Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
--TEST-- mysqli->change_user() --EXTENSIONS-- mysqli --SKIPIF-- <?php require_once('skipif..
Decoded Output download
--TEST--
mysqli->change_user()
--EXTENSIONS--
mysqli
--SKIPIF--
<?php
require_once('skipifconnectfailure.inc');
require_once('table.inc');
if (!$IS_MYSQLND && (mysqli_get_server_version($link) < 50118 && mysqli_get_server_version($link) > 50100)) {
die("skip Your MySQL Server version has a known bug that will cause a crash");
}
if (mysqli_get_server_version($link) >= 50600)
die("SKIP For MySQL < 5.6.0");
?>
--FILE--
<?php
include_once("connect.inc");
$link = NULL;
$tmp = NULL;
if (!$mysqli = new my_mysqli($host, $user, $passwd, $db, $port, $socket))
printf("[001] Cannot connect to the server using host=%s, user=%s, passwd=***, dbname=%s, port=%s, socket=%s
",
$host, $user, $db, $port, $socket);
if (false !== ($tmp = $mysqli->change_user($user . '_unknown_really', $passwd . 'non_empty', $db)))
printf("[006] Expecting false, got %s/%s
", gettype($tmp), $tmp);
if (false !== ($tmp = $mysqli->change_user($user, $passwd . '_unknown_really', $db)))
printf("[007] Expecting false, got %s/%s
", gettype($tmp), $tmp);
if (false !== ($tmp = $mysqli->change_user($user, $passwd, $db . '_unknown_really')))
printf("[008] Expecting false, got %s/%s
", gettype($tmp), $tmp);
// Reconnect because after 3 failed change_user attempts, the server blocks you off.
if (!$mysqli = new my_mysqli($host, $user, $passwd, $db, $port, $socket))
printf("[001] Cannot connect to the server using host=%s, user=%s, passwd=***, dbname=%s, port=%s, socket=%s
",
$host, $user, $db, $port, $socket);
if (!$mysqli->query('SET @mysqli_change_user_test_var=1'))
printf("[009] Failed to set test variable: [%d] %s
", $mysqli->errno, $mysqli->error);
if (!$res = $mysqli->query('SELECT @mysqli_change_user_test_var AS test_var'))
printf("[010] [%d] %s
", $mysqli->errno, $mysqli->error);
$tmp = $res->fetch_assoc();
$res->free_result();
if (1 != $tmp['test_var'])
printf("[011] Cannot set test variable
");
if (true !== ($tmp = $mysqli->change_user($user, $passwd, $db)))
printf("[012] Expecting true, got %s/%s
", gettype($tmp), $tmp);
if (!$res = $mysqli->query('SELECT database() AS dbname, user() AS user'))
printf("[013] [%d] %s
", $mysqli->errno, $mysqli->error);
$tmp = $res->fetch_assoc();
$res->free_result();
if (substr($tmp['user'], 0, strlen($user)) !== $user)
printf("[014] Expecting user %s, got user() %s
", $user, $tmp['user']);
if ($tmp['dbname'] != $db)
printf("[015] Expecting database %s, got database() %s
", $db, $tmp['dbname']);
if (!$res = $mysqli->query('SELECT @mysqli_change_user_test_var AS test_var'))
printf("[016] [%d] %s
", $mysqli->errno, $mysqli->error);
$tmp = $res->fetch_assoc();
$res->free_result();
if (NULL !== $tmp['test_var'])
printf("[017] Test variable is still set!
");
$mysqli->close();
if (false !== ($tmp = @$mysqli->change_user($user, $passwd, $db)))
printf("[018] Expecting false, got %s/%s
", gettype($tmp), $tmp);
print "done!";
?>
--EXPECT--
done!
Did this file decode correctly?
Original Code
--TEST--
mysqli->change_user()
--EXTENSIONS--
mysqli
--SKIPIF--
<?php
require_once('skipifconnectfailure.inc');
require_once('table.inc');
if (!$IS_MYSQLND && (mysqli_get_server_version($link) < 50118 && mysqli_get_server_version($link) > 50100)) {
die("skip Your MySQL Server version has a known bug that will cause a crash");
}
if (mysqli_get_server_version($link) >= 50600)
die("SKIP For MySQL < 5.6.0");
?>
--FILE--
<?php
include_once("connect.inc");
$link = NULL;
$tmp = NULL;
if (!$mysqli = new my_mysqli($host, $user, $passwd, $db, $port, $socket))
printf("[001] Cannot connect to the server using host=%s, user=%s, passwd=***, dbname=%s, port=%s, socket=%s\n",
$host, $user, $db, $port, $socket);
if (false !== ($tmp = $mysqli->change_user($user . '_unknown_really', $passwd . 'non_empty', $db)))
printf("[006] Expecting false, got %s/%s\n", gettype($tmp), $tmp);
if (false !== ($tmp = $mysqli->change_user($user, $passwd . '_unknown_really', $db)))
printf("[007] Expecting false, got %s/%s\n", gettype($tmp), $tmp);
if (false !== ($tmp = $mysqli->change_user($user, $passwd, $db . '_unknown_really')))
printf("[008] Expecting false, got %s/%s\n", gettype($tmp), $tmp);
// Reconnect because after 3 failed change_user attempts, the server blocks you off.
if (!$mysqli = new my_mysqli($host, $user, $passwd, $db, $port, $socket))
printf("[001] Cannot connect to the server using host=%s, user=%s, passwd=***, dbname=%s, port=%s, socket=%s\n",
$host, $user, $db, $port, $socket);
if (!$mysqli->query('SET @mysqli_change_user_test_var=1'))
printf("[009] Failed to set test variable: [%d] %s\n", $mysqli->errno, $mysqli->error);
if (!$res = $mysqli->query('SELECT @mysqli_change_user_test_var AS test_var'))
printf("[010] [%d] %s\n", $mysqli->errno, $mysqli->error);
$tmp = $res->fetch_assoc();
$res->free_result();
if (1 != $tmp['test_var'])
printf("[011] Cannot set test variable\n");
if (true !== ($tmp = $mysqli->change_user($user, $passwd, $db)))
printf("[012] Expecting true, got %s/%s\n", gettype($tmp), $tmp);
if (!$res = $mysqli->query('SELECT database() AS dbname, user() AS user'))
printf("[013] [%d] %s\n", $mysqli->errno, $mysqli->error);
$tmp = $res->fetch_assoc();
$res->free_result();
if (substr($tmp['user'], 0, strlen($user)) !== $user)
printf("[014] Expecting user %s, got user() %s\n", $user, $tmp['user']);
if ($tmp['dbname'] != $db)
printf("[015] Expecting database %s, got database() %s\n", $db, $tmp['dbname']);
if (!$res = $mysqli->query('SELECT @mysqli_change_user_test_var AS test_var'))
printf("[016] [%d] %s\n", $mysqli->errno, $mysqli->error);
$tmp = $res->fetch_assoc();
$res->free_result();
if (NULL !== $tmp['test_var'])
printf("[017] Test variable is still set!\n");
$mysqli->close();
if (false !== ($tmp = @$mysqli->change_user($user, $passwd, $db)))
printf("[018] Expecting false, got %s/%s\n", gettype($tmp), $tmp);
print "done!";
?>
--EXPECT--
done!
Function Calls
None |
Stats
MD5 | 89d4c6603aecf30e9cff6fb231ddf8eb |
Eval Count | 0 |
Decode Time | 84 ms |