array("All privileges" => "")); foreach (get_rows("SHOW PRIVILEGES") as $row) { foreach (explode(",", ($row["Privilege"] == "Grant option" ? "" : $row["Context"])) as $context) { $privileges[$context][$row["Privilege"]] = $row["Comment"]; } } $privileges["Server Admin"] += $privileges["File access on server"]; $privileges["Databases"]["Create routine"] = $privileges["Procedures"]["Create routine"]; // MySQL bug #30305 unset($privileges["Procedures"]["Create routine"]); $privileges["Columns"] = array(); foreach (array("Select", "Insert", "Update", "References") as $val) { $privileges["Columns"][$val] = $privileges["Tables"][$val]; } unset($privileges["Server Admin"]["Usage"]); foreach ($privileges["Tables"] as $key => $val) { unset($privileges["Databases"][$key]); } $new_grants = array(); if ($_POST) { foreach ($_POST["objects"] as $key => $val) { $new_grants[$val] = (array) $new_grants[$val] + (array) $_POST["grants"][$key]; } } $grants = array(); $old_pass = ""; if (isset($_GET["host"]) && ($result = $connection->query("SHOW GRANTS FOR " . q($USER) . "@" . q($_GET["host"])))) { //! use information_schema for MySQL 5 - column names in column privileges are not escaped while ($row = $result->fetch_row()) { if (preg_match('~GRANT (.*) ON (.*) TO ~', $row[0], $match) && preg_match_all('~ *([^(,]*[^ ,(])( *\\([^)]+\\))?~', $match[1], $matches, PREG_SET_ORDER)) { //! escape the part between ON and TO foreach ($matches as $val) { if ($val[1] != "USAGE") { $grants["$match[2]$val[2]"][$val[1]] = true; } if (ereg(' WITH GRANT OPTION', $row[0])) { //! don't check inside strings and identifiers $grants["$match[2]$val[2]"]["GRANT OPTION"] = true; } } } if (preg_match("~ IDENTIFIED BY PASSWORD '([^']+)~", $row[0], $match)) { $old_pass = $match[1]; } } } if ($_POST && !$error) { $old_user = (isset($_GET["host"]) ? q($USER) . "@" . q($_GET["host"]) : "''"); if ($_POST["drop"]) { query_redirect("DROP USER $old_user", ME . "privileges=", lang('User has been dropped.')); } else { $new_user = q($_POST["user"]) . "@" . q($_POST["host"]); // if $_GET["host"] is not set then $new_user is always different $pass = $_POST["pass"]; if (!$_POST["hashed"]) { // compute hash in a separate query so that plain text password is not saved to history $pass = $connection->result("SELECT PASSWORD(" . q($pass) . ")"); $error = !$pass; } $created = false; if (!$error) { if ($old_user != $new_user) { $created = queries(($connection->server_info < 5 ? "GRANT USAGE ON *.* TO" : "CREATE USER") . " $new_user IDENTIFIED BY PASSWORD " . q($pass)); $error = !$created; } elseif ($pass != $old_pass) { queries("SET PASSWORD FOR $new_user = " . q($pass)); } } if (!$error) { $revoke = array(); foreach ($new_grants as $object => $grant) { if (isset($_GET["grant"])) { $grant = array_filter($grant); } $grant = array_keys($grant); if (isset($_GET["grant"])) { // no rights to mysql.user table $revoke = array_diff(array_keys(array_filter($new_grants[$object], 'strlen')), $grant); } elseif ($old_user == $new_user) { $old_grant = array_keys((array) $grants[$object]); $revoke = array_diff($old_grant, $grant); $grant = array_diff($grant, $old_grant); unset($grants[$object]); } if (preg_match('~^(.+)\\s*(\\(.*\\))?$~U', $object, $match) && ( !grant("REVOKE", $revoke, $match[2], " ON $match[1] FROM $new_user") //! SQL injection || !grant("GRANT", $grant, $match[2], " ON $match[1] TO $new_user") )) { $error = true; break; } } } if (!$error && isset($_GET["host"])) { if ($old_user != $new_user) { queries("DROP USER $old_user"); } elseif (!isset($_GET["grant"])) { foreach ($grants as $object => $revoke) { if (preg_match('~^(.+)(\\(.*\\))?$~U', $object, $match)) { grant("REVOKE", array_keys($revoke), $match[2], " ON $match[1] FROM $new_user"); } } } } queries_redirect(ME . "privileges=", (isset($_GET["host"]) ? lang('User has been altered.') : lang('User has been created.')), !$error); if ($created) { // delete new user in case of an error $connection->query("DROP USER $new_user"); } } } page_header((isset($_GET["host"]) ? lang('Username') . ": " . h("$USER@$_GET[host]") : lang('Create user')), $error, array("privileges" => array('', lang('Privileges')))); if ($_POST) { $row = $_POST; $grants = $new_grants; } else { $row = $_GET + array("host" => $connection->result("SELECT SUBSTRING_INDEX(CURRENT_USER, '@', -1)")); // create user on the same domain by default $row["pass"] = $old_pass; if ($old_pass != "") { $row["hashed"] = true; } $grants[(DB == "" || $grants ? "" : idf_escape(addcslashes(DB, "%_"))) . ".*"] = array(); } ?>