diff --git a/index.php b/index.php index 0034328..98069d4 100755 --- a/index.php +++ b/index.php @@ -20,20 +20,38 @@ $MyKey = preg_replace('/[^a-f0-9]/', '', trim($_GET['key'])); - $DBConnection = pg_connect("host=localhost port=5432 dbname=mypasswd user=mypasswd password=passwdT00l"); + //$DBConnection = pg_connect("host=localhost port=5432 dbname=mypasswd user=mypasswd password=passwdT00l"); + try { + $pdo = new PDO( + 'mysql:host=localhost;dbname=pwtool;charset=utf8', + 'pwtool', + 'BaVYtU9YqMyrp4qi', + [PDO::ATTR_EMULATE_PREPARES => false, + PDO::ATTR_ERRMODE => PDO::ERRMODE_EXCEPTION] + ); + } catch (PDOException $failure) { + echo "Connection failed: " . $failure->getMessage(); + }; if(($MyKey != '') and (strlen($MyKey) == 32)){ - $MyLookup = pg_query($DBConnection, "SELECT password, retrieved_ip, extract('epoch' from retrieved_time)::integer + $MyLookup = $pdo->prepare("SELECT password, retrieved_ip, retireved_time FROM pwtool.mypasswd WHERE code = '$MyKey'"); + $MyLookup->execute(); + /* $MyLookup = pg_query($DBConnection, "SELECT password, retrieved_ip, extract('epoch' from retrieved_time)::integer FROM mypasswd.password_delivery WHERE code = '".pg_escape_string($MyKey)."'"); - if(pg_num_rows($MyLookup)){ + */ + $count = $MyLookup->rowCount(); - $MyIP = pg_fetch_result($MyLookup,0,1); + if($count == 1){ + + $myRow = $MyLookup->fetch(PDO::FETCH_OBJ); + $MyIP = $myRow->retrieved_ip; if($MyIP != ''){ - $MyTime = date('l, F j Y G:i:s', pg_fetch_result($MyLookup, 0, 2)); + //$MyTime = date('l, F j Y G:i:s', $myRow->retireved_time); + $MyTime = $myRow->retireved_time; print '
Error: This key was valid for one-time ' .'use and is no longer valid.
It was already delivered to IP address ' @@ -43,13 +61,17 @@ } else{ - $MyPassword = pg_fetch_result($MyLookup,0,0); + //$MyPassword = pg_fetch_result($MyLookup,0,0); + $MyPassword = $myRow->password; $MyIP = $_SERVER['REMOTE_ADDR']; - $MyLookup = pg_query($DBConnection, "UPDATE mypasswd.password_delivery + $myUpdate = $pdo->prepare("UPDATE pwtool.mypasswd SET retrieved_ip = '$MyIP',retireved_time = now(),password = '' + WHERE code = '$MyKey'"); + $myUpdate->execute(); + /*$MyLookup = pg_query($DBConnection, "UPDATE mypasswd.password_delivery SET retrieved_ip = '".pg_escape_string($MyIP)."', retrieved_time = 'now()', password = '' - WHERE code = '".pg_escape_string($MyKey)."'"); + WHERE code = '".pg_escape_string($MyKey)."'");*/ print '
Your password is:
';