Hamza/Siro
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update: 2026-06-30 21:59:55

Browse Source
This commit is contained in:
Hamza-Ayed
2026-06-30 21:59:55 +03:00
parent e7785c9b2d
commit ae723a75f6
1 changed files with 0 additions and 26 deletions
Download Patch File Download Diff File Expand all files Collapse all files

26
backend/core/Security/EncryptionHelper.php
View File

@@ -53,32 +53,6 @@ class EncryptionHelper
$decoded = base64_decode($cipherText, true); $decoded = base64_decode($cipherText, true);
if ($decoded === false) return false; if ($decoded === false) return false;
// محاولة أولى: استخراج IV عشوائي من أول 16 بايت (كما كان في encrypt_decrypt.php)
if (strlen($decoded) >= 16) {
$iv = substr($decoded, 0, 16);
$payload = substr($decoded, 16);
if (strlen($payload) > 0) {
$decrypted_rand = openssl_decrypt($payload, self::ALGO_CBC, $this->key, OPENSSL_RAW_DATA, $iv);
if ($decrypted_rand !== false) {
$pad = ord($decrypted_rand[strlen($decrypted_rand) - 1]);
if ($pad >= 1 && $pad <= 16) {
// Check if padding is valid
$isValidPad = true;
for ($i = 1; $i <= $pad; $i++) {
if (ord($decrypted_rand[strlen($decrypted_rand) - $i]) !== $pad) {
$isValidPad = false;
break;
}
}
if ($isValidPad) {
return substr($decrypted_rand, 0, -$pad);
}
}
}
}
}
// محاولة ثانية: IV ثابت
$decrypted = openssl_decrypt($decoded, self::ALGO_CBC, $this->key, OPENSSL_RAW_DATA, $this->cbcIv); $decrypted = openssl_decrypt($decoded, self::ALGO_CBC, $this->key, OPENSSL_RAW_DATA, $this->cbcIv);
if ($decrypted === false) return false; if ($decrypted === false) return false;