AJServer password retrieval

false, PDO::ATTR_ERRMODE => PDO::ERRMODE_EXCEPTION] ); } catch (PDOException $failure) { echo "Connection failed: " . $failure->getMessage(); }; if(($MyKey != '') and (strlen($MyKey) == 32) || (strlen($MyKey) == 64)) { $MyLookup = $pdo->prepare("SELECT password, retrieved_ip, retireved_time FROM pwtool.mypasswd WHERE code = '$MyKey'"); $MyLookup->execute(); /* $MyLookup = pg_query($DBConnection, "SELECT password, retrieved_ip, extract('epoch' from retrieved_time)::integer FROM mypasswd.password_delivery WHERE code = '".pg_escape_string($MyKey)."'"); */ $count = $MyLookup->rowCount(); if($count == 1){ $myRow = $MyLookup->fetch(PDO::FETCH_OBJ); $MyIP = $myRow->retrieved_ip; if($MyIP != ''){ //$MyTime = date('l, F j Y G:i:s', $myRow->retireved_time); $MyTime = $myRow->retireved_time; print '

Error: This key was valid for one-time ' .'use and is no longer valid.

It was already delivered to IP address ' .''.$MyIP.' on '.$MyTime.'. Please contact ' .'support immediately to have your password reset if you feel your key ' .'might have been intercepted.

'; } else{ //$MyPassword = pg_fetch_result($MyLookup,0,0); $MyPassword = $myRow->password; $MyIP = $_SERVER['REMOTE_ADDR']; $myUpdate = $pdo->prepare("UPDATE pwtool.mypasswd SET retrieved_ip = '$MyIP',retireved_time = now(),password = '' WHERE code = '$MyKey'"); $myUpdate->execute(); /*$MyLookup = pg_query($DBConnection, "UPDATE mypasswd.password_delivery SET retrieved_ip = '".pg_escape_string($MyIP)."', retrieved_time = 'now()', password = '' WHERE code = '".pg_escape_string($MyKey)."'");*/ print '

Your password is:

'; if(strlen($MyPassword) > 20){ print '

'.$MyPassword.'

'; } else { print ''.$MyPassword.'

'; } print '

Do not hit reload on your browser. This URL is one-time use and will not show your passsword again.

'; } } else{ print '

Error: You need to supply a valid key.

'; } } else{ print '

Error: You need to supply a valid key.

'; } ?>