Gecko [ v3.cesa.co.za ]

Name	Size	Permission	Date
Charsets	[ DIR ]	drwxr-xr-x	2025-06-07 11:58
Command	[ DIR ]	drwxr-xr-x	2025-06-07 11:58
Config	[ DIR ]	drwxr-xr-x	2025-06-07 11:58
ConfigStorage	[ DIR ]	drwxr-xr-x	2025-06-07 11:58
Controllers	[ DIR ]	drwxr-xr-x	2025-06-07 11:58
Crypto	[ DIR ]	drwxr-xr-x	2025-06-07 11:58
Database	[ DIR ]	drwxr-xr-x	2025-06-07 11:58
Dbal	[ DIR ]	drwxr-xr-x	2025-06-07 11:58
Display	[ DIR ]	drwxr-xr-x	2025-06-07 11:58
Engines	[ DIR ]	drwxr-xr-x	2025-06-07 11:58
Exceptions	[ DIR ]	drwxr-xr-x	2025-06-07 11:58
Export	[ DIR ]	drwxr-xr-x	2025-06-07 11:58
Gis	[ DIR ]	drwxr-xr-x	2025-06-07 11:58
Html	[ DIR ]	drwxr-xr-x	2025-06-07 11:58
Http	[ DIR ]	drwxr-xr-x	2025-06-07 11:58
Image	[ DIR ]	drwxr-xr-x	2025-06-07 11:58
Import	[ DIR ]	drwxr-xr-x	2025-06-07 11:58
Navigation	[ DIR ]	drwxr-xr-x	2025-06-07 11:58
Partitioning	[ DIR ]	drwxr-xr-x	2025-06-07 11:58
Plugins	[ DIR ]	drwxr-xr-x	2025-06-07 11:58
Properties	[ DIR ]	drwxr-xr-x	2025-06-07 11:58
Providers	[ DIR ]	drwxr-xr-x	2025-06-07 11:58
Query	[ DIR ]	drwxr-xr-x	2025-06-07 11:58
Server	[ DIR ]	drwxr-xr-x	2025-06-07 11:58
Setup	[ DIR ]	drwxr-xr-x	2025-06-07 11:58
Table	[ DIR ]	drwxr-xr-x	2025-06-07 11:58
Twig	[ DIR ]	drwxr-xr-x	2025-06-07 11:58
Utils	[ DIR ]	drwxr-xr-x	2025-06-07 11:58
WebAuthn	[ DIR ]	drwxr-xr-x	2025-06-07 11:58
Advisor.php	12.32 KB	-rw-r--r--	2023-02-07 21:35
Bookmark.php	9.19 KB	-rw-r--r--	2023-02-07 21:35
BrowseForeigners.php	10.63 KB	-rw-r--r--	2023-02-07 21:35
Cache.php	1.5 KB	-rw-r--r--	2023-02-07 21:35
Charsets.php	6.82 KB	-rw-r--r--	2023-02-07 21:35
CheckUserPrivileges.php	11.3 KB	-rw-r--r--	2023-02-07 21:35
Common.php	19.4 KB	-rw-r--r--	2023-02-07 21:35
Config.php	41.65 KB	-rw-r--r--	2023-02-07 21:35
Console.php	3.25 KB	-rw-r--r--	2023-02-07 21:35
Core.php	28.91 KB	-rw-r--r--	2023-02-07 21:35
CreateAddField.php	15.83 KB	-rw-r--r--	2023-02-07 21:35
DatabaseInterface.php	71.73 KB	-rw-r--r--	2023-02-07 21:35
DbTableExists.php	2.86 KB	-rw-r--r--	2023-02-07 21:35
Encoding.php	8.41 KB	-rw-r--r--	2023-02-07 21:35
Error.php	13.63 KB	-rw-r--r--	2023-02-07 21:35
ErrorHandler.php	18.63 KB	-rw-r--r--	2023-02-07 21:35
ErrorReport.php	8.99 KB	-rw-r--r--	2023-02-07 21:35
Export.php	45.7 KB	-rw-r--r--	2023-02-07 21:35
FieldMetadata.php	11.11 KB	-rw-r--r--	2023-02-07 21:35
File.php	19.75 KB	-rw-r--r--	2023-02-07 21:35
FileListing.php	2.88 KB	-rw-r--r--	2023-02-07 21:35
FlashMessages.php	1.22 KB	-rw-r--r--	2023-02-07 21:35
Font.php	5.58 KB	-rw-r--r--	2023-02-07 21:35
Footer.php	8.06 KB	-rw-r--r--	2023-02-07 21:35
Git.php	18 KB	-rw-r--r--	2023-02-07 21:35
Header.php	20 KB	-rw-r--r--	2023-02-07 21:35
Import.php	48.72 KB	-rw-r--r--	2023-02-07 21:35
Index.php	14.83 KB	-rw-r--r--	2023-02-07 21:35
IndexColumn.php	4.75 KB	-rw-r--r--	2023-02-07 21:35
InsertEdit.php	89.07 KB	-rw-r--r--	2025-04-08 15:25
InternalRelations.php	17.31 KB	-rw-r--r--	2023-02-07 21:35
IpAllowDeny.php	9.13 KB	-rw-r--r--	2023-02-07 21:35
Language.php	4.47 KB	-rw-r--r--	2023-02-07 21:35
LanguageManager.php	22.74 KB	-rw-r--r--	2023-02-07 21:35
Linter.php	4.99 KB	-rw-r--r--	2023-02-07 21:35
ListAbstract.php	1.67 KB	-rw-r--r--	2023-02-07 21:35
ListDatabase.php	4.11 KB	-rw-r--r--	2023-02-07 21:35
Logging.php	2.69 KB	-rw-r--r--	2023-02-07 21:35
Menu.php	20.4 KB	-rw-r--r--	2023-02-07 21:35
Message.php	18.68 KB	-rw-r--r--	2023-02-07 21:35
Mime.php	918 B	-rw-r--r--	2023-02-07 21:35
Normalization.php	41.53 KB	-rw-r--r--	2023-02-07 21:35
OpenDocument.php	8.62 KB	-rw-r--r--	2023-02-07 21:35
Operations.php	35.11 KB	-rw-r--r--	2023-02-07 21:35
OutputBuffering.php	4.1 KB	-rw-r--r--	2023-02-07 21:35
ParseAnalyze.php	2.34 KB	-rw-r--r--	2023-02-07 21:35
Pdf.php	4.17 KB	-rw-r--r--	2023-02-07 21:35
Plugins.php	21.83 KB	-rw-r--r--	2023-02-07 21:35
Profiling.php	2.16 KB	-rw-r--r--	2023-02-07 21:35
RecentFavoriteTable.php	11.44 KB	-rw-r--r--	2023-02-07 21:35
Replication.php	4.81 KB	-rw-r--r--	2023-02-07 21:35
ReplicationGui.php	21.24 KB	-rw-r--r--	2023-02-07 21:35
ReplicationInfo.php	4.79 KB	-rw-r--r--	2023-02-07 21:35
ResponseRenderer.php	13.5 KB	-rw-r--r--	2023-02-07 21:35
Routing.php	6.55 KB	-rw-r--r--	2023-02-07 21:35
Sanitize.php	11.98 KB	-rw-r--r--	2023-02-07 21:35
SavedSearches.php	11.33 KB	-rw-r--r--	2023-02-07 21:35
Scripts.php	3.74 KB	-rw-r--r--	2023-02-07 21:35
Session.php	8.16 KB	-rw-r--r--	2023-02-07 21:35
Sql.php	64.01 KB	-rw-r--r--	2023-02-07 21:35
SqlQueryForm.php	6.74 KB	-rw-r--r--	2023-02-07 21:35
StorageEngine.php	15.71 KB	-rw-r--r--	2023-02-07 21:35
SystemDatabase.php	3.98 KB	-rw-r--r--	2023-02-07 21:35
Table.php	90.33 KB	-rw-r--r--	2023-02-07 21:35
Template.php	4.5 KB	-rw-r--r--	2023-02-07 21:35
Theme.php	7.32 KB	-rw-r--r--	2023-02-07 21:35
ThemeManager.php	7 KB	-rw-r--r--	2023-02-07 21:35
Tracker.php	30.34 KB	-rw-r--r--	2023-02-07 21:35
Tracking.php	36.11 KB	-rw-r--r--	2023-02-07 21:35
Transformations.php	16.31 KB	-rw-r--r--	2023-02-07 21:35
TwoFactor.php	7.5 KB	-rw-r--r--	2025-04-08 15:25
Types.php	25.85 KB	-rw-r--r--	2023-02-07 21:35
Url.php	10.61 KB	-rw-r--r--	2023-02-07 21:35
UrlRedirector.php	1.74 KB	-rw-r--r--	2023-02-07 21:35
UserPassword.php	6.86 KB	-rw-r--r--	2023-02-07 21:35
UserPreferences.php	10.49 KB	-rw-r--r--	2023-02-07 21:35
Util.php	86.45 KB	-rw-r--r--	2023-02-07 21:35
Version.php	556 B	-rw-r--r--	2023-02-07 21:35
VersionInformation.php	7.3 KB	-rw-r--r--	2023-02-07 21:35
ZipExtension.php	10.33 KB	-rw-r--r--	2023-02-07 21:35

Rename

<?php
/**
 * Two authentication factor handling
 */

declare(strict_types=1);

namespace PhpMyAdmin;

use BaconQrCode\Renderer\ImageRenderer;
use CodeLts\U2F\U2FServer\U2FServer;
use PhpMyAdmin\ConfigStorage\Relation;
use PhpMyAdmin\Plugins\TwoFactor\Application;
use PhpMyAdmin\Plugins\TwoFactor\Invalid;
use PhpMyAdmin\Plugins\TwoFactor\Key;
use PhpMyAdmin\Plugins\TwoFactorPlugin;
use PragmaRX\Google2FAQRCode\Google2FA;
use XMLWriter;

use function array_merge;
use function class_exists;
use function extension_loaded;
use function in_array;
use function is_array;
use function is_string;
use function ucfirst;

/**
 * Two factor authentication wrapper class
 */
class TwoFactor
{
    /** @var string */
    public $user;

/**
     * @var array
     * @psalm-var array{backend: string, settings: mixed[], type?: 'session'|'db'}
     */
    public $config;

/** @var bool */
    protected $writable;

/** @var TwoFactorPlugin */
    protected $backend;

/** @var array */
    protected $available;

/** @var UserPreferences */
    private $userPreferences;

/**
     * Creates new TwoFactor object
     *
     * @param string $user User name
     */
    public function __construct($user)
    {
        global $dbi;

(new Relation($dbi))->initRelationParamsCache();

$this->userPreferences = new UserPreferences();
        $this->user = $user;
        $this->available = $this->getAvailableBackends();
        $this->config = $this->readConfig();
        $this->writable = ($this->config['type'] === 'db');
        $this->backend = $this->getBackendForCurrentUser();
    }

/**
     * Reads the configuration
     *
     * @psalm-return array{backend: string, settings: mixed[], type: 'session'|'db'}
     */
    public function readConfig(): array
    {
        $result = [];
        $config = $this->userPreferences->load();
        if (isset($config['config_data']['2fa']) && is_array($config['config_data']['2fa'])) {
            $result = $config['config_data']['2fa'];
        }

$backend = '';
        if (isset($result['backend']) && is_string($result['backend'])) {
            $backend = $result['backend'];
        }

$settings = [];
        if (isset($result['settings']) && is_array($result['settings'])) {
            $settings = $result['settings'];
        }

return ['backend' => $backend, 'settings' => $settings, 'type' => $config['type']];
    }

public function isWritable(): bool
    {
        return $this->writable;
    }

public function getBackend(): TwoFactorPlugin
    {
        return $this->backend;
    }

/**
     * @return array
     */
    public function getAvailable(): array
    {
        return $this->available;
    }

public function showSubmit(): bool
    {
        $backend = $this->backend;

return $backend::$showSubmit;
    }

/**
     * Returns list of available backends
     *
     * @return array
     */
    public function getAvailableBackends()
    {
        $result = [];
        if ($GLOBALS['cfg']['DBG']['simple2fa']) {
            $result[] = 'simple';
        }

if (
            class_exists(Google2FA::class)
            && class_exists(ImageRenderer::class)
            && (class_exists(XMLWriter::class) || extension_loaded('imagick'))
        ) {
            $result[] = 'application';
        }

$result[] = 'WebAuthn';

if (class_exists(U2FServer::class)) {
            $result[] = 'key';
        }

return $result;
    }

/**
     * Returns list of missing dependencies
     *
     * @return array
     */
    public function getMissingDeps()
    {
        $result = [];
        if (! class_exists(Google2FA::class)) {
            $result[] = [
                'class' => Application::getName(),
                'dep' => 'php-pragmarx-google2fa-qrcode',
            ];
        }

if (! class_exists(ImageRenderer::class)) {
            $result[] = [
                'class' => Application::getName(),
                'dep' => 'php-bacon-qr-code',
            ];
        }

if (! class_exists(U2FServer::class)) {
            $result[] = [
                'class' => Key::getName(),
                'dep' => 'php-code-lts-u2f-php-server',
            ];
        }

return $result;
    }

/**
     * Returns class name for given name
     *
     * @param string $name Backend name
     *
     * @return string
     * @psalm-return class-string
     */
    public function getBackendClass($name)
    {
        $result = TwoFactorPlugin::class;
        if (in_array($name, $this->available)) {
            /** @psalm-var class-string $result */
            $result = 'PhpMyAdmin\\Plugins\\TwoFactor\\' . ucfirst($name);
        } elseif (! empty($name)) {
            $result = Invalid::class;
        }

return $result;
    }

/**
     * Returns backend for current user
     *
     * @return TwoFactorPlugin
     */
    public function getBackendForCurrentUser()
    {
        $name = $this->getBackendClass($this->config['backend']);

return new $name($this);
    }

/**
     * Checks authentication, returns true on success
     *
     * @param bool $skipSession Skip session cache
     */
    public function check($skipSession = false): bool
    {
        if ($skipSession) {
            return $this->backend->check();
        }

if (empty($_SESSION['two_factor_check'])) {
            $_SESSION['two_factor_check'] = $this->backend->check();
        }

return (bool) $_SESSION['two_factor_check'];
    }

/**
     * Renders user interface to enter two-factor authentication
     *
     * @return string HTML code
     */
    public function render()
    {
        return $this->backend->getError() . $this->backend->render();
    }

/**
     * Renders user interface to configure two-factor authentication
     *
     * @return string HTML code
     */
    public function setup()
    {
        return $this->backend->getError() . $this->backend->setup();
    }

/**
     * Saves current configuration.
     *
     * @return true|Message
     */
    public function save()
    {
        return $this->userPreferences->persistOption('2fa', $this->config, null);
    }

/**
     * Changes two-factor authentication settings
     *
     * The object might stay in partially changed setup
     * if configuration fails.
     *
     * @param string $name Backend name
     */
    public function configure($name): bool
    {
        $this->config = ['backend' => $name, 'settings' => []];
        if ($name === '') {
            $cls = $this->getBackendClass($name);
            $this->backend = new $cls($this);
        } else {
            if (! in_array($name, $this->available)) {
                return false;
            }

$cls = $this->getBackendClass($name);
            $this->backend = new $cls($this);
            if (! $this->backend->configure()) {
                return false;
            }
        }

$result = $this->save();
        if ($result !== true) {
            echo $result->getDisplay();
        }

return true;
    }

/**
     * Returns array with all available backends
     *
     * @return array
     */
    public function getAllBackends()
    {
        $all = array_merge([''], $this->available);
        $backends = [];
        foreach ($all as $name) {
            $cls = $this->getBackendClass($name);
            $backends[] = [
                'id' => $cls::$id,
                'name' => $cls::getName(),
                'description' => $cls::getDescription(),
            ];
        }

return $backends;
    }
}