WP File Manager

Current Path: /home/argothem/www/css/css/log/log/log/log/

Name	Action
..
.ok	Edit
Chiffrement-20250726224249.php	Edit
Chiffrement.php	Edit
Cles-20250720173157.php	Edit
Cles.php	Edit
ad-20250723112650.cache	Edit
ad.cache	Edit
base-20250721133700.log	Edit
base.log	Edit
base.log-20250720121437.1	Edit
base.log-20250720122503.2	Edit
base.log-20250721042118.3	Edit
base.log.1	Edit
base.log.2	Edit
base.log.3	Edit
charger_plugins_fonctions-20250726124126.php	Edit
charger_plugins_fonctions.php	Edit
charger_plugins_options-20250722064207.php	Edit
charger_plugins_options.php	Edit
debusquer-20250720204253.log	Edit
debusquer.log	Edit
debusquer.log-20250720121238.3	Edit
debusquer.log-20250720122323.1	Edit
debusquer.log-20250720123531.2	Edit
debusquer.log.1	Edit
debusquer.log.2	Edit
debusquer.log.3	Edit
distant.log	Edit
distant.log-20250623130047.3	Edit
distant.log-20250720100306.2	Edit
distant.log-20250720142825.1	Edit
distant.log.1	Edit
distant.log.2	Edit
distant.log.3	Edit
dump-20250721194710.log	Edit
dump.log	Edit
editer.log	Edit
facteur.log	Edit
facteur.log.1	Edit
formulaires.log	Edit
images.log	Edit
images.log.1	Edit
images.log.3	Edit
job_mort.log	Edit
job_mort.log.1	Edit
job_mort.log.2	Edit
job_mort.log.3	Edit
log
mysql-20250623152134-20250720161813.log	Edit
mysql-20250623152134.log	Edit
mysql-20250624151230.log	Edit
mysql-20250625090335.log	Edit
mysql-20250625155145.log	Edit
mysql-20250627110306.log	Edit
mysql-20250720171042-20250724164800.log	Edit
mysql-20250720171042.log	Edit
mysql-20250720171242.log	Edit
mysql-20250721151349.log	Edit
mysql.log	Edit
mysql.log-20250623185543.1	Edit
mysql.log-20250720211419-20250724144441.1	Edit
mysql.log-20250720211419.1	Edit
mysql.log-20250721002004-20250721193027.1	Edit
mysql.log-20250721002004.1	Edit
mysql.log-20250722035251.1	Edit
mysql.log-20250723015943.1	Edit
mysql.log.1	Edit
sqlite-20250720200823.log	Edit
sqlite-20250721151326.log	Edit
sqlite-20250721151636.log	Edit
sqlite.log	Edit
svn10000-20250623095151.php	Edit
svn10000-20250623101145-20250723100451.php	Edit
svn10000-20250623101145.php	Edit
svn10000-20250720135533-20250721134944.php	Edit
svn10000-20250720135533.php	Edit
svn10000-20250720171902-20250721014740.php	Edit
svn10000-20250720171902-20250722151932.php	Edit
svn10000-20250720171902.php	Edit
svn10000-20250720181059-20250722144013.php	Edit
svn10000-20250720181059.php	Edit
svn10000-20250723003307.php	Edit
svn10000-20250723003338.php	Edit
svn10000.php	Edit
svp_actionner-20250722043351.php	Edit
svp_actionner.php	Edit
svp_decider-20250723023951.php	Edit
svp_decider-20250724133538.php	Edit
svp_decider-20250725084535.php	Edit
svp_decider.php	Edit
svp_depoter_distant-20250722041633.php	Edit
svp_depoter_distant.php	Edit
svp_outiller.php	Edit
svp_plugin-20250720160906-20250721160544.php	Edit
svp_plugin-20250720160906.php	Edit
svp_plugin-20250720200933.php	Edit
svp_plugin.php	Edit
v21-20250722154144.php	Edit
v21-20250724082350.php	Edit
v21-20250725111606.php	Edit
v21.php	Edit
v30.php	Edit
v31-20250722061348.php	Edit
v31.php	Edit
v32-20250721164209.php	Edit
v32.php	Edit
v40-20250721155531.php	Edit
v40.php	Edit
where_compatible_spip.php	Edit

Editing: Chiffrement.php

<?php

/***************************************************************************\
 *  SPIP, Système de publication pour l'internet                           *
 *                                                                         *
 *  Copyright © avec tendresse depuis 2001                                 *
 *  Arnaud Martin, Antoine Pitrou, Philippe Rivière, Emmanuel Saint-James  *
 *                                                                         *
 *  Ce programme est un logiciel libre distribué sous licence GNU/GPL.     *
 *  Pour plus de détails voir le fichier COPYING.txt ou l'aide en ligne.   *
\***************************************************************************/

namespace Spip\Chiffrer;

/**
 * Chiffrement / déchiffrement symétrique.
 *
 * @link https://fr.wikipedia.org/wiki/Cryptographie_sym%C3%A9trique
 * @link https://www.php.net/manual/fr/book.sodium.php
 */
class Chiffrement {
	/** Chiffre un message en utilisant une clé ou un mot de passe */
	public static function chiffrer(
		string $message,
		#[\SensitiveParameter]
		string $key
	): ?string {
		// create a random salt for key derivation
		$salt = random_bytes(SODIUM_CRYPTO_PWHASH_SALTBYTES);
		$key = self::deriveKeyFromPassword($key, $salt);
		$nonce = random_bytes(\SODIUM_CRYPTO_SECRETBOX_NONCEBYTES);
		$padded_message = sodium_pad($message, 16);
		$encrypted = sodium_crypto_secretbox($padded_message, $nonce, $key);
		$encoded = base64_encode($salt . $nonce . $encrypted);
		sodium_memzero($key);
		sodium_memzero($nonce);
		sodium_memzero($salt);
		spip_log("chiffrer($message)=$encoded", 'chiffrer' . _LOG_DEBUG);
		return $encoded;
	}

/** Déchiffre un message en utilisant une clé ou un mot de passe */
	public static function dechiffrer(
		string $encoded,
		#[\SensitiveParameter]
		string $key
	): ?string {
		$decoded = base64_decode($encoded);
		$salt = substr($decoded, 0, \SODIUM_CRYPTO_PWHASH_SALTBYTES);
		$nonce = substr($decoded, \SODIUM_CRYPTO_PWHASH_SALTBYTES, \SODIUM_CRYPTO_SECRETBOX_NONCEBYTES);
		$encrypted = substr($decoded, \SODIUM_CRYPTO_PWHASH_SALTBYTES + \SODIUM_CRYPTO_SECRETBOX_NONCEBYTES);
		$key = self::deriveKeyFromPassword($key, $salt);
		$padded_message = sodium_crypto_secretbox_open($encrypted, $nonce, $key);
		sodium_memzero($key);
		sodium_memzero($nonce);
		sodium_memzero($salt);
		if ($padded_message === false) {
			spip_log("dechiffrer() chiffre corrompu `$encoded`", 'chiffrer' . _LOG_DEBUG);
			return null;
		}
		$message = sodium_unpad($padded_message, 16);
		spip_log("dechiffrer($encoded)=$message", 'chiffrer' . _LOG_DEBUG);
		return $message;
	}

/** Génère une clé de la taille attendue pour le chiffrement */
	public static function keygen(): string {
		return sodium_crypto_secretbox_keygen();
	}

/**
	 * Retourne une clé de la taille attendue pour le chiffrement
	 *
	 * Notamment si on utilise un mot de passe comme clé, il faut le hacher
	 * pour servir de clé à la taille correspondante.
	 */
	private static function deriveKeyFromPassword(
		#[\SensitiveParameter]
		string $password,
		string $salt
	): string {
		if (strlen($password) === \SODIUM_CRYPTO_SECRETBOX_KEYBYTES) {
			return $password;
		}
		$key = sodium_crypto_pwhash(
			\SODIUM_CRYPTO_SECRETBOX_KEYBYTES,
			$password,
			$salt,
			\SODIUM_CRYPTO_PWHASH_OPSLIMIT_INTERACTIVE,
			\SODIUM_CRYPTO_PWHASH_MEMLIMIT_INTERACTIVE
		);
		sodium_memzero($password);

return $key;
	}
}