modified file smtp-mailer

wp-content/upgrade-temp-backup/plugins/authldap/src/Exception/Error.php

@@ -0,0 +1,24 @@
+<?php
+
+/**
+ * Copyright Andrea Heigl <andreas@heigl.org>
+ *
+ * Licenses under the MIT-license. For details see the included file LICENSE.md
+ */
+
+declare(strict_types=1);
+
+namespace Org_Heigl\AuthLdap\Exception;
+
+use Exception;
+
+class Error extends Exception
+{
+    public function __construct($message, $line = null)
+    {
+        parent::__construct($message);
+        if ($line) {
+            $this -> line = $line;
+        }
+    }
+}

wp-content/upgrade-temp-backup/plugins/authldap/src/Exception/InvalidLdapUri.php

@@ -0,0 +1,74 @@
+<?php
+
+/**
+ * Copyright Andreas Heigl <andreas@heigl.org>
+ *
+ * Licenses under the MIT-license. For details see the included file LICENSE.md
+ */
+
+declare(strict_types=1);
+
+namespace Org_Heigl\AuthLdap\Exception;
+
+use RuntimeException;
+
+use function sprintf;
+
+class InvalidLdapUri extends RuntimeException
+{
+	public static function cannotparse(string $ldapUri): self
+	{
+		return new self(sprintf(
+			'%1$s seems not to be a valid URI',
+			$ldapUri
+		));
+	}
+
+	public static function wrongSchema(string $uri): self
+	{
+		return new self(sprintf(
+			'%1$s does not start with a valid schema',
+			$uri
+		));
+	}
+
+	public static function noSchema(string $uri): self
+	{
+		return new self(sprintf(
+			'%1$s does not provide a schema',
+			$uri
+		));
+	}
+
+	public static function noEnvironmentVariableSet(string $uri): self
+	{
+		return new self(sprintf(
+			'The environment variable %1$s does not provide a URI',
+			$uri
+		));
+	}
+
+	public static function noServerProvided(string $uri): self
+	{
+		return new self(sprintf(
+			'The LDAP-URI %1$s does not provide a server',
+			$uri
+		));
+	}
+
+	public static function noSearchBaseProvided(string $uri): self
+	{
+		return new self(sprintf(
+			'The LDAP-URI %1$s does not provide a search-base',
+			$uri
+		));
+	}
+
+	public static function invalidSearchBaseProvided(string $uri): self
+	{
+		return new self(sprintf(
+			'The LDAP-URI %1$s does not provide a valid search-base',
+			$uri
+		));
+	}
+}

wp-content/upgrade-temp-backup/plugins/authldap/src/Exception/MissingValidLdapConnection.php

@@ -0,0 +1,23 @@
+<?php
+
+/**
+ * Copyright Andreas Heigl <andreas@heigl.org>
+ *
+ * Licenses under the MIT-license. For details see the included file LICENSE.md
+ */
+
+declare(strict_types=1);
+
+namespace Org_Heigl\AuthLdap\Exception;
+
+use RuntimeException;
+
+class MissingValidLdapConnection extends Error
+{
+	public static function get(): self
+	{
+		return new self(sprintf(
+			'No valid LDAP connection available'
+		));
+	}
+}

wp-content/upgrade-temp-backup/plugins/authldap/src/Exception/SearchUnsuccessfull.php

@@ -0,0 +1,24 @@
+<?php
+
+/**
+ * Copyright Andreas Heigl <andreas@heigl.org>
+ *
+ * Licenses under the MIT-license. For details see the included file LICENSE.md
+ */
+
+declare(strict_types=1);
+
+namespace Org_Heigl\AuthLdap\Exception;
+
+use RuntimeException;
+
+class SearchUnsuccessfull extends RuntimeException
+{
+	public static function fromSearchFilter(string $filter): self
+	{
+		return new self(sprintf(
+			'Search for %1$s was not successfull',
+			$filter
+		));
+	}
+}

wp-content/upgrade-temp-backup/plugins/authldap/src/LdapList.php

@@ -0,0 +1,93 @@
+<?php
+
+/**
+ * Copyright (c) Andreas Heigl<andreas@heigl.org>
+ * Permission is hereby granted, free of charge, to any person obtaining a copy
+ * of this software and associated documentation files (the "Software"), to deal
+ * in the Software without restriction, including without limitation the rights
+ * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+ * copies of the Software, and to permit persons to whom the Software is
+ * furnished to do so, subject to the following conditions:
+ * The above copyright notice and this permission notice shall be included in
+ * all copies or substantial portions of the Software.
+ * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+ * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+ * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+ * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+ * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+ * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+ * THE SOFTWARE.
+ *
+ * @author    Andreas Heigl<andreas@heigl.org>
+ * @copyright Andreas Heigl
+ * @license   http://www.opensource.org/licenses/mit-license.php MIT-License
+ * @since     07.07.2016
+ * @link      http://github.com/heiglandreas/authLDAP
+ */
+
+namespace Org_Heigl\AuthLdap;
+
+use Exception;
+use Org_Heigl\AuthLdap\Exception\Error;
+use Org_Heigl\AuthLdap\Exception\SearchUnsuccessfull;
+use Org_Heigl\AuthLdap\Manager\Ldap;
+
+class LdapList
+{
+    /**
+     * @var Ldap[]
+     */
+    protected $items = [];
+
+    public function addLdap(Ldap $ldap)
+    {
+        $this->items[] = $ldap;
+    }
+
+    public function authenticate($username, $password, $filter = '(uid=%s)')
+    {
+        /** @var Ldap $item */
+        foreach ($this->items as $key => $item) {
+            if (! $item->authenticate($username, $password, $filter)) {
+                unset($this->items[$key]);
+                continue;
+            }
+            return true;
+        }
+
+        return false;
+    }
+
+    public function bind()
+    {
+        $allFailed = true;
+        foreach ($this->items as $key => $item) {
+            try {
+                $item->bind();
+            } catch (\Exception $e) {
+                unset($this->items[$key]);
+                continue;
+            }
+            $allFailed = false;
+        }
+
+        if ($allFailed) {
+            throw new Error('No bind successfull');
+        }
+
+        return true;
+    }
+
+    public function search($filter, $attributes = array('uid'), $base = '')
+    {
+        foreach ($this->items as $item) {
+            try {
+                $result = $item->search($filter, $attributes, $base);
+                return $result;
+            } catch (Exception $e) {
+            }
+        }
+
+        throw SearchUnsuccessfull::fromSearchFilter($filter);
+    }
+}

wp-content/upgrade-temp-backup/plugins/authldap/src/LdapUri.php

@@ -0,0 +1,179 @@
+<?php
+
+/**
+ * Copyright (c) Andreas Heigl<andreas@heigl.org>
+ * Permission is hereby granted, free of charge, to any person obtaining a copy
+ * of this software and associated documentation files (the "Software"), to deal
+ * in the Software without restriction, including without limitation the rights
+ * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+ * copies of the Software, and to permit persons to whom the Software is
+ * furnished to do so, subject to the following conditions:
+ * The above copyright notice and this permission notice shall be included in
+ * all copies or substantial portions of the Software.
+ * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+ * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+ * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+ * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+ * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+ * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+ * THE SOFTWARE.
+ *
+ * @author    Andreas Heigl<andreas@heigl.org>
+ * @copyright Andreas Heigl
+ * @license   http://www.opensource.org/licenses/mit-license.php MIT-License
+ * @since     19.07.2020
+ * @link      http://github.com/heiglandreas/authLDAP
+ */
+
+declare(strict_types=1);
+
+namespace Org_Heigl\AuthLdap;
+
+use Org_Heigl\AuthLdap\Exception\InvalidLdapUri;
+
+use function array_map;
+use function error_get_last;
+use function getenv;
+use function is_array;
+use function is_string;
+use function parse_url;
+use function preg_replace_callback;
+use function rawurlencode;
+use function strlen;
+use function strpos;
+use function substr;
+use function trim;
+use function urldecode;
+
+final class LdapUri
+{
+	private $server;
+
+	private $scheme;
+
+	private $port = 389;
+
+	private string $baseDn;
+
+	private $username = '';
+
+	private $password = '';
+
+	private function __construct(string $uri)
+	{
+		if (!preg_match('/^(ldap|ldaps|env)/', $uri)) {
+			throw InvalidLdapUri::wrongSchema($uri);
+		}
+
+		if (strpos($uri, 'env:') === 0) {
+			$newUri = getenv(substr($uri, 4));
+			if (false === $newUri) {
+				throw InvalidLdapUri::noEnvironmentVariableSet($uri);
+			}
+			$uri = (string) $newUri;
+		}
+
+		$uri = $this->injectEnvironmentVariables($uri);
+
+		$array = parse_url($uri);
+		if (!is_array($array)) {
+			throw InvalidLdapUri::cannotparse($uri);
+		}
+
+		$url = array_map(static function ($item) {
+			if (is_int($item)) {
+				return $item;
+			}
+			return urldecode($item);
+		}, $array);
+
+
+		if (!isset($url['scheme'])) {
+			throw InvalidLdapUri::noSchema($uri);
+		}
+		if (0 !== strpos($url['scheme'], 'ldap')) {
+			throw InvalidLdapUri::wrongSchema($uri);
+		}
+		if (!isset($url['host'])) {
+			throw InvalidLdapUri::noServerProvided($uri);
+		}
+		if (!isset($url['path'])) {
+			throw InvalidLdapUri::noSearchBaseProvided($uri);
+		}
+		if (1 === strlen($url['path'])) {
+			throw InvalidLdapUri::invalidSearchBaseProvided($uri);
+		}
+
+		$this->server = $url['host'];
+		$this->scheme = $url['scheme'];
+		$this->baseDn = substr($url['path'], 1);
+		if (isset($url['user'])) {
+			$this->username = $url['user'];
+		}
+		if ('' === trim($this->username)) {
+			$this->username = 'anonymous';
+		}
+		if (isset($url['pass'])) {
+			$this->password = $url['pass'];
+		}
+		if ($this->scheme === 'ldaps' && $this->port = 389) {
+			$this->port = 636;
+		}
+
+		// When someone sets the port in the URL we overwrite whatever is set.
+		// We have to assume they know what they are doing!
+		if (isset($url['port'])) {
+			$this->port = $url['port'];
+		}
+	}
+
+	public static function fromString(string $uri): LdapUri
+	{
+		return new LdapUri($uri);
+	}
+
+	private function injectEnvironmentVariables(string $base): string
+	{
+		return preg_replace_callback('/%env:([^%]+)%/', static function (array $matches) {
+			return rawurlencode(getenv($matches[1]));
+		}, $base);
+	}
+
+	public function toString(): string
+	{
+		return $this->scheme . '://' . $this->server . ':' . $this->port;
+	}
+
+	public function __toString()
+	{
+		return $this->toString();
+	}
+
+	public function getUsername(): string
+	{
+		return $this->username;
+	}
+
+	public function getPassword(): string
+	{
+		return $this->password;
+	}
+
+	public function getBaseDn(): string
+	{
+		return $this->baseDn;
+	}
+
+	public function isAnonymous(): bool
+	{
+		if ($this->password === '') {
+			return true;
+		}
+
+		if ($this->username === 'anonymous') {
+			return true;
+		}
+
+		return false;
+	}
+}

wp-content/upgrade-temp-backup/plugins/authldap/src/Manager/Ldap.php

@@ -0,0 +1,164 @@
+<?php
+
+/**
+ * $Id: ldap.php 381646 2011-05-06 09:37:31Z heiglandreas $
+ *
+ * authLdap - Authenticate Wordpress against an LDAP-Backend.
+ * Copyright (c) 2008 Andreas Heigl<andreas@heigl.org>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation; either version 2
+ * of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; if not, write to the Free Software
+ * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
+ *
+ * This file handles the basic LDAP-Tasks
+ *
+ * @author Andreas Heigl<andreas@heigl.org>
+ * @package authLdap
+ * @category authLdap
+ * @since 2008
+ */
+
+namespace Org_Heigl\AuthLdap\Manager;
+
+use Org_Heigl\AuthLdap\Exception\Error;
+use Org_Heigl\AuthLdap\Exception\MissingValidLdapConnection;
+use Org_Heigl\AuthLdap\LdapUri;
+use Org_Heigl\AuthLdap\Wrapper\LdapFactory;
+use Org_Heigl\AuthLdap\Wrapper\LdapInterface;
+
+class Ldap
+{
+	/**
+	 * This property contains the connection handle to the ldap-server
+	 *
+	 * @var LdapInterface|null
+	 */
+	private ?LdapInterface $connection;
+
+	private LdapUri $uri;
+
+	private LdapFactory $factory;
+
+	private $starttls;
+
+	public function __construct(LdapFactory $factory, LdapUri $uri, $starttls = false)
+	{
+		$this->starttls = $starttls;
+		$this->uri = $uri;
+		$this->factory = $factory;
+		$this->connection = null;
+	}
+
+	/**
+	 * Connect to the given LDAP-Server
+	 */
+	public function connect(): self
+	{
+		$this->disconnect();
+
+		$this->connection = $this->factory->createFromLdapUri($this->uri->toString());
+		$this->connection->setOption(LDAP_OPT_PROTOCOL_VERSION, 3);
+		$this->connection->setOption(LDAP_OPT_REFERRALS, 0);
+		//if configured try to upgrade encryption to tls for ldap connections
+		if ($this->starttls) {
+			$this->connection->startTls();
+		}
+		return $this;
+	}
+
+	/**
+	 * Disconnect from a resource if one is available
+	 */
+	public function disconnect(): self
+	{
+		if (null !== $this->connection) {
+			$this->connection->unbind();
+		}
+		$this->connection = null;
+		return $this;
+	}
+
+	/**
+	 * Bind to an LDAP-Server with the given credentials
+	 *
+	 * @throws Error
+	 */
+	public function bind(): self
+	{
+		if (!$this->connection) {
+			$this->connect();
+		}
+		if (null === $this->connection) {
+			throw MissingValidLdapConnection::get();
+		}
+		if ($this->uri->isAnonymous()) {
+			$bind = $this->connection->bind();
+		} else {
+			$bind = $this->connection->bind($this->uri->getUsername(), $this->uri->getPassword());
+		}
+		if (!$bind) {
+			throw new Error('bind was not successfull: ' . $this->connection->error());
+		}
+		return $this;
+	}
+
+	/**
+	 * This method does the actual ldap-serch.
+	 *
+	 * This is using the filter <var>$filter</var> for retrieving the attributes
+	 * <var>$attributes</var>
+	 *
+	 * @return array<string|int, mixed>
+	 * @throws Error
+	 */
+	public function search(string $filter, array $attributes = ['uid'], ?string $base = ''): array
+	{
+		if (null === $this->connection) {
+			throw new Error('No resource handle available');
+		}
+		if (!$base) {
+			$base = $this->uri->getBaseDn();
+		}
+		$result = $this->connection->search($base, $filter, $attributes);
+		if ($result === false) {
+			throw new Error('no result found');
+		}
+		$info = $this->connection->getEntries($result);
+		if ($info === false) {
+			throw new Error('invalid results found');
+		}
+		return $info;
+	}
+
+	/**
+	 * This method authenticates the user <var>$username</var> using the
+	 * password <var>$password</var>
+	 *
+	 * @param string $filter OPTIONAL This parameter defines the Filter to be used
+	 * when searchin for the username. This MUST contain the string '%s' which
+	 * will be replaced by the vaue given in <var>$username</var>
+	 * @throws Error
+	 */
+	public function authenticate(string $username, string $password, string $filter = '(uid=%s)'): bool
+	{
+		$this->connect();
+		$this->bind();
+		$res = $this->search(sprintf($filter, $this->factory->escape($username, '', LDAP_ESCAPE_FILTER)));
+		if ($res ['count'] !== 1) {
+			return false;
+		}
+
+		$dn = $res[0]['dn'];
+		return $username && $password && $this->connection->bind($dn, $password);
+	}
+}

wp-content/upgrade-temp-backup/plugins/authldap/src/UserRoleHandler.php

@@ -0,0 +1,54 @@
+<?php
+
+/**
+ * Copyright Andreas Heigl <andreas@heigl.org>
+ *
+ * Licenses under the MIT-license. For details see the included file LICENSE.md
+ */
+
+declare(strict_types=1);
+
+namespace Org_Heigl\AuthLdap;
+
+use WP_User;
+
+use function array_search;
+use function in_array;
+use function var_dump;
+
+class UserRoleHandler
+{
+	/**
+	 * @param WP_User $user
+	 * @param string[] $roles
+	 * @return void
+	 */
+	public function addRolesToUser(WP_User $user, $roles) : void
+	{
+		if ($roles === []) {
+			return;
+		}
+
+		if ($user->roles == $roles) {
+			return;
+		}
+
+		// Remove unused roles from existing.
+		foreach ($user->roles as $role) {
+			if (!in_array($role, $roles)) {
+				// Remove unused roles.
+				$user->remove_role($role);
+				continue;
+			}
+			// Remove the existing role from roles.
+			if (($key = array_search($role, $roles)) !== false) {
+				unset($roles[$key]);
+			}
+		}
+
+		// Add new ones if not already assigned.
+		foreach ($roles as $role) {
+			$user->add_role($role);
+		}
+	}
+}

wp-content/upgrade-temp-backup/plugins/authldap/src/Wrapper/Ldap.php

@@ -0,0 +1,92 @@
+<?php
+
+/**
+ * Copyright Andreas Heigl <andreas@heigl.org>
+ *
+ * Licenses under the MIT-license. For details see the included file LICENSE.md
+ */
+
+declare(strict_types=1);
+
+namespace Org_Heigl\AuthLdap\Wrapper;
+
+use function ldap_bind;
+use function ldap_connect;
+use function ldap_error;
+use function ldap_escape;
+use function ldap_get_entries;
+use function ldap_set_option;
+use function ldap_start_tls;
+use function ldap_unbind;
+
+final class Ldap implements LdapInterface
+{
+	private $connection;
+
+	public function __construct(string $ldapUri)
+	{
+		$this->connection = ldap_connect($ldapUri);
+	}
+
+	public function bind($dn = null, $password = null)
+	{
+		if (null === $dn && null === $password) {
+			return ldap_bind($this->connection);
+		}
+		return ldap_bind($this->connection, $dn, $password);
+	}
+
+	public function unbind()
+	{
+		return ldap_unbind($this->connection);
+	}
+
+	public function setOption($option, $value)
+	{
+		return ldap_set_option($this->connection, $option, $value);
+	}
+
+	public function startTls()
+	{
+		return ldap_start_tls($this->connection);
+	}
+
+	public function error()
+	{
+		return ldap_error($this->connection);
+	}
+
+	public function errno()
+	{
+		return ldap_errno($this->connection);
+	}
+
+	public function search(
+		$base,
+		$filter,
+		array $attributes = [],
+		$attributes_only = 0,
+		$sizelimit = -1,
+		$timelimit = -1
+	) {
+		return ldap_search(
+			$this->connection,
+			$base,
+			$filter,
+			$attributes,
+			$attributes_only,
+			$sizelimit,
+			$timelimit
+		);
+	}
+
+	public function getEntries($search_result)
+	{
+		return ldap_get_entries($this->connection, $search_result);
+	}
+
+	public static function escape(string $value, string $ignore = '', int $flags = 0): string
+	{
+		return ldap_escape($value, $ignore, $flags);
+	}
+}

wp-content/upgrade-temp-backup/plugins/authldap/src/Wrapper/LdapFactory.php

@@ -0,0 +1,24 @@
+<?php
+
+/**
+ * Copyright Andreas Heigl <andreas@heigl.org>
+ *
+ * Licenses under the MIT-license. For details see the included file LICENSE.md
+ */
+
+declare(strict_types=1);
+
+namespace Org_Heigl\AuthLdap\Wrapper;
+
+class LdapFactory
+{
+	public function createFromLdapUri(string $ldapUri): LdapInterface
+	{
+		return new Ldap($ldapUri);
+	}
+
+	public function escape($value, $ignore = '', $flags = 0): string
+	{
+		return Ldap::escape($value, $ignore, $flags);
+	}
+}

wp-content/upgrade-temp-backup/plugins/authldap/src/Wrapper/LdapInterface.php

@@ -0,0 +1,39 @@
+<?php
+
+/**
+ * Copyright Andreas Heigl <andreas@heigl.org>
+ *
+ * Licenses under the MIT-license. For details see the included file LICENSE.md
+ */
+
+declare(strict_types=1);
+
+namespace Org_Heigl\AuthLdap\Wrapper;
+
+interface LdapInterface
+{
+	public function bind($dn = null, $password = null);
+
+	public function unbind();
+
+	public function setOption($option, $value);
+
+	public function startTls();
+
+	public function error();
+
+	public function errno();
+
+	public function search(
+		$base,
+		$filter,
+		array $attributes = [],
+		$attributes_only = 0,
+		$sizelimit = -1,
+		$timelimit = -1
+	);
+
+	public function getEntries($search_result);
+
+	public static function escape(string $value, string $ignore = '', int $flags = 0): string;
+}