55 lines
2.2 KiB
JavaScript
55 lines
2.2 KiB
JavaScript
require("dotenv").config({ path: "./../.env" });
|
|
import generator from "generate-password";
|
|
import noDatabaseDbHandler from "./utils/noDatabaseDbHandler";
|
|
import dbHandler from "../functions/backend/dbHandler";
|
|
import encrypt from "../functions/dsql/encrypt";
|
|
import grabSQLKeyName from "../utils/grab-sql-key-name";
|
|
/**
|
|
* # Test SQL Escape
|
|
*/
|
|
export default async function testSQLEscape() {
|
|
var _a;
|
|
const users = (await dbHandler({
|
|
query: `SELECT * FROM users`,
|
|
}));
|
|
if (!users) {
|
|
process.exit();
|
|
}
|
|
for (let i = 0; i < users.length; i++) {
|
|
const user = users[i];
|
|
if (!user)
|
|
continue;
|
|
const defaultMariadbUserHost = process.env.DSQL_DB_HOST || "127.0.0.1";
|
|
try {
|
|
const username = grabSQLKeyName({ type: "user", userId: user.id });
|
|
const password = generator.generate({
|
|
length: 16,
|
|
numbers: true,
|
|
symbols: true,
|
|
uppercase: true,
|
|
exclude: "*#.'`\"",
|
|
});
|
|
const encryptedPassword = encrypt({ data: password });
|
|
await noDatabaseDbHandler(`DROP USER '${username}'@'${defaultMariadbUserHost}'`);
|
|
await noDatabaseDbHandler(`CREATE USER IF NOT EXISTS '${username}'@'${defaultMariadbUserHost}' IDENTIFIED BY '${password}'`);
|
|
await noDatabaseDbHandler(`GRANT ALL PRIVILEGES ON \`datasquirel\\_user\\_${user.id}\\_%\`.* TO '${username}'@'${defaultMariadbUserHost}'`);
|
|
await noDatabaseDbHandler(`FLUSH PRIVILEGES`);
|
|
const updateUser = await dbHandler({
|
|
query: `UPDATE users SET mariadb_user = ?, mariadb_host = ? mariadb_pass = ? WHERE id = ?`,
|
|
values: [
|
|
username,
|
|
defaultMariadbUserHost,
|
|
encryptedPassword,
|
|
user.id,
|
|
],
|
|
});
|
|
console.log(`User ${user.id}: ${user.first_name} ${user.last_name} SQL credentials successfully added.`);
|
|
}
|
|
catch (error) {
|
|
(_a = global.ERROR_CALLBACK) === null || _a === void 0 ? void 0 : _a.call(global, `Error Testing SQL Escape`, error);
|
|
}
|
|
}
|
|
process.exit();
|
|
}
|
|
testSQLEscape();
|