/database.php

https://gitlab.com/seckmaster/Cloud-password · PHP · 146 lines · 107 code · 14 blank · 25 comment · 17 complexity · eb084e7185c9d1367147a9e2caedb15e MD5 · raw file 

    

  1. <?php

    2. 

  2. 	$host = "localhost"; // Host name 

    3. 

  3. 	$username = "toni"; // Mysql username 

    4. 

  4. 	$password = ""; // Mysql password 

    5. 

  5. 	$db_name = "c_password"; // Database name 

    6. 

  6. 	

    7. 

  7. 	// connect to database

    8. 

  8. 	$mysqli = new mysqli("$host", "$username", "$password", "$db_name");

    9. 

  9. 	

    10. 

  10. 	// if unable to connect, exit

    11. 

  11. 	if($mysqli->connect_errno) {

    12. 

  12. 		echo "Error accessing database!";

    13. 

  13. 		exit();

    14. 

  14. 	}

    15. 

  15. 	

    16. 

  16. 	// evaluates string if matches requirements

    17. 

  17. 	function Evaluate($string) {

    18. 

  18. 		if(strlen($string) < 8) return false;

    19. 

  19. 		$has_special = false;

    20. 

  20. 		for ($i = 0; $i<strlen($string); $i++)  { 

    21. 

  21. 			$char = substr($string, $i, 1);

    22. 

  22. 			if($char >= '0' && $char <= '9') $has_special = true;

    23. 

  23. 		}

    24. 

  24. 		return $has_special;

    25. 

  25. 	}

    26. 

  26. 	

    27. 

  27. 	// encrypts string (source: http://alias.io/2010/01/store-passwords-safely-with-php-and-mysql/)

    28. 

  28. 	function _Crypt($string) {

    29. 

  29. 		$salt = strtr(base64_encode(mcrypt_create_iv(16, MCRYPT_DEV_URANDOM)), '+', '.');

    30. 

  30. 		$cost = 10;

    31. 

  31. 		$salt = sprintf("$2a$%02d$", $cost) . $salt;

    32. 

  32. 		return crypt($string, $salt);

    33. 

  33. 	}

    34. 

  34. 	

    35. 

  35. 	// fn: loging into c. password

    36. 

  36. 	// return true on success

    37. 

  37. 	function LogIn($username, $password) {

    38. 

  38. 		global $mysqli;

    39. 

  39. 		$query = "SELECT * FROM users WHERE username='$username' LIMIT 1";

    40. 

  40. 		if($result = $mysqli->query($query)) {

    41. 

  41. 			if($result = $result->fetch_assoc()) {

    42. 

  42. 				$hash = $result["password"];

    43. 

  43. 				if($password == $hash) {

    44. 

  44. 					$_SESSION["user"] = $username;

    45. 

  45. 					header("Location: ../user/index.php");

    46. 

  46. 					exit();

    47. 

  47. 				}

    48. 

  48. 				return false;

    49. 

  49. 			}

    50. 

  50. 			echo "Wrong username or password!<br>";

    51. 

  51. 			return false;

    52. 

  52. 		}

    53. 

  53. 		return false;

    54. 

  54. 	}

    55. 

  55. 	

    56. 

  56. 	// fn: send email

    57. 

  57. 	function SendMail($to) {

    58. 

  58. 		$subject = "Thank you for registering into Cloud Password!";

    59. 

  59. 		$from = "support@c_password.com";

    60. 

  60. 		$headers = "From:" . $from;

    61. 

  61. 		$headers .= "Reply-To: " . $from. "\r\n";

    62. 

  62. 		$headers .= "CC: " . $from . "\r\n";

    63. 

  63. 		$headers .= "MIME-Version: 1.0\r\n";

    64. 

  64. 		$headers .= "Content-Type: text/html; charset=ISO-8859-1\r\n";

    65. 

  65. 		$message = '<html><body>';

    66. 

  66. 		$message .= '<h1>Thank you for registering!</h1>';

    67. 

  67. 		$message .= '<p>Hope you enjoy using Cloud Password!</p>';

    68. 

  68. 		$message .= '</body></html>';

    69. 

  69. 		mail($to,$subject,$message,$headers);

    70. 

  70. 	}

    71. 

  71. 	

    72. 

  72. 	// fn: register

    73. 

  73. 	// return true on success

    74. 

  74. 	function Register($username, $password, $email) {

    75. 

  75. 		// if inserted password isn't ok

    76. 

  76. 		/*$p = Evaluate($password);

    77. 

  77. 		if(!$p) {

    78. 

  78. 			echo "Password not strong enough!";

    79. 

  79. 			return;

    80. 

  80. 		}*/

    81. 

  81. 		

    82. 

  82. 		global $mysqli;

    83. 

  83. 		$query = "SELECT * FROM users WHERE username='$username' LIMIT 1";

    84. 

  84. 		if($result = $mysqli->query($query)) {

    85. 

  85. 			if($result->fetch_assoc() == null) {

    86. 

  86. 				$hash = $password;

    87. 

  87. 				$query = "INSERT INTO users VALUES(null, '$username', '$hash', '$email');";

    88. 

  88. 				if($result = $mysqli->query($query)) {

    89. 

  89. 					SendMail($email);

    90. 

  90. 					echo "Registration was successful.<br>Log In!";

    91. 

  91. 				}

    92. 

  92. 				else echo "Error: " . $mysqli->error;

    93. 

  93. 			}

    94. 

  94. 			else echo "User '" .$username . "' already exists!" ;

    95. 

  95. 		}

    96. 

  96. 		else echo "Error: " . $mysqli->error;

    97. 

  97. 	}

    98. 

  98. 	

    99. 

  99. 	// fn: add password into database

    100. 

  100. 	function AddPassword($user_loged, $name, $username, $password) {

    101. 

  101. 		global $mysqli;

    102. 

  102. 		$name = strtolower($name);

    103. 

  103. 		// encrypt password

    104. 

  104. 		$password = _Crypt($password);

    105. 

  105. 		// we need id of loged user

    106. 

  106. 		$query = "SELECT * FROM users WHERE username='$user_loged' LIMIT 1";

    107. 

  107. 		$result = $mysqli->query($query);

    108. 

  108. 		$result = $result->fetch_assoc();

    109. 

  109. 		$id = $result["id"];

    110. 

  110. 		

    111. 

  111. 		// insert data into db

    112. 

  112. 		$query = "INSERT INTO data VALUES(null, '$id', '$name', '$username', '$password');";

    113. 

  113. 		$mysqli->query($query);

    114. 

  114. 		echo $mysqli->error;

    115. 

  115. 	}

    116. 

  116. 	

    117. 

  117. 	// fn: delete password drom db

    118. 

  118. 	function deletePassword($user, $name) {

    119. 

  119. 		global $mysqli;

    120. 

  120. 		// we need id of loged user

    121. 

  121. 		$query = "SELECT * FROM users WHERE username='$user' LIMIT 1";

    122. 

  122. 		$result = $mysqli->query($query);

    123. 

  123. 		$result = $result->fetch_assoc();

    124. 

  124. 		$id_user = $result["id"];

    125. 

  125. 		

    126. 

  126. 		$query = "DELETE FROM data WHERE id_user='$id_user' AND name='$name' LIMIT 1";

    127. 

  127. 		// delete row

    128. 

  128. 		$mysqli->query($query);

    129. 

  129. 		echo $mysqli->error;

    130. 

  130. 	}

    131. 

  131. 	

    132. 

  132. 	// fn: returns all passwords from user

    133. 

  133. 	function getAllPasswords($user) {

    134. 

  134. 		global $mysqli;

    135. 

  135. 		// we need id of loged user

    136. 

  136. 		$query = "SELECT * FROM users WHERE username='$user' LIMIT 1";

    137. 

  137. 		$result = $mysqli->query($query);

    138. 

  138. 		$result = $result->fetch_assoc();

    139. 

  139. 		$id = $result["id"];

    140. 

  140. 		

    141. 

  141. 		// get passwords from data

    142. 

  142. 		$query = "SELECT * FROM data WHERE id_user='$id'";

    143. 

  143. 		$result = $mysqli->query($query);

    144. 

  144. 		return $result;

    145. 

  145. 	}

    146. 

  146. ?>
    147.