init

wp-content/plugins/mailpoet/lib/Subscribers/LinkTokens.php

@@ -0,0 +1,49 @@
+<?php declare(strict_types = 1);
+
+namespace MailPoet\Subscribers;
+
+if (!defined('ABSPATH')) exit;
+
+
+use MailPoet\Entities\SubscriberEntity;
+
+class LinkTokens {
+  private const OBSOLETE_LINK_TOKEN_LENGTH = 6;
+
+  /** @var SubscribersRepository */
+  private $subscribersRepository;
+
+  public function __construct(
+    SubscribersRepository $subscribersRepository
+  ) {
+    $this->subscribersRepository = $subscribersRepository;
+  }
+
+  public function getToken(SubscriberEntity $subscriber): string {
+    if ($subscriber->getLinkToken() === null) {
+      $subscriber->setLinkToken($this->generateToken($subscriber->getEmail()));
+      $this->subscribersRepository->flush();
+    }
+    return (string)$subscriber->getLinkToken();
+  }
+
+  public function verifyToken(SubscriberEntity $subscriber, string $token) {
+    $databaseToken = $this->getToken($subscriber);
+    $requestToken = substr($token, 0, strlen($databaseToken));
+    return hash_equals($databaseToken, $requestToken);
+  }
+
+  /**
+   * Only for backward compatibility for old tokens
+   */
+  private function generateToken(?string $email, int $length = self::OBSOLETE_LINK_TOKEN_LENGTH): ?string {
+    if ($email !== null) {
+      $authKey = '';
+      if (defined('AUTH_KEY')) {
+        $authKey = AUTH_KEY;
+      }
+      return substr(md5($authKey . $email), 0, $length);
+    }
+    return null;
+  }
+}