1 files changed, 80 insertions, 0 deletions
diff --git a/framework/Web/THiddenFieldPageStatePersister.php b/framework/Web/THiddenFieldPageStatePersister.php
new file mode 100644
index 00000000..3d305668
--- /dev/null
+++ b/framework/Web/THiddenFieldPageStatePersister.php
@@ -0,0 +1,80 @@
+<?php
+
+class THiddenFieldPageStatePersister extends TComponent implements IPageStatePersister, IModule
+{
+	private $_application;
+	private $_id='persister';
+
+	/**
+	 * Initializes the service.
+	 * This method is required by IModule interface.
+	 * @param TApplication application
+	 * @param TXmlElement module configuration
+	 */
+	public function init($application,$config)
+	{
+		$this->_application=$application;
+	}
+
+	/**
+	 * @return string id of this module
+	 */
+	public function getID()
+	{
+		return $this->_id;
+	}
+
+	/**
+	 * @param string id of this module
+	 */
+	public function setID($value)
+	{
+		$this->_id=$value;
+	}
+
+	public function save($state)
+	{
+		$data=Prado::serialize($state);
+		$hmac=$this->computeHMAC($data,$this->getKey());
+		if(function_exists('gzuncompress') && function_exists('gzcompress'))
+			$data=gzcompress($hmac.$data);
+		else
+			$data=$hmac.$data;
+		$this->_application->getService()->getRequestedPage()->saveStateField($data);
+	}
+
+	public function load()
+	{
+		$str=$this->_application->getService()->getRequestedPage()->loadStateField();
+		if($str==='')
+			return null;
+		if(function_exists('gzuncompress') && function_exists('gzcompress'))
+			$data=gzuncompress($str);
+		else
+			$data=$str;
+		if($data!==false && strlen($data)>32)
+		{
+			$hmac=substr($data,0,32);
+			$state=substr($data,32);
+			if($hmac===$this->computeHMAC($state,$this->getKey()))
+				return Prado::unserialize($state);
+		}
+		throw new Exception('viewstate data is corrupted.');
+	}
+
+	private function getKey()
+	{
+		return 'abcdefe';
+	}
+
+	private function computeHMAC($data,$key)
+	{
+		if (strlen($key) > 64)
+			$key = pack('H32', md5($key));
+		else if (strlen($key) < 64)
+			$key = str_pad($key, 64, "\0");
+		return md5((str_repeat("\x5c", 64) ^ substr($key, 0, 64)) . pack('H32', md5((str_repeat("\x36", 64) ^ substr($key, 0, 64)) . $data)));
+	}
+}
+
+?>
+\ No newline at end of file