diff --git a/add.php b/add.php
old mode 100644
new mode 100755
index 8f03b77..e60ed33
--- a/add.php
+++ b/add.php
@@ -17,7 +17,30 @@
false,
+ PDO::ATTR_ERRMODE => PDO::ERRMODE_EXCEPTION]
+ );
+ } catch (PDOException $failure) {
+ echo "Connection failed: " . $failure->getMessage();
+ };
+/*$servername = "localhost";
+$username = "pwtool";
+$password = "BaVYtU9YqMyrp4qi";
+
+// Create connection
+$conn = mysqli_connect($servername, $username, $password);
+
+// Check connection
+if (!$conn) {
+ die("Connection failed: " . mysqli_connect_error());
+}
+echo "Connected successfully"; */
$displayForm = true;
if($_POST['adminPassword'] != ''){
@@ -25,25 +48,32 @@
$newPassword = str_replace("'", '', trim($_POST['newPassword']));
$adminPassword = md5(trim($_POST['adminPassword']));
- $dbConnection = pg_connect("host=localhost port=5432 dbname=mypasswd user=mypasswd password=passwdT00l");
+ //$dbConnection = pg_connect("host=localhost port=5432 dbname=mypasswd user=mypasswd password=passwdT00l");
- $myLookup = pg_query($dbConnection, "SELECT id from password_delivery where id = 0 and key='".pg_escape_string($adminPassword)."';");
+ //$myLookup = $pdo->query("SELECT id from pwtool where id = 0 and code='".mysqli_real_escape_string($pdo, $adminPassword)."';");
+ $myLookup = $pdo->prepare("SELECT id from pwtool.mypasswd where id = 0 and code='($adminPassword)';");
+ $myLookup->execute();
+ //$myLookup = $pdo->query("SELECT id from pwtool.mypasswd where id = 0 and code='($adminPassword)';");
- if(pg_num_rows($myLookup)){
+ $count = $myLookup->rowCount();
+
+ if($count == 1){
$displayForm = false;
- $myLookup = pg_query($dbConnection, "BEGIN;");
- $myLookup = pg_query($dbConnection, "INSERT INTO password_delivery (key, password)
- VALUES(md5('foobarfoo' || now()), '".pg_escape_string($newPassword)."');");
- $myLookup = pg_query($dbConnection, "SELECT key
- FROM password_delivery
- WHERE id = currval('password_delivery_id_seq');");
- $myKey = pg_fetch_result($myLookup, 0, 0);
- $myLookup = pg_query($dbConnection, "COMMIT");
+ //$pdo->query($dbConnection, "START TRANSACTION;;");
+ $myLookup = $pdo->prepare("INSERT INTO pwtool.mypasswd (code, password) VALUES(sha2(CONCAT(rand(),rand(),rand()),256), '$newPassword');");
+ $myLookup->execute();
+
+ $myLookup = $pdo->prepare("SELECT code FROM pwtool.mypasswd WHERE id = LAST_INSERT_ID();");
+ $myLookup->execute();
+
+ $myKey = $myLookup->fetch(PDO::FETCH_OBJ);
+ //pg_fetch_result($myLookup, 0, 0);
+ //$pdo->query($dbConnection, "COMMIT");
print '
Password insert succeeded. Here\'s the URL to fetch it:
';
- print '
link
';
+ print '
link
';
}
else{
@@ -57,7 +87,7 @@
?>