Ticket #1380: tables.php

<?php

function encrypt_passwords()
{
  global $db;
  $pwds = 0;
  outn("Updating administrators passwords...");
  $sql = "SELECT * FROM ampusers";
  $users = $db->getAll($sql,NULL,DB_FETCHMODE_ASSOC);
        if (DB::IsError($users)) { // Error while getting the users list to update... bad
    die($users->getMessage());
  } else {
    outn(count($users)." accounts to update..."); 
    foreach ($users as $index => $ufields)
    {
      $sql = "UPDATE ampusers SET password_sha256='".hash("sha256",$ufields['password'])."' WHERE username='".$ufields['username']."'";
      $result = $db->query($sql);
      if (DB::IsError($result)) {
        outn("Error while updating account: ".$ufields['username']." (".$result->getMessage.")");
      } else {
        $pwds++;
      } 
    }
  }
  outn($pwds." accounts updated.");
}

$sql = "SELECT password_sha256 FROM ampusers";
$passfield = $db->getRow($sql, DB_FETCHMODE_ASSOC);
if (!DB::IsError($passfield)) { // no error... Already done
  $sql = "SELECT password FROM ampusers";
  $passfield = $db->getRow($sql, DB_FETCHMODE_ASSOC);
  if (DB::IsError($passfield)) { //password field do not exist, done
    outn("Field password_sha265 exists, field password do not. No change needed.");
  } else { //Field password still exist, update of passwords is needed.
    encrypt_passwords();
  }
} else {
  if ($passfield->code == DB_ERROR_NOSUCHFIELD) {
    outn("Creating field password_sha256...");
    $sql = "ALTER TABLE ampusers ADD password_sha256 VARCHAR ( 64 ) NOT NULL AFTER password";
    $results = $db->query($sql);
    if (DB::IsError($results)) {
      die($results->getMessage());
    } else {
      outn("Field Created.");
      encrypt_passwords();
      outn("Deleting old field password...");
      $sql = "ALTER TABLE ampusers DROP password";
      $results = $db->query($sql);
      if (DB::IsError($results)) {
                          die($results->getMessage());
                  } else {
        outn("Done.");
      }
    }
  } else { //The error was not about the field...
    die($passfield->getMessage());
  }
}
      
?>