-20250519142329.pdf	Edit
machiavel_le_prince_essai-20250326132144-20250329131237-20250331182049-20250429034101-20250501192101-20250510162210-20250512094235-20250514213104-20250519202929-20250522173120.pdf	Edit
machiavel_le_prince_essai-20250326132144-20250329131237-20250331182049-20250429034101-20250501192101-20250510162210-20250512094235-20250518152733-20250521012354-20250523043144.pdf	Edit
machiavel_le_prince_essai-20250326132144-20250329131237-20250331182049-20250429034101-20250501192101-20250510162210-20250512094235-20250518152733-20250523152800-20250525212645.pdf	Edit
machiavel_le_prince_essai-20250326132144-20250329131237-20250331182049-20250429034101-20250501192101-20250510162210-20250512094235-20250518152733-20250523152800-20250702053118-20250704085326.pdf	Edit
machiavel_le_prince_essai-20250326132144-20250329131237-20250331182049-20250429034101-20250501192101-20250510162210-20250512094235-20250518152733-20250523152800-20250702053118.pdf	Edit
machiavel_le_prince_essai-20250326132144-20250329131237-20250331182049-20250429034101-20250501192101-20250510162210-20250512094235-20250518152733-20250523152800.pdf	Edit
machiavel_le_prince_essai-20250326132144-20250329131237-20250331182049-20250429034101-20250501192101-20250510162210-20250512094235-20250518152733-20250524142712-20250703082209-20250705110122.pdf	Edit
machiavel_le_prince_essai-20250326132144-20250329131237-20250331182049-20250429034101-20250501192101-20250510162210-20250512094235-20250518152733-20250524142712-20250703082209.pdf	Edit
machiavel_le_prince_essai-20250326132144-20250329131237-20250331182049-20250429034101-20250501192101-20250510162210-20250512094235-20250518152733-20250524142712-20250818231726.pdf	Edit
machiavel_le_prince_essai-20250326132144-20250329131237-20250331182049-20250429034101-20250501192101-20250510162210-20250512094235-20250518152733-20250524142712.pdf	Edit
machiavel_le_prince_essai-20250326132144-20250329131237-20250331182049-20250429034101-20250501192101-20250510162210-20250512094235-20250519162311-20250521202637-20250524052556.pdf	Edit
machiavel_le_prince_essai-20250326132144-20250329131237-20250331182049-20250429034101-20250501192101-20250510162210-20250512094235-20250522173236.pdf	Edit
machiavel_le_prince_essai-20250326132144-20250329131237-20250331182049-20250429034101-20250501192101-20250510162210-20250512132327-20250514222531-20250519202453.pdf	Edit
machiavel_le_prince_essai-20250326132144-20250329131237-20250331182049-20250429034101-20250501192101.pdf	Edit
machiavel_le_prince_essai-20250326132144-20250329131237.pdf	Edit
machiavel_le_prince_essai-20250326132144-20250329165301-20250430092259.pdf	Edit
machiavel_le_prince_essai-20250326132144-20250329165301.pdf	Edit
machiavel_le_prince_essai-20250326132144-20250330232732-20250430120451.pdf	Edit
machiavel_le_prince_essai-20250326132144-20250330232732.pdf	Edit
machiavel_le_prince_essai-20250326132144.pdf	Edit
machiavel_le_prince_essai-20250326151448-20250330000929.pdf	Edit
machiavel_le_prince_essai-20250326151448-20250330013548.pdf	Edit
machiavel_le_prince_essai-20250326151448-20250330112120.pdf	Edit
machiavel_le_prince_essai-20250326151448.pdf	Edit
machiavel_le_prince_essai-20250327085742-20250413231008.pdf	Edit
machiavel_le_prince_essai-20250327085742.pdf	Edit
machiavel_le_prince_essai-20250327163641.pdf	Edit
machiavel_le_prince_essai-20250328052405-20250330142913.pdf	Edit
machiavel_le_prince_essai-20250329151841-20250413050125-20250430091223.pdf	Edit
machiavel_le_prince_essai-20250329151841-20250413050125.pdf	Edit
machiavel_le_prince_essai-20250329151841.pdf	Edit
machiavel_le_prince_essai-20250329152821-20250413212115.pdf	Edit
machiavel_le_prince_essai-20250329152821.pdf	Edit
machiavel_le_prince_essai-20250329153441-20250413194944-20250430052035.pdf	Edit
machiavel_le_prince_essai-20250329153441-20250413194944.pdf	Edit
machiavel_le_prince_essai-20250329153441.pdf	Edit
machiavel_le_prince_essai-20250329153705-20250413102128-20250430065331.pdf	Edit
machiavel_le_prince_essai-20250329153705-20250413102128.pdf	Edit
machiavel_le_prince_essai-20250329153705.pdf	Edit
machiavel_le_prince_essai-20250329165345-20250413024432.pdf	Edit
machiavel_le_prince_essai-20250329165345.pdf	Edit
machiavel_le_prince_essai-20250330005629.pdf	Edit
machiavel_le_prince_essai-20250330011245-20250415170920.pdf	Edit
machiavel_le_prince_essai-20250330011245.pdf	Edit
machiavel_le_prince_essai-20250330111452-20250413175320-20250430080615.pdf	Edit
machiavel_le_prince_essai-20250330111452-20250413175320.pdf	Edit
machiavel_le_prince_essai-20250330111452.pdf	Edit
machiavel_le_prince_essai-20250330225856-20250413123300-20250501002905.pdf	Edit
machiavel_le_prince_essai-20250330225856-20250413123300.pdf	Edit
machiavel_le_prince_essai-20250330225856.pdf	Edit
machiavel_le_prince_essai-20250401022416.pdf	Edit
machiavel_le_prince_essai.pdf	Edit

Editing: SpipCles.php

<?php

/***************************************************************************\
 *  SPIP, Système de publication pour l'internet                           *
 *                                                                         *
 *  Copyright © avec tendresse depuis 2001                                 *
 *  Arnaud Martin, Antoine Pitrou, Philippe Rivière, Emmanuel Saint-James  *
 *                                                                         *
 *  Ce programme est un logiciel libre distribué sous licence GNU/GPL.     *
 *  Pour plus de détails voir le fichier COPYING.txt ou l'aide en ligne.   *
\***************************************************************************/

namespace Spip\Chiffrer;

/** Gestion des clés d’authentification / chiffrement de SPIP */
final class SpipCles {
	private static array $instances = [];

private string $file = _DIR_ETC . 'cles.php';
	private Cles $cles;

public static function instance(string $file = ''): self {
		if (empty(self::$instances[$file])) {
			self::$instances[$file] = new self($file);
		}
		return self::$instances[$file];
	}

/**
	 * Retourne le secret du site (shorthand)
	 * @uses self::getSecretSite()
	 */
	public static function secret_du_site(): ?string {
		return (self::instance())->getSecretSite();
	}

private function __construct(string $file = '') {
		if ($file) {
			$this->file = $file;
		}
		$this->cles = new Cles($this->read());
	}

/**
	 * Renvoyer le secret du site
	 *
	 * Le secret du site doit rester aussi secret que possible, et est eternel
	 * On ne doit pas l'exporter
	 *
	 * Le secret est partagé entre une clé disque et une clé bdd
	 *
	 * @return string
	 */
	public function getSecretSite(bool $autoInit = true): ?string {
		$key = $this->getKey('secret_du_site', $autoInit);
		$meta = $this->getMetaKey('secret_du_site', $autoInit);
		// conserve la même longeur.
		return $key ^ $meta;
	}

/** Renvoyer le secret des authentifications */
	public function getSecretAuth(bool $autoInit = false): ?string {
		return $this->getKey('secret_des_auth', $autoInit);
	}
	public function save(): bool {
		return ecrire_fichier_securise($this->file, $this->cles->toJson());
	}

/**
	 * Fournir une sauvegarde chiffree des cles (a l'aide d'une autre clé, comme le pass d'un auteur)
	 *
	 * @param string $withKey Clé de chiffrage de la sauvegarde
	 * @return string Contenu de la sauvegarde chiffrée générée
	 */
	public function backup(
		#[\SensitiveParameter]
		string $withKey
	): string {
		if (count($this->cles)) {
			return Chiffrement::chiffrer($this->cles->toJson(), $withKey);
		}
		return '';
	}

/**
	 * Restaurer les cles manquantes depuis une sauvegarde chiffree des cles
	 * (si la sauvegarde est bien valide)
	 *
	 * @param string $backup Sauvegarde chiffrée (générée par backup())
	 * @param int $id_auteur
	 * @param string $pass
	 * @return void
	 */
	public function restore(
		string $backup,
		#[\SensitiveParameter]
		string $password_clair,
		#[\SensitiveParameter]
		string $password_hash,
		int $id_auteur
	): bool {
		if (empty($backup)) {
			return false;
		}

$sauvegarde = Chiffrement::dechiffrer($backup, $password_clair);
		$json = json_decode($sauvegarde, true);
		if (!$json) {
			return false;
		}

// cela semble une sauvegarde valide
		$cles_potentielles = array_map('base64_decode', $json);

// il faut faire une double verif sur secret_des_auth
		// pour s'assurer qu'elle permet bien de decrypter le pass de l'auteur qui fournit la sauvegarde
		// et par extension tous les passwords
		if (!empty($cles_potentielles['secret_des_auth'])) {
			if (!Password::verifier($password_clair, $password_hash, $cles_potentielles['secret_des_auth'])) {
				spip_log("Restauration de la cle `secret_des_auth` par id_auteur $id_auteur erronnee, on ignore", 'chiffrer' . _LOG_INFO_IMPORTANTE);
				unset($cles_potentielles['secret_des_auth']);
			}
		}

// on merge les cles pour recuperer les cles manquantes
		$restauration = false;
		foreach ($cles_potentielles as $name => $key) {
			if (!$this->cles->has($name)) {
				$this->cles->set($name, $key);
				spip_log("Restauration de la cle $name par id_auteur $id_auteur", 'chiffrer' . _LOG_INFO_IMPORTANTE);
				$restauration = true;
			}
		}
		return $restauration;
	}

private function getKey(string $name, bool $autoInit): ?string {
		if ($this->cles->has($name)) {
			return $this->cles->get($name);
		}
		if ($autoInit) {
			$this->cles->generate($name);
			$this->save();
			return $this->cles->get($name);
		}
		return null;
	}

private function getMetaKey(string $name, bool $autoInit = true): ?string {
		if (!isset($GLOBALS['meta'][$name])) {
			include_spip('base/abstract_sql');
			$GLOBALS['meta'][$name] = sql_getfetsel('valeur', 'spip_meta', 'nom = ' . sql_quote($name, '', 'string'));
		}
		$key = base64_decode($GLOBALS['meta'][$name] ?? '');
		if (strlen($key) === \SODIUM_CRYPTO_SECRETBOX_KEYBYTES) {
			return $key;
		}
		if (!$autoInit) {
			return null;
		}
		$key = Chiffrement::keygen();
		ecrire_meta($name, base64_encode($key), 'non');
		lire_metas(); // au cas ou ecrire_meta() ne fonctionne pas

return $key;
	}

private function read(): array {
		lire_fichier_securise($this->file, $json);
		if (
			$json
			and $json = \json_decode($json, true)
			and is_array($json)
		) {
			return array_map('base64_decode', $json);
		}
		return [];
	}
}