/gforge/plugins/webcalendar/www/tools/convert_passwords.php
PHP | 86 lines | 59 code | 7 blank | 20 comment | 14 complexity | 03e0f732a0245466c1ab80db7ec81eb8 MD5 | raw file
Possible License(s): MPL-2.0-no-copyleft-exception, GPL-2.0
- <?
- /*
- * $Id: convert_passwords.php,v 1.2.4.1 2006/06/07 15:10:46 cknudsen Exp $
- *
- * This script will alter the webcal_user table to allow 32 character passwords
- * and convert user passwords to PHP md5 passwords.
- *
- * It is necessary to run this to upgrade to version 0.9.43 from any version.
- *
- *
- * ** NOTE: This script should only be run ONCE and then be deleted!!
- *
- */
- /********************************************************************/
- $includedir = "../includes";
- include "$includedir/config.php";
- $includedir = "../includes";
- include "$includedir/php-dbi.php";
- $c = dbi_connect ( $db_host, $db_login, $db_password, $db_database );
- if ( ! $c ) {
- echo "Error connecting to database: " . dbi_error ();
- exit;
- }
- // First, look at the passwords. If we find and md5 hash in there,
- // (it will have 32 chars instead of < 25 like in the old version),
- // then we know this script was already run.
- $sql = "SELECT cal_passwd FROM webcal_user";
- $res = dbi_query ( $sql );
- $doneBefore = false;
- if ( $res ) {
- if ( $row = dbi_fetch_row ( $res ) ) {
- if ( strlen ( $row[0] ) > 30 )
- $doneBefore = true;
- }
- dbi_free_result ( $res );
- } else {
- echo "Database error: " . dbi_error ();
- exit;
- }
- if ( $doneBefore ) {
- echo "Passwords were already converted to md5!\n<br />\n";
- exit;
- }
- // See if webcal_user.cal_passwd will allow 32 characters
- $sql = "DESC webcal_user";
- $res = dbi_query ( $sql );
- while ( $row = dbi_fetch_row ( $res ) ) {
- if ($row[Field] == 'cal_passwd') {
- preg_match ( "/([0-9]+)/", $row[Type], $match );
- if ($match[1] < 32) {
- $sql = "ALTER TABLE webcal_user MODIFY cal_passwd VARCHAR(32) NULL";
- // Use the following on older MySQL versions
- //$sql = "ALTER TABLE webcal_user CHANGE cal_passwd cal_passwd VARCHAR(32) NULL";
- $res = dbi_query ( $sql );
- if ($res) {
- echo "Table webcal_user altered to allow 32 character passwords.\n" .
- "<br />Converting passwords...\n<br /><br />\n";
- }
- }
- }
- }
- dbi_free_result ( $res );
- // Convert the passwords
- $sql = "SELECT cal_login, cal_passwd FROM webcal_user";
- $res = dbi_query ( $sql );
- if ( $res ) {
- while ( $row = dbi_fetch_row ( $res ) ) {
- $sql2 = "UPDATE webcal_user SET cal_passwd = '" .
- md5($row[1]) . "' WHERE cal_login = '".$row[0]."'";
- $res2 = dbi_query ( $sql2 );
- if ($res2)
- echo "Password updated for: ".$row[0]."<br />\n";
- }
- dbi_free_result ( $res );
- echo "Finished converting passwords\n<br />\n";
- echo "<br /><br />\n<h1>DO NOT Run this script again!!!</h1>\n<br />\n";
- echo '<h1>Delete this script if it ran successfully!!!</h1>';
- }
- ?>