File: rest-login.php

Page Details:

To access, first browse to rest-login.php/getsalt and retrieve a salt plus the session idea from the HTTP response headers. Then, use the salt to create a new hash of the hashed password and send a POST request to rest-login.php/validate and the response will be returned in plain text. If the first character returned is "8" then the login succeeded. 1-6 are internal errors, 0 and 7 are invalid logins.

Here is some sample code for a client to access this server:

 <?php

 $user = 'username';
 $password = 'password';
 
 $salt = file_get_contents('https://pear.php.net/rest-login.php/getsalt');
 $cookies = array_values(preg_grep('/Set-Cookie:/', $http_response_header));
 preg_match('/PHPSESSID=(.+); /', $cookies[0], $session);
 $pass = md5($salt . md5($password));
 $opts = array('http' => array(
     'method' => 'POST',
     'header' => 'Cookie: PHPSESSID=' . $session[1] . ';',
     'content' => http_build_query(array('username' => $user, 'password' => $pass))
 ));
 $context = stream_context_create($opts);
 var_dump(file_get_contents('https://pear.php.net/rest-login.php/validate', false, $context));
 ?>