74 lines
2.6 KiB
PHP
74 lines
2.6 KiB
PHP
|
<?php
|
||
|
|
|
||
|
|
use Kirby\Cms\Page;
|
||
|
|
|
||
|
|
Kirby::plugin('pechente/kirby-password-guard', [
|
||
|
|
'templates' => [
|
||
|
|
'password-guard' => __DIR__ . '/templates/password-guard.php',
|
||
|
|
],
|
||
|
|
'snippets' => [
|
||
|
|
'panel-icon' => __DIR__ . '/snippets/panel-icon.php',
|
||
|
|
],
|
||
|
|
'routes' => [
|
||
|
|
[
|
||
|
|
'pattern' => 'password-guard',
|
||
|
|
'language' => '*',
|
||
|
|
'method' => 'POST',
|
||
|
|
'action' => function () {
|
||
|
|
$password = get('password');
|
||
|
|
$hashedPassword = password_hash($password, PASSWORD_BCRYPT);
|
||
|
|
|
||
|
|
$session = kirby()->session();
|
||
|
|
$session->set('kirby-password-guard.password-hash', $hashedPassword);
|
||
|
|
|
||
|
|
$redirect = get('redirect');
|
||
|
|
|
||
|
|
kirby()->response()->redirect($redirect);
|
||
|
|
}
|
||
|
|
],
|
||
|
|
[
|
||
|
|
'pattern' => option('pechente.kirby-password-guard.pattern', '(:all)'),
|
||
|
|
'method' => 'GET',
|
||
|
|
'action' => function (string $uid) {
|
||
|
|
$query = get();
|
||
|
|
$redirectUrl = $uid . (empty($query) ? '' : '?' . http_build_query($query));
|
||
|
|
if (
|
||
|
|
option('pechente.kirby-password-guard.enabled') === false ||
|
||
|
|
!option('pechente.kirby-password-guard.password') ||
|
||
|
|
kirby()->user()
|
||
|
|
) {
|
||
|
|
$this->next();
|
||
|
|
}
|
||
|
|
$passwordIncorrect = false;
|
||
|
|
// check session for password
|
||
|
|
$session = kirby()->session();
|
||
|
|
$hash = $session->get('kirby-password-guard.password-hash');
|
||
|
|
$password = option('pechente.kirby-password-guard.password');
|
||
|
|
|
||
|
|
// Display the page if the password is correct
|
||
|
|
if ($hash) {
|
||
|
|
if (password_verify($password, $hash)) {
|
||
|
|
$this->next();
|
||
|
|
} else {
|
||
|
|
$passwordIncorrect = true;
|
||
|
|
kirby()->session()->remove('kirby-password-guard.password-hash');
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
// Render the Password Entry Page if it's not correct
|
||
|
|
$passwordPage = new Page([
|
||
|
|
'slug' => 'password-guard',
|
||
|
|
'template' => 'password-guard',
|
||
|
|
'content' => [
|
||
|
|
'title' => 'Password Guard',
|
||
|
|
'redirect' => url($redirectUrl),
|
||
|
|
'passwordIncorrect' => $passwordIncorrect
|
||
|
|
]
|
||
|
|
]);
|
||
|
|
|
||
|
|
return $passwordPage->render();
|
||
|
|
}
|
||
|
|
]
|
||
|
|
],
|
||
|
|
]);
|