add some fail fallback to phpmyadmin auto login

This commit is contained in:
Usman Nasir
2020-09-04 19:25:05 +05:00
parent 75dc4cf6a9
commit 6d4ac955d0
3 changed files with 29 additions and 11 deletions

View File

@@ -217,14 +217,23 @@ def fetchDetailsPHPMYAdmin(request):
currentACL = ACLManager.loadedACL(userID)
token = request.GET.get('token')
username = request.GET.get('username')
if token == 'FailedLogin':
## Remove old key and db entry
keySavePath = '/home/cyberpanel/phpmyadmin_%s' % (admin.userName)
GlobalUserDB.objects.get(username=admin.userName).delete()
try:
GlobalUserDB.objects.get(username=admin.userName).delete()
except:
pass
command = 'rm -f %s' % (keySavePath)
ProcessUtilities.executioner(command)
## Create and save new key
key = Fernet.generate_key()
writeToFile = open(keySavePath, 'w')
@@ -257,9 +266,6 @@ def fetchDetailsPHPMYAdmin(request):
return redirect(returnURL)
username = request.GET.get('username')
if username != admin.userName:
return redirect(loadLoginPage)

View File

@@ -933,17 +933,24 @@ skip-name-resolve
try:
cursor.execute(
"CREATE USER '" + user + "'@'%s' IDENTIFIED BY '" % (mysqlUtilities.LOCALHOST) + password + "'")
except:
cursor.execute("DROP USER '%s'@'%s'" % (user, mysqlUtilities.LOCALHOST))
cursor.execute(
"CREATE USER '" + user + "'@'%s' IDENTIFIED BY '" % (mysqlUtilities.LOCALHOST) + password + "'")
except BaseException as msg:
logging.CyberCPLogFileWriter.writeToFile('%s [addUserToDB:937]' % (str(msg)))
try:
cursor.execute("DROP USER '%s'@'%s'" % (user, mysqlUtilities.LOCALHOST))
cursor.execute(
"CREATE USER '" + user + "'@'%s' IDENTIFIED BY '" % (mysqlUtilities.LOCALHOST) + password + "'")
except BaseException as msg:
logging.CyberCPLogFileWriter.writeToFile('%s [addUserToDB:943]' % (str(msg)))
if mysqlUtilities.RDS == 0:
cursor.execute(
"GRANT ALL PRIVILEGES ON " + database + ".* TO '" + user + "'@'%s'" % (mysqlUtilities.LOCALHOST))
else:
cursor.execute(
"GRANT INDEX, DROP, UPDATE, ALTER, CREATE, SELECT, INSERT, DELETE ON " + database + ".* TO '" + user + "'@'%s'" % (mysqlUtilities.LOCALHOST))
try:
cursor.execute(
"GRANT INDEX, DROP, UPDATE, ALTER, CREATE, SELECT, INSERT, DELETE ON " + database + ".* TO '" + user + "'@'%s'" % (mysqlUtilities.LOCALHOST))
except BaseException as msg:
logging.CyberCPLogFileWriter.writeToFile('%s [addUserToDB:953]' % (str(msg)))
connection.close()

View File

@@ -3,6 +3,7 @@
define("PMA_SIGNON_INDEX", 1);
try{
define('PMA_SIGNON_SESSIONNAME', 'SignonSession');
define('PMA_DISABLE_SSL_PEER_VALIDATION', TRUE);
@@ -43,5 +44,9 @@ else if(isset($_GET['password'])){
header('Location: /phpmyadmin/index.php?server=' . PMA_SIGNON_INDEX);
}
}catch (Exception $e) {
echo 'Caught exception: ', $e->getMessage(), "\n";
}
$url = "/dataBases/fetchDetailsPHPMYAdmin?token=FailedLogin";
#$url = "/dataBases/fetchDetailsPHPMYAdmin?token=FailedLogin";
#header('Location: ' . $url);