update
[phpmyadmin/crack.git] / user_password.php3
blob585bd13e6c9646e88dc8858092dc77d164a942c6
1 <?php
2 /* $Id$ */
3 // vim: expandtab sw=4 ts=4 sts=4:
6 /**
7 * Gets some core libraries
8 */
9 require('./libraries/grab_globals.lib.php3');
10 require('./libraries/common.lib.php3');
13 /**
14 * Displays an error message and exits if the user isn't allowed to use this
15 * script
17 if (!$cfg['ShowChgPassword']) {
18 $cfg['ShowChgPassword'] = @PMA_mysql_query('USE mysql', $userlink);
20 if ($cfg['Server']['auth_type'] == 'config' || !$cfg['ShowChgPassword']) {
21 include('./header.inc.php3');
22 echo '<p><b>' . $strError . '</b></p>' . "\n";
23 echo '<p>&nbsp;&nbsp;&nbsp;&nbsp;' . $strNoRights . '</p>' . "\n";
24 include('./footer.inc.php3');
25 exit();
26 } // end if
29 /**
30 * If the "change password" form has been submitted, checks for valid values
31 * and submit the query or logout
33 if (isset($nopass)) {
34 $error_msg = '';
36 if ($nopass == 0 && isset($pma_pw) && isset($pma_pw2)) {
37 if ($pma_pw != $pma_pw2) {
38 $error_msg = $strPasswordNotSame;
40 if (empty($pma_pw) || empty($pma_pw2)) {
41 $error_msg = $strPasswordEmpty;
43 } // end if
45 // here $nopass could be == 1
46 if (empty($error_msg)) {
48 // Defines the url to return to in case of error in the sql statement
49 $common_url_query = PMA_generate_common_url();
51 $err_url = 'user_password.php3?' . $common_url_query;
53 $sql_query = 'SET password = ' . (($pma_pw == '') ? '\'\'' : 'PASSWORD(\'' . ereg_replace('.', '*', $pma_pw) . '\')');
54 $local_query = 'SET password = ' . (($pma_pw == '') ? '\'\'' : 'PASSWORD(\'' . PMA_sqlAddslashes($pma_pw) . '\')');
55 $result = @PMA_mysql_query($local_query) or PMA_mysqlDie('', '', FALSE, $err_url);
57 // Changes password cookie if required
58 if ($cfg['Server']['auth_type'] == 'cookie') {
59 setcookie('pma_cookie_password', $pma_pw, 0, $cookie_path, '', $is_https);
60 } // end if
61 // For http auth. mode, the "back" link will also enforce new
62 // authentication
63 $http_logout = ($cfg['Server']['auth_type'] == 'http')
64 ? '&amp;old_usr=relog'
65 : '';
67 // Displays the page
68 include('./header.inc.php3');
69 echo '<h1>' . $strChangePassword . '</h1>' . "\n\n";
70 $show_query = 'y';
71 PMA_showMessage($strUpdateProfileMessage);
73 <a href="index.php3?<?php echo $common_url_query . $http_logout; ?>" target="_parent">
74 <b><?php echo $strBack; ?></b></a>
75 <?php
76 exit();
77 } // end if
78 } // end if
81 /**
82 * If the "change password" form hasn't been submitted or the values submitted
83 * aren't valid -> displays the form
85 // Loads the headers
86 $js_to_run = 'user_password.js';
87 require('./header.inc.php3');
88 echo '<h1>' . $strChangePassword . '</h1>' . "\n\n";
90 // Displays an error message if required
91 if (!empty($error_msg)) {
92 echo '<p><b>' . $strError . '&nbsp;:&nbsp;' . $error_msg . '</b></p>' . "\n";
95 // loic1: autocomplete feature of IE kills the "onchange" event handler and it
96 // must be replaced by the "onpropertychange" one in this case
97 $chg_evt_handler = (PMA_USR_BROWSER_AGENT == 'IE' && PMA_USR_BROWSER_VER >= 5)
98 ? 'onpropertychange'
99 : 'onchange';
101 // Displays the form
103 <form method="post" action="./user_password.php3" name="chgPassword" onsubmit="return checkPassword(this)">
104 <?php echo PMA_generate_common_hidden_inputs(); ?>
105 <table border="0">
106 <tr>
107 <td colspan="2">
108 <input type="radio" name="nopass" value="1" onclick="pma_pw.value = ''; pma_pw2.value = ''; this.checked = true" />
109 <?php echo $GLOBALS['strNoPassword'] . "\n"; ?>
110 </td>
111 </tr>
112 <tr>
113 <td>
114 <input type="radio" name="nopass" value="0" checked="checked " />
115 <?php echo $GLOBALS['strPassword']; ?>&nbsp;:&nbsp;
116 </td>
117 <td>
118 <input type="password" name="pma_pw" size="10" class="textfield" <?php echo $chg_evt_handler; ?>="nopass[1].checked = true" />
119 &nbsp;&nbsp;
120 <?php echo $GLOBALS['strReType']; ?>&nbsp;:&nbsp;
121 <input type="password" name="pma_pw2" size="10" class="textfield" <?php echo $chg_evt_handler; ?>="nopass[1].checked = true" />
122 </td>
123 </tr>
124 <tr>
125 <td colspan="2">&nbsp;</td>
126 </tr>
127 <tr>
128 <td colspan="2">
129 <input type="submit" value="<?php echo($strChange); ?>" />
130 </td>
131 </tr>
132 </table>
133 </form>
135 <?php
137 * Displays the footer
139 echo "\n";
140 require('./footer.inc.php3');