Gecko [ www.vortexaion.com ]

Name	Size	Permission	Date
Charsets	[ DIR ]	drwxrwxrwx	2024-07-26 17:41
Command	[ DIR ]	drwxrwxrwx	2024-07-26 17:41
Config	[ DIR ]	drwxrwxrwx	2024-07-26 17:41
ConfigStorage	[ DIR ]	drwxrwxrwx	2024-07-26 17:41
Controllers	[ DIR ]	drwxrwxrwx	2024-07-26 17:41
Crypto	[ DIR ]	drwxrwxrwx	2024-07-26 17:41
Database	[ DIR ]	drwxrwxrwx	2024-07-26 17:41
Dbal	[ DIR ]	drwxrwxrwx	2024-07-26 17:41
Display	[ DIR ]	drwxrwxrwx	2024-07-26 17:41
Engines	[ DIR ]	drwxrwxrwx	2024-07-26 17:41
Exceptions	[ DIR ]	drwxrwxrwx	2024-07-26 17:41
Export	[ DIR ]	drwxrwxrwx	2024-07-26 17:41
Gis	[ DIR ]	drwxrwxrwx	2024-07-26 17:41
Html	[ DIR ]	drwxrwxrwx	2024-07-26 17:41
Http	[ DIR ]	drwxrwxrwx	2024-07-26 17:41
Image	[ DIR ]	drwxrwxrwx	2024-07-26 17:41
Import	[ DIR ]	drwxrwxrwx	2024-07-26 17:41
Navigation	[ DIR ]	drwxrwxrwx	2024-07-26 17:41
Partitioning	[ DIR ]	drwxrwxrwx	2024-07-26 17:41
Plugins	[ DIR ]	drwxrwxrwx	2024-07-26 17:41
Properties	[ DIR ]	drwxrwxrwx	2024-07-26 17:41
Providers	[ DIR ]	drwxrwxrwx	2024-07-26 17:40
Query	[ DIR ]	drwxrwxrwx	2024-07-26 17:41
Server	[ DIR ]	drwxrwxrwx	2024-07-26 17:41
Setup	[ DIR ]	drwxrwxrwx	2024-07-26 17:41
Table	[ DIR ]	drwxrwxrwx	2024-07-26 17:41
Twig	[ DIR ]	drwxrwxrwx	2024-07-26 17:41
Utils	[ DIR ]	drwxrwxrwx	2024-07-26 17:41
WebAuthn	[ DIR ]	drwxrwxrwx	2024-07-26 17:41
Advisor.php	12.32 KB	-rw-rw-rw-	2023-02-07 22:26
Bookmark.php	9.19 KB	-rw-rw-rw-	2023-02-07 22:26
BrowseForeigners.php	10.63 KB	-rw-rw-rw-	2023-02-07 22:26
Cache.php	1.5 KB	-rw-rw-rw-	2023-02-07 22:26
Charsets.php	6.82 KB	-rw-rw-rw-	2023-02-07 22:26
CheckUserPrivileges.php	11.3 KB	-rw-rw-rw-	2023-02-07 22:26
Common.php	19.4 KB	-rw-rw-rw-	2023-02-07 22:26
Config.php	41.65 KB	-rw-rw-rw-	2023-02-07 22:26
Console.php	3.25 KB	-rw-rw-rw-	2023-02-07 22:26
Core.php	28.91 KB	-rw-rw-rw-	2023-02-07 22:26
CreateAddField.php	15.83 KB	-rw-rw-rw-	2023-02-07 22:26
DatabaseInterface.php	71.73 KB	-rw-rw-rw-	2023-02-07 22:26
DbTableExists.php	2.86 KB	-rw-rw-rw-	2023-02-07 22:26
Encoding.php	8.41 KB	-rw-rw-rw-	2023-02-07 22:26
Error.php	13.63 KB	-rw-rw-rw-	2023-02-07 22:26
ErrorHandler.php	18.63 KB	-rw-rw-rw-	2023-02-07 22:26
ErrorReport.php	8.99 KB	-rw-rw-rw-	2023-02-07 22:26
Export.php	45.7 KB	-rw-rw-rw-	2023-02-07 22:26
FieldMetadata.php	11.11 KB	-rw-rw-rw-	2023-02-07 22:26
File.php	19.75 KB	-rw-rw-rw-	2023-02-07 22:26
FileListing.php	2.88 KB	-rw-rw-rw-	2023-02-07 22:26
FlashMessages.php	1.22 KB	-rw-rw-rw-	2023-02-07 22:26
Font.php	5.58 KB	-rw-rw-rw-	2023-02-07 22:26
Footer.php	8.06 KB	-rw-rw-rw-	2023-02-07 22:26
Git.php	18 KB	-rw-rw-rw-	2023-02-07 22:26
Header.php	20 KB	-rw-rw-rw-	2023-02-07 22:26
Import.php	48.72 KB	-rw-rw-rw-	2023-02-07 22:26
Index.php	14.83 KB	-rw-rw-rw-	2023-02-07 22:26
IndexColumn.php	4.75 KB	-rw-rw-rw-	2023-02-07 22:26
InsertEdit.php	89.05 KB	-rw-rw-rw-	2023-02-07 22:26
InternalRelations.php	17.31 KB	-rw-rw-rw-	2023-02-07 22:26
IpAllowDeny.php	9.13 KB	-rw-rw-rw-	2023-02-07 22:26
Language.php	4.47 KB	-rw-rw-rw-	2023-02-07 22:26
LanguageManager.php	22.74 KB	-rw-rw-rw-	2023-02-07 22:26
Linter.php	4.99 KB	-rw-rw-rw-	2023-02-07 22:26
ListAbstract.php	1.67 KB	-rw-rw-rw-	2023-02-07 22:26
ListDatabase.php	4.11 KB	-rw-rw-rw-	2023-02-07 22:26
Logging.php	2.69 KB	-rw-rw-rw-	2023-02-07 22:26
Menu.php	20.4 KB	-rw-rw-rw-	2023-02-07 22:26
Message.php	18.68 KB	-rw-rw-rw-	2023-02-07 22:26
Mime.php	918 B	-rw-rw-rw-	2023-02-07 22:26
Normalization.php	41.53 KB	-rw-rw-rw-	2023-02-07 22:26
OpenDocument.php	8.62 KB	-rw-rw-rw-	2023-02-07 22:26
Operations.php	35.11 KB	-rw-rw-rw-	2023-02-07 22:26
OutputBuffering.php	4.1 KB	-rw-rw-rw-	2023-02-07 22:26
ParseAnalyze.php	2.34 KB	-rw-rw-rw-	2023-02-07 22:26
Pdf.php	4.17 KB	-rw-rw-rw-	2023-02-07 22:26
Plugins.php	21.83 KB	-rw-rw-rw-	2023-02-07 22:26
Profiling.php	2.16 KB	-rw-rw-rw-	2023-02-07 22:26
RecentFavoriteTable.php	11.44 KB	-rw-rw-rw-	2023-02-07 22:26
Replication.php	4.81 KB	-rw-rw-rw-	2023-02-07 22:26
ReplicationGui.php	21.24 KB	-rw-rw-rw-	2023-02-07 22:26
ReplicationInfo.php	4.79 KB	-rw-rw-rw-	2023-02-07 22:26
ResponseRenderer.php	13.5 KB	-rw-rw-rw-	2023-02-07 22:26
Routing.php	6.55 KB	-rw-rw-rw-	2023-02-07 22:26
Sanitize.php	11.98 KB	-rw-rw-rw-	2023-02-07 22:26
SavedSearches.php	11.33 KB	-rw-rw-rw-	2023-02-07 22:26
Scripts.php	3.74 KB	-rw-rw-rw-	2023-02-07 22:26
Session.php	8.16 KB	-rw-rw-rw-	2023-02-07 22:26
Sql.php	64.01 KB	-rw-rw-rw-	2023-02-07 22:26
SqlQueryForm.php	6.74 KB	-rw-rw-rw-	2023-02-07 22:26
StorageEngine.php	15.71 KB	-rw-rw-rw-	2023-02-07 22:26
SystemDatabase.php	3.98 KB	-rw-rw-rw-	2023-02-07 22:26
Table.php	90.33 KB	-rw-rw-rw-	2023-02-07 22:26
Template.php	4.5 KB	-rw-rw-rw-	2023-02-07 22:26
Theme.php	7.32 KB	-rw-rw-rw-	2023-02-07 22:26
ThemeManager.php	7 KB	-rw-rw-rw-	2023-02-07 22:26
Tracker.php	30.34 KB	-rw-rw-rw-	2023-02-07 22:26
Tracking.php	36.11 KB	-rw-rw-rw-	2023-02-07 22:26
Transformations.php	16.31 KB	-rw-rw-rw-	2023-02-07 22:26
TwoFactor.php	7.49 KB	-rw-rw-rw-	2023-02-07 22:26
Types.php	25.85 KB	-rw-rw-rw-	2023-02-07 22:26
Url.php	10.61 KB	-rw-rw-rw-	2023-02-07 22:26
UrlRedirector.php	1.74 KB	-rw-rw-rw-	2023-02-07 22:26
UserPassword.php	6.86 KB	-rw-rw-rw-	2023-02-07 22:26
UserPreferences.php	10.49 KB	-rw-rw-rw-	2023-02-07 22:26
Util.php	86.45 KB	-rw-rw-rw-	2023-02-07 22:26
Version.php	556 B	-rw-rw-rw-	2023-02-07 22:26
VersionInformation.php	7.3 KB	-rw-rw-rw-	2023-02-07 22:26
ZipExtension.php	10.33 KB	-rw-rw-rw-	2023-02-07 22:26

Rename

<?php

declare(strict_types=1);

namespace PhpMyAdmin;

use PhpMyAdmin\Html\Generator;
use PhpMyAdmin\Query\Compatibility;
use PhpMyAdmin\Server\Privileges;

use function __;
use function strlen;

/**
 * Functions for user password
 */
class UserPassword
{
    /** @var Privileges */
    private $serverPrivileges;

/**
     * @param Privileges $serverPrivileges Privileges object
     */
    public function __construct(Privileges $serverPrivileges)
    {
        $this->serverPrivileges = $serverPrivileges;
    }

/**
     * Generate the message
     *
     * @return array   error value and message
     */
    public function setChangePasswordMsg()
    {
        $error = false;
        $message = Message::success(__('The profile has been updated.'));

if ($_POST['nopass'] != '1') {
            if (strlen($_POST['pma_pw']) === 0 || strlen($_POST['pma_pw2']) === 0) {
                $message = Message::error(__('The password is empty!'));
                $error = true;
            } elseif ($_POST['pma_pw'] !== $_POST['pma_pw2']) {
                $message = Message::error(
                    __('The passwords aren\'t the same!')
                );
                $error = true;
            } elseif (strlen($_POST['pma_pw']) > 256) {
                $message = Message::error(__('Password is too long!'));
                $error = true;
            }
        }

return [
            'error' => $error,
            'msg' => $message,
        ];
    }

/**
     * Change the password
     *
     * @param string $password New password
     */
    public function changePassword($password): string
    {
        global $auth_plugin, $dbi;

$hashing_function = $this->changePassHashingFunction();

[$username, $hostname] = $dbi->getCurrentUserAndHost();

$serverVersion = $dbi->getVersion();

if (isset($_POST['authentication_plugin']) && ! empty($_POST['authentication_plugin'])) {
            $orig_auth_plugin = $_POST['authentication_plugin'];
        } else {
            $orig_auth_plugin = $this->serverPrivileges->getCurrentAuthenticationPlugin('change', $username, $hostname);
        }

$sql_query = 'SET password = '
            . ($password == '' ? '\'\'' : $hashing_function . '(\'***\')');

$isPerconaOrMySql = Compatibility::isMySqlOrPerconaDb();
        if ($isPerconaOrMySql && $serverVersion >= 50706) {
            $sql_query = 'ALTER USER \'' . $dbi->escapeString($username)
                . '\'@\'' . $dbi->escapeString($hostname)
                . '\' IDENTIFIED WITH ' . $orig_auth_plugin . ' BY '
                . ($password == '' ? '\'\'' : '\'***\'');
        } elseif (
            ($isPerconaOrMySql && $serverVersion >= 50507)
            || (Compatibility::isMariaDb() && $serverVersion >= 50200)
        ) {
            // For MySQL and Percona versions 5.5.7+ and MariaDB versions 5.2+,
            // explicitly set value of `old_passwords` so that
            // it does not give an error while using
            // the PASSWORD() function
            if ($orig_auth_plugin === 'sha256_password') {
                $value = 2;
            } else {
                $value = 0;
            }

$dbi->tryQuery('SET `old_passwords` = ' . $value . ';');
        }

$this->changePassUrlParamsAndSubmitQuery(
            $username,
            $hostname,
            $password,
            $sql_query,
            $hashing_function,
            $orig_auth_plugin
        );

$auth_plugin->handlePasswordChange($password);

return $sql_query;
    }

/**
     * Generate the hashing function
     *
     * @return string
     */
    private function changePassHashingFunction()
    {
        if (isset($_POST['authentication_plugin']) && $_POST['authentication_plugin'] === 'mysql_old_password') {
            $hashing_function = 'OLD_PASSWORD';
        } else {
            $hashing_function = 'PASSWORD';
        }

return $hashing_function;
    }

/**
     * Changes password for a user
     *
     * @param string $username         Username
     * @param string $hostname         Hostname
     * @param string $password         Password
     * @param string $sql_query        SQL query
     * @param string $hashing_function Hashing function
     * @param string $orig_auth_plugin Original Authentication Plugin
     */
    private function changePassUrlParamsAndSubmitQuery(
        $username,
        $hostname,
        $password,
        $sql_query,
        $hashing_function,
        $orig_auth_plugin
    ): void {
        global $dbi;

$err_url = Url::getFromRoute('/user-password');

$serverVersion = $dbi->getVersion();

if (Compatibility::isMySqlOrPerconaDb() && $serverVersion >= 50706) {
            $local_query = 'ALTER USER \'' . $dbi->escapeString($username)
                . '\'@\'' . $dbi->escapeString($hostname) . '\''
                . ' IDENTIFIED with ' . $orig_auth_plugin . ' BY '
                . ($password == ''
                ? '\'\''
                : '\'' . $dbi->escapeString($password) . '\'');
        } elseif (
            Compatibility::isMariaDb()
            && $serverVersion >= 50200
            && $serverVersion < 100100
            && $orig_auth_plugin !== ''
        ) {
            if ($orig_auth_plugin === 'mysql_native_password') {
                // Set the hashing method used by PASSWORD()
                // to be 'mysql_native_password' type
                $dbi->tryQuery('SET old_passwords = 0;');
            } elseif ($orig_auth_plugin === 'sha256_password') {
                // Set the hashing method used by PASSWORD()
                // to be 'sha256_password' type
                $dbi->tryQuery('SET `old_passwords` = 2;');
            }

$hashedPassword = $this->serverPrivileges->getHashedPassword($_POST['pma_pw']);

$local_query = 'UPDATE `mysql`.`user` SET'
                . " `authentication_string` = '" . $hashedPassword
                . "', `Password` = '', "
                . " `plugin` = '" . $orig_auth_plugin . "'"
                . " WHERE `User` = '" . $dbi->escapeString($username)
                . "' AND Host = '" . $dbi->escapeString($hostname) . "';";
        } else {
            $local_query = 'SET password = ' . ($password == ''
                ? '\'\''
                : $hashing_function . '(\''
                    . $dbi->escapeString($password) . '\')');
        }

if (! @$dbi->tryQuery($local_query)) {
            Generator::mysqlDie(
                $dbi->getError(),
                $sql_query,
                false,
                $err_url
            );
        }

// Flush privileges after successful password change
        $dbi->tryQuery('FLUSH PRIVILEGES;');
    }

public function getFormForChangePassword(?string $username, ?string $hostname): string
    {
        return $this->serverPrivileges->getFormForChangePassword($username ?? '', $hostname ?? '', false);
    }
}