rooty/yubikey-ksm
1
0
Fork 0
mirror of https://github.com/Yubico/yubikey-ksm.git synced 2025-02-26 21:54:17 +01:00
Code Issues Projects Releases Wiki Activity

Use PHP PDO database interface instead of hard coding the MySQL interface.

Browse Source
This commit is contained in:
Simon Josefsson 2009-12-02 17:30:29 +00:00
parent ddf1274d6d
commit b24dd3c6ef
1 changed files with 13 additions and 16 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

29
ykksm-decrypt.php
View File

@ -48,31 +48,28 @@ if (!preg_match("/^([cbdefghijklnrtuv]{0,16})([cbdefghijklnrtuv]{32})$/",
$id = $matches[1]; $id = $matches[1];
$modhex_ciphertext = $matches[2]; $modhex_ciphertext = $matches[2];
$dbconn = mysql_connect($dbhost, $dbuser, $dbpasswd); try {
if (!$dbconn) { $dbh = new PDO($db_dsn, $db_username, $db_password, $db_options);
syslog(LOG_ERR, "Database connect error: " . mysql_error()); } catch (PDOException $e) {
syslog(LOG_ERR, "Database error: " . $e->getMessage());
die("ERR Database error\n"); die("ERR Database error\n");
} }
$db_selected = mysql_select_db($dbname);
if (!$db_selected) {
syslog(LOG_ERR, "Database select error: " . mysql_error());
die("ERR Database error\n");
}
$sql = "SELECT aesKey, internalName FROM yubikeys " . $sql = "SELECT aesKey, internalName FROM yubikeys " .
"WHERE publicName = '$id' AND active"; "WHERE publicName = '$id' AND active";
$result = mysql_query($sql); $result = $dbh->query($sql);
if (!$result) { if (!$result) {
syslog(LOG_ERR, "Database query error: " . mysql_error()); syslog(LOG_ERR, "Database query error. Query: " . $sql . " Error: " .
print_r ($dbh->errorInfo (), true));
die("ERR Database error\n"); die("ERR Database error\n");
} }
if (mysql_num_rows($result) != 1) { if ($result->rowCount() != 1) {
syslog(LOG_INFO, "Unknown yubikey: " . $otp); syslog(LOG_INFO, "Unknown yubikey: " . $otp);
die("ERR Unknown yubikey\n"); die("ERR Unknown yubikey\n");
} }
$row = mysql_fetch_assoc($result); $row = $result->fetch(PDO::FETCH_ASSOC);
$aesKey = $row['aesKey']; $aesKey = $row['aesKey'];
$internalName = $row['internalName']; $internalName = $row['internalName'];
@ -103,7 +100,7 @@ syslog(LOG_INFO, "SUCCESS OTP $otp PT $plaintext $out")
print "$out\n"; print "$out\n";
mysql_close() # Close database connection.
or syslog(LOG_ERR, "Database close error (otp $otp): " . mysql_error()); $dbh = null;
?> ?>