<span id='title'>Database Account Setting</span><br><br>

<?php
$submit = $_POST["submit"];
$loginid = htmlsafe($_POST["loginid"]);
$passwd = $_POST["passwd"];
$source_ip = $_SERVER["REMOTE_ADDR"];
$dated = date("Y-m-d H:i:s");
$target = $_REQUEST["target"];

session_destroy();
$uid = '';

if ($submit == 'LOGIN' && $loginid) {
        $stat = authenticate($loginid, $passwd);
        if ($stat == "OK") {
                $uid = $loginid;
                $pwd = $passwd;
                $_SESSION["uid"] = $uid;
                //session_register("uid");

		$ds = ldap_connect("ldap.iiita.ac.in");
		$rs = ldap_search($ds, "dc=iiita,dc=ac,dc=in","(&(uid=$uid)(objectClass=posixAccount))");
		$attr = ldap_get_entries($ds, $rs);
		$dn = $attr[0]["dn"];

		if (strpos($dn, "Webadmin")) $host = 'website.iiita.ac.in';
		else $host = 'profile.iiita.ac.in';

		//connect iws24 mysql server
		$mdb = mysql_connect("$host","root","mysql");
		if (mysql_select_db("$uid", $mdb)) {
    			echo "List of tables in $uid database on $host:\n<br>";
			$rs = mysql_query("SHOW TABLES FROM $uid");
			if (!$rs) {
    				echo "DB Error, could not list tables, MySQL Error: " . mysql_error();
    				exit;
			}

			echo "<ul>";
			while ($row = mysql_fetch_row($rs)) {
				$tbl = $row[0];
    				echo "<li>Table: $tbl ";
				$rn = mysql_query("select * from $tbl", $mdb);
				echo "(" . mysql_num_rows($rn) . " records)\n</li>";
				$no++;
			}
			if (!$no) echo "<li>None</li>";
			echo "</ul>";
			if ($no) echo "<u>Total: $no tables</u><br><br>";
			mysql_free_result($rs);
		}
		mysql_select_db("mysql", $mdb);
		//if exists throws error
		//CREATE DATABASE WITH USERid	
		if (mysql_query("CREATE DATABASE $uid", $mdb)) { 
			print("Database $uid created.\n<br>"); 
		
			//CREATE USER WITH localhost
			if (mysql_query("CREATE USER '{$uid}'@'localhost' IDENTIFIED BY '{$pwd}'", $mdb)) {
				print("Local account $uid created.\n<br>");
			}
			//CREATE USER for any hosts
			if (mysql_query("CREATE USER '{$uid}'@'%' IDENTIFIED BY '{$pwd}'", $mdb)) {
				print("Network account $uid created.\n<br>");
			}
			//GRANT ALL permissions to userid@localhost ON userid DATABASE
			if (mysql_query("GRANT ALL PRIVILEGES ON `{$uid}`.* TO '{$uid}'@'localhost' WITH GRANT OPTION", $mdb)) {
				if (mysql_query("GRANT ALL PRIVILEGES ON `{$uid}`.* TO '{$uid}'@'%' WITH GRANT OPTION", $mdb))
					print("Access permission set\n<br>");
				else
					print("Error in access permission. Contact INDEM if login to database denied.\n<br>");
			}
		}
		mysql_query("SET PASSWORD FOR '{$uid}'@'localhost' = PASSWORD('$pwd')", $mdb);
		mysql_query("SET PASSWORD FOR '{$uid}'@'%' = PASSWORD('$pwd')", $mdb);
		mysql_query("FLUSH PRIVILEGES");
		
		mysql_close($mdb);
		ldap_close($ds);
		print("<br>You may now login to above <a href='http://$host/dba/' target='top'>DATABASE</a> 
		using your mail credentials.\n<br>
		In CLI mode you may ssh/putty to $host and use
		<dir># mysql -h $host -u $uid -p $uid</dir>
		command to connect to your database. Above command prompts for password.");
	} else {
                echo "<b id='alert'>Sorry</b> invalid login, try again...\n<br>";
                login($loginid);
        }
} else {
	login($loginid);
}
?>