plugins/squirrelspell/modules/enc_setup.mod.php

   1 <?php
   2 /**
   3    ENC_SETUP.MOD.PHP
   4    -----------------
   5    This module shows the user a nice invitation to encrypt or decypt
   6    his/her personal dictionary and explains the caveats of such a decision.
   7                                                                 **/
   8 // Something for our friends with E_ALL for error_reporting:
   9 global $SQSPELL_CRYPTO;
  10
  11 $words=sqspell_getWords();
  12 if ($SQSPELL_CRYPTO){
  13  // Current format is encrypted.
  14  $msg = "<p>Your personal dictionary is <strong>currently encrypted</strong>. This
  15  helps protect your privacy in case the web-mail system gets compromized and your
  16  personal dictionary ends up stolen. It is currently encrypted with the password
  17  you use to access your mailbox, making it hard for anyone to see what is stored
  18  in your personal dictionary.</p>
  19  <p><strong>ATTENTION:</strong> If you forget your password, your personal dictionary
  20  will become unaccessible, since it can no longer be decrypted.
  21  If you change your mailbox password, SquirrelSpell will recognize it and prompt you for
  22  your old password in order to re-encrypt the dictionary with a new key.</p>
  23  <form method=\"post\" onsubmit=\"return checkMe()\">
  24   <input type=\"hidden\" name=\"MOD\" value=\"crypto\">
  25   <p align=\"center\"><input type=\"checkbox\" name=\"action\" value=\"decrypt\"> Please decrypt my personal
  26   dictionary and store it in a clear-text format.</p>
  27   <p align=\"center\"><input type=\"submit\" value=\" Change crypto settings \"></p>
  28  </form>
  29  ";
  30 } else {
  31  // current format is clear text.
  32  $msg = "<p>Your personal dictionary is <strong>currently not encrypted</strong>.
  33  You may wish to encrypt your personal dictionary to protect your privacy in case
  34  the webmail system gets compromized and your personal dictionary file gets stolen.
  35  When encrypted, the file's contents look garbled and are hard to decrypt without
  36  knowing the correct key (which is your mailbox password).</p>
  37  <strong>ATTENTION:</strong> If you decide to encrypt your personal dictionary,
  38  you must remember that it gets &quot;hashed&quot; with your mailbox password. If
  39  you forget your mailbox password and the administrator changes it to a new value,
  40  your personal dictionary will become useless and will have to be created anew.
  41  However, if you or your system administrator change your mailbox password but you
  42  still have the old password at hand, you will be able to enter the old key to
  43  re-encrypt the dictionary with the new value.</p>
  44  <form method=\"post\" onsubmit=\"return checkMe()\">
  45   <input type=\"hidden\" name=\"MOD\" value=\"crypto\">
  46   <p align=\"center\"><input type=\"checkbox\" name=\"action\" value=\"encrypt\"> Please encrypt my personal
  47   dictionary and store it in an encrypted format.</p>
  48   <p align=\"center\"><input type=\"submit\" value=\" Change crypto settings \"></p>
  49  </form>
  50  ";
  51 }
  52  sqspell_makePage("Personal Dictionary Crypto Settings", "crypto_settings.js", $msg);
  53 ?>