Generating an Encrypted URL for a Report

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
<h3>Please enter data then click on submit button</h3>
<?php
 $url = '';
 $secret = '';
 $user = '';
 $pass = '';
 if(isset($_GET['pass'])){
 $url = $_GET['url'];
 $secret = $_GET['secret'];
 $user = $_GET['user'];
 $password = $_GET['pass'];
 
 echo '<div style="padding: 10px; border: 1px solid #333; color: black; font-style: bold; margin-bottom: 15px;">Click <a href="' . concat_url($url, $user, $password, $secret) . '" target="_new">here</a> to jump to report.</div>';
}
?>
 
<form action="passgen.php" name="gen" type="post">
<input type="text" name="url" value="<?php echo $url;?>"> <b>URL</b>: copy/paste URL from a report (Properties/Link -without user credentials)<br>
<input type="text" name="secret" value="<?php echo $secret;?>"> <b>Secret</b>: copy/paste secret from "Jedox Suite\httpd\app\etc\config.php"<br>
<input type="text" name="user" value="<?php echo $user;?>"> <b>Username</b>: enter valid username<br>
<input type="text" name="pass" value="<?php echo $pass;?>"> <b>Password</b>: enter valid password<br>
<input type="submit">
<input type="reset"><br><b>
</form>
 
<?php
 function encrypt_password($password, $secret)
 {
 $iv = openssl_random_pseudo_bytes(16);
 $password = base64_encode($iv . openssl_encrypt($password, 'AES-128-CFB8', $secret, OPENSSL_RAW_DATA, $iv));
 $password = "\ta\t" . $password;
 $password = urlencode($password);
 return $password;
 }
 function concat_url($url, $username, $password, $secret)
 {
 return $url . '&user=' . $username . '&pass=' . encrypt_password($password, $secret);
 }
?>