edv/VERAG_Homepage
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Hashfunktionen wurden implementiert!

Browse Source
This commit is contained in:
ja
2021-12-02 14:26:02 +01:00
parent f597d6af74
commit 8529caaa5c
2 changed files with 10 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
login/Change_PW.aspx.vb
View File

@@ -525,7 +525,7 @@ Partial Class login_Change_PW
If isnewSession = False Then If isnewSession = False Then
Dim token As String Dim token As String
If String.IsNullOrEmpty(username) = False AndAlso String.IsNullOrEmpty(email) = False Then If String.IsNullOrEmpty(username) = False AndAlso String.IsNullOrEmpty(email) = False Then
Dim intzahl = RandomInteger(Math.Pow(2, 6), Math.Pow(2, 8)) Dim intzahl = RandomInteger(Math.Pow(2, 8), Math.Pow(2, 16))
Dim Rand As Random = New Random Dim Rand As Random = New Random
If String.IsNullOrEmpty(password) = False Then If String.IsNullOrEmpty(password) = False Then
Try Try
@@ -534,7 +534,7 @@ Partial Class login_Change_PW
token = VERAG_PROG_ALLGEMEIN.cCryptography3.Encrypt(VERAG_VARIABLES.HashPassword(tok, salt, 1991, intzahl)) token = VERAG_PROG_ALLGEMEIN.cCryptography3.Encrypt(VERAG_VARIABLES.HashPassword(tok, salt, 1991, intzahl))
Return token Return token
Catch Ex As Exception Catch Ex As Exception
Dim intzahl2 = RandomInteger(Math.Pow(2, 6), Math.Pow(2, 8)) Dim intzahl2 = RandomInteger(Math.Pow(2, 7), Math.Pow(2, 13))
'Dim Msg, Style, Title As String 'Dim Msg, Style, Title As String
'Msg = "Token Generation failed" & vbCrLf & "A new E-mail has been sent to the intern e-mail given." 'Msg = "Token Generation failed" & vbCrLf & "A new E-mail has been sent to the intern e-mail given."
'Style = vbRetry + vbExclamation + vbDefaultButton1 'Style = vbRetry + vbExclamation + vbDefaultButton1

12
login/ForgotPW.aspx.vb
View File

@@ -763,14 +763,16 @@ Partial Class ForgotPW
Dim Key() As Byte = Guid.NewGuid().ToByteArray() Dim Key() As Byte = Guid.NewGuid().ToByteArray()
Dim token As String Dim token As String
Dim intzahl = RandomInteger(Math.Pow(2, 5), Math.Pow(2, 8)) Dim intzahl = RandomInteger(Math.Pow(2, 7), Math.Pow(2, 14))
Dim intzahl2 = RandomInteger(Math.Pow(2, 5), Math.Pow(2, 6)) Dim intzahl2 = RandomInteger(Math.Pow(2, 7), Math.Pow(2, 14))
Dim Rand As Random = New Random Dim Rand As Random = New Random
If isusrnmright = True And iscstmIDright = True And isemailright = True AndAlso String.IsNullOrEmpty(theUserID) = False Then If isusrnmright = True And iscstmIDright = True And isemailright = True AndAlso String.IsNullOrEmpty(theUserID) = False Then
Try Try
Dim salt As String = VERAG_VARIABLES.GenerateSalt(intzahl) Dim salt As String = VERAG_VARIABLES.GenerateSalt(intzahl)
Dim tok As String = Convert.ToBase64String(time.Concat(Key).ToArray()) Dim tok As String = Convert.ToBase64String(time.Concat(Key).ToArray())
token = VERAG_PROG_ALLGEMEIN.cCryptography3.Encrypt(VERAG_VARIABLES.HashPassword(tok, salt, 1991, intzahl)) token = VERAG_PROG_ALLGEMEIN.cCryptography3.Encrypt(VERAG_VARIABLES.HashPassword(tok, salt, 10191, intzahl))
salt = String.Empty
tok = String.Empty
Return token Return token
Catch Ex As Exception Catch Ex As Exception
'Dim Msg, Style, Title As String 'Dim Msg, Style, Title As String
@@ -782,7 +784,9 @@ Partial Class ForgotPW
'genToken(username, password, email) 'genToken(username, password, email)
Dim salt As String = VERAG_VARIABLES.GenerateSalt(intzahl2) Dim salt As String = VERAG_VARIABLES.GenerateSalt(intzahl2)
Dim tok As String = Convert.ToBase64String(time.Concat(Key).ToArray()) Dim tok As String = Convert.ToBase64String(time.Concat(Key).ToArray())
token = VERAG_PROG_ALLGEMEIN.cCryptography3.Encrypt(VERAG_VARIABLES.HashPassword(tok, salt, 1991, intzahl2)) token = VERAG_PROG_ALLGEMEIN.cCryptography3.Encrypt(VERAG_VARIABLES.HashPassword(tok, salt, 10191, intzahl2))
salt = String.Empty
tok = String.Empty
Return token Return token
End Try End Try