updates to M3 module

Modules/M3/Http/Middleware/BasicAuth.php

@@ -0,0 +1,67 @@
+<?php
+
+namespace Modules\M3\Http\Middleware;
+
+use Closure;
+use Illuminate\Http\Request;
+
+class BasicAuth
+{
+    /**
+     * Handle an incoming request.
+     *
+     * @param  \Illuminate\Http\Request  $request
+     * @param  \Closure  $next
+     * @return mixed
+     */
+    public function handle(Request $request, Closure $next)
+    {
+
+        //select md5 or crypt for $mode. md5 is for md5 encoded passwords, crypt is for passwords encoded using apache's httpasswd
+        $mode = "crypt";
+        if (!m3_user() !== '') {
+            $this->authenticate();
+        } else {
+            if($this->check_pass(m3_user(), m3_legacy_password(), $mode, "%%SYSTEM%%")) {
+                return $next($request);
+            } else {
+                $this->authenticate();
+            }
+        }
+             
+    }
+
+    public static function check_pass($login, $password, $mode, $password_file) {
+        if(!$fh = fopen($password_file, "r")) { die("<P>Could Not Open Password File"); }
+        $match = 0;
+        while(!feof($fh)) {
+            $line = fgets($fh, 4096);
+            $from_file = explode(":", $line);
+            if($from_file[0] == $login) {
+                if($mode == "crypt"){
+                    $salt = substr($from_file[1],0,2);
+                    $user_pass = crypt($password,$salt);
+                } elseif ($mode == "md5") {
+                $user_pass = md5($password);
+                }
+                if(rtrim($from_file[1]) == $user_pass) {
+                    $match = 1;
+                    break;
+                }
+            }
+        }
+        if($match) {
+            return 1;
+        } else {
+            return 0;
+        }
+        fclose($fh);
+    }
+
+    public static function authenticate() {
+        Header("WWW-Authenticate: Basic realm=\"RESTRICTED ACCESS\"");
+        Header("HTTP/1.0 401 Unauthorized");
+        echo ("<h1>INVALID USERNAME OR PASSWORD. ACCESS DENIED<h1>");
+        exit;
+    }
+}