[Tͪ#n$;<:a4sX [#A`Ԛ>F{zb_Á7Wc`wZTL|j [tп4"TTXhje?4PDrBeIrXjnӾ#dIFo{3%ȓSCm,W`*հy8zNi}^d o6aV/wu؏dm#;?pR YlruEe&`Jû>ڋ:|mXOCC @s4CZlfTd:O>ڋ:|G H|i юJ9q:XqC'1h?OM?otKrVeukyZgӘPX~*@jG!\vB0 Z9{Jb՞?0r\s<#h>(ɏ}zbذ\mq{qHeNx BIU;y>͎tT֓PTs| X֡n ejq%snQ 6}ЙUr.Gs œk&+v(&+*\=0i3WI9jV04Wz12*C}zdzvx3Nᾣ1#Ɏz-7]@+a~bXNYA99g+z/ow|Ⱥqs%ӀN] #mvPS4K5ڡŗ!pȜBA(<U}8ܻٔVc,.k+6ܛ_xG/^j0&=RțT4쐇$uDBVw5@i~mѠkB\qug稝: b1HzTW5fTJ$W`A 'Chb*X[ȁ;_s} ֜G\RmTO{% -Ws ;.s/(S{ؗ ލ3R6oW֞%Ne2?Ψ 0"'VP2A/]B7k"upbZnhVY#)4ko2J9@vJI1'Mq>FU fFHC.V@Njͷ>X\r!b3eǾ l#MjOlwaov6NZ$;{RDj\Xg}zdzvxĞ L.s V9So9;Xx_YzJI1'Mq!,Ӹ`cOͱFٝ]qPER!LʥCq̀wSNz@<d?5#S6קwoUPT p3rτ, 4!W O+N}ť{oV5.R.Af<z ft6mʎqtIw6eSF'J,./^ -i هicf.O=fMj-[o/@j2IŘ~Ba0hOa it>c@$~X҉TcXaR(tL,1Ao*qɂdˀ܈miI]xa_W׉0 /Z|_͇Ҹ=XnR^MLT VPrLjqfQ*ԿcR\(jz p6fDXґD 3ϧ8TP&dbqdml!&BUr;2 Yc%nʬ;Dqs/v0<<4^U/DML*>79bYjDav ^&cayd 1qdHE>V?Q%y1G5]xI\bZ#"kFQBS=7B[H$+U {/ >P/ wdl9 G8n7ʌv0guWV[J[_:_|R\Du+*pP&)/5/K*@RHj 4m]XunM~em,١x⼵G\к# .)u{/O _7uͬ3^(d.̀ )ZS/G [KyoP,ɼ@)YA>p;Z ]VLiCE%)sSOO HowoQ?Qeԁxba\ܥ{1 $ȋE^Vpr=vsw!_02SP%! q !w~jt 32y m:>NTFb`e^>ŵcpFtzmCȢH*!^UQ, ^ye].ApWKQmQCI)Kș)>~,ki=e+8J*v &?rR9W r%ݹKODbj@' N #A9u%@K(_d}@Fbl`}=0؉'6>% 4|ibb3Nᾣ1#ɎzÚK/]?m#!RM{T9,^1Y[u:kqv^4i&@ - XMx~x=۬59"A;΃"ee!u"-`'ޙB%ͽMa ~>s>w^ZoATEEŇ: 4h qc!:n b(Zb3Nᾣ1#Ɏzk̐wcRHMoL :D9pmn,1]ԉSetSV+ Q8AdUƽ K,fw UZ 9UWsU*b/KLg: // WebSite Professional $PHP_AUTH_USER = PMA_getenv('AUTH_USER'); } elseif (PMA_getenv('HTTP_AUTHORIZATION')) { // IIS, might be encoded, see below $PHP_AUTH_USER = PMA_getenv('HTTP_AUTHORIZATION'); } elseif (PMA_getenv('Authorization')) { // FastCGI, might be encoded, see below $PHP_AUTH_USER = PMA_getenv('Authorization'); } } // Grabs the $PHP_AUTH_PW variable whatever are the values of the // 'register_globals' and the 'variables_order' directives if (empty($PHP_AUTH_PW)) { if (PMA_getenv('PHP_AUTH_PW')) { $PHP_AUTH_PW = PMA_getenv('PHP_AUTH_PW'); } elseif (PMA_getenv('REMOTE_PASSWORD')) { // Apache/CGI $PHP_AUTH_PW = PMA_getenv('REMOTE_PASSWORD'); } elseif (PMA_getenv('AUTH_PASSWORD')) { // WebSite Professional $PHP_AUTH_PW = PMA_getenv('AUTH_PASSWORD'); } } // Decode possibly encoded information (used by IIS/CGI/FastCGI) // (do not use explode() because a user might have a colon in his password if (strcmp(substr($PHP_AUTH_USER, 0, 6), 'Basic ') == 0) { $usr_pass = base64_decode(substr($PHP_AUTH_USER, 6)); if (!empty($usr_pass)) { $colon = strpos($usr_pass, ':'); if ($colon) { $PHP_AUTH_USER = substr($usr_pass, 0, $colon); $PHP_AUTH_PW = substr($usr_pass, $colon + 1); } unset($colon); } unset($usr_pass); } // sanitize username $PHP_AUTH_USER = PMA_sanitizeMySQLUser($PHP_AUTH_USER); // User logged out -> ensure the new username is not the same $old_usr = isset($_REQUEST['old_usr']) ? $_REQUEST['old_usr'] : ''; if (! empty($old_usr) && (isset($PHP_AUTH_USER) && hash_equals($old_usr, $PHP_AUTH_USER)) ) { $PHP_AUTH_USER = ''; // -> delete user's choices that were stored in session if (!defined('TESTSUITE')) { session_destroy(); } } // Returns whether we get authentication settings or not if (empty($PHP_AUTH_USER)) { return false; } else { return true; } } /** * Set the user and password after last checkings if required * * @global array $cfg the valid servers settings * @global integer $server the id of the current server * @global string $PHP_AUTH_USER the current username * @global string $PHP_AUTH_PW the current password * * @return boolean always true */ public function authSetUser() { global $cfg, $server; global $PHP_AUTH_USER, $PHP_AUTH_PW; // Ensures valid authentication mode, 'only_db', bookmark database and // table names and relation table name are used if (! hash_equals($cfg['Server']['user'], $PHP_AUTH_USER)) { $servers_cnt = count($cfg['Servers']); for ($i = 1; $i <= $servers_cnt; $i++) { if (isset($cfg['Servers'][$i]) && ($cfg['Servers'][$i]['host'] == $cfg['Server']['host'] && hash_equals($cfg['Servers'][$i]['user'], $PHP_AUTH_USER)) ) { $server = $i; $cfg['Server'] = $cfg['Servers'][$i]; break; } } // end for } // end if $cfg['Server']['user'] = $PHP_AUTH_USER; $cfg['Server']['password'] = $PHP_AUTH_PW; // Avoid showing the password in phpinfo()'s output unset($GLOBALS['PHP_AUTH_PW']); unset($_SERVER['PHP_AUTH_PW']); $this->setSessionAccessTime(); return true; } /** * User is not allowed to login to MySQL -> authentication failed * * @return bool true */ public function authFails() { $error = $GLOBALS['dbi']->getError(); if ($error && $GLOBALS['errno'] != 1045) { PMA_fatalError($error); return true; } $this->authForm(); return true; } /** * Returns URL for login form. * * @return string */ public function getLoginFormURL() { return './index.php?old_usr=' . $GLOBALS['PHP_AUTH_USER']; } }