3 // vim: expandtab sw=4 ts=4 sts=4:
7 * Gets some core libraries
9 require_once('./libraries/grab_globals.lib.php');
10 require_once('./libraries/common.lib.php');
13 * Displays an error message and exits if the user isn't allowed to use this
16 if (!$cfg['ShowChgPassword']) {
17 $cfg['ShowChgPassword'] = @PMA_mysql_query
('USE mysql', $userlink);
19 if ($cfg['Server']['auth_type'] == 'config' ||
!$cfg['ShowChgPassword']) {
20 require_once('./header.inc.php');
21 echo '<p><b>' . $strError . '</b></p>' . "\n"
22 . '<p> ' . $strNoRights . '</p>' . "\n";
23 require_once('./footer.inc.php');
28 * If the "change password" form has been submitted, checks for valid values
29 * and submit the query or logout
34 if ($nopass == 0 && isset($pma_pw) && isset($pma_pw2)) {
35 if ($pma_pw != $pma_pw2) {
36 $error_msg = $strPasswordNotSame;
38 if (empty($pma_pw) ||
empty($pma_pw2)) {
39 $error_msg = $strPasswordEmpty;
43 // here $nopass could be == 1
44 if (empty($error_msg)) {
46 // Defines the url to return to in case of error in the sql statement
47 $common_url_query = PMA_generate_common_url();
49 $err_url = 'user_password.php?' . $common_url_query;
51 $sql_query = 'SET password = ' . (($pma_pw == '') ?
'\'\'' : 'PASSWORD(\'' . preg_replace('@.@s', '*', $pma_pw) . '\')');
52 $local_query = 'SET password = ' . (($pma_pw == '') ?
'\'\'' : 'PASSWORD(\'' . PMA_sqlAddslashes($pma_pw) . '\')');
53 $result = @PMA_mysql_query
($local_query) or PMA_mysqlDie('', '', FALSE, $err_url);
55 // Changes password cookie if required
56 if ($cfg['Server']['auth_type'] == 'cookie') {
57 setcookie('pma_cookie_password', base64_encode(PMA_blowfish_encrypt($pma_pw,$GLOBALS['cfg']['blowfish_secret'])), 0, $cookie_path, '', $is_https);
59 // For http auth. mode, the "back" link will also enforce new
61 $http_logout = ($cfg['Server']['auth_type'] == 'http')
62 ?
'&old_usr=relog'
66 require_once('./header.inc.php');
67 echo '<h1>' . $strChangePassword . '</h1>' . "\n\n";
69 PMA_showMessage($strUpdateProfileMessage);
71 <a href
="index.php?<?php echo $common_url_query . $http_logout; ?>" target
="_parent">
72 <b
><?php
echo $strBack; ?
></b
></a
>
80 * If the "change password" form hasn't been submitted or the values submitted
81 * aren't valid -> displays the form
84 $js_to_run = 'user_password.js';
85 require_once('./header.inc.php');
86 echo '<h1>' . $strChangePassword . '</h1>' . "\n\n";
88 // Displays an error message if required
89 if (!empty($error_msg)) {
90 echo '<p><b>' . $strError . ' : ' . $error_msg . '</b></p>' . "\n";
93 // loic1: autocomplete feature of IE kills the "onchange" event handler and it
94 // must be replaced by the "onpropertychange" one in this case
95 $chg_evt_handler = (PMA_USR_BROWSER_AGENT
== 'IE' && PMA_USR_BROWSER_VER
>= 5)
101 <form method
="post" action
="./user_password.php" name
="chgPassword" onsubmit
="return checkPassword(this)">
102 <?php
echo PMA_generate_common_hidden_inputs(); ?
>
106 <input type
="radio" name
="nopass" value
="1" onclick
="pma_pw.value = ''; pma_pw2.value = ''; this.checked = true" />
107 <?php
echo $GLOBALS['strNoPassword'] . "\n"; ?
>
112 <input type
="radio" name
="nopass" value
="0" checked
="checked " />
113 <?php
echo $GLOBALS['strPassword']; ?
> 
;: 
;
116 <input type
="password" name
="pma_pw" size
="10" class="textfield" <?php
echo $chg_evt_handler; ?
>="nopass[1].checked = true" />
118 <?php
echo $GLOBALS['strReType']; ?
> 
;: 
;
119 <input type
="password" name
="pma_pw2" size
="10" class="textfield" <?php
echo $chg_evt_handler; ?
>="nopass[1].checked = true" />
123 <td colspan
="2"> 
;</td
>
127 <input type
="submit" value
="<?php echo($strChange); ?>" />
135 * Displays the footer
137 require_once('./footer.inc.php');