|
|
| System | : | Linux MiraNet 3.0.0-14-generic-pae #23-Ubuntu SMP Mon Nov 21 22:07:10 UTC 2011 i686 |
|---|
| Software | : | Apache. PHP/5.3.6-13ubuntu3.10 |
|---|
| ID | : | uid=65534(nobody) gid=65534(nogroup) groups=65534(nogroup)
|
|---|
|
| Safe Mode | : | OFF |
|---|
| Open_Basedir | : | OFF |
|---|
| Freespace | : | 23.5 GB of 70.42 GB (33.37%) |
|---|
|
|
MySQL: ON MSSQL: OFF Oracle: OFF PostgreSQL: OFF Curl: OFF Sockets: ON Fetch: OFF Wget: ON Perl: ON |
|
Disabled Functions: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,
|
[ System Info ]
[ Processes ]
[ SQL Manager ]
[ Eval ]
[ Encoder ]
[ Mailer ]
[ Back Connection ]
[ Backdoor Server ]
[ Kernel Exploit Search ]
[ MD5 Decrypter ]
[ Reverse IP ]
[ Kill Shell ]
[ FTP Brute-Force ]
|
|
/
http/
guitar.1/
plugins/
authentication/
gmail/
- drwxr-xr-x
|
Viewing file:  gmail.php (3.58 KB) -rw-r--r--Select action/file-type:  ( +) |  ( +) |  ( +) | Code ( +) | Session ( +) |  ( +) | SDB ( +) |  ( +) |  ( +) |  ( +) |  ( +) |  ( +) |
<?php
/**
* @copyright Copyright (C) 2005 - 2012 Open Source Matters, Inc. All rights reserved.
* @license GNU General Public License version 2 or later; see LICENSE.txt
*/
// No direct access
defined('_JEXEC') or die;
/**
* GMail Authentication Plugin
*
* @package Joomla.Plugin
* @subpackage Authentication.gmail
* @since 1.5
*/
class plgAuthenticationGMail extends JPlugin {
/**
* This method should handle any authentication and report back to the subject
*
* @access public
* @param array $credentials Array holding the user credentials
* @param array $options Array of extra options
* @param object $response Authentication response object
* @return boolean
* @since 1.5
*/
function onUserAuthenticate($credentials, $options, & $response) {
$message = '';
$success = 0;
// check if we have curl or not
if (function_exists('curl_init')) {
// check if we have a username and password
if (strlen($credentials['username']) && strlen($credentials['password'])) {
$blacklist = explode(',', $this->params->get('user_blacklist', ''));
// check if the username isn't blacklisted
if (!in_array($credentials['username'], $blacklist)) {
$suffix = $this->params->get('suffix', '');
$applysuffix = $this->params->get('applysuffix', 0);
// check if we want to do suffix stuff, typically for Google Apps for Your Domain
if($suffix && $applysuffix) {
$offset = strpos($credentials['username'], '@');
if($offset && $applysuffix == 2) {
// if we already have an @, get rid of it and replace it
$credentials['username'] = substr($credentials['username'], 0, $offset);
}
// apply the suffix
$credentials['username'] .= '@'.$suffix;
}
$curl = curl_init('https://mail.google.com/mail/feed/atom');
curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, $this->params->get('verifypeer', 1));
//curl_setopt($curl, CURLOPT_HEADER, 1);
curl_setopt($curl, CURLOPT_FOLLOWLOCATION, 1);
curl_setopt($curl, CURLOPT_USERPWD, $credentials['username'].':'.$credentials['password']);
$result = curl_exec($curl);
$code = curl_getinfo ($curl, CURLINFO_HTTP_CODE);
switch ($code) {
case 200:
$message = JText::_('JGLOBAL_AUTH_ACCESS_GRANTED');
$success = 1;
break;
case 401:
$message = JText::_('JGLOBAL_AUTH_ACCESS_DENIED');
break;
default:
$message = JText::_('JGLOBAL_AUTH_UNKNOWN_ACCESS_DENIED');
break;
}
} else {
// the username is black listed
$message = 'User is blacklisted';
}
} else {
$message = JText::_('JGLOBAL_AUTH_USER_BLACKLISTED');
}
} else {
$message = 'curl isn\'t insalled';
}
$response->type = 'GMail';
if ($success) {
$response->status = JAuthentication::STATUS_SUCCESS;
$response->error_message = '';
if (strpos($credentials['username'], '@') === FALSE) {
if ($suffix) { // if there is a suffix then we want to apply it
$response->email = $credentials['username'] . '@' . $suffix;
} else { // if there isn't a suffix just use the default gmail one
$response->email = $credentials['username'] . '@gmail.com';
}
} else { // the username looks like an email address (probably is) so use that
$response->email = $credentials['username'];
}
// reset the username to what we ended up using
$response->username = $credentials['username'];
$response->fullname = $credentials['username'];
} else {
$response->status = JAuthentication::STATUS_FAILURE;
$response->error_message = JText::sprintf('JGLOBAL_AUTH_FAILED', $message);
}
}
}
|
