aaron
/
pwtool
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Various updates

This commit is contained in:
Aaron Johnson 2022-03-23 07:26:05 -05:00
parent b247afe638
commit c0aa8c09f4
3 changed files with 33 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
changeAdminPass.txt
View File

@ -1 +1,2 @@
update password_delivery set key = md5('your new password') where id = 0; insert into mypasswd.password_delivery (code) values MD5('1234');
update password_delivery set code = md5('your new password') where id = 0;

18
index.php Normal file → Executable file
View File

@ -17,18 +17,18 @@
</div> </div>
<div style="border: 1px solid #000000; text-align: left; padding: 8px;"> <div style="border: 1px solid #000000; text-align: left; padding: 8px;">
<?php <?php
$MyKey = preg_replace('/[^a-f0-9]/', '', trim($_GET['key'])); $MyKey = preg_replace('/[^a-f0-9]/', '', trim($_GET['key']));
$DBConnection = pg_connect("host=localhost port=5432 dbname=mypasswd user=mypasswd password=passwdT00l"); $DBConnection = pg_connect("host=localhost port=5432 dbname=mypasswd user=mypasswd password=passwdT00l");
if(($MyKey != '') and (strlen($MyKey) == 32)){ if(($MyKey != '') and (strlen($MyKey) == 32)){
$MyLookup = pg_query($DBConnection, "SELECT password, retrieved_ip, extract('epoch' from retrieved_time)::integer $MyLookup = pg_query($DBConnection, "SELECT password, retrieved_ip, extract('epoch' from retrieved_time)::integer
FROM password_delivery FROM mypasswd.password_delivery
WHERE key = '".pg_escape_string($MyKey)."'"); WHERE code = '".pg_escape_string($MyKey)."'");
if(pg_num_rows($MyLookup)){ if(pg_num_rows($MyLookup)){
$MyIP = pg_fetch_result($MyLookup,0,1); $MyIP = pg_fetch_result($MyLookup,0,1);
if($MyIP != ''){ if($MyIP != ''){
@ -42,14 +42,14 @@
.'might have been intercepted.</p>'; .'might have been intercepted.</p>';
} }
else{ else{
$MyPassword = pg_fetch_result($MyLookup,0,0); $MyPassword = pg_fetch_result($MyLookup,0,0);
$MyIP = $_SERVER['REMOTE_ADDR']; $MyIP = $_SERVER['REMOTE_ADDR'];
$MyLookup = pg_query($DBConnection, "UPDATE password_delivery $MyLookup = pg_query($DBConnection, "UPDATE mypasswd.password_delivery
SET retrieved_ip = '".pg_escape_string($MyIP)."', SET retrieved_ip = '".pg_escape_string($MyIP)."',
retrieved_time = 'now()', retrieved_time = 'now()',
password = '' password = ''
WHERE key = '".pg_escape_string($MyKey)."'"); WHERE code = '".pg_escape_string($MyKey)."'");
print '<p>Your password is:</p><p style="font-size: 18px; text-align: center;">'; print '<p>Your password is:</p><p style="font-size: 18px; text-align: center;">';
@ -57,7 +57,7 @@
print '<pre>'.$MyPassword.'</pre></p>'; print '<pre>'.$MyPassword.'</pre></p>';
} else { } else {
print '<strong>'.$MyPassword.'</strong></p>'; print '<strong>'.$MyPassword.'</strong></p>';
} }
print '<p>Do not hit reload on your browser. This URL is one-time use and will not show your passsword again.<p>'; print '<p>Do not hit reload on your browser. This URL is one-time use and will not show your passsword again.<p>';

22
notes.txt Normal file
View File

@ -0,0 +1,22 @@
# Create MySQL tables:
CREATE TABLE pwtool.mypasswd (
password VARCHAR(256) NULL,
`code` varchar(32) NOT NULL,
retrieved_ip varchar(39) NULL,
retireved_time TIMESTAMP NULL,
id BIGINT UNSIGNED auto_increment NOT NULL,
CONSTRAINT mypasswd_PK PRIMARY KEY (id)
)
ENGINE=InnoDB
DEFAULT CHARSET=utf8mb4
COLLATE=utf8mb4_bin;
CREATE INDEX mypasswd_id_IDX USING BTREE ON pwtool.mypasswd (id);
# create user:
CREATE USER 'pwtool'@'%';
ALTER USER 'pwtool'@'%'
IDENTIFIED BY 'BaVYtU9YqMyrp4qi' ;
GRANT Insert ON pwtool.mypasswd TO 'pwtool'@'%';
GRANT Select ON pwtool.mypasswd TO 'pwtool'@'%';
GRANT Update ON pwtool.mypasswd TO 'pwtool'@'%';