[Tͪ#n$;<:a4sX [p^7J`Nlz$ n%-YW_}Y6Jd _J#XpۻzފEegzZ r7T-H`J`=qMҽOr *#2jA| eM}TB|} C[F'SEMd"BeaD&;YɨNE'6x_rgr+-8 r2cy ] sAmCY4 6[mh5#F3J&J.-p̶GbBnoغ8!Ct4ncr!Ob3r/ 6>GFnЀSD5X=s3w<_rFh)搩4^]Qkf'V Y~Hl>"#SxGBfA9`Z;`R%dS!`>yW֙In%q`?4hwǾ||MٗEz[(Ȧ; Y(XLg*s:vq_|"(hcu3@Tns=öpwKW ,O1?w:3*shp,wXݽ]N- s4i^՟WS~fod}$+xm_1Y3V8x*Vrj!w'i uAJw8[BC=)Eu#/Q]^ZQ sb"i,)Zh܅aEE~5j/b<^ҚD#RlDóA4Ne8hE;2vV#y?M"Y+$96-pĕ-5xl߮sXv" 8WK%7h+a|O@A'H(^X=ͺa>'$ƒ@Kܮ-ӠulZLJG(b]c}c߆kZ 83~Gؿ۰ Z ~$ZFwRk1DEN%%Qdw (n<N cߌ+%9qw~ $(U(Hp ڈD (@4`bEpFbs&E +T]z̋-k; 4EE pBz)/XӈYBlkgc‘Or!OhpvO$XݬkN w=^+U]Υ`NE-Zzl{x d/n&ǜ}o@P\c7? I65#KS,EQ]U$^*;Yvl !PB$qO]=RJbTX5 X.NjD߂xKšH[f8yuS$dT3ftoGc+ECh-'M 'O[RƍR2g?G O!/LM AGC~0rDŽ6.$i&H=yaq~߂<>)O3?}pOwu짹z|E (հ@xϐgK@Eʗۂ ulFĔd3)A3e[%6^#+ocbK>QIji1g;5_2jd͇uNp2%uJh闑%^ϝ$HwQ9[YQpQ_BckG V_ZKc6$D9Mnkt +fȮO<*gU e0OhM̨qSlm28 {uzi< qF'JUֻ:ThϖN4^X`YKĒX`qhUBr(XZ]Y _?TzHZRof<gh8UVdٺPp2P5FA_z\*#Ŗ0|HE?=gqxehWH@|YC+O1FkY5rO_ U}/Ў} ZAl?_%(p@svLf'H` M_+$_>ᙢG1nO^K3ոA0>IJɱ$|ܤ4T_L"DjNٔC3+UK|fetchSingleRow('SELECT CURRENT_USER() as user'); $curr_user = $row['user']; list($username, $hostname) = explode('@', $curr_user); $serverType = PMA\libraries\Util::getServerType(); if (isset($_REQUEST['authentication_plugin']) && ! empty($_REQUEST['authentication_plugin']) ) { $orig_auth_plugin = $_REQUEST['authentication_plugin']; } else { $orig_auth_plugin = PMA_getCurrentAuthenticationPlugin( 'change', $username, $hostname ); } $sql_query = 'SET password = ' . (($password == '') ? '\'\'' : $hashing_function . '(\'***\')'); if ($serverType == 'MySQL' && PMA_MYSQL_INT_VERSION >= 50706 ) { $sql_query = 'ALTER USER \'' . $username . '\'@\'' . $hostname . '\' IDENTIFIED WITH ' . $orig_auth_plugin . ' BY ' . (($password == '') ? '\'\'' : '\'***\''); } else if (($serverType == 'MySQL' && PMA_MYSQL_INT_VERSION >= 50507) || ($serverType == 'MariaDB' && PMA_MYSQL_INT_VERSION >= 50200) ) { // For MySQL versions 5.5.7+ and MariaDB versions 5.2+, // explicitly set value of `old_passwords` so that // it does not give an error while using // the PASSWORD() function if ($orig_auth_plugin == 'sha256_password') { $value = 2; } else { $value = 0; } $GLOBALS['dbi']->tryQuery('SET `old_passwords` = ' . $value . ';'); } PMA_changePassUrlParamsAndSubmitQuery( $username, $hostname, $password, $sql_query, $hashing_function, $orig_auth_plugin ); $auth_plugin->handlePasswordChange($password); PMA_getChangePassMessage($change_password_message, $sql_query); PMA_changePassDisplayPage($message, $sql_query); } /** * Generate the hashing function * * @return string $hashing_function */ function PMA_changePassHashingFunction() { if (PMA_isValid( $_REQUEST['authentication_plugin'], 'identical', 'mysql_old_password' )) { $hashing_function = 'OLD_PASSWORD'; } else { $hashing_function = 'PASSWORD'; } return $hashing_function; } /** * Changes password for a user * * @param string $username Username * @param string $hostname Hostname * @param string $password Password * @param string $sql_query SQL query * @param string $hashing_function Hashing function * @param string $orig_auth_plugin Original Authentication Plugin * * @return void */ function PMA_changePassUrlParamsAndSubmitQuery( $username, $hostname, $password, $sql_query, $hashing_function, $orig_auth_plugin ) { $err_url = 'user_password.php' . PMA_URL_getCommon(); $serverType = PMA\libraries\Util::getServerType(); if ($serverType == 'MySQL' && PMA_MYSQL_INT_VERSION >= 50706) { $local_query = 'ALTER USER \'' . $username . '\'@\'' . $hostname . '\'' . ' IDENTIFIED with ' . $orig_auth_plugin . ' BY ' . (($password == '') ? '\'\'' : '\'' . $GLOBALS['dbi']->escapeString($password) . '\''); } else if ($serverType == 'MariaDB' && PMA_MYSQL_INT_VERSION >= 50200 && PMA_MYSQL_INT_VERSION < 100100 && $orig_auth_plugin !== '' ) { if ($orig_auth_plugin == 'mysql_native_password') { // Set the hashing method used by PASSWORD() // to be 'mysql_native_password' type $GLOBALS['dbi']->tryQuery('SET old_passwords = 0;'); } else if ($orig_auth_plugin == 'sha256_password') { // Set the hashing method used by PASSWORD() // to be 'sha256_password' type $GLOBALS['dbi']->tryQuery('SET `old_passwords` = 2;'); } $hashedPassword = PMA_getHashedPassword($_POST['pma_pw']); $local_query = "UPDATE `mysql`.`user` SET" . " `authentication_string` = '" . $hashedPassword . "', `Password` = '', " . " `plugin` = '" . $orig_auth_plugin . "'" . " WHERE `User` = '" . $username . "' AND Host = '" . $hostname . "';"; } else { $local_query = 'SET password = ' . (($password == '') ? '\'\'' : $hashing_function . '(\'' . $GLOBALS['dbi']->escapeString($password) . '\')'); } if (! @$GLOBALS['dbi']->tryQuery($local_query)) { PMA\libraries\Util::mysqlDie( $GLOBALS['dbi']->getError(), $sql_query, false, $err_url ); } // Flush privileges after successful password change $GLOBALS['dbi']->tryQuery("FLUSH PRIVILEGES;"); } /** * Display the page * * @param string $message Message * @param string $sql_query SQL query * * @return void */ function PMA_changePassDisplayPage($message, $sql_query) { echo '

' , __('Change password') , '

' , "\n\n"; echo PMA\libraries\Util::getMessage( $message, $sql_query, 'success' ); echo '' , "\n" , '' , __('Back') , ''; exit; }