File manager - Edit - /opt/imh-python/lib/python2.7/site-packages/werkzeug/security.pyc
Back
� �ْSc @ s� d Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l m Z d d l m Z d d l m Z d d l m Z d d l m Z m Z m Z m Z m Z m Z m Z d Z d Z e d � j Z e e d d � Z e � Z e d � e j j e j j! g D� � Z" d � Z# e# � Z$ e d d d � Z% e d d d � Z& d � Z' d � Z( d � Z) d d d � Z* d � Z+ d � Z, d S( s� werkzeug.security ~~~~~~~~~~~~~~~~~ Security related helpers such as secure password hashing tools. :copyright: (c) 2014 by the Werkzeug Team, see AUTHORS for more details. :license: BSD, see LICENSE for more details. i����N( t Struct( t SystemRandom( t xor( t starmap( t range_typet PY2t text_typet izipt to_bytest string_typest to_nativet> abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789i� s >It compare_digestc c s! | ] } | d k r | Vq d S( t /N( NR ( t None( t .0t sep( ( s@ /opt/imh-python/lib/python2.7/site-packages/werkzeug/security.pys <genexpr> s c C sm t t d d � } | d k r' d } n i } x9 | D]1 } t t | d � } | d k r4 | | | <q4 q4 W| S( Nt algorithmst md5t sha1t sha224t sha256t sha384t sha512( s md5s sha1s sha224s sha256s sha384s sha512( t getattrt hashlibR ( t algost rvt algot func( ( s@ /opt/imh-python/lib/python2.7/site-packages/werkzeug/security.pyt _find_hashlib_algorithms$ s c C s. t | | | | | � } t t j | d � � S( s$ Like :func:`pbkdf2_bin` but returns a hex encoded string. .. versionadded:: 0.9 :param data: the data to derive. :param salt: the salt for the derivation. :param iterations: the number of iterations. :param keylen: the length of the resulting key. If not provided the digest size will be used. :param hashfunc: the hash function to use. This can either be the string name of a known hash function or a function from the hashlib module. Defaults to sha1. t hex_codec( t pbkdf2_binR t codecst encode( t datat saltt iterationst keylent hashfuncR ( ( s@ /opt/imh-python/lib/python2.7/site-packages/werkzeug/security.pyt pbkdf2_hex1 s c C s# t | t � r t | } n | s. t j } n t | � } t j t | � d | � } | sg | j } n | d � } t � } x� t d | | j d � D]x } | | t | � � } } xH t | d � D]6 } | t | � � } t t t t | | � � � } q� W| j | � q� Wt | | � S( s� Returns a binary digest for the PBKDF2 hash algorithm of `data` with the given `salt`. It iterates `iterations` time and produces a key of `keylen` bytes. By default SHA-1 is used as hash function, a different hashlib `hashfunc` can be provided. .. versionadded:: 0.9 :param data: the data to derive. :param salt: the salt for the derivation. :param iterations: the number of iterations. :param keylen: the length of the resulting key. If not provided the digest size will be used. :param hashfunc: the hash function to use. This can either be the string name of a known hash function or a function from the hashlib module. Defaults to sha1. c S s) | j � } | j | � t | j � � S( N( t copyt updatet bytearrayt digest( t xt mact h( ( s@ /opt/imh-python/lib/python2.7/site-packages/werkzeug/security.pyt _pseudorandom^ s i N( t isinstanceR t _hash_funcsR R R t hmact HMACR t digest_sizeR+ R t _pack_intt bytesR R R t extend( R# R$ R% R& R' R. R0 t buft blockR t ut i( ( s@ /opt/imh-python/lib/python2.7/site-packages/werkzeug/security.pyR D s" #"c C s� t | t � r! | j d � } n t | t � rB | j d � } n t d k r[ t | | � St | � t | � k rw t Sd } t r� xh t | | � D]& \ } } | t | � t | � AO} q� Wn. x+ t | | � D] \ } } | | | AO} q� W| d k S( s� This function compares strings in somewhat constant time. This requires that the length of at least one string is known in advance. Returns `True` if the two strings are equal or `False` if they are not. .. versionadded:: 0.7 s utf-8i N( R1 R R" t _builtin_safe_str_cmpR t lent FalseR R t ord( t at bR R- t y( ( s@ /opt/imh-python/lib/python2.7/site-packages/werkzeug/security.pyt safe_str_cmpl s ! c C s8 | d k r t d � � n d j d � t | � D� � S( sA Generate a random string of SALT_CHARS with specified ``length``.i s requested salt of length <= 0t c s s | ] } t j t � Vq d S( N( t _sys_rngt choicet SALT_CHARS( R t _( ( s@ /opt/imh-python/lib/python2.7/site-packages/werkzeug/security.pys <genexpr>� s ( t ValueErrort joinR ( t length( ( s@ /opt/imh-python/lib/python2.7/site-packages/werkzeug/security.pyt gen_salt� s c C s� | d k r | | f St | t � r7 | j d � } n | j d � r� | d j d � } t | � d k rz t d � � n | j d � } | r� t | d p� d � p� t } t } d | | f } n t } | } t j | � } | d k r� t d | � � n | r4| st d � � n t | | | d | �} ng | ryt | t � r[| j d � } n t j | | | � j � } n" | � } | j | � | j � } | | f S( s� Internal password hash helper. Supports plaintext without salt, unsalted and salted passwords. In case salted passwords are used hmac is used. t plains utf-8s pbkdf2:i t :i i s& Invalid number of arguments for PBKDF2i s pbkdf2:%s:%ds invalid method %rs Salt is required for PBKDF2R' ( i i N( R1 R R" t startswitht splitR> RJ t popt intt DEFAULT_PBKDF2_ITERATIONSt TrueR? R2 t getR t TypeErrorR( R3 R4 t hexdigestR* ( t methodR$ t passwordt argsR% t is_pbkdf2t actual_methodt hash_funcR R/ ( ( s@ /opt/imh-python/lib/python2.7/site-packages/werkzeug/security.pyt _hash_internal� s< " s pbkdf2:sha1i c C sG | d k r t | � p d } t | | | � \ } } d | | | f S( s� Hash a password with the given method and salt with with a string of the given length. The format of the string returned includes the method that was used so that :func:`check_password_hash` can check the hash. The format for the hashed string looks like this:: method$salt$hash This method can **not** generate unsalted passwords but it is possible to set the method to plain to enforce plaintext passwords. If a salt is used, hmac is used internally to salt the password. If PBKDF2 is wanted it can be enabled by setting the method to ``pbkdf2:method:iterations`` where iterations is optional:: pbkdf2:sha1:2000$salt$hash pbkdf2:sha1$salt$hash :param password: the password to hash :param method: the hash method to use (one that hashlib supports), can optionally be in the format ``pbpdf2:<method>[:iterations]`` to enable PBKDF2. :param salt_length: the length of the salt in letters RN RE s %s$%s$%s( RM R_ ( RZ RY t salt_lengthR$ R/ R] ( ( s@ /opt/imh-python/lib/python2.7/site-packages/werkzeug/security.pyt generate_password_hash� s c C sQ | j d � d k r t S| j d d � \ } } } t t | | | � d | � S( s� check a password against a given salted and hashed password value. In order to support unsalted legacy passwords this method supports plain text passwords, md5 and sha1 hashes (both salted and unsalted). Returns `True` if the password matched, `False` otherwise. :param pwhash: a hashed string like returned by :func:`generate_password_hash` :param password: the plaintext password to compare against the hash t $i i ( t countR? RQ RD R_ ( t pwhashRZ RY R$ t hashval( ( s@ /opt/imh-python/lib/python2.7/site-packages/werkzeug/security.pyt check_password_hash� s c C sh t j | � } x t D] } | | k r d Sq Wt j j | � sQ | j d � rU d St j j | | � S( s� Safely join `directory` and `filename`. If this cannot be done, this function returns ``None``. :param directory: the base directory. :param filename: the untrusted filename relative to that directory. s ../N( t posixpatht normpatht _os_alt_sepsR t ost patht isabsRP RK ( t directoryt filenameR ( ( s@ /opt/imh-python/lib/python2.7/site-packages/werkzeug/security.pyt safe_join� s !(- t __doc__Rj R3 R Rg R! t structR t randomR t operatorR t itertoolsR t werkzeug._compatR R R R R R R RH RT t packR6 R R R= RF t listRk R t altsepRi R R2 R( R RD RM R_ Ra Rf Ro ( ( ( s@ /opt/imh-python/lib/python2.7/site-packages/werkzeug/security.pyt <module> s8 4 ( ' +
| ver. 1.4 |
Github
|
.
| PHP 8.3.31 | Generation time: 0 |
proxy
|
phpinfo
|
Settings