#!/bin/bash

###
# Why? Because you've been forgetting to salt and hackers have MD5'd password lists
# Reset using salts for a more secure password
###

# Creating new pass, salting it for db
###
 newpass=$(tr -cd '[:alnum:][!,@,#,$,%,^,&,*,(,),[,],;,:,.,{,}]' < /dev/urandom | fold -w18 | head -n1)
 crypt=$(openssl passwd -1 $newpass)
###

# Get WP db details from config.
###
 database=$(grep DB_NAME wp-config.php | awk -F"'" '{print $4}')
 user=$(grep DB_USER wp-config.php | awk -F"'" '{print $4}')
 pass=$(grep DB_PASS wp-config.php | awk -F"'" '{print $4}')
 pre=$(grep table_prefix wp-config.php | awk -F"'" '{print $2}')
 prefix=$(echo $pre\users)
###

# Change password, get login username for output from mysql
###
 mysql -u $user -p$pass $database -e "UPDATE $prefix SET user_pass='$crypt' WHERE ID=1;"
 adminu=$(mysql -u $user -p$pass $database -e "SELECT user_login FROM $prefix WHERE ID=1;")
 luser=$(echo $adminu | awk -F" " '{print $2}')
###

# Output, yay!
###
 echo -e "\n [*] Wordpress Password Reset:\n\n\tUsername: $luser\n\tPassword: $newpass\n"
###