Gecko [ 37julay.space ]

Name	Size	Permission	Date
images	[ DIR ]	drwxr-xr-x	2025-08-20 08:04
php53	[ DIR ]	drwxr-xr-x	2025-08-20 08:04
php56	[ DIR ]	drwxr-xr-x	2025-08-20 08:04
php71	[ DIR ]	drwxr-xr-x	2025-08-20 08:04
php81	[ DIR ]	drwxr-xr-x	2025-08-20 08:04
php82	[ DIR ]	drwxr-xr-x	2025-08-20 08:04
.env	11.94 KB	-rw-r--r--	2025-07-01 21:17
.htaccess	371 B	-rw-r--r--	2025-06-20 01:02
changelog.txt	7.65 KB	-rw-r--r--	2025-08-18 22:15
clone.php	7.87 KB	-rw-r--r--	2025-08-19 02:34
edit.php	4.46 KB	-rw-r--r--	2025-08-19 02:34
edit.xml	447 B	-rw-r--r--	2021-12-23 00:54
extend.php	9.92 KB	-rw-r--r--	2025-08-19 02:34
fileindex.php	313 B	-rw-r--r--	2025-08-18 02:06
firefly.sql	90.81 KB	-rw-r--r--	2025-08-18 22:15
firefly.zip	25.69 MB	-rw-r--r--	2025-08-18 22:15
import.php	2.97 KB	-rw-r--r--	2025-08-19 02:34
info.xml	4.11 KB	-rw-r--r--	2025-08-18 22:15
install.js	924 B	-rw-r--r--	2021-12-23 00:54
install.php	5.99 KB	-rw-r--r--	2025-08-19 02:34
install.xml	1.5 KB	-rw-r--r--	2021-12-23 00:54
md5	1.98 KB	-rw-r--r--	2025-08-19 02:34
notes.txt	1.6 KB	-rw-r--r--	2025-02-03 20:42
oauth-private.key	16 B	-rw-r--r--	2021-12-23 00:54
oauth-public.key	15 B	-rw-r--r--	2021-12-23 00:54
update_keys.php	2.1 KB	-rw-r--r--	2025-07-17 23:45
update_pass.php	516 B	-rw-r--r--	2021-12-23 00:54
upgrade.php	6.7 KB	-rw-r--r--	2025-08-19 02:34
upgrade.xml	617 B	-rw-r--r--	2021-12-23 00:54

Rename

<?php

global $key, $error;

$key = base64_decode('[[APP_KEY]]');

//Required to autoload the namespaces
require_once '../vendor/autoload.php';

use Ramsey\Uuid\Uuid;
use phpseclib3\Crypt\RSA;

$uuid5 = (string)Uuid::uuid5(Uuid::NAMESPACE_URL, 'firefly-iii.org');

//This is to generate public and private key pairs(of 4096 bits) using phpseclib's RSA class's createKey() function and store the keys in database

$keys = array();

$keys = RSA::createKey(4096);

$public_key = (string)$keys->getPublicKey();

$private_key = (string)$keys;

echo '<private_key>'.$private_key.'</private_key>';
echo '<public_key>'.$public_key.'</public_key>';

//Encrypting the keys
$uuid5_enc =  json_encode($uuid5);
$private_key_enc =  json_encode(__encrypt($private_key));
$public_key_enc =  json_encode(__encrypt($public_key));

echo '<installation_id>'.$uuid5_enc.'</installation_id>';
echo '<private_key_enc>'.$private_key_enc.'</private_key_enc>';
echo '<public_key_enc>'.$public_key_enc.'</public_key_enc>';

function __encrypt($value, $serialize = true)
{
	global $key, $error;
	$cipher = 'AES-256-CBC';
	//$this->cipher
	$iv = random_bytes(openssl_cipher_iv_length($cipher));

// First we will encrypt the value using OpenSSL. After this is encrypted we
	// will proceed to calculating a MAC for the encrypted value so that this
	// value can be verified later as not having been changed by the users.
	$value = openssl_encrypt(
		$serialize ? serialize($value) : $value,
		$cipher, $key, 0, $iv
	);

if ($value === false) {
		$error[] = 'Could not encrypt the data.';
	}

// Once we get the encrypted value we'll go ahead and base64_encode the input
	// vector and create the MAC for the encrypted value so we can then verify
	// its authenticity. Then, we'll JSON the data into the "payload" array.
	$mac = __hash($iv = base64_encode($iv), $value);

$json = json_encode(compact('iv', 'value', 'mac'));

if (json_last_error() !== JSON_ERROR_NONE) {
		$error[] = 'Could not encrypt the data.';
	}

return base64_encode($json);
}

function __hash($iv, $value)
{
	global $key;
	return hash_hmac('sha256', $iv.$value, $key);
}

@unlink('update_keys.php');