aaron
/
pwtool
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Mysql/PDO working add.php

This commit is contained in:
Aaron Johnson 2022-03-23 07:26:17 -05:00
parent c0aa8c09f4
commit 5a4cefb3c2
1 changed files with 43 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

56
add.php Normal file → Executable file
View File

@ -17,7 +17,30 @@
</div> </div>
<div style="border: 1px solid #000000; text-align: left; padding: 8px;"> <div style="border: 1px solid #000000; text-align: left; padding: 8px;">
<?php <?php
try {
$pdo = new PDO(
'mysql:host=localhost;dbname=pwtool;charset=utf8',
'pwtool',
'BaVYtU9YqMyrp4qi',
[PDO::ATTR_EMULATE_PREPARES => false,
PDO::ATTR_ERRMODE => PDO::ERRMODE_EXCEPTION]
);
} catch (PDOException $failure) {
echo "Connection failed: " . $failure->getMessage();
};
/*$servername = "localhost";
$username = "pwtool";
$password = "BaVYtU9YqMyrp4qi";
// Create connection
$conn = mysqli_connect($servername, $username, $password);
// Check connection
if (!$conn) {
die("Connection failed: " . mysqli_connect_error());
}
echo "Connected successfully"; */
$displayForm = true; $displayForm = true;
if($_POST['adminPassword'] != ''){ if($_POST['adminPassword'] != ''){
@ -25,25 +48,32 @@
$newPassword = str_replace("'", '', trim($_POST['newPassword'])); $newPassword = str_replace("'", '', trim($_POST['newPassword']));
$adminPassword = md5(trim($_POST['adminPassword'])); $adminPassword = md5(trim($_POST['adminPassword']));
$dbConnection = pg_connect("host=localhost port=5432 dbname=mypasswd user=mypasswd password=passwdT00l"); //$dbConnection = pg_connect("host=localhost port=5432 dbname=mypasswd user=mypasswd password=passwdT00l");
$myLookup = pg_query($dbConnection, "SELECT id from password_delivery where id = 0 and key='".pg_escape_string($adminPassword)."';"); //$myLookup = $pdo->query("SELECT id from pwtool where id = 0 and code='".mysqli_real_escape_string($pdo, $adminPassword)."';");
$myLookup = $pdo->prepare("SELECT id from pwtool.mypasswd where id = 0 and code='($adminPassword)';");
$myLookup->execute();
//$myLookup = $pdo->query("SELECT id from pwtool.mypasswd where id = 0 and code='($adminPassword)';");
if(pg_num_rows($myLookup)){ $count = $myLookup->rowCount();
if($count == 1){
$displayForm = false; $displayForm = false;
$myLookup = pg_query($dbConnection, "BEGIN;"); //$pdo->query($dbConnection, "START TRANSACTION;;");
$myLookup = pg_query($dbConnection, "INSERT INTO password_delivery (key, password) $myLookup = $pdo->prepare("INSERT INTO pwtool.mypasswd (code, password) VALUES(sha2(CONCAT(rand(),rand(),rand()),256), '$newPassword');");
VALUES(md5('foobarfoo' || now()), '".pg_escape_string($newPassword)."');"); $myLookup->execute();
$myLookup = pg_query($dbConnection, "SELECT key
FROM password_delivery $myLookup = $pdo->prepare("SELECT code FROM pwtool.mypasswd WHERE id = LAST_INSERT_ID();");
WHERE id = currval('password_delivery_id_seq');"); $myLookup->execute();
$myKey = pg_fetch_result($myLookup, 0, 0);
$myLookup = pg_query($dbConnection, "COMMIT"); $myKey = $myLookup->fetch(PDO::FETCH_OBJ);
//pg_fetch_result($myLookup, 0, 0);
//$pdo->query($dbConnection, "COMMIT");
print '<p>Password insert succeeded. Here\'s the URL to fetch it:</p>'; print '<p>Password insert succeeded. Here\'s the URL to fetch it:</p>';
print '<p><a href="'.dirname($_SERVER['PHP_SELF']).'?key='.$myKey.'">link</a></p>'; print '<p><a href="'.dirname($_SERVER['PHP_SELF']).'?key='.$myKey->code.'">link</a></p>';
} }
else{ else{
@ -57,7 +87,7 @@
?> ?>
<form method="post" action="add.php"> <form method="post" action="add.php">
<table border="0" cellspacing="2" cellpadding="2"> <table border="0" cellspacing="2" cellpadding="2">
<tr> <tr>
<td>Admin Password:</td><td><input type="password" name="adminPassword" value="" /></td> <td>Admin Password:</td><td><input type="password" name="adminPassword" value="" /></td>
</tr> </tr>
<tr> <tr>