From b43534c33cec426e6e5dbea6c901f94c6f31b254 Mon Sep 17 00:00:00 2001 From: Gab <24553253+gabrix73@users.noreply.github.com> Date: Wed, 29 Oct 2025 00:22:33 +0100 Subject: Delete send_email_with_tor.php --- send_email_with_tor.php | 444 ------------------------------------------------ 1 file changed, 444 deletions(-) delete mode 100644 send_email_with_tor.php diff --git a/send_email_with_tor.php b/send_email_with_tor.php deleted file mode 100644 index 8bf6d2e..0000000 --- a/send_email_with_tor.php +++ /dev/null @@ -1,444 +0,0 @@ -secureDir)) { - mkdir($this->secureDir, 0700, true); - } - - // Initialize replay cache DB - $this->initReplayCache(); - } - - /** - * Main send function - */ - public function sendEmail($postData) { - // Extract and validate input (no storage of raw data) - $validated = $this->validateInput($postData); - if ($validated['errors']) { - return ['success' => false, 'errors' => $validated['errors']]; - } - - $data = $validated['data']; - - // Generate message-ID for replay protection - $messageId = $this->generateMessageId($data); - - // Check for replay attack - if ($this->isReplay($messageId)) { - return [ - 'success' => false, - 'errors' => ['This message has already been sent recently'] - ]; - } - - // Build message content - $messageContent = $this->buildMessage($data); - - // Apply adaptive padding - $paddedMessage = $this->applyAdaptivePadding($messageContent); - - // Create secure temporary file - $messageFile = $this->createSecureMessageFile($paddedMessage); - - if (!$messageFile) { - return [ - 'success' => false, - 'errors' => ['Failed to create secure message file'] - ]; - } - - // Random delay to prevent timing correlation - $this->randomDelay(); - - // Build chain - $chain = implode(',', [ - $data['entry_remailer'], - $data['middle_remailer'], - $data['exit_remailer'] - ]); - - // Send via YAMN with Tor (always enforced) - try { - $result = sendYamnEmailSecure( - $chain, - $data['copies'], - $messageFile, - true // Force Tor - ); - - // Store message-ID in replay cache only if successful - if ($result['success']) { - $this->storeMessageId($messageId); - } - - return $result; - - } catch (Exception $e) { - // No detailed error logging - return [ - 'success' => false, - 'errors' => ['Failed to send message'] - ]; - } finally { - // ALWAYS secure delete the file - $this->secureDeleteFile($messageFile); - } - } - - /** - * Validate input without storing sensitive data - */ - private function validateInput($post) { - $errors = []; - $data = []; - - // Required fields - $required = ['to', 'from', 'subject', 'entry_remailer', 'middle_remailer', 'exit_remailer']; - foreach ($required as $field) { - if (empty($post[$field])) { - $errors[] = ucfirst(str_replace('_', ' ', $field)) . " is required"; - } else { - $data[$field] = $post[$field]; - } - } - - // Optional fields - $optional = ['reply_to', 'newsgroups', 'references', 'data']; - foreach ($optional as $field) { - $data[$field] = isset($post[$field]) ? $post[$field] : ''; - } - - // Validate copies - $copies = isset($post['copies']) ? intval($post['copies']) : 1; - if ($copies < 1 || $copies > 3) { - $errors[] = "Number of copies must be between 1 and 3"; - } - $data['copies'] = $copies; - - // Check Tor availability - if (!isTorAvailable()) { - $errors[] = "Tor is required but not available"; - } - - // Email validation - if (!empty($data['to']) && !filter_var($data['to'], FILTER_VALIDATE_EMAIL)) { - $errors[] = "Invalid recipient email address"; - } - - if (!empty($data['from']) && !filter_var($data['from'], FILTER_VALIDATE_EMAIL)) { - $errors[] = "Invalid sender email address"; - } - - return [ - 'errors' => $errors, - 'data' => $data - ]; - } - - /** - * Generate deterministic message-ID for replay detection - */ - private function generateMessageId($data) { - // Use hash of critical fields (not entire message to allow minor variations) - $critical = $data['to'] . '|' . - $data['from'] . '|' . - $data['subject'] . '|' . - substr($data['data'], 0, 100); // First 100 chars of body - - return hash('sha256', $critical); - } - - /** - * Initialize SQLite DB for replay protection - */ - private function initReplayCache() { - try { - $db = new SQLite3($this->replayCache); - $db->exec('CREATE TABLE IF NOT EXISTS message_cache ( - message_id TEXT PRIMARY KEY, - timestamp INTEGER NOT NULL - )'); - - // Create index for faster lookups - $db->exec('CREATE INDEX IF NOT EXISTS idx_timestamp ON message_cache(timestamp)'); - - $db->close(); - } catch (Exception $e) { - // Fail silently - replay protection optional - } - } - - /** - * Check if message is a replay - */ - private function isReplay($messageId) { - try { - $db = new SQLite3($this->replayCache); - - // Clean old entries - $expiration = time() - $this->replayCacheTTL; - $db->exec("DELETE FROM message_cache WHERE timestamp < $expiration"); - - // Check if message-ID exists - $stmt = $db->prepare('SELECT message_id FROM message_cache WHERE message_id = :id'); - $stmt->bindValue(':id', $messageId, SQLITE3_TEXT); - $result = $stmt->execute(); - - $exists = $result->fetchArray() !== false; - - $db->close(); - return $exists; - - } catch (Exception $e) { - // If cache fails, allow message (better than blocking legitimate use) - return false; - } - } - - /** - * Store message-ID in cache - */ - private function storeMessageId($messageId) { - try { - $db = new SQLite3($this->replayCache); - - $stmt = $db->prepare('INSERT OR IGNORE INTO message_cache (message_id, timestamp) VALUES (:id, :ts)'); - $stmt->bindValue(':id', $messageId, SQLITE3_TEXT); - $stmt->bindValue(':ts', time(), SQLITE3_INTEGER); - $stmt->execute(); - - $db->close(); - } catch (Exception $e) { - // Fail silently - } - } - - /** - * Build message with proper headers - */ - private function buildMessage($data) { - $headers = "Content-Type: text/plain; charset=utf-8\n"; - $headers .= "Content-Transfer-Encoding: 8bit\n"; - $headers .= "MIME-Version: 1.0\n"; - - if (!empty($data['references'])) { - $headers .= "References: {$data['references']}\n"; - } - - $message = $headers . "From: {$data['from']}\n"; - - if (!empty($data['reply_to'])) { - $message .= "Reply-To: {$data['reply_to']}\n"; - } - - $message .= "To: {$data['to']}\n"; - $message .= "Subject: {$data['subject']}\n"; - - if (!empty($data['newsgroups'])) { - $message .= "Newsgroups: {$data['newsgroups']}\n"; - } - - $message .= "\n{$data['data']}"; - - return $message; - } - - /** - * Apply adaptive padding to prevent size correlation - */ - private function applyAdaptivePadding($message) { - $currentSize = strlen($message); - - // Find next padding size - $targetSize = $currentSize; - foreach ($this->paddingSizes as $size) { - if ($size >= $currentSize) { - $targetSize = $size; - break; - } - } - - // If message is larger than max padding size, round up to next 32KB - if ($currentSize >= max($this->paddingSizes)) { - $targetSize = ceil($currentSize / 32768) * 32768; - } - - // Generate random padding - $paddingSize = $targetSize - $currentSize; - if ($paddingSize > 0) { - // Use printable random characters for padding - $padding = "\n\n--- Padding ---\n"; - $padding .= base64_encode(random_bytes($paddingSize - strlen($padding))); - $message .= $padding; - } - - return $message; - } - - /** - * Create secure temporary file - */ - private function createSecureMessageFile($content) { - // Generate cryptographically secure random filename - $filename = bin2hex(random_bytes(32)) . '.tmp'; - $filepath = $this->secureDir . '/' . $filename; - - // Write with exclusive lock and restrictive permissions - $fp = fopen($filepath, 'w'); - if (!$fp) { - return false; - } - - flock($fp, LOCK_EX); - fwrite($fp, $content); - flock($fp, LOCK_UN); - fclose($fp); - - // Set restrictive permissions - chmod($filepath, 0600); - - return $filepath; - } - - /** - * Random delay to prevent timing attacks - */ - private function randomDelay() { - $delay = random_int($this->minDelay, $this->maxDelay); - sleep($delay); - } - - /** - * Secure file deletion (DoD 5220.22-M standard) - */ - private function secureDeleteFile($filepath) { - if (!file_exists($filepath)) { - return; - } - - $filesize = filesize($filepath); - - // Overwrite with random data 3 times - for ($i = 0; $i < 3; $i++) { - $fp = fopen($filepath, 'w'); - if ($fp) { - fwrite($fp, random_bytes($filesize)); - fclose($fp); - } - } - - // Overwrite with zeros - $fp = fopen($filepath, 'w'); - if ($fp) { - fwrite($fp, str_repeat("\0", $filesize)); - fclose($fp); - } - - // Finally delete - unlink($filepath); - } - - /** - * Render success response (minimal info) - */ - public function renderSuccess() { - return " - - - - - Message Queued - - - -
-

Message queued successfully

-

Your message has been added to the anonymous sending queue.

- Return -
- - "; - } - - /** - * Render error response (minimal info) - */ - public function renderError($errors) { - $errorList = ''; - foreach ($errors as $error) { - $errorList .= "
  • " . htmlspecialchars($error) . "
    • "; - } - - return " - - - - - Error - - - -
    -

    Unable to process request

    - - Back -
    - - "; - } -} - -// Main execution -if ($_SERVER['REQUEST_METHOD'] !== 'POST') { - header("Location: index.php"); - exit; -} - -try { - $sender = new SecureYamnSender(); - $result = $sender->sendEmail($_POST); - - if ($result['success']) { - echo $sender->renderSuccess(); - } else { - echo $sender->renderError($result['errors']); - } - -} catch (Exception $e) { - // Generic error - no details leaked - echo (new SecureYamnSender())->renderError(['An error occurred. Please try again.']); -} -?> -- cgit v1.2.3