From 5a4cefb3c2dad914e63c73498ce66085a269ad6b Mon Sep 17 00:00:00 2001
From: Aaron Johnson <aaronjohnson@ajserver.com>
Date: Wed, 23 Mar 2022 07:26:17 -0500
Subject: [PATCH] Mysql/PDO working add.php

---
 add.php | 56 +++++++++++++++++++++++++++++++++++++++++++-------------
 1 file changed, 43 insertions(+), 13 deletions(-)
 mode change 100644 => 100755 add.php

diff --git a/add.php b/add.php
old mode 100644
new mode 100755
index 8f03b77..e60ed33
--- a/add.php
+++ b/add.php
@@ -17,7 +17,30 @@
 </div>
 <div style="border: 1px solid #000000; text-align: left; padding: 8px;">
 <?php
+try {
+		$pdo = new PDO(
+		    'mysql:host=localhost;dbname=pwtool;charset=utf8',
+		    'pwtool',
+		    'BaVYtU9YqMyrp4qi',
+				[PDO::ATTR_EMULATE_PREPARES => false,
+       PDO::ATTR_ERRMODE => PDO::ERRMODE_EXCEPTION]
+		);
+	} catch (PDOException $failure) {
+  	echo "Connection failed: " . $failure->getMessage();
+	};
 
+/*$servername = "localhost";
+$username = "pwtool";
+$password = "BaVYtU9YqMyrp4qi";
+
+// Create connection
+$conn = mysqli_connect($servername, $username, $password);
+
+// Check connection
+if (!$conn) {
+  die("Connection failed: " . mysqli_connect_error());
+}
+echo "Connected successfully"; */
 	$displayForm = true;
 
 	if($_POST['adminPassword'] != ''){
@@ -25,25 +48,32 @@
 		$newPassword = str_replace("'", '', trim($_POST['newPassword']));
 		$adminPassword = md5(trim($_POST['adminPassword']));
 
-		$dbConnection = pg_connect("host=localhost port=5432 dbname=mypasswd user=mypasswd password=passwdT00l");
+		//$dbConnection = pg_connect("host=localhost port=5432 dbname=mypasswd user=mypasswd password=passwdT00l");
 
-		$myLookup = pg_query($dbConnection, "SELECT id from password_delivery where id = 0 and key='".pg_escape_string($adminPassword)."';");
+		//$myLookup = $pdo->query("SELECT id from pwtool where id = 0 and code='".mysqli_real_escape_string($pdo, $adminPassword)."';");
+		$myLookup = $pdo->prepare("SELECT id from pwtool.mypasswd where id = 0 and code='($adminPassword)';");
+		$myLookup->execute();
+		//$myLookup = $pdo->query("SELECT id from pwtool.mypasswd where id = 0 and code='($adminPassword)';");
 
-		if(pg_num_rows($myLookup)){
+		$count = $myLookup->rowCount();
+
+		if($count == 1){
 
 			$displayForm = false;
 
-			$myLookup = pg_query($dbConnection, "BEGIN;");
-			$myLookup = pg_query($dbConnection, "INSERT INTO password_delivery (key, password) 
-												 VALUES(md5('foobarfoo' || now()), '".pg_escape_string($newPassword)."');");
-			$myLookup = pg_query($dbConnection, "SELECT key 
-												   FROM password_delivery 
-                                                  WHERE id = currval('password_delivery_id_seq');");
-			$myKey = pg_fetch_result($myLookup, 0, 0);
-			$myLookup = pg_query($dbConnection, "COMMIT");
+			//$pdo->query($dbConnection, "START TRANSACTION;;");
+			$myLookup = $pdo->prepare("INSERT INTO pwtool.mypasswd (code, password) VALUES(sha2(CONCAT(rand(),rand(),rand()),256), '$newPassword');");
+			$myLookup->execute();
+
+			$myLookup = $pdo->prepare("SELECT code FROM pwtool.mypasswd WHERE id = LAST_INSERT_ID();");
+			$myLookup->execute();
+
+			$myKey = $myLookup->fetch(PDO::FETCH_OBJ);
+			//pg_fetch_result($myLookup, 0, 0);
+			//$pdo->query($dbConnection, "COMMIT");
 
 			print '<p>Password insert succeeded. Here\'s the URL to fetch it:</p>';
-			print '<p><a href="'.dirname($_SERVER['PHP_SELF']).'?key='.$myKey.'">link</a></p>';
+			print '<p><a href="'.dirname($_SERVER['PHP_SELF']).'?key='.$myKey->code.'">link</a></p>';
 
 		}
 		else{
@@ -57,7 +87,7 @@
 ?>
 	<form method="post" action="add.php">
 		<table border="0" cellspacing="2" cellpadding="2">
-			<tr> 
+			<tr>
 				<td>Admin Password:</td><td><input type="password" name="adminPassword" value="" /></td>
 			</tr>
 			<tr>