FS#1517, obscure passwords in config files

This patch extends the config 'password' class to support a "_code" parameter

darcs-hash:20090119164809-f07c6-c136b559772610539bccb9e9c0191f6a973216ad.gz

1 files changed, 6 insertions, 5 deletions

diff --git a/lib/plugins/config/settings/config.class.php b/lib/plugins/config/settings/config.class.php
index c3531d6f3..b62c16a7e 100644
--- a/lib/plugins/config/settings/config.class.php
+++ b/lib/plugins/config/settings/config.class.php
@@ -22,7 +22,7 @@ if (!class_exists('configuration')) {
     var $_default_files  = array();
     var $_local_files = array();      // updated configuration is written to the first file
     var $_protected_files = array();
-    
+
     var $_plugin_list = null;
 
     /**
@@ -127,13 +127,13 @@ if (!class_exists('configuration')) {
       fclose($fh);
       return true;
     }
-    
+
     function _read_config_group($files) {
       $config = array();
       foreach ($files as $file) {
         $config = array_merge($config, $this->_read_config($file));
       }
-      
+
       return $config;
     }
 
@@ -477,6 +477,8 @@ if (!class_exists('setting_string')) {
 if (!class_exists('setting_password')) {
   class setting_password extends setting_string {
 
+    var $_code = 'plain';  // mechanism to be used to obscure passwords
+
     function update($input) {
         if ($this->is_protected()) return false;
         if (!$input) return false;
@@ -487,7 +489,7 @@ if (!class_exists('setting_password')) {
           return false;
         }
 
-        $this->_local = $input;
+        $this->_local = conf_encodeString($input,$this->_code);
         return true;
     }
 
@@ -888,7 +890,6 @@ if (!class_exists('setting_multicheckbox')) {
   }
 }
 
-
 /**
  *  Provide php_strip_whitespace (php5 function) functionality
  *