Dereku/snappymail
1
0
Fork 0
mirror of https://github.com/the-djmaze/snappymail.git synced 2026-08-29 20:19:22 +03:00
Code Issues Projects Releases Packages Wiki Activity Actions

Bugfix haveibeenpwned suffix handling

Browse source
This commit is contained in:
the-djmaze 2024-04-22 15:55:31 +02:00
parent c9d3f3de4a
commit 6739ec21c8
1 changed files with 4 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

7
plugins/haveibeenpwned/index.php
View file

@ -51,7 +51,9 @@ class HaveibeenpwnedPlugin extends \RainLoop\Plugins\AbstractPlugin
}
$pass = \sha1($oAccount->ImapPass());
$response = $HTTP->doRequest('GET', 'https://api.pwnedpasswords.com/range/' . \substr($pass, 0, 5));
$prefix = \substr($pass, 0, 5);
$suffix = \substr($pass, 5);
$response = $HTTP->doRequest('GET', "https://api.pwnedpasswords.com/range/{$prefix}");
$passwords = [];
foreach (\preg_split('/\\R/', $response->body) as $entry) {
if ($entry) {
@ -61,8 +63,7 @@ class HaveibeenpwnedPlugin extends \RainLoop\Plugins\AbstractPlugin
}
return $this->jsonResponse(__FUNCTION__, array(
'pwned' => isset($passwords[$pass]) ? $passwords[$pass] : 0,
// 'passwords' => $passwords,
'pwned' => isset($passwords[$suffix]) ? $passwords[$suffix] : 0,
'breached' => $breached ? [
'request_uri' => $breached->request_uri,
'final_uri' => $breached->final_uri,