1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
|
<?
/*
* $Id: convert_passwords.php,v 1.2 2004/04/06 22:57:35 musus Exp $
*
* This script will alter the webcal_user table to allow 32 character passwords
* and convert user passwords to PHP md5 passwords.
*
* It is necessary to run this to upgrade to version 0.9.43 from any version.
*
*
* ** NOTE: This script should only be run ONCE and then be deleted!!
*
*/
/********************************************************************/
$includedir = "../includes";
include "$includedir/config.php";
// We set these twice since config.php unsets these.
$includedir = "../includes"; // Set again after config.php
include "$includedir/php-dbi.php";
$c = dbi_connect ( $db_host, $db_login, $db_password, $db_database );
if ( ! $c ) {
echo "Error connecting to database: " . dbi_error ();
exit;
}
// First, look at the passwords. If we find and md5 hash in there,
// (it will have 32 chars instead of < 25 like in the old version),
// then we know this script was already run.
$sql = "SELECT cal_passwd FROM webcal_user";
$res = dbi_query ( $sql );
$doneBefore = false;
if ( $res ) {
if ( $row = dbi_fetch_row ( $res ) ) {
if ( strlen ( $row[0] ) > 30 )
$doneBefore = true;
}
dbi_free_result ( $res );
} else {
echo "Database error: " . dbi_error ();
exit;
}
if ( $doneBefore ) {
echo "Passwords were already converted to md5!\n<br />\n";
exit;
}
// See if webcal_user.cal_passwd will allow 32 characters
$sql = "DESC webcal_user";
$res = dbi_query ( $sql );
while ( $row = dbi_fetch_row ( $res ) ) {
if ($row[Field] == 'cal_passwd') {
preg_match ( "/([0-9]+)/", $row[Type], $match );
if ($match[1] < 32) {
$sql = "ALTER TABLE webcal_user MODIFY cal_passwd VARCHAR(32) NULL";
// Use the following on older MySQL versions
//$sql = "ALTER TABLE webcal_user CHANGE cal_passwd cal_passwd VARCHAR(32) NULL";
$res = dbi_query ( $sql );
if ($res) {
echo "Table webcal_user altered to allow 32 character passwords.\n" .
"<br />Converting passwords...\n<br /><br />\n";
}
}
}
}
dbi_free_result ( $res );
// Convert the passwords
$sql = "SELECT cal_login, cal_passwd FROM webcal_user";
$res = dbi_query ( $sql );
if ( $res ) {
while ( $row = dbi_fetch_row ( $res ) ) {
$sql2 = "UPDATE webcal_user SET cal_passwd = '" .
md5($row[1]) . "' WHERE cal_login = '".$row[0]."'";
$res2 = dbi_query ( $sql2 );
if ($res2)
echo "Password updated for: ".$row[0]."<br />\n";
}
dbi_free_result ( $res );
echo "Finished converting passwords\n<br />\n";
echo "<br /><br />\n<h1>DO NOT Run this script again!!!</h1>\n<br />\n";
echo '<h1>Delete this script if it ran successfully!!!</h1>';
}
?>
|
