79 lines
2.4 KiB
PHP
79 lines
2.4 KiB
PHP
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
|
|
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
|
<html xmlns="http://www.w3.org/1999/xhtml">
|
|
<head>
|
|
<title>Password Fetch tool</title>
|
|
<style type="text/css">
|
|
body{
|
|
padding: 32px;
|
|
}
|
|
</style>
|
|
</head>
|
|
<body style="width: 500px; margin: auto; font-family: Verdana, Geneva, sans-serif; font-size: 14px;">
|
|
<br /><br />
|
|
<div align="center" style="width: 500px">
|
|
<div style="border: 1px solid #000000; text-align: center; background: #486b92; font-size: 20px; color: #ffffff;">
|
|
<strong>AJServer password retrieval</strong>
|
|
</div>
|
|
<div style="border: 1px solid #000000; text-align: left; padding: 8px;">
|
|
<?php
|
|
|
|
$displayForm = true;
|
|
|
|
if($_POST['adminPassword'] != ''){
|
|
|
|
$newPassword = str_replace("'", '', trim($_POST['newPassword']));
|
|
$adminPassword = md5(trim($_POST['adminPassword']));
|
|
|
|
$dbConnection = pg_connect("host=localhost port=5432 dbname=mypasswd user=mypasswd password=passwdT00l");
|
|
|
|
$myLookup = pg_query($dbConnection, "SELECT id from password_delivery where id = 0 and key='".pg_escape_string($adminPassword)."';");
|
|
|
|
if(pg_num_rows($myLookup)){
|
|
|
|
$displayForm = false;
|
|
|
|
$myLookup = pg_query($dbConnection, "BEGIN;");
|
|
$myLookup = pg_query($dbConnection, "INSERT INTO password_delivery (key, password)
|
|
VALUES(md5('foobarfoo' || now()), '".pg_escape_string($newPassword)."');");
|
|
$myLookup = pg_query($dbConnection, "SELECT key
|
|
FROM password_delivery
|
|
WHERE id = currval('password_delivery_id_seq');");
|
|
$myKey = pg_fetch_result($myLookup, 0, 0);
|
|
$myLookup = pg_query($dbConnection, "COMMIT");
|
|
|
|
print '<p>Password insert succeeded. Here\'s the URL to fetch it:</p>';
|
|
print '<p><a href="'.dirname($_SERVER['PHP_SELF']).'?key='.$myKey.'">link</a></p>';
|
|
|
|
}
|
|
else{
|
|
print '<p>Nope, not here: '.$adminPassword.'</p>';
|
|
}
|
|
|
|
}
|
|
|
|
if($displayForm){
|
|
|
|
?>
|
|
<form method="post" action="add.php">
|
|
<table border="0" cellspacing="2" cellpadding="2">
|
|
<tr>
|
|
<td>Admin Password:</td><td><input type="password" name="adminPassword" value="" /></td>
|
|
</tr>
|
|
<tr>
|
|
<td>New Password:</td><td><input type="text" name="newPassword" value="" /></td>
|
|
</tr>
|
|
<tr>
|
|
<td colspan="2"><input type="submit" name="submit" value="Submit" /></td>
|
|
</tr>
|
|
</table>
|
|
</form>
|
|
<?php
|
|
}
|
|
?>
|
|
</div>
|
|
</div>
|
|
<br /><br />
|
|
</body>
|
|
</html>
|