home *** CD-ROM | disk | FTP | other *** search
/ Personal Computer World 2007 September / PCWSEP07.iso / Software / Resources / Developers / XAMPP 1.5.4 / Windows installer / xampp-win32-1.5.4-installer.exe / xampp / security / htdocs / xamppsecurity.php < prev   
PHP Script  |  2006-04-07  |  12KB  |  258 lines
  1. <?php
  2.     error_reporting(0);
  3.     extract($_POST);
  4.     extract($_SERVER);
  5.     $host = "127.0.0.1";
  6.     $timeout = "1";
  7.  
  8.     if ($REMOTE_ADDR) {
  9.         if ($REMOTE_ADDR != $host) {
  10.             echo "<h2> FORBIDDEN FOR CLIENT $REMOTE_ADDR <h2>";
  11.             exit;
  12.         }
  13.     }
  14.  
  15.     include ".\securefunctions.php";
  16.  
  17.     $curdir = getcwd();
  18.     list($partwampp, $directorwampp) = spliti('\\\htdocs', $curdir);
  19.     $mypasswdtxt = "mysqlrootpasswd.txt";
  20.     $xapasswdtxt = "xamppdirpasswd.txt";
  21.     $mypasswdtxtdir = $partwampp."\security\\".$mypasswdtxt;
  22.     $xapasswdtxtdir = $partwampp."\security\\".$xapasswdtxt;
  23.  
  24.     if (($handle = @fsockopen($host, 3306, $errno, $errstr, $timeout)) == true) {
  25.         @fclose($handle);
  26.  
  27.         if(@mysql_connect($host, "root", "")) {
  28.             $registpasswd = "no";
  29.             mysql_close();
  30.         } else {
  31.             $registpasswd = "yes";
  32.         }
  33.         $mysqlrun = 1;
  34.     } else {
  35.         @fclose($handle);
  36.         $mysqlrun = 0;
  37.     }
  38.  
  39.     if ($xamppaccess) {
  40.         if (ereg('^([a-zA-Z0-9@*#]{3,15})$', $xamppuser)) {
  41.             $xamppereg = "ok";
  42.         } else {
  43.             $xamppereg = "notok";
  44.         }
  45.         if (ereg('^([a-zA-Z0-9@*#]{3,15})$', $xampppasswd)) {
  46.             $xampperegpass = "ok";
  47.         } else {
  48.             $xampperegpass = "notok";
  49.         }
  50.         if (($xamppereg == "ok") && ($xampperegpass == "ok")) {
  51.             htaccess($xamppuser, $xampppasswd);
  52.         }
  53.     }
  54.  
  55.     if ($changing) {
  56.         if (ereg('^([a-zA-Z0-9@*#]{3,15})$', $mypasswd)) {
  57.             $mysqlpasswdereg = "ok";
  58.         } else {
  59.             $mysqlpasswdereg = "notok";
  60.         }
  61.         if (ereg('^([a-zA-Z0-9@*#]{3,15})$', $mypasswdrepeat)) {
  62.             $remysqlpasswdereg = "ok";
  63.         } else {
  64.             $remysqlpasswdereg = "notok";;
  65.         }
  66.         if (($mysqlpasswdereg == "ok") && ($remysqlpasswdereg == "ok")) {
  67.         }
  68.         if ($mypasswdold) {
  69.             if (ereg('^([a-zA-Z0-9@*#]{3,15})$', $mypasswdold)) {
  70.                 $oldmysqlpasswdereg = "ok";
  71.             } else {
  72.                 $oldmysqlpasswdereg = "notok";
  73.             }
  74.             if (($mysqlpasswdereg == "ok") && ($remysqlpasswdereg == "ok") && ($oldmysqlpasswdereg == "ok")) {
  75.                 $mysqlpassok = "yes";
  76.             }
  77.         } else {
  78.             if (($mysqlpasswdereg == "ok") && ($remysqlpasswdereg == "ok")) {
  79.                 $mysqlpassok = "yes";
  80.             }
  81.         }
  82.         if ($mysqlpassok == "yes") {
  83.             if ($mypasswd != $mypasswdrepeat) {
  84.             } else {
  85.                 mysqlrootupdate($mypasswdold, $mypasswd, $mypasswdrepeat);
  86.                 if ($rootpasswdupdate == "yes") {
  87.                     phpmyadminstatus();
  88.                     if (($currentstatus[0] == "cookie") || ($currentstatus[0] == "http")) {
  89.                         if ($currentstatus[0] == $authphpmyadmin) {
  90.                         } else {
  91.                             changephpadminauth($authphpmyadmin, "1");
  92.                         }
  93.                     } else {
  94.                         changephpadminauth($authphpmyadmin, "0");
  95.                     }
  96.                 }
  97.             }
  98.         }
  99.     }
  100. ?>
  101. <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"
  102.     "http://www.w3.org/TR/html4/loose.dtd">
  103. <html>
  104.     <head>
  105.         <meta name="author" content="Kai Oswald Seidler, Kay Vogelgesang, Carsten Wiedmann">
  106.         <link href="xampp.css" rel="stylesheet" type="text/css">
  107.         <title></title>
  108.     </head>
  109.  
  110.     <body>
  111.         <?php include "lang/".file_get_contents("lang.tmp").".php"; ?>
  112.  
  113.         <br>
  114.         <form method="post" action="<?php echo $PHP_SELF; ?>">
  115.             <table width="600" cellpadding="0" cellspacing="0" border="0">
  116.                 <tr>
  117.                     <td align="left" width="600" colspan="2"><hr width="80%" style="border: solid #bb3902 1px; height: 1px"></td>
  118.                 </tr>
  119.                 <tr>
  120.                     <td align="left" width="200"> </td>
  121.                     <td align="left" width="400"> </td>
  122.                 </tr>
  123.                 <tr>
  124.                     <td align="left" width="600" colspan="2"><h1><?php echo $TEXT['mysql-security-head']; ?></h1></td>
  125.                 </tr>
  126.                 <tr>
  127.                     <td align="left" width="600" colspan="2"><hr width="80%" style="border: solid #bb3902 1px; height: 1px"></td>
  128.                 </tr>
  129.                 <tr>
  130.                     <td align="left" width="200"> </td>
  131.                     <td align="left" width="400"> </td>
  132.                 </tr>
  133.                 <tr>
  134.                     <td align="left" width="600" colspan="2"><b><?php echo $TEXT['mysql-rootsetup-head']; ?></b></td>
  135.                 </tr>
  136.                 <tr>
  137.                     <td align="left" width="600" colspan="2">
  138.                         <?php
  139.                             if ($changing && ($mysqlpassok != "yes")) {
  140.                                 echo "<b><i><font color=\"#FF3366\">".$TEXT['xampp-setup-notok']."</font></i></b>";
  141.                             }
  142.                             if ($changing && ($mysqlpassok == "yes")) {
  143.                                 echo "<b><i><font color=\"#000000\">".$TEXT['xampp-setup-ok']."</font></i></b>";
  144.                             }
  145.                         ?>
  146.                          
  147.                     </td>
  148.                 </tr>
  149.                 <tr>
  150.                     <td align="left" width="200">MySQL SuperUser:</td>
  151.                     <td align="left" width="400"><b>root</b></td>
  152.                 </tr>
  153.                 <tr>
  154.                     <td align="left" width="200"> </td>
  155.                     <td align="left" width="400"> </td>
  156.                 </tr>
  157.  
  158.                 <?php
  159.                     if ($mysqlrun == 0) {
  160.                         echo "<tr><td align=\"left\" width=\"600\" colspan=\"2\"><h3><i>".$TEXT['mysql-rootsetup-notrunning']."</i></h3></td></tr>";
  161.                     } else {
  162.                         if ($update == "yes"){
  163.                             echo "<tr><td align=\"left\" width=\"200\"> </td><td align=\"left\" width=\"400\"> </td></tr>";
  164.                             echo "<tr><td align=\"left\" width=\"600\" colspan=\"2\"><font color=\"#0000A0\"><b>".$TEXT['mysql-rootsetup-passwdsuccess']."<br><br>$mypasswdtxtdir";
  165.                             if ($phpmyadminconfsafe) {
  166.                                 echo "<br>$phpmyadminconfsafe";
  167.                             }
  168.                             echo "</font></b></td></td></tr>";
  169.                             echo "<tr><td align=\"left\" width=\"200\"> </td><td align=\"left\" width=\"400\"> </td></tr>";
  170.                         }
  171.                         if ($update == "no") {
  172.                             echo "<tr><td align=\"left\" width=\"200\"> </td><td align=\"left\" width=\"400\"> </td></tr>";
  173.                             echo "<tr><td align=\"left\" width=\"600\" colspan=\"2\"><h3><i>".$TEXT['mysql-rootsetup-passwdnosuccess']."</i></h3></td></td></tr>";
  174.                             echo "<tr><td align=\"left\" width=\"200\"> </td><td align=\"left\" width=\"400\"> </td></tr>";
  175.                         }
  176.                         if ($mypasswdok == "null") {
  177.                             echo "<tr><td align=\"left\" width=\"200\"> </td><td align=\"left\" width=\"400\"> </td></tr>";
  178.                             echo "<tr><td align=\"left\" width=\"600\" colspan=\"2\"><h3><i>".$TEXT['mysql-rootsetup-passwdnull']."</i></h3></td></td></tr>";
  179.                             echo "<tr><td align=\"left\" width=\"200\"> </td><td align=\"left\" width=\"400\"> </td></tr>";
  180.                         }
  181.                         //   <input type=\"checkbox\" name=\"mysqlpasswordfile\" value=\"yes\">
  182.                         if ($mypasswdok == "no") {
  183.                             echo "<tr><td align=\"left\" width=\"200\"> </td><td align=\"left\" width=\"400\"> </td></tr>";
  184.                             echo "<tr><td align=\"left\" width=\"600\" colspan=\"2\"><h3><i>".$TEXT['mysql-rootsetup-passwdnotok']."</i></h3></td></td></tr>";
  185.                             echo "<tr><td align=\"left\" width=\"200\"> </td><td align=\"left\" width=\"400\"> </td></tr>";
  186.                         }
  187.                         if ($registpasswd == "yes") {
  188.                             echo "<tr><td align=\"left\" width=\"200\">".$TEXT['mysql-rootsetup-passwdold']."</td><td align=\"left\" width=\"400\"><input type=\"password\" name=\"mypasswdold\" size=\"40\"></td></tr>";
  189.                         }
  190.  
  191.                         echo "<tr><td align=\"left\" width=\"200\">".$TEXT['mysql-rootsetup-passwd']."</td><td align=\"left\" width=\"400\"><input type=\"password\" name=\"mypasswd\" size=\"40\"></td></tr>";
  192.                         echo "<tr><td align=\"left\" width=\"200\">".$TEXT['mysql-rootsetup-passwdrepeat']."</td><td align=\"left\" width=\"400\"><input type=\"password\" name=\"mypasswdrepeat\" size=\"40\"> </td></tr>";
  193.                         echo "<tr><td align=\"left\" width=\"200\"> </td><td align=\"center\" width=\"400\"> </td></tr>";
  194.                         if ($authphpmyadmin) {
  195.                             if ($authphpmyadmin == "cookie") {
  196.                                 $checkedcookie = "checked";
  197.                             } elseif ($currentstatus[0] == "http") {
  198.                                 $checkedhttpd = "checked";
  199.                             } else {
  200.                                 $checkedcookie = "checked";
  201.                             }
  202.                         } else {
  203.                             phpmyadminstatus();
  204.                             if ($currentstatus[0] == "cookie") {
  205.                                 $checkedcookie = "checked";
  206.                             } elseif ($currentstatus[0] == "http") {
  207.                                 $checkedhttpd = "checked";
  208.                             } else {
  209.                                 $checkedcookie = "checked";
  210.                             }
  211.                         }
  212.  
  213.                         echo "<tr><td align=\"left\" width=\"200\">".$TEXT['mysql-rootsetup-phpmyadmin']."</td><td align=\"left\" width=\"400\"><i>http</i> <input type=\"radio\" value=\"http\" $checkedhttpd name=\"authphpmyadmin\">  <i>cookie</i> <input type=\"radio\" value=\"cookie\" $checkedcookie name=\"authphpmyadmin\"></td></tr>";
  214.                         echo "<tr><td align=\"left\" width=\"200\"> </td><td align=\"center\" width=\"400\"> </td></tr>";
  215.                         echo "<tr><td align=\"left\" width=\"*\" colspan=\"2\">---- ".$TEXT['mysql-passwort-risk']." ----</td></tr>";
  216.                         echo "<tr><td align=\"left\" width=\"*\" colspan=\"2\">".$TEXT['mysql-passwort-infile']."  <input type=\"checkbox\" name=\"mysqlpfile\" value=\"yes\"></td></tr>";
  217.                         echo "<tr><td align=\"left\" width=\"*\" colspan=\"2\">(File: $mypasswdtxtdir)</td></tr>";
  218.                         echo "<tr><td align=\"center\" width=\"*\" colspan=\"2\"> </td></tr>";
  219.                         // echo "<tr><td align=\"left\" width=\"200\"> </td><td align=\"center\" width=\"400\"> </td></tr>";
  220.                         echo "<tr><td align=\"left\" width=\"200\"> </td><td align=\"left\" width=\"400\"><input type=\"submit\" value=\"".$TEXT['mysql-rootsetup-passwdchange']."\" name=\"changing\"></td></tr>";
  221.                     }
  222.                     echo "<tr><td align=\"left\" width=\"200\"> </td><td align=\"center\" width=\"400\"> </td></tr>";
  223.                     echo "<tr><td align=\"left\" width=\"600\" colspan=\"2\"><hr width=\"80%\" style=\"border: solid #bb3902 1px; height: 1px\"></td></tr>";
  224.                     echo "<tr><td align=\"left\" width=\"600\" colspan=2> ";
  225.                     if (($xamppereg == "notok") || ($xampperegpass == "notok")) {
  226.                         echo "<b><i><font color=\"#FF3366\">".$TEXT['xampp-setup-notok']."</font></i></b>";
  227.                     }
  228.                     if ($xamppdirconfig == "notok") {
  229.                         echo "<b><i><font color=\"#FF3366\">".$TEXT['xampp-config-notok']."</font></i></b>";
  230.                         }
  231.                     if ($xamppdirconfig == "ok") {
  232.                         echo "<b><font color=\"#0000A0\">".$TEXT['xampp-config-ok']."$htpasswddirectory<br>$htxampp";
  233.                         if ($xapfile=="yes")          
  234.                             {
  235.                         echo "<br>$xapasswdtxtdir</font></b><br><br>";
  236.                             }
  237.                             else
  238.                                 {
  239.                         echo "</font></b><br><br>";
  240.                             }
  241.                     }
  242.                     echo " </td></tr>";
  243.                     echo "<tr><td align=\"left\" width=\"600\" colspan=\"2\"><b>".$TEXT['xampp-setup-head']."</b></td></tr>";
  244.                     echo "<tr><td align=\"left\" width=\"200\"> </td><td align=\"center\" width=\"400\"> </td></tr>";
  245.                     echo "<tr><td align=\"left\" width=\"200\">".$TEXT['xampp-setup-user']."</td><td align=\"left\" width=\"400\"><input type=\"text\" name=\"xamppuser\" size=\"40\"></td></tr>";
  246.                     echo "<tr><td align=\"left\" width=\"200\">".$TEXT['xampp-setup-passwd']."</td><td align=left width=\"400\"><input type=\"password\" name=\"xampppasswd\" size=\"40\"></td></tr>";
  247.                     echo "<tr><td align=\"center\" width=\"600\" colspan=2> </td></tr>";
  248.                     echo "<tr><td align=\"left\" width=\"*\" colspan=\"2\">---- ".$TEXT['mysql-passwort-risk']." ----</td></tr>";
  249.                         echo "<tr><td align=\"left\" width=\"*\" colspan=\"2\">".$TEXT['mysql-passwort-infile']."  <input type=\"checkbox\" name=\"xapfile\" value=\"yes\"></td></tr>";
  250.                         echo "<tr><td align=\"left\" width=\"*\" colspan=\"2\">(File: $xapasswdtxtdir)</td></tr>";
  251.                         echo "<tr><td align=\"center\" width=\"*\" colspan=\"2\"> </td></tr>";
  252.                     echo "<tr><td align=\"left\" width=\"200\"> </td><td align=\"left\" width=\"400\"><input type=\"submit\" value=\"".$TEXT['xampp-setup-start']."\" name=\"xamppaccess\"></td></tr>";
  253.                 ?>
  254.             </table>
  255.         </form>
  256.     </body>
  257. </html>
  258.