fixWrongPasswordPrefixes.php

Go to the documentation of this file.

<?php
use Wikimedia\Rdbms\IExpression;
use Wikimedia\Rdbms\LikeValue;
 
// @codeCoverageIgnoreStart
require_once __DIR__ . '/Maintenance.php';
// @codeCoverageIgnoreEnd
 
class FixWrongPasswordPrefixes extends LoggedUpdateMaintenance {
    public function __construct() {
        parent::__construct();
        $this->setBatchSize( 100 );
    }
 
    protected function getUpdateKey() {
        return __CLASS__;
    }
 
    protected function doDBUpdates() {
        $dbw = $this->getPrimaryDB();
        $batchSize = $this->getBatchSize();
        $minUserId = 0;
 
        while ( true ) {
            $res = $dbw->newSelectQueryBuilder()
                ->select( [ 'user_id', 'user_password' ] )
                ->from( 'user' )
                ->where( $dbw->expr( 'user_id', '>', $minUserId ) )
                ->andWhere(
                    $dbw->expr( 'user_password', IExpression::LIKE, new LikeValue( ':A:', $dbw->anyString() ) )
                )
                ->orderBy( 'user_id' )
                ->limit( $batchSize )
                ->caller( __METHOD__ )
                ->fetchResultSet();
 
            if ( $res->numRows() === 0 ) {
                break;
            }
 
            foreach ( $res as $row ) {
                $passwordHash = substr( $row->user_password, 3 );
                if ( strpos( $passwordHash, ':' ) > 0 ) {
                    $dbw->newUpdateQueryBuilder()
                        ->update( 'user' )
                        ->set( [ 'user_password' => ':B:' . $passwordHash ] )
                        ->where( [ 'user_id' => $row->user_id ] )
                        ->caller( __METHOD__ )
                        ->execute();
                }
 
                $minUserId = $row->user_id;
            }
        }
 
        $this->output( "Wrongly prefixed user password hashes, if present, have been fixed.\n" );
        return true;
    }
}
 
// @codeCoverageIgnoreStart
$maintClass = FixWrongPasswordPrefixes::class;
require_once RUN_MAINTENANCE_IF_MAIN;
// @codeCoverageIgnoreEnd