@@ -39,157 +39,157 @@ |
||
39 | 39 | use OCP\Security\ISecureRandom; |
40 | 40 | |
41 | 41 | class MySQL extends AbstractDatabase { |
42 | - public $dbprettyname = 'MySQL/MariaDB'; |
|
43 | - |
|
44 | - public function setupDatabase($username) { |
|
45 | - //check if the database user has admin right |
|
46 | - $connection = $this->connect(['dbname' => null]); |
|
47 | - |
|
48 | - // detect mb4 |
|
49 | - $tools = new MySqlTools(); |
|
50 | - if ($tools->supports4ByteCharset(new ConnectionAdapter($connection))) { |
|
51 | - $this->config->setValue('mysql.utf8mb4', true); |
|
52 | - $connection = $this->connect(['dbname' => null]); |
|
53 | - } |
|
54 | - |
|
55 | - $this->createSpecificUser($username, new ConnectionAdapter($connection)); |
|
56 | - |
|
57 | - //create the database |
|
58 | - $this->createDatabase($connection); |
|
59 | - |
|
60 | - //fill the database if needed |
|
61 | - $query = 'select count(*) from information_schema.tables where table_schema=? AND table_name = ?'; |
|
62 | - $connection->executeQuery($query, [$this->dbName, $this->tablePrefix.'users']); |
|
63 | - |
|
64 | - $connection->close(); |
|
65 | - $connection = $this->connect(); |
|
66 | - try { |
|
67 | - $connection->connect(); |
|
68 | - } catch (\Exception $e) { |
|
69 | - $this->logger->logException($e); |
|
70 | - throw new \OC\DatabaseSetupException($this->trans->t('MySQL username and/or password not valid'), |
|
71 | - $this->trans->t('You need to enter details of an existing account.'), 0, $e); |
|
72 | - } |
|
73 | - } |
|
74 | - |
|
75 | - /** |
|
76 | - * @param \OC\DB\Connection $connection |
|
77 | - */ |
|
78 | - private function createDatabase($connection) { |
|
79 | - try { |
|
80 | - $name = $this->dbName; |
|
81 | - $user = $this->dbUser; |
|
82 | - //we can't use OC_DB functions here because we need to connect as the administrative user. |
|
83 | - $characterSet = $this->config->getValue('mysql.utf8mb4', false) ? 'utf8mb4' : 'utf8'; |
|
84 | - $query = "CREATE DATABASE IF NOT EXISTS `$name` CHARACTER SET $characterSet COLLATE ${characterSet}_bin;"; |
|
85 | - $connection->executeUpdate($query); |
|
86 | - } catch (\Exception $ex) { |
|
87 | - $this->logger->logException($ex, [ |
|
88 | - 'message' => 'Database creation failed.', |
|
89 | - 'level' => ILogger::ERROR, |
|
90 | - 'app' => 'mysql.setup', |
|
91 | - ]); |
|
92 | - return; |
|
93 | - } |
|
94 | - |
|
95 | - try { |
|
96 | - //this query will fail if there aren't the right permissions, ignore the error |
|
97 | - $query = "GRANT SELECT, INSERT, UPDATE, DELETE, CREATE, DROP, REFERENCES, INDEX, ALTER, CREATE TEMPORARY TABLES, LOCK TABLES, EXECUTE, CREATE VIEW, SHOW VIEW, CREATE ROUTINE, ALTER ROUTINE, EVENT, TRIGGER ON `$name` . * TO '$user'"; |
|
98 | - $connection->executeUpdate($query); |
|
99 | - } catch (\Exception $ex) { |
|
100 | - $this->logger->logException($ex, [ |
|
101 | - 'message' => 'Could not automatically grant privileges, this can be ignored if database user already had privileges.', |
|
102 | - 'level' => ILogger::DEBUG, |
|
103 | - 'app' => 'mysql.setup', |
|
104 | - ]); |
|
105 | - } |
|
106 | - } |
|
107 | - |
|
108 | - /** |
|
109 | - * @param IDBConnection $connection |
|
110 | - * @throws \OC\DatabaseSetupException |
|
111 | - */ |
|
112 | - private function createDBUser($connection) { |
|
113 | - try { |
|
114 | - $name = $this->dbUser; |
|
115 | - $password = $this->dbPassword; |
|
116 | - // we need to create 2 accounts, one for global use and one for local user. if we don't specify the local one, |
|
117 | - // the anonymous user would take precedence when there is one. |
|
118 | - |
|
119 | - if ($connection->getDatabasePlatform() instanceof Mysql80Platform) { |
|
120 | - $query = "CREATE USER '$name'@'localhost' IDENTIFIED WITH mysql_native_password BY '$password'"; |
|
121 | - $connection->executeUpdate($query); |
|
122 | - $query = "CREATE USER '$name'@'%' IDENTIFIED WITH mysql_native_password BY '$password'"; |
|
123 | - $connection->executeUpdate($query); |
|
124 | - } else { |
|
125 | - $query = "CREATE USER '$name'@'localhost' IDENTIFIED BY '$password'"; |
|
126 | - $connection->executeUpdate($query); |
|
127 | - $query = "CREATE USER '$name'@'%' IDENTIFIED BY '$password'"; |
|
128 | - $connection->executeUpdate($query); |
|
129 | - } |
|
130 | - } catch (\Exception $ex) { |
|
131 | - $this->logger->logException($ex, [ |
|
132 | - 'message' => 'Database user creation failed.', |
|
133 | - 'level' => ILogger::ERROR, |
|
134 | - 'app' => 'mysql.setup', |
|
135 | - ]); |
|
136 | - } |
|
137 | - } |
|
138 | - |
|
139 | - /** |
|
140 | - * @param $username |
|
141 | - * @param IDBConnection $connection |
|
142 | - * @return array |
|
143 | - */ |
|
144 | - private function createSpecificUser($username, $connection) { |
|
145 | - try { |
|
146 | - //user already specified in config |
|
147 | - $oldUser = $this->config->getValue('dbuser', false); |
|
148 | - |
|
149 | - //we don't have a dbuser specified in config |
|
150 | - if ($this->dbUser !== $oldUser) { |
|
151 | - //add prefix to the admin username to prevent collisions |
|
152 | - $adminUser = substr('oc_' . $username, 0, 16); |
|
153 | - |
|
154 | - $i = 1; |
|
155 | - while (true) { |
|
156 | - //this should be enough to check for admin rights in mysql |
|
157 | - $query = 'SELECT user FROM mysql.user WHERE user=?'; |
|
158 | - $result = $connection->executeQuery($query, [$adminUser]); |
|
159 | - |
|
160 | - //current dbuser has admin rights |
|
161 | - $data = $result->fetchAll(); |
|
162 | - $result->closeCursor(); |
|
163 | - //new dbuser does not exist |
|
164 | - if (count($data) === 0) { |
|
165 | - //use the admin login data for the new database user |
|
166 | - $this->dbUser = $adminUser; |
|
167 | - |
|
168 | - //create a random password so we don't need to store the admin password in the config file |
|
169 | - $this->dbPassword = $this->random->generate(30, ISecureRandom::CHAR_DIGITS . ISecureRandom::CHAR_LOWER . ISecureRandom::CHAR_UPPER); |
|
170 | - |
|
171 | - $this->createDBUser($connection); |
|
172 | - |
|
173 | - break; |
|
174 | - } else { |
|
175 | - //repeat with different username |
|
176 | - $length = strlen((string)$i); |
|
177 | - $adminUser = substr('oc_' . $username, 0, 16 - $length) . $i; |
|
178 | - $i++; |
|
179 | - } |
|
180 | - } |
|
181 | - } |
|
182 | - } catch (\Exception $ex) { |
|
183 | - $this->logger->logException($ex, [ |
|
184 | - 'message' => 'Can not create a new MySQL user, will continue with the provided user.', |
|
185 | - 'level' => ILogger::INFO, |
|
186 | - 'app' => 'mysql.setup', |
|
187 | - ]); |
|
188 | - } |
|
189 | - |
|
190 | - $this->config->setValues([ |
|
191 | - 'dbuser' => $this->dbUser, |
|
192 | - 'dbpassword' => $this->dbPassword, |
|
193 | - ]); |
|
194 | - } |
|
42 | + public $dbprettyname = 'MySQL/MariaDB'; |
|
43 | + |
|
44 | + public function setupDatabase($username) { |
|
45 | + //check if the database user has admin right |
|
46 | + $connection = $this->connect(['dbname' => null]); |
|
47 | + |
|
48 | + // detect mb4 |
|
49 | + $tools = new MySqlTools(); |
|
50 | + if ($tools->supports4ByteCharset(new ConnectionAdapter($connection))) { |
|
51 | + $this->config->setValue('mysql.utf8mb4', true); |
|
52 | + $connection = $this->connect(['dbname' => null]); |
|
53 | + } |
|
54 | + |
|
55 | + $this->createSpecificUser($username, new ConnectionAdapter($connection)); |
|
56 | + |
|
57 | + //create the database |
|
58 | + $this->createDatabase($connection); |
|
59 | + |
|
60 | + //fill the database if needed |
|
61 | + $query = 'select count(*) from information_schema.tables where table_schema=? AND table_name = ?'; |
|
62 | + $connection->executeQuery($query, [$this->dbName, $this->tablePrefix.'users']); |
|
63 | + |
|
64 | + $connection->close(); |
|
65 | + $connection = $this->connect(); |
|
66 | + try { |
|
67 | + $connection->connect(); |
|
68 | + } catch (\Exception $e) { |
|
69 | + $this->logger->logException($e); |
|
70 | + throw new \OC\DatabaseSetupException($this->trans->t('MySQL username and/or password not valid'), |
|
71 | + $this->trans->t('You need to enter details of an existing account.'), 0, $e); |
|
72 | + } |
|
73 | + } |
|
74 | + |
|
75 | + /** |
|
76 | + * @param \OC\DB\Connection $connection |
|
77 | + */ |
|
78 | + private function createDatabase($connection) { |
|
79 | + try { |
|
80 | + $name = $this->dbName; |
|
81 | + $user = $this->dbUser; |
|
82 | + //we can't use OC_DB functions here because we need to connect as the administrative user. |
|
83 | + $characterSet = $this->config->getValue('mysql.utf8mb4', false) ? 'utf8mb4' : 'utf8'; |
|
84 | + $query = "CREATE DATABASE IF NOT EXISTS `$name` CHARACTER SET $characterSet COLLATE ${characterSet}_bin;"; |
|
85 | + $connection->executeUpdate($query); |
|
86 | + } catch (\Exception $ex) { |
|
87 | + $this->logger->logException($ex, [ |
|
88 | + 'message' => 'Database creation failed.', |
|
89 | + 'level' => ILogger::ERROR, |
|
90 | + 'app' => 'mysql.setup', |
|
91 | + ]); |
|
92 | + return; |
|
93 | + } |
|
94 | + |
|
95 | + try { |
|
96 | + //this query will fail if there aren't the right permissions, ignore the error |
|
97 | + $query = "GRANT SELECT, INSERT, UPDATE, DELETE, CREATE, DROP, REFERENCES, INDEX, ALTER, CREATE TEMPORARY TABLES, LOCK TABLES, EXECUTE, CREATE VIEW, SHOW VIEW, CREATE ROUTINE, ALTER ROUTINE, EVENT, TRIGGER ON `$name` . * TO '$user'"; |
|
98 | + $connection->executeUpdate($query); |
|
99 | + } catch (\Exception $ex) { |
|
100 | + $this->logger->logException($ex, [ |
|
101 | + 'message' => 'Could not automatically grant privileges, this can be ignored if database user already had privileges.', |
|
102 | + 'level' => ILogger::DEBUG, |
|
103 | + 'app' => 'mysql.setup', |
|
104 | + ]); |
|
105 | + } |
|
106 | + } |
|
107 | + |
|
108 | + /** |
|
109 | + * @param IDBConnection $connection |
|
110 | + * @throws \OC\DatabaseSetupException |
|
111 | + */ |
|
112 | + private function createDBUser($connection) { |
|
113 | + try { |
|
114 | + $name = $this->dbUser; |
|
115 | + $password = $this->dbPassword; |
|
116 | + // we need to create 2 accounts, one for global use and one for local user. if we don't specify the local one, |
|
117 | + // the anonymous user would take precedence when there is one. |
|
118 | + |
|
119 | + if ($connection->getDatabasePlatform() instanceof Mysql80Platform) { |
|
120 | + $query = "CREATE USER '$name'@'localhost' IDENTIFIED WITH mysql_native_password BY '$password'"; |
|
121 | + $connection->executeUpdate($query); |
|
122 | + $query = "CREATE USER '$name'@'%' IDENTIFIED WITH mysql_native_password BY '$password'"; |
|
123 | + $connection->executeUpdate($query); |
|
124 | + } else { |
|
125 | + $query = "CREATE USER '$name'@'localhost' IDENTIFIED BY '$password'"; |
|
126 | + $connection->executeUpdate($query); |
|
127 | + $query = "CREATE USER '$name'@'%' IDENTIFIED BY '$password'"; |
|
128 | + $connection->executeUpdate($query); |
|
129 | + } |
|
130 | + } catch (\Exception $ex) { |
|
131 | + $this->logger->logException($ex, [ |
|
132 | + 'message' => 'Database user creation failed.', |
|
133 | + 'level' => ILogger::ERROR, |
|
134 | + 'app' => 'mysql.setup', |
|
135 | + ]); |
|
136 | + } |
|
137 | + } |
|
138 | + |
|
139 | + /** |
|
140 | + * @param $username |
|
141 | + * @param IDBConnection $connection |
|
142 | + * @return array |
|
143 | + */ |
|
144 | + private function createSpecificUser($username, $connection) { |
|
145 | + try { |
|
146 | + //user already specified in config |
|
147 | + $oldUser = $this->config->getValue('dbuser', false); |
|
148 | + |
|
149 | + //we don't have a dbuser specified in config |
|
150 | + if ($this->dbUser !== $oldUser) { |
|
151 | + //add prefix to the admin username to prevent collisions |
|
152 | + $adminUser = substr('oc_' . $username, 0, 16); |
|
153 | + |
|
154 | + $i = 1; |
|
155 | + while (true) { |
|
156 | + //this should be enough to check for admin rights in mysql |
|
157 | + $query = 'SELECT user FROM mysql.user WHERE user=?'; |
|
158 | + $result = $connection->executeQuery($query, [$adminUser]); |
|
159 | + |
|
160 | + //current dbuser has admin rights |
|
161 | + $data = $result->fetchAll(); |
|
162 | + $result->closeCursor(); |
|
163 | + //new dbuser does not exist |
|
164 | + if (count($data) === 0) { |
|
165 | + //use the admin login data for the new database user |
|
166 | + $this->dbUser = $adminUser; |
|
167 | + |
|
168 | + //create a random password so we don't need to store the admin password in the config file |
|
169 | + $this->dbPassword = $this->random->generate(30, ISecureRandom::CHAR_DIGITS . ISecureRandom::CHAR_LOWER . ISecureRandom::CHAR_UPPER); |
|
170 | + |
|
171 | + $this->createDBUser($connection); |
|
172 | + |
|
173 | + break; |
|
174 | + } else { |
|
175 | + //repeat with different username |
|
176 | + $length = strlen((string)$i); |
|
177 | + $adminUser = substr('oc_' . $username, 0, 16 - $length) . $i; |
|
178 | + $i++; |
|
179 | + } |
|
180 | + } |
|
181 | + } |
|
182 | + } catch (\Exception $ex) { |
|
183 | + $this->logger->logException($ex, [ |
|
184 | + 'message' => 'Can not create a new MySQL user, will continue with the provided user.', |
|
185 | + 'level' => ILogger::INFO, |
|
186 | + 'app' => 'mysql.setup', |
|
187 | + ]); |
|
188 | + } |
|
189 | + |
|
190 | + $this->config->setValues([ |
|
191 | + 'dbuser' => $this->dbUser, |
|
192 | + 'dbpassword' => $this->dbPassword, |
|
193 | + ]); |
|
194 | + } |
|
195 | 195 | } |
@@ -149,7 +149,7 @@ discard block |
||
149 | 149 | //we don't have a dbuser specified in config |
150 | 150 | if ($this->dbUser !== $oldUser) { |
151 | 151 | //add prefix to the admin username to prevent collisions |
152 | - $adminUser = substr('oc_' . $username, 0, 16); |
|
152 | + $adminUser = substr('oc_'.$username, 0, 16); |
|
153 | 153 | |
154 | 154 | $i = 1; |
155 | 155 | while (true) { |
@@ -166,15 +166,15 @@ discard block |
||
166 | 166 | $this->dbUser = $adminUser; |
167 | 167 | |
168 | 168 | //create a random password so we don't need to store the admin password in the config file |
169 | - $this->dbPassword = $this->random->generate(30, ISecureRandom::CHAR_DIGITS . ISecureRandom::CHAR_LOWER . ISecureRandom::CHAR_UPPER); |
|
169 | + $this->dbPassword = $this->random->generate(30, ISecureRandom::CHAR_DIGITS.ISecureRandom::CHAR_LOWER.ISecureRandom::CHAR_UPPER); |
|
170 | 170 | |
171 | 171 | $this->createDBUser($connection); |
172 | 172 | |
173 | 173 | break; |
174 | 174 | } else { |
175 | 175 | //repeat with different username |
176 | - $length = strlen((string)$i); |
|
177 | - $adminUser = substr('oc_' . $username, 0, 16 - $length) . $i; |
|
176 | + $length = strlen((string) $i); |
|
177 | + $adminUser = substr('oc_'.$username, 0, 16 - $length).$i; |
|
178 | 178 | $i++; |
179 | 179 | } |
180 | 180 | } |