• Introducing WebPros Cloud - a fully managed infrastructure platform purpose-built to simplify the deployment of WebPros products !  WebPros Cloud enables you to easily deliver WebPros solutions — without the complexity of managing the infrastructure.
    Join the pilot program today!
  • The Horde component is removed from Plesk Installer. We recommend switching to another webmail software supported in Plesk.
  • The BIND DNS server has already been deprecated and removed from Plesk for Windows.
    If a Plesk for Windows server is still using BIND, the upgrade to Plesk Obsidian 18.0.70 will be unavailable until the administrator switches the DNS server to Microsoft DNS. We strongly recommend transitioning to Microsoft DNS within the next 6 weeks, before the Plesk 18.0.70 release.

powertoys password revealer for mysql pws

P

perler

Guest
hi,

if the powertoys authors have some spare time at hand - i really would like to see mysql users passwords in the password revealer - any chance?

PAT
 
MySQL passwords for domains users you mean?
You can see for each domain the MySQL password for domain database.
 
oups? i have v 3.6 here and don't see any mysql passwords..

PAT
 
sure, there is.. to clearify:

1.) domain is example.com
2.) i go int database, create a db
3.) i enter password revealer
4. i choose domain example.com
5.) i see domain password, ftp password, maybe email passwords and i should see a table row "mysql" - right?

PAT
 
yes, i did.

before i check the code more thouroghly:

1) can you imagine a problem in that i run debian 3.1
2) does your script writes a debug log somewhere?
3) what does the
PHP:
if(version_compare("7.5.0", $ver[0], "<"))
in password_remainder.php line 399 do?

PAT
 
ok, this sql query looks fishy on my system:

PHP:
SELECT name,login,password as passwd FROM data_bases as db, db_users,accounts WHERE dom_id = $domainID and db.id = db_id and accounts.id=db_users.account_id

as that i don't have a table "db" here, so it reaults in an empty answer

PAT
 
PHP:
SELECT name,login,password as passwd FROM data_bases as db, db_users,accounts WHERE dom_id = $domainID and db.id = db_id and accounts.id=db_users.account_id

as that i don't have a table "db" here, so it reaults in an empty answer[/B]

No! The AS db - is aliassing the data_bases as db - normal in SQL - (even though I can't see why one would alias one table but not the others in this case).
 
Back
Top