Beispiel #1
0
function ResetPassword()
{
    global $template, $DB;
    $t = new Template();
    // Form submitted
    if ($_SERVER['REQUEST_METHOD'] == 'POST') {
        $password = RandomPassword();
        $domain = preg_replace('~^www\\.~', '', $_SERVER['HTTP_HOST']);
        $t->assign('password', $password);
        $t->assign('control_panel', "http://{$_SERVER['HTTP_HOST']}" . dirname($_SERVER['REQUEST_URI']) . "/index.php");
        $DB->Update('DELETE FROM lx_administrators WHERE username=?', array('administrator'));
        $DB->Update('INSERT INTO lx_administrators VALUES (?,?,?,?,?,?,?,?,?,?)', array('administrator', sha1($password), '', 0, 'Administrator', 'webmaster@$domain', 'administrator', '', 0, 0));
        $DB->Disconnect();
        $t->assign('mode', 'confirmed');
    } else {
        $t->assign('mode', 'confirm');
    }
    echo $t->parse($template);
}
Beispiel #2
0
function lxPasswordReset()
{
    global $DB, $C, $t, $L;
    $confirmation = $DB->Row('SELECT * FROM lx_user_confirms WHERE confirmation_id=?', array($_REQUEST['id']));
    if ($confirmation) {
        $DB->Update('DELETE FROM lx_user_confirms WHERE confirmation_id=?', array($_REQUEST['id']));
        $account = $DB->Row('SELECT * FROM lx_users WHERE username=?', array($confirmation['username']));
        if (!$account) {
            $t->assign('error', $L['INVALID_CONFIRMATION']);
        } else {
            $account['password'] = RandomPassword();
            $DB->Update('UPDATE lx_users SET password=?,session=?,session_start=? WHERE username=?', array(sha1($account['password']), null, 0, $account['username']));
            $t->assign_by_ref('account', $account);
            SendMail($account['email'], 'email-account-password.tpl', $t);
        }
    } else {
        $t->assign('error', $L['INVALID_CONFIRMATION']);
    }
    $t->display('account-forgot-confirmed.tpl');
}
Beispiel #3
0
function InitializeTables()
{
    global $DB;
    $tables = GetDBTables();
    foreach ($tables as $table) {
        $create = GetDBCreate($table);
        $DB->Update($create);
    }
    $password = RandomPassword();
    $DB->Update('DELETE FROM `tbx_administrator` WHERE `username`=?', array('administrator'));
    $DB->Update('INSERT INTO `tbx_administrator` VALUES (?,?,?,?,?,?)', array('administrator', sha1($password), 'webmaster@' . preg_replace('~^www\\.~', '', $_SERVER['HTTP_HOST']), 'Administrator', 'Superuser', 0));
    $DB->Update('DELETE FROM `tbx_user_level` WHERE `name` IN (?,?)', array('Guest', 'Standard'));
    $DB->Update('INSERT INTO `tbx_user_level` VALUES (NULL,?,0,0,1,0)', array('Guest'));
    $DB->Update('INSERT INTO `tbx_user_level` VALUES (NULL,?,0,0,0,1)', array('Standard'));
    return $password;
}
Beispiel #4
0
function tlxPasswordResetConfirmed($errors = null)
{
    global $C, $DB, $L, $t;
    // Delete old confirmations
    $DB->Update('DELETE FROM `tlx_account_confirms` WHERE `date_sent` < DATE_ADD(?, INTERVAL -1 DAY)', array(MYSQL_NOW));
    $confirmation = $DB->Row('SELECT * FROM `tlx_account_confirms` WHERE `confirm_id`=?', array($_REQUEST['id']));
    if ($confirmation) {
        $DB->Update('DELETE FROM `tlx_account_confirms` WHERE `confirm_id`=?', array($_REQUEST['id']));
        $account = $DB->Row('SELECT * FROM `tlx_accounts` WHERE `username`=?', array($confirmation['username']));
        if (!$account) {
            $t->assign('error', $L['INVALID_CONFIRMATION']);
        } else {
            $account['password'] = RandomPassword();
            $DB->Update('UPDATE `tlx_accounts` SET `password`=? WHERE `username`=?', array(sha1($account['password']), $account['username']));
            $DB->Update('DELETE FROM `tlx_account_logins` WHERE `username`=?', array($account['username']));
            $t->assign_by_ref('account', $account);
            SendMail($account['email'], 'email-account-password-confirmed.tpl', $t);
        }
    } else {
        $t->assign('error', $L['INVALID_CONFIRMATION']);
    }
    $t->display('accounts-password-reset-confirmed.tpl');
}
Beispiel #5
0
function txPartnerApprove()
{
    global $DB, $json, $C;
    VerifyPrivileges(P_PARTNER_ADD, TRUE);
    $t = new Template();
    $t->assign_by_ref('config', $C);
    $result = GetWhichPartners();
    $amount = $DB->NumRows($result);
    while ($partner = $DB->NextRow($result)) {
        $data = $_REQUEST['partner'][$partner['username']];
        $password = RandomPassword();
        if (!in_array('__ALL__', $data['categories'])) {
            $data['categories'] = serialize($data['categories']);
        } else {
            $data['categories'] = null;
        }
        NullIfEmpty($data['date_start']);
        NullIfEmpty($data['date_end']);
        $DB->Update('UPDATE `tx_partners` SET ' . '`name`=?, ' . '`password`=?, ' . '`date_start`=?, ' . '`date_end`=?, ' . '`per_day`=?, ' . '`weight`=?, ' . '`categories`=?, ' . '`status`=?, ' . '`allow_redirect`=?, ' . '`allow_norecip`=?, ' . '`allow_autoapprove`=?, ' . '`allow_noconfirm`=?, ' . '`allow_blacklist`=? ' . 'WHERE `username`=?', array($data['name'], sha1($password), $data['date_start'], $data['date_end'], $data['per_day'], $data['weight'], $data['categories'], 'active', intval($data['allow_redirect']), intval($data['allow_norecip']), intval($data['allow_autoapprove']), intval($data['allow_noconfirm']), intval($data['allow_blacklist']), $partner['username']));
        // Update user defined fields
        UserDefinedUpdate('tx_partner_fields', 'tx_partner_field_defs', 'username', $partner['username'], $data);
        $partner = array_merge($DB->Row('SELECT * FROM `tx_partners` WHERE `username`=?', array($partner['username'])), $DB->Row('SELECT * FROM `tx_partner_fields` WHERE `username`=?', array($partner['username'])));
        $partner['password'] = $password;
        // Send confirmation e-mail
        $t->assign_by_ref('partner', $partner);
        SendMail($partner['email'], 'email-partner-added.tpl', $t);
    }
    $DB->Free($result);
    echo $json->encode(array('status' => JSON_SUCCESS, 'message' => "{$amount} partner" . ($amount == 1 ? ' has' : 's have') . " been approved"));
}
Beispiel #6
0
function CreateTables()
{
    global $t;
    $DB = new DB($_REQUEST['db_hostname'], $_REQUEST['db_username'], $_REQUEST['db_password'], $_REQUEST['db_name']);
    $DB->Connect();
    $tables = array();
    IniParse("{$GLOBALS['BASE_DIR']}/includes/tables.php", TRUE, $tables);
    foreach ($tables as $name => $create) {
        $DB->Update("CREATE TABLE IF NOT EXISTS {$name} ( {$create} ) TYPE=MyISAM");
    }
    $password = RandomPassword();
    $domain = preg_replace('~^www\\.~', '', $_SERVER['HTTP_HOST']);
    $t->assign('password', $password);
    $DB->Update('DELETE FROM lx_administrators WHERE username=?', array('administrator'));
    $DB->Update('INSERT INTO lx_administrators VALUES (?,?,?,?,?,?,?,?,?,?)', array('administrator', sha1($password), '', 0, 'Administrator', "webmaster@{$domain}", 'administrator', '', 0, 0));
    $DB->Disconnect();
}
   http://www.oscommerce.com

   Copyright (c) 2002 - 2003 osCommerce
   ----------------------------------------------------------------------
   Released under the GNU General Public License
   ---------------------------------------------------------------------- */
/** ensure this file is being included by a parent file */
defined('OOS_VALID_MOD') or die('Direct Access to this location is not allowed.');
function RandomPassword($passwordLength)
{
    $newkey = "";
    for ($index = 1; $index <= $passwordLength; $index++) {
        // Pick random number between 1 and 62
        $randomNumber = rand(1, 62);
        // Select random character based on mapping.
        if ($randomNumber < 11) {
            $newkey .= Chr($randomNumber + 48 - 1);
        } else {
            if ($randomNumber < 37) {
                $newkey .= Chr($randomNumber + 65 - 10);
            } else {
                $newkey .= Chr($randomNumber + 97 - 36);
            }
        }
        // [37,62] => [a,z]
    }
    return $newkey;
}
$passwordLength = 24;
$newkey = RandomPassword($passwordLength);
$dbconn->Execute("UPDATE " . $oostable['manual_info'] . " SET man_key  = '" . $newkey . "', man_key2  = '', man_key3  = '' WHERE man_info_id = '1' ");
Beispiel #8
0
function tbxDisplayResetConfirm()
{
    global $t;
    $DB = GetDB();
    $v = Validator::Create();
    // Remove expired codes
    $DB->Update('DELETE FROM `tbx_user_reset_code` WHERE `timestamp` < ?', array(time() - 3600));
    $confirmation = $DB->Row('SELECT * FROM `tbx_user` JOIN `tbx_user_reset_code` USING (`username`) WHERE `reset_code`=?', array($_REQUEST['code']));
    $v->Register(empty($confirmation), Validator_Type::IS_FALSE, _T('Validation:Invalid confirmation code'));
    if (!$v->Validate()) {
        $t->Assign('g_errors', $v->GetErrors());
    } else {
        $DB->Update('DELETE FROM `tbx_user_reset_code` WHERE `username`=?', array($confirmation['username']));
        $user = $DB->Row('SELECT * FROM `tbx_user` JOIN `tbx_user_custom` USING (`username`) JOIN `tbx_user_stat` USING (`username`) WHERE `tbx_user`.`username`=?', array($confirmation['username']));
        $password = RandomPassword();
        DatabaseUpdate('tbx_user', array('username' => $user['username'], 'password' => sha1($password)));
        $t->AssignByRef('g_user', $user);
        $t->Assign('g_password', $password);
        $m = new Mailer();
        $m->Mail('email-user-reset.tpl', $t, $user['email'], $user['name']);
    }
    $t->Display('user-reset-confirmed.tpl');
}
Beispiel #9
0
function CreateTables()
{
    global $t, $DB;
    $DB = new DB($_REQUEST['db_hostname'], $_REQUEST['db_username'], $_REQUEST['db_password'], $_REQUEST['db_name']);
    $DB->Connect();
    $tables = array();
    IniParse("{$GLOBALS['BASE_DIR']}/includes/tables.php", TRUE, $tables);
    foreach ($tables as $name => $create) {
        $DB->Update("CREATE TABLE IF NOT EXISTS {$name} ( {$create} ) TYPE=MyISAM");
    }
    $password = RandomPassword();
    $domain = preg_replace('~^www\\.~', '', $_SERVER['HTTP_HOST']);
    $t->assign('password', $password);
    // Setup default user defined partner account fields
    $columns = $DB->GetColumns('tx_partner_fields');
    if (in_array('sample_url_1', $columns) && $DB->Count('SELECT COUNT(*) FROM `tx_partner_field_defs` WHERE `name`=?', array('sample_url_1')) < 1) {
        $DB->Update("INSERT INTO `tx_partner_field_defs` VALUES (NULL,'sample_url_1','Sample URL 1','Text','size=\"80\"','',2,'','Sample URL 1 is not properly formatted',1,1,1,0,0)");
    }
    if (in_array('sample_url_2', $columns) && $DB->Count('SELECT COUNT(*) FROM `tx_partner_field_defs` WHERE `name`=?', array('sample_url_2')) < 1) {
        $DB->Update("INSERT INTO `tx_partner_field_defs` VALUES (NULL,'sample_url_2','Sample URL 2','Text','size=\"80\"','',2,'','Sample URL 2 is not properly formatted',1,1,1,0,0)");
    }
    if (in_array('sample_url_3', $columns) && $DB->Count('SELECT COUNT(*) FROM `tx_partner_field_defs` WHERE `name`=?', array('sample_url_3')) < 1) {
        $DB->Update("INSERT INTO `tx_partner_field_defs` VALUES (NULL,'sample_url_3','Sample URL 3','Text','size=\"80\"','',0,'','Sample URL 3 is not properly formatted',1,1,1,0,0)");
    }
    // Setup default category and initial thumbnail preview dimensions
    $dimensions = array('180x150', '120x150');
    $category = array('per_day' => '-1', 'pics_allowed' => 1, 'pics_extensions' => 'jpg,jpeg,bmp,png', 'pics_minimum' => 10, 'pics_maximum' => 30, 'pics_file_size' => 12288, 'pics_preview_allowed' => 1, 'pics_preview_size' => $dimensions[1], 'movies_allowed' => 1, 'movies_extensions' => 'avi,mpg,mpeg,rm,wmv,mov,asf', 'movies_minimum' => 5, 'movies_maximum' => 30, 'movies_file_size' => 102400, 'movies_preview_allowed' => 1, 'movies_preview_size' => $dimensions[0]);
    StoreValue('default_category', serialize($category));
    Storevalue('preview_sizes', serialize($dimensions));
    // Setup administrator account
    $DB->Update('DELETE FROM `tx_administrators` WHERE `username`=?', array('administrator'));
    $DB->Update('INSERT INTO `tx_administrators` VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)', array('administrator', sha1($password), '', 0, 'Administrator', "webmaster@{$domain}", 'administrator', null, null, null, null, 0, 0, 0, 0, 0, null, null));
    $DB->Disconnect();
}
Beispiel #10
0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.
if (!preg_match('~/admin$~', realpath(dirname(__FILE__)))) {
    echo "This file must be located in the admin directory of your TubeX installation";
    exit;
}
define('TUBEX_CONTROL_PANEL', true);
require_once 'includes/cp-global.php';
if ($_SERVER['REQUEST_METHOD'] == 'POST') {
    $DB = GetDB();
    $reset = true;
    $password = RandomPassword();
    $cp_url = "http://" . $_SERVER['HTTP_HOST'] . dirname($_SERVER['REQUEST_URI']) . "/index.php";
    $DB->Update('DELETE FROM `tbx_administrator` WHERE `username`=?', array('administrator'));
    $DB->Update('INSERT INTO `tbx_administrator` VALUES (?,?,?,?,?,?)', array('administrator', sha1($password), 'webmaster@' . preg_replace('~^www\\.~', '', $_SERVER['HTTP_HOST']), 'Administrator', 'Superuser', 0));
}
$fp = fopen(__FILE__, 'r');
fseek($fp, __COMPILER_HALT_OFFSET__);
eval(stream_get_contents($fp));
fclose($fp);
__halt_compiler();?>
<html>
<head>
  <title>Reset TubeX Control Panel Access</title>
</head>
<body>
Beispiel #11
0
function txShPasswordResetConfirm()
{
    global $DB, $C, $t, $L, $domain;
    // Delete old confirmations
    $DB->Update('DELETE FROM `tx_partner_confirms` WHERE `date_sent` < ?', array(gmdate(DF_DATETIME, TIME_NOW - 86400)));
    $confirmation = $DB->Row('SELECT * FROM `tx_partner_confirms` WHERE `confirm_id`=?', array($_REQUEST['id']));
    if ($confirmation) {
        $DB->Update('DELETE FROM `tx_partner_confirms` WHERE `confirm_id`=?', array($_REQUEST['id']));
        $partner = $DB->Row('SELECT * FROM `tx_partners` WHERE `username`=?', array($confirmation['username']));
        if (!$partner) {
            $t->assign('error', $L['INVALID_CONFIRMATION']);
        } else {
            $partner['password'] = RandomPassword();
            $DB->Update('UPDATE `tx_partners` SET `password`=?,`session`=?,`session_start`=? WHERE `username`=?', array(sha1($partner['password']), null, 0, $partner['username']));
            $t->assign_by_ref('partner', $partner);
            SendMail($partner['email'], $domain['template_prefix'] . 'email-partner-reset-confirmed.tpl', $t);
        }
    } else {
        $t->assign('error', $L['INVALID_CONFIRMATION']);
    }
    $t->display($domain['template_prefix'] . 'partner-reset-confirmed.tpl');
}
Beispiel #12
0
function CreateTables()
{
    global $t, $DB;
    $DB = new DB($_REQUEST['db_hostname'], $_REQUEST['db_username'], $_REQUEST['db_password'], $_REQUEST['db_name']);
    $DB->Connect();
    $tables = array();
    IniParse("{$GLOBALS['BASE_DIR']}/includes/tables.php", TRUE, $tables);
    foreach ($tables as $name => $create) {
        $DB->Update("CREATE TABLE IF NOT EXISTS {$name} ( {$create} ) TYPE=MyISAM");
    }
    $password = RandomPassword();
    $domain = preg_replace('~^www\\.~', '', $_SERVER['HTTP_HOST']);
    $t->assign('password', $password);
    // Setup administrator account
    $DB->Update('DELETE FROM `tlx_administrators` WHERE `username`=?', array('administrator'));
    $DB->Update('INSERT INTO `tlx_administrators` VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?)', array('administrator', sha1($password), '', 0, 'Administrator', "webmaster@{$domain}", 'administrator', null, null, null, null, 0, 0));
    if (($last_updates = GetValue('last_updates')) === null) {
        $last_updates = array();
        $last_updates['daily'] = date('Y-m-d');
        $last_updates['hourly'] = null;
        StoreValue('last_updates', serialize($last_updates));
    }
    $DB->Update('INSERT INTO `tlx_skim_ratio` VALUES (0,0)');
    $DB->Update('DELETE FROM `tlx_ip2country`');
    $DB->Update('DELETE FROM `tlx_countries`');
    $DB->Update('DELETE FROM `tlx_country_stats`');
    $countries = file('../includes/countries.php');
    foreach ($countries as $line) {
        $DB->Update($line);
    }
    //$DB->Disconnect();
}
 $mail->FromName = "MMM solutions";
 //$add = array("*****@*****.**");
 $usernames = array("coe11b001", "coe11b012", "coe11b014", "coe11b027");
 $con_error = "cannot be connected";
 $mysql_host = "localhost";
 $mysql_user = "******";
 $mysql_pass = "";
 $mysql_db = "users";
 $i = 0;
 if (!mysql_connect($mysql_host, $mysql_user, $mysql_pass) || !mysql_select_db($mysql_db)) {
     die($con_error);
 } else {
     for ($i = 1; $i <= count($usernames); $i = $i + 1) {
         $user = $usernames[$i];
         //echo $user;
         $rand = RandomPassword();
         //echo $rand;
         $query = "Insert into userinfo(`id`,`username`,`password`,`view`) values('{$i}+1','{$user}','{$rand}','0')";
         $query_run = mysql_query($query);
         if ($query_run) {
             echo "query Succeeded";
         } else {
             echo "Query Failed";
         }
     }
 }
 $query2 = "select username,password from userinfo ";
 $query_run2 = mysql_query($query2);
 if ($query_run2) {
     $j = 0;
     while ($row = mysql_fetch_assoc($query_run2)) {