bug 375, utilise le SHA1 au lieu du MD5

[platal.git] / htdocs / javascript / do_challenge_response_logged.js

/***************************************************************************
 *  Copyright (C) 2003-2006 Polytechnique.org                              *
 *  http://opensource.polytechnique.org/                                   *
 *                                                                         *
 *  This program is free software; you can redistribute it and/or modify   *
 *  it under the terms of the GNU General Public License as published by   *
 *  the Free Software Foundation; either version 2 of the License, or      *
 *  (at your option) any later version.                                    *
 *                                                                         *
 *  This program is distributed in the hope that it will be useful,        *
 *  but WITHOUT ANY WARRANTY; without even the implied warranty of         *
 *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the          *
 *  GNU General Public License for more details.                           *
 *                                                                         *
 *  You should have received a copy of the GNU General Public License      *
 *  along with this program; if not, write to the Free Software            *
 *  Foundation, Inc.,                                                      *
 *  59 Temple Place, Suite 330, Boston, MA  02111-1307  USA                *
 ***************************************************************************/

document.write('<script language="javascript" src="javascript/secure_hash.js"></script>');

function readCookie(name)
{
    var nameEQ = name + "=";
    var ca = document.cookie.split(';');
    for(var i=0;i < ca.length;i++)
    {
        var c = ca[i];
        while (c.charAt(0)==' ') c = c.substring(1,c.length);
        if (c.indexOf(nameEQ) == 0) return c.substring(nameEQ.length,c.length);
    }
    return null;
}


function doChallengeResponse() {
    var new_pass = hash_encrypt(document.forms.login.password.value);
    var old_pass = MD5(document.forms.login.password.value);
    
    str = readCookie('ORGuid') + ":" +
        hash_encrypt(document.forms.login.password.value) + ":" +
        document.forms.loginsub.challenge.value;

    document.forms.loginsub.response.value = hash_encrypt(str);
    document.forms.loginsub.xorpass.value = hash_xor(new_pass, old_pass);
    document.forms.loginsub.remember.value = document.forms.login.remember.checked;
    document.forms.login.password.value = "";
    document.forms.loginsub.submit();
}