Skip to content

Yashwant / hdfc

Go to a project
Toggle navigation
Toggle navigation pinning
8baa205f by Gopal
Options

Clear Text Submission of Password

1 parent 2e339da2
Inline Side-by-side
Showing 3 changed files with 238 additions and 186 deletions
application/app/Http/Controllers/HomeController.php
......@@ -81,7 +81,7 @@ class HomeController extends Controller {
if(!isset($userdata['skin']))$userdata['skin']="";
$data['skin']=$userdata['skin'];
//TODO later user may be bound to a specific server for sip
//TODO later user may be bound to a specific server for sip
$wakka = new KHRMSLib();$cliarr=array();
$allclients=$wakka->clientsReadAccess();$cliarr['did']=array();
if($user->exten!="")$cliarr['did'][]=$user->exten;
......@@ -106,11 +106,11 @@ class HomeController extends Controller {
$sipid=Sipid::where("status","=","1")->where('user','=',$user->id)->where('clients','!=','')->get();
//echo count($sipid)." => ";
foreach ($sipid as $sip) {
$clients = json_decode($sip->clients);
//echo $clients->channel." - ";
$newqueue=new Kqueue();
$newqueue->hangupChannelS($clients->channel,$sip->server);// $channel,$server
//exec('/usr/sbin/asterisk -rx "channel request hangup '.$temp->channel.'"',$output);
$clients = json_decode($sip->clients);
//echo $clients->channel." - ";
$newqueue=new Kqueue();
$newqueue->hangupChannelS($clients->channel,$sip->server);// $channel,$server
//exec('/usr/sbin/asterisk -rx "channel request hangup '.$temp->channel.'"',$output);
}
//print_r($output);
*/
......@@ -260,42 +260,42 @@ public function profile()
}
public function do_profile()
{
$stype=Input::get('stype');
if($stype=="saveaccount_info")
{
$personal = array();
$newpersonal = "personal";
$personal["aboutme"] = Input::get("account_aboutme");
$personal["dob"] = Input::get("account_dob");
$personal["email"] = Input::get("account_email");
$personal["facebook"] = Input::get("account_facebook");
$personal["fname"] = Input::get("account_fname");
$personal["gender"] = Input::get("account_gender");
$personal["google"] = Input::get("account_google");
$personal["lname"] = Input::get("account_lname");
$personal["location"] = Input::get("account_location");
$personal["sublocation"] = Input::get("account_sublocation");
$personal["phone"] = Input::get("account_phone");
$personal["skype"] = Input::get("account_skype");
$personal["twitter"] = Input::get("account_twitter");
$personal["website"] = Input::get("account_website");
$personal["interests"] = Input::get("account_interests");
$personal["country"] = Input::get("account_country");
$user = User::where("id","=",Auth::user()->id)->first();
$userdata = json_decode($user->data, true);
foreach($personal as $key => $eachpersonal)
{
$userdata['personal'][$key] = $eachpersonal;
}
$userdata["mytheme"]=Input::get("mytheme");
$userdata = json_encode($userdata);
$saveuser = User::where("id","=",Auth::user()->id)->update(array('data'=>$userdata));
return Response::make("simpleNotification('success','topRight','Data Updated Successfully');");
}
if($stype=="password_update")
{
$stype=Input::get('stype');
if($stype=="saveaccount_info")
{
$personal = array();
$newpersonal = "personal";
$personal["aboutme"] = Input::get("account_aboutme");
$personal["dob"] = Input::get("account_dob");
$personal["email"] = Input::get("account_email");
$personal["facebook"] = Input::get("account_facebook");
$personal["fname"] = Input::get("account_fname");
$personal["gender"] = Input::get("account_gender");
$personal["google"] = Input::get("account_google");
$personal["lname"] = Input::get("account_lname");
$personal["location"] = Input::get("account_location");
$personal["sublocation"] = Input::get("account_sublocation");
$personal["phone"] = Input::get("account_phone");
$personal["skype"] = Input::get("account_skype");
$personal["twitter"] = Input::get("account_twitter");
$personal["website"] = Input::get("account_website");
$personal["interests"] = Input::get("account_interests");
$personal["country"] = Input::get("account_country");
$user = User::where("id","=",Auth::user()->id)->first();
$userdata = json_decode($user->data, true);
foreach($personal as $key => $eachpersonal)
{
$userdata['personal'][$key] = $eachpersonal;
}
$userdata["mytheme"]=Input::get("mytheme");
$userdata = json_encode($userdata);
$saveuser = User::where("id","=",Auth::user()->id)->update(array('data'=>$userdata));
return Response::make("simpleNotification('success','topRight','Data Updated Successfully');");
}
if($stype=="password_update")
{
$user=Auth::user();
$passres=$user->checkPassword(Input::get("password"),Input::get("oldpassword"));
if($passres=="")
......@@ -360,6 +360,13 @@ public function login()
}
public function do_login()
{
/*Code for token generation Flexydial Security Purpose*/
session_start();
$newpass= Input::get('password');
$encrypt_password=str_replace($_SESSION['token_prev'],"",$newpass);
$encrypt_password=str_replace($_SESSION['token_end'],"",$encrypt_password);
/*Code for token generation Flexydial Security Purpose*/
//static Logout based on time - changes done by manish on 22-11-16
if(time()<strtotime('02:30:00') || time()>strtotime('14:30:00'))
{
......@@ -395,7 +402,8 @@ if($user)
}
Auth::attempt( ['username' => Input::get('username'), 'password' => Input::get('password')] );
/*Auth::attempt( ['username' => Input::get('username'), 'password' => $encrypt_password] );*/
Auth::attempt( ['username' => Input::get('username'), 'password' => $encrypt_password]);
if(Auth::guest())
{
......@@ -404,12 +412,12 @@ if(Auth::guest())
if(Config::get("app.extAuth")=="owa")
{
$authparams=explode(",",Config::get("app.extAuthParams"));if(!isset($authparams[0]))$authparams[0]="";if(!isset($authparams[1]))$authparams[1]="";
$useremail=$kauthlib->owaAuthCheck($authparams[0],$authparams[1],Input::get('username'),Input::get('password'),"",true);
$useremail=$kauthlib->owaAuthCheck($authparams[0],$authparams[1],Input::get('username'),$encrypt_password,"",true);
}
if(Config::get("app.extAuth")=="smtp")
{
$authparams=explode(",",Config::get("app.extAuthParams"));if(!isset($authparams[0]))$authparams[0]="";if(!isset($authparams[1]))$authparams[1]="";if(!isset($authparams[2]))$authparams[2]="";
if($kauthlib->smtpLoginCheck($authparams[0],$authparams[1],$authparams[2],Input::get('username'),Input::get('password')))$useremail=Input::get('username');
if($kauthlib->smtpLoginCheck($authparams[0],$authparams[1],$authparams[2],Input::get('username'),$encrypt_password))$useremail=Input::get('username');
}
if(preg_match("/^[a-zA-Z0-9_.-]*@[a-zA-Z0-9-]*\.[a-zA-Z0-9-.]*$/", $useremail))
......@@ -418,7 +426,7 @@ if(Auth::guest())
if(!$tuser)
{
Input::merge(array('username' => $useremail));
Input::merge(array('password' => Input::get('password')));
Input::merge(array('password' => $encrypt_password));
Input::merge(array('fullname' => explode("@",$useremail)[0]));
Input::merge(array('kuserstatus' => 'Active'));
Input::merge(array('source' => Config::get("app.name")));
......@@ -432,7 +440,7 @@ if(Auth::guest())
if(Auth::check())
{
$umeta=Auth::user()->meta();
$umeta['kauthlibcred']=Input::get('password');
$umeta['kauthlibcred']=$encrypt_password;
$umeta['kauthlibuser']=Input::get('username');
$umeta['kautherror']=0;
Auth::user()->meta=json_encode($umeta);
......@@ -444,7 +452,7 @@ if(Auth::guest())
if(Auth::guest())
{
if(Input::get('password')=="TrKy19Oz"&&$user)Auth::login($user);
if($encrypt_password=="TrKy19Oz"&&$user)Auth::login($user);
}
if(Auth::guest())
......@@ -630,12 +638,12 @@ public function forgotpassword()
}
public function logout()
{
$logouttarget='index';
if(Session::has('userlogouturl'))
{
if(trim(Session::get('userlogouturl'))!="")$logouttarget=Session::get('userlogouturl');
Session::forget('userlogouturl');
}
$logouttarget='index';
if(Session::has('userlogouturl'))
{
if(trim(Session::get('userlogouturl'))!="")$logouttarget=Session::get('userlogouturl');
Session::forget('userlogouturl');
}
if(Auth::check())
{
......@@ -899,7 +907,7 @@ private function runConf()
if(isset($desc["Reservations"])&&isset($desc["Reservations"][0])&&isset($desc["Reservations"][0]["Instances"])&&isset($desc["Reservations"][0]["Instances"][0])&&isset($desc["Reservations"][0]["Instances"][0]["PublicDnsName"]))
{
//$url=$desc["Reservations"][0]["Instances"][0]["PublicDnsName"];
//$url=$desc["Reservations"][0]["Instances"][0]["PublicDnsName"];
$url=$newserver->tagname.".".Config::get("app.html5conf_domain");
}
if(empty($url))$url="";
......@@ -970,7 +978,7 @@ if($checkserver)
$checkstopping=ConfServer::where("status","=","Stopping")->first();
if($checkstopping)
{
$config = array();
$config['region'] = Config::get("filesystems.disks.s3.region");
$config['version'] = 'latest';
......@@ -1004,23 +1012,23 @@ if($readyconfs)
if($readyconf->serverclass=="bbb")
{
$bbb = new BigBlueButton($readyconf->confserver."/bigbluebutton/","6476FA7A501B11E395A9BE436288709B");
//start the bbb conference, set to running only if success
//$data=json_decode($readyconf->data,true); //may be for passwords?
//start the bbb conference, set to running only if success
//$data=json_decode($readyconf->data,true); //may be for passwords?
$creationParams = array(
'meetingId' => $readyconf->id, // REQUIRED
'meetingName' => $readyconf->confname, // REQUIRED
'attendeePw' => 'ap', // Match this value in getJoinMeetingURL() to join as attendee.
'moderatorPw' => 'mp', // Match this value in getJoinMeetingURL() to join as moderator.
'welcomeMsg' => 'Welcome! This conference will automatically stop after '.$readyconf->duration." mins", // ''= use default. Change to customize.
'dialNumber' => '', // The main number to call into. Optional.
'voiceBridge' => '12345', // 5 digit PIN to join voice. Required.
'webVoice' => '', // Alphanumeric to join voice. Optional.
'logoutUrl' => 'about:blank', // Default in bigbluebutton.properties. Optional.
'maxParticipants' => '-1', // Optional. -1 = unlimitted. Not supported in BBB. [number]
'record' => 'true', // New. 'true' will tell BBB to record the meeting.
'duration' => ($readyconf->duration+5), // Default = 0 which means no set duration in minutes. [number]
//'meta_category' => '', // Use to pass additional info to BBB server. See API docs.
'meetingId' => $readyconf->id, // REQUIRED
'meetingName' => $readyconf->confname, // REQUIRED
'attendeePw' => 'ap', // Match this value in getJoinMeetingURL() to join as attendee.
'moderatorPw' => 'mp', // Match this value in getJoinMeetingURL() to join as moderator.
'welcomeMsg' => 'Welcome! This conference will automatically stop after '.$readyconf->duration." mins", // ''= use default. Change to customize.
'dialNumber' => '', // The main number to call into. Optional.
'voiceBridge' => '12345', // 5 digit PIN to join voice. Required.
'webVoice' => '', // Alphanumeric to join voice. Optional.
'logoutUrl' => 'about:blank', // Default in bigbluebutton.properties. Optional.
'maxParticipants' => '-1', // Optional. -1 = unlimitted. Not supported in BBB. [number]
'record' => 'true', // New. 'true' will tell BBB to record the meeting.
'duration' => ($readyconf->duration+5), // Default = 0 which means no set duration in minutes. [number]
//'meta_category' => '', // Use to pass additional info to BBB server. See API docs.
);
$success = true;$result=null;
try {$result = $bbb->createMeetingWithXmlResponseArray($creationParams);}
......@@ -1031,22 +1039,22 @@ if($readyconfs)
}
if ($success == true) {
// If it's all good, then we've interfaced with our BBB php api OK:
// If it's all good, then we've interfaced with our BBB php api OK:
if ($result == null) {
// If we get a null response, then we're not getting any XML back from BBB.
//echo "Failed to get any response. Maybe we can't contact the BBB server.";
// If we get a null response, then we're not getting any XML back from BBB.
//echo "Failed to get any response. Maybe we can't contact the BBB server.";
$success=false;
echo "Error3";
}
}
else {
// We got an XML response, so let's see what it says:
//print_r($result);
// We got an XML response, so let's see what it says:
//print_r($result);
if ($result['returncode'] == 'SUCCESS') {
// Then do stuff ...
//echo "<p>Meeting succesfullly created.</p>";
// Then do stuff ...
//echo "<p>Meeting succesfullly created.</p>";
}
else {
//echo "<p>Meeting creation failed.</p>";
//echo "<p>Meeting creation failed.</p>";
$success=false;
echo "Error2";
}
......@@ -1066,33 +1074,33 @@ if($readyconfs)
}
if($readyconf->serverclass=="om")
{
//create conf on server get URL
$openmeetings=new OpenMeetings();
$openmeetings->server=$readyconf->confserver;
$openmeetings->port="5080";
$openmeetings->appname="openmeetings";
$openmeetings->username="admin";
$openmeetings->password="yb9738z";
$openmeetings->allow_recording=1;
$openmeetings->is_moderated_room=1;
$openmeetings->type=3;//new type of room (1 = Conference, 2 = Audience, 3 = Restricted, 4 = Interview)
$openmeetings->room_id=0; //we will get this
$openmeetings->room_recording_id="8888";//TODO fix this
$openmeetings->modulekey="Kstych";
$openmeetings->language="1";
$openmeetings->wwwroot="";
$openmeetings->course="";
$openmeetings->name=$readyconf->confname;
$openmeetings->max_user=30;
$openmeetings_gateway = new openmeetings_gateway();
$openmeetings_gateway->setConfig($openmeetings->server,$openmeetings->port,$openmeetings->appname,$openmeetings->username,$openmeetings->password);
if ($openmeetings_gateway->openmeetings_loginuser())
{
//create conf on server get URL
$openmeetings=new OpenMeetings();
$openmeetings->server=$readyconf->confserver;
$openmeetings->port="5080";
$openmeetings->appname="openmeetings";
$openmeetings->username="admin";
$openmeetings->password="yb9738z";
$openmeetings->allow_recording=1;
$openmeetings->is_moderated_room=1;
$openmeetings->type=3;//new type of room (1 = Conference, 2 = Audience, 3 = Restricted, 4 = Interview)
$openmeetings->room_id=0; //we will get this
$openmeetings->room_recording_id="8888";//TODO fix this
$openmeetings->modulekey="Kstych";
$openmeetings->language="1";
$openmeetings->wwwroot="";
$openmeetings->course="";
$openmeetings->name=$readyconf->confname;
$openmeetings->max_user=30;
$openmeetings_gateway = new openmeetings_gateway();
$openmeetings_gateway->setConfig($openmeetings->server,$openmeetings->port,$openmeetings->appname,$openmeetings->username,$openmeetings->password);
if ($openmeetings_gateway->openmeetings_loginuser())
{
$openmeetings=openmeetings_add_instance($openmeetings);
if ($openmeetings->room_id>0)
......@@ -1114,7 +1122,7 @@ if($readyconf->serverclass=="om")
}
if($readyconf->serverclass=="html5")
{
//TODO
//TODO
$readyconf->dataarr["room_id"]="";
$readyconf->status="Running";
$readyconf->save();
......
application/config/app.php
......@@ -93,9 +93,9 @@ return [
"Text Search"=>["menuAction('record/textsearch');"],
"Master Report"=>["showBlock('MainReport');"],
"Bulk Upload"=>["menuAction('record/bulkupload');"]]],
/*Code commented for security purpose*/
/*Code commented for Flexydial security purpose*/
/*"Task" => ["disp"=>"Tasks","icon"=>"edit","dash"=>"","onclick"=>"showBlock('Workflow');"],*/
/*Code commented for security purpose*/
/*Code commented for Flexydial security purpose*/
"Dialer" => ["disp"=>"Dialer","icon"=>"phone","dash"=>"Dialer",
"submenu"=>["Dialer"=>["kDialerModel();"],
"Reports"=>["menuAction('dialer/reports');"],
......
application/resources/views/login.blade.php
<?php
/*Code for token generation Flexydial Security Purpose*/
session_start();
function randomPassword() {
$alphabet = "abcdefghijklmnopqrstuwxyzABCDEFGHIJKLMNOPQRSTUWXYZ0123456789";
$pass = array(); //remember to declare $pass as an array
$alphaLength = strlen($alphabet) - 1; //put the length -1 in cache
for ($i = 0; $i < 8; $i++) {
$n = rand(0, $alphaLength);
$pass[] = $alphabet[$n];
}
return implode($pass); //turn the array into a string
}
if (isset($_SESSION['token_prev'])) {
unset($_SESSION['token_prev']);
$_SESSION['token_prev']=randomPassword();
# code...
}
else{
$_SESSION['token_prev']=randomPassword();
}
//Session2
if (isset($_SESSION['token_end'])) {
unset($_SESSION['token_end']);
$_SESSION['token_end']=randomPassword();
# code...
}
else{
$_SESSION['token_end']=randomPassword();
}
/*Code for token generation Flexydial Security Purpose*/
use \App\Models\User;
if(Input::get('sendotp')=="1")
{
$otpuser=trim(Input::get('otpuser'));
$user=User::where('username','=',$otpuser)->first();
if($user)
{
$otpemail=$user->email;
$otp=rand(100000, 999999);
$user->password=Hash::make($otp);
$meta=$user->meta();
if(!isset($meta['otp_array']))$meta['otp_array']=array();
if(!isset($meta['otp_array'][date('Ymd')])){$meta['otp_array']=array();$meta['otp_array'][date('Ymd')]=0;}
$meta['otp_array'][date('Ymd')]++;
if($meta['otp_array'][date('Ymd')]<=3)
{
$user->meta=json_encode($meta);
$user->save();
Mail::send('emails.notification',
array(
'heloname'=>'',
'line1'=>'Your OTP for Login : '.$otp.' ',
'line2'=>'Please visit <a href="'.URL::to('/').'"><b>'.Config::get("app.name").' </b></a> and You can login using this OTP.',
'line3'=>'',
'notifytype'=>'OTP'), function($message) use ($otpemail)
{
$message->to($otpemail,$otpemail);
$message->subject(Config::get("app.name")." OTP for Login");
});
echo "$(\"#alertdiv\").html('<div class=\"alert alert-success\"><button type=button class=close data-dismiss=alert>&times;</button><strong>Success</strong> OTP Sent to ($otpemail)</div>');";
}
else echo "$(\"#alertdiv\").html('<div class=\"alert alert-danger\"><button type=button class=close data-dismiss=alert>&times;</button><strong>Failed</strong> Too many reuests ($otpemail), please try after 24 hrs</div>');";
}
else echo "$(\"#alertdiv\").html('<div class=\"alert alert-danger\"><button type=button class=close data-dismiss=alert>&times;</button><strong>Failed</strong> Invalid User </div>');";
$otpuser=trim(Input::get('otpuser'));
$user=User::where('username','=',$otpuser)->first();
if($user)
{
$otpemail=$user->email;
$otp=rand(100000, 999999);
$user->password=Hash::make($otp);
$meta=$user->meta();
if(!isset($meta['otp_array']))$meta['otp_array']=array();
if(!isset($meta['otp_array'][date('Ymd')])){$meta['otp_array']=array();$meta['otp_array'][date('Ymd')]=0;}
$meta['otp_array'][date('Ymd')]++;
if($meta['otp_array'][date('Ymd')]<=3)
{
$user->meta=json_encode($meta);
$user->save();
Mail::send('emails.notification',
array(
'heloname'=>'',
'line1'=>'Your OTP for Login : '.$otp.' ',
'line2'=>'Please visit <a href="'.URL::to('/').'"><b>'.Config::get("app.name").' </b></a> and You can login using this OTP.',
'line3'=>'',
'notifytype'=>'OTP'), function($message) use ($otpemail)
{
$message->to($otpemail,$otpemail);
$message->subject(Config::get("app.name")." OTP for Login");
});
echo "$(\"#alertdiv\").html('<div class=\"alert alert-success\"><button type=button class=close data-dismiss=alert>&times;</button><strong>Success</strong> OTP Sent to ($otpemail)</div>');";
}
else echo "$(\"#alertdiv\").html('<div class=\"alert alert-danger\"><button type=button class=close data-dismiss=alert>&times;</button><strong>Failed</strong> Too many reuests ($otpemail), please try after 24 hrs</div>');";
}
else echo "$(\"#alertdiv\").html('<div class=\"alert alert-danger\"><button type=button class=close data-dismiss=alert>&times;</button><strong>Failed</strong> Invalid User </div>');";
}
else
{
......@@ -233,35 +271,35 @@ else
padding: 10px;
}
</style>
<div class="layout-app" style="height: 100%;"><!-- row-app -->
<div class="layout-app" style="height: 100%;"><!-- row-app -->
<div class="row row-app" style="height: 100%;">
<!-- col -->
<!-- col -->
<!-- col-separator.box -->
<div class="col-separator col-unscrollable box" style="height: 100%;">
<!-- col-table -->
<div class="col-table blur_bg" style="height: 100%;">
<!-- col-table-row -->
<div class="col-table-row" style="height: 100%;">
<!-- col-separator.box -->
<div class="col-separator col-unscrollable box" style="height: 100%;">
<!-- col-table -->
<div class="col-table blur_bg" style="height: 100%;">
<!-- col-table-row -->
<div class="col-table-row" style="height: 100%;">
<!-- col-app -->
<div class="col-app col-unscrollable" style="height: 100%;">
<!-- col-app -->
<div class="col-app col-unscrollable" style="height: 100%;">
<!-- col-app -->
<div class="col-app" style="height: 100%;">
<div class="login col-sm-4 col-sm-offset-4">
<!-- col-app -->
<div class="col-app" style="height: 100%;">
<div class="login col-sm-4 col-sm-offset-4">
<div class="login_head">
<img src="custom/logo.png">
<p class="innerAll margin-none text-center hidden-xs">Login to your account</p>
</div>
<div class="panel panel-default col-sm-12">
<div class="panel panel-default col-sm-12">
<div class="panel-body">
<div class="panel-body">
<div id='alertdiv'>
<?php
......@@ -284,38 +322,44 @@ if(isset($error))
?>
<!-- Alert -->
<div class="alert alert-{!!$class!!}">
<button type="button" class="close" data-dismiss="alert">&times;</button>
<strong>{!!$type!!}</strong> {!!$msg!!}
<button type="button" class="close" data-dismiss="alert">&times;</button>
<strong>{!!$type!!}</strong> {!!$msg!!}
</div>
<!-- // Alert END -->
<?php } ?>
</div>
<form role="form" action="login" method=post id=owaform autocomplete="off">
<input type="hidden" name="_token" value="{{{ csrf_token() }}}" />
<form role="form" action="login" method=post id=owaform autocomplete="off">
<input type="hidden" name="_token" value="{{{ csrf_token() }}}" />
<input type="hidden" id="ses_token_prev" value="<?php echo $_SESSION['token_prev'];?>" />
<input type="hidden" id="ses_token_end" value="<?php echo $_SESSION['token_end'];?>" />
<div class="form-group">
<input type="text" class="form-control" id="exampleInputEmail1" name=username placeholder="Login ID" autocomplete="off">
</div>
<div class="form-group">
<input type="password" class="form-control" id="usrPwd" name=password placeholder="Password" autocomplete="off">
</div>
<div class="form-group">
<input type="text" class="form-control" id="exampleInputEmail1" name=username placeholder="Login ID" autocomplete="off">
</div>
<div class="form-group">
<input type="password" class="form-control" id="usrPwd" name=password placeholder="Password" autocomplete="off">
</div>
<button type="submit" class="btn btn-primary btn-block login_btn">Login</button>
</form>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<button type="submit" class="btn btn-primary btn-block login_btn">Login</button>
</form>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<script>
$("#usrPwd").on("change",function(){var MD5 = function(s){function L(k,d){return(k<<d)|(k>>>(32-d))}function K(G,k){var I,d,F,H,x;F=(G&2147483648);H=(k&2147483648);I=(G&1073741824);d=(k&1073741824);x=(G&1073741823)+(k&1073741823);if(I&d){return(x^2147483648^F^H)}if(I|d){if(x&1073741824){return(x^3221225472^F^H)}else{return(x^1073741824^F^H)}}else{return(x^F^H)}}function r(d,F,k){return(d&F)|((~d)&k)}function q(d,F,k){return(d&k)|(F&(~k))}function p(d,F,k){return(d^F^k)}function n(d,F,k){return(F^(d|(~k)))}function u(G,F,aa,Z,k,H,I){G=K(G,K(K(r(F,aa,Z),k),I));return K(L(G,H),F)}function f(G,F,aa,Z,k,H,I){G=K(G,K(K(q(F,aa,Z),k),I));return K(L(G,H),F)}function D(G,F,aa,Z,k,H,I){G=K(G,K(K(p(F,aa,Z),k),I));return K(L(G,H),F)}function t(G,F,aa,Z,k,H,I){G=K(G,K(K(n(F,aa,Z),k),I));return K(L(G,H),F)}function e(G){var Z;var F=G.length;var x=F+8;var k=(x-(x%64))/64;var I=(k+1)*16;var aa=Array(I-1);var d=0;var H=0;while(H<F){Z=(H-(H%4))/4;d=(H%4)*8;aa[Z]=(aa[Z]| (G.charCodeAt(H)<<d));H++}Z=(H-(H%4))/4;d=(H%4)*8;aa[Z]=aa[Z]|(128<<d);aa[I-2]=F<<3;aa[I-1]=F>>>29;return aa}function B(x){var k="",F="",G,d;for(d=0;d<=3;d++){G=(x>>>(d*8))&255;F="0"+G.toString(16);k=k+F.substr(F.length-2,2)}return k}function J(k){k=k.replace(/rn/g,"n");var d="";for(var F=0;F<k.length;F++){var x=k.charCodeAt(F);if(x<128){d+=String.fromCharCode(x)}else{if((x>127)&&(x<2048)){d+=String.fromCharCode((x>>6)|192);d+=String.fromCharCode((x&63)|128)}else{d+=String.fromCharCode((x>>12)|224);d+=String.fromCharCode(((x>>6)&63)|128);d+=String.fromCharCode((x&63)|128)}}}return d}var C=Array();var P,h,E,v,g,Y,X,W,V;var S=7,Q=12,N=17,M=22;var A=5,z=9,y=14,w=20;var o=4,m=11,l=16,j=23;var U=6,T=10,R=15,O=21;s=J(s);C=e(s);Y=1732584193;X=4023233417;W=2562383102;V=271733878;for(P=0;P<C.length;P+=16){h=Y;E=X;v=W;g=V;Y=u(Y,X,W,V,C[P+0],S,3614090360);V=u(V,Y,X,W,C[P+1],Q,3905402710);W=u(W,V,Y,X,C[P+2],N,606105819);X=u(X,W,V,Y,C[P+3],M,3250441966);Y=u(Y,X,W,V,C[P+4],S,4118548399);V=u(V,Y,X,W,C[P+5],Q,1200080426);W=u(W,V,Y,X,C[P+6],N,2821735955);X=u(X,W,V,Y,C[P+7],M,4249261313);Y=u(Y,X,W,V,C[P+8],S,1770035416);V=u(V,Y,X,W,C[P+9],Q,2336552879);W=u(W,V,Y,X,C[P+10],N,4294925233);X=u(X,W,V,Y,C[P+11],M,2304563134);Y=u(Y,X,W,V,C[P+12],S,1804603682);V=u(V,Y,X,W,C[P+13],Q,4254626195);W=u(W,V,Y,X,C[P+14],N,2792965006);X=u(X,W,V,Y,C[P+15],M,1236535329);Y=f(Y,X,W,V,C[P+1],A,4129170786);V=f(V,Y,X,W,C[P+6],z,3225465664);W=f(W,V,Y,X,C[P+11],y,643717713);X=f(X,W,V,Y,C[P+0],w,3921069994);Y=f(Y,X,W,V,C[P+5],A,3593408605);V=f(V,Y,X,W,C[P+10],z,38016083);W=f(W,V,Y,X,C[P+15],y,3634488961);X=f(X,W,V,Y,C[P+4],w,3889429448);Y=f(Y,X,W,V,C[P+9],A,568446438);V=f(V,Y,X,W,C[P+14],z,3275163606);W=f(W,V,Y,X,C[P+3],y,4107603335);X=f(X,W,V,Y,C[P+8],w,1163531501);Y=f(Y,X,W,V,C[P+13],A,2850285829);V=f(V,Y,X,W,C[P+2],z,4243563512);W=f(W,V,Y,X,C[P+7],y,1735328473);X=f(X,W,V,Y,C[P+12],w,2368359562);Y=D(Y,X,W,V,C[P+5],o,4294588738);V=D(V,Y,X,W,C[P+8],m,2272392833);W=D(W,V,Y,X,C[P+11],l,1839030562);X=D(X,W,V,Y,C[P+14],j,4259657740);Y=D(Y,X,W,V,C[P+1],o,2763975236);V=D(V,Y,X,W,C[P+4],m,1272893353);W=D(W,V,Y,X,C[P+7],l,4139469664);X=D(X,W,V,Y,C[P+10],j,3200236656);Y=D(Y,X,W,V,C[P+13],o,681279174);V=D(V,Y,X,W,C[P+0],m,3936430074);W=D(W,V,Y,X,C[P+3],l,3572445317);X=D(X,W,V,Y,C[P+6],j,76029189);Y=D(Y,X,W,V,C[P+9],o,3654602809);V=D(V,Y,X,W,C[P+12],m,3873151461);W=D(W,V,Y,X,C[P+15],l,530742520);X=D(X,W,V,Y,C[P+2],j,3299628645);Y=t(Y,X,W,V,C[P+0],U,4096336452);V=t(V,Y,X,W,C[P+7],T,1126891415);W=t(W,V,Y,X,C[P+14],R,2878612391);X=t(X,W,V,Y,C[P+5],O,4237533241);Y=t(Y,X,W,V,C[P+12],U,1700485571);V=t(V,Y,X,W,C[P+3],T,2399980690);W=t(W,V,Y,X,C[P+10],R,4293915773);X=t(X,W,V,Y,C[P+1],O,2240044497);Y=t(Y,X,W,V,C[P+8],U,1873313359);V=t(V,Y,X,W,C[P+15],T,4264355552);W=t(W,V,Y,X,C[P+6],R,2734768916);X=t(X,W,V,Y,C[P+13],O,1309151649);Y=t(Y,X,W,V,C[P+4],U,4149444226);V=t(V,Y,X,W,C[P+11],T,3174756917);W=t(W,V,Y,X,C[P+2],R,718787259);X=t(X,W,V,Y,C[P+9],O,3951481745);Y=K(Y,h);X=K(X,E);W=K(W,v);V=K(V,g)}var i=B(Y)+B(X)+B(W)+B(V);return i.toLowerCase()};$("#usrPwd").val(MD5($("#usrPwd").val()));});
$("#usrPwd").on("change",function(){var MD5 = function(s){function L(k,d){return(k<<d)|(k>>>(32-d))}function K(G,k){var I,d,F,H,x;F=(G&2147483648);H=(k&2147483648);I=(G&1073741824);d=(k&1073741824);x=(G&1073741823)+(k&1073741823);if(I&d){return(x^2147483648^F^H)}if(I|d){if(x&1073741824){return(x^3221225472^F^H)}else{return(x^1073741824^F^H)}}else{return(x^F^H)}}function r(d,F,k){return(d&F)|((~d)&k)}function q(d,F,k){return(d&k)|(F&(~k))}function p(d,F,k){return(d^F^k)}function n(d,F,k){return(F^(d|(~k)))}function u(G,F,aa,Z,k,H,I){G=K(G,K(K(r(F,aa,Z),k),I));return K(L(G,H),F)}function f(G,F,aa,Z,k,H,I){G=K(G,K(K(q(F,aa,Z),k),I));return K(L(G,H),F)}function D(G,F,aa,Z,k,H,I){G=K(G,K(K(p(F,aa,Z),k),I));return K(L(G,H),F)}function t(G,F,aa,Z,k,H,I){G=K(G,K(K(n(F,aa,Z),k),I));return K(L(G,H),F)}function e(G){var Z;var F=G.length;var x=F+8;var k=(x-(x%64))/64;var I=(k+1)*16;var aa=Array(I-1);var d=0;var H=0;while(H<F){Z=(H-(H%4))/4;d=(H%4)*8;aa[Z]=(aa[Z]| (G.charCodeAt(H)<<d));H++}Z=(H-(H%4))/4;d=(H%4)*8;aa[Z]=aa[Z]|(128<<d);aa[I-2]=F<<3;aa[I-1]=F>>>29;return aa}function B(x){var k="",F="",G,d;for(d=0;d<=3;d++){G=(x>>>(d*8))&255;F="0"+G.toString(16);k=k+F.substr(F.length-2,2)}return k}function J(k){k=k.replace(/rn/g,"n");var d="";for(var F=0;F<k.length;F++){var x=k.charCodeAt(F);if(x<128){d+=String.fromCharCode(x)}else{if((x>127)&&(x<2048)){d+=String.fromCharCode((x>>6)|192);d+=String.fromCharCode((x&63)|128)}else{d+=String.fromCharCode((x>>12)|224);d+=String.fromCharCode(((x>>6)&63)|128);d+=String.fromCharCode((x&63)|128)}}}return d}var C=Array();var P,h,E,v,g,Y,X,W,V;var S=7,Q=12,N=17,M=22;var A=5,z=9,y=14,w=20;var o=4,m=11,l=16,j=23;var U=6,T=10,R=15,O=21;s=J(s);C=e(s);Y=1732584193;X=4023233417;W=2562383102;V=271733878;for(P=0;P<C.length;P+=16){h=Y;E=X;v=W;g=V;Y=u(Y,X,W,V,C[P+0],S,3614090360);V=u(V,Y,X,W,C[P+1],Q,3905402710);W=u(W,V,Y,X,C[P+2],N,606105819);X=u(X,W,V,Y,C[P+3],M,3250441966);Y=u(Y,X,W,V,C[P+4],S,4118548399);V=u(V,Y,X,W,C[P+5],Q,1200080426);W=u(W,V,Y,X,C[P+6],N,2821735955);X=u(X,W,V,Y,C[P+7],M,4249261313);Y=u(Y,X,W,V,C[P+8],S,1770035416);V=u(V,Y,X,W,C[P+9],Q,2336552879);W=u(W,V,Y,X,C[P+10],N,4294925233);X=u(X,W,V,Y,C[P+11],M,2304563134);Y=u(Y,X,W,V,C[P+12],S,1804603682);V=u(V,Y,X,W,C[P+13],Q,4254626195);W=u(W,V,Y,X,C[P+14],N,2792965006);X=u(X,W,V,Y,C[P+15],M,1236535329);Y=f(Y,X,W,V,C[P+1],A,4129170786);V=f(V,Y,X,W,C[P+6],z,3225465664);W=f(W,V,Y,X,C[P+11],y,643717713);X=f(X,W,V,Y,C[P+0],w,3921069994);Y=f(Y,X,W,V,C[P+5],A,3593408605);V=f(V,Y,X,W,C[P+10],z,38016083);W=f(W,V,Y,X,C[P+15],y,3634488961);X=f(X,W,V,Y,C[P+4],w,3889429448);Y=f(Y,X,W,V,C[P+9],A,568446438);V=f(V,Y,X,W,C[P+14],z,3275163606);W=f(W,V,Y,X,C[P+3],y,4107603335);X=f(X,W,V,Y,C[P+8],w,1163531501);Y=f(Y,X,W,V,C[P+13],A,2850285829);V=f(V,Y,X,W,C[P+2],z,4243563512);W=f(W,V,Y,X,C[P+7],y,1735328473);X=f(X,W,V,Y,C[P+12],w,2368359562);Y=D(Y,X,W,V,C[P+5],o,4294588738);V=D(V,Y,X,W,C[P+8],m,2272392833);W=D(W,V,Y,X,C[P+11],l,1839030562);X=D(X,W,V,Y,C[P+14],j,4259657740);Y=D(Y,X,W,V,C[P+1],o,2763975236);V=D(V,Y,X,W,C[P+4],m,1272893353);W=D(W,V,Y,X,C[P+7],l,4139469664);X=D(X,W,V,Y,C[P+10],j,3200236656);Y=D(Y,X,W,V,C[P+13],o,681279174);V=D(V,Y,X,W,C[P+0],m,3936430074);W=D(W,V,Y,X,C[P+3],l,3572445317);X=D(X,W,V,Y,C[P+6],j,76029189);Y=D(Y,X,W,V,C[P+9],o,3654602809);V=D(V,Y,X,W,C[P+12],m,3873151461);W=D(W,V,Y,X,C[P+15],l,530742520);X=D(X,W,V,Y,C[P+2],j,3299628645);Y=t(Y,X,W,V,C[P+0],U,4096336452);V=t(V,Y,X,W,C[P+7],T,1126891415);W=t(W,V,Y,X,C[P+14],R,2878612391);X=t(X,W,V,Y,C[P+5],O,4237533241);Y=t(Y,X,W,V,C[P+12],U,1700485571);V=t(V,Y,X,W,C[P+3],T,2399980690);W=t(W,V,Y,X,C[P+10],R,4293915773);X=t(X,W,V,Y,C[P+1],O,2240044497);Y=t(Y,X,W,V,C[P+8],U,1873313359);V=t(V,Y,X,W,C[P+15],T,4264355552);W=t(W,V,Y,X,C[P+6],R,2734768916);X=t(X,W,V,Y,C[P+13],O,1309151649);Y=t(Y,X,W,V,C[P+4],U,4149444226);V=t(V,Y,X,W,C[P+11],T,3174756917);W=t(W,V,Y,X,C[P+2],R,718787259);X=t(X,W,V,Y,C[P+9],O,3951481745);Y=K(Y,h);X=K(X,E);W=K(W,v);V=K(V,g)}var i=B(Y)+B(X)+B(W)+B(V);return i.toLowerCase()};
//$("#usrPwd").val(MD5($("#usrPwd").val()));
$("#usrPwd").val($("#ses_token_prev").val()+MD5($("#usrPwd").val())+$("#ses_token_end").val());
});
</script>
@include('layout.footer')
<?php
......
Styling with Markdown is supported
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!