update to return full path to used, additional secure setting

Author: TheTechsTech

lib/ez_sql_pdo.php

@@ -104,7 +104,11 @@ public static function securePDO(
     {
         if (\array_key_exists(\strtolower($vendor), \VENDOR) 
             && (! \file_exists($path.$cert) || ! \file_exists($path.$key)))
-            ezQuery::createCertificate();
+            $path = ezQuery::createCertificate();
+        elseif ($path == '.'.\_DS) {
+            $ssl_path = \getcwd();
+            $path = \preg_replace('/\\\/', \_DS, $ssl_path). \_DS;
+        }
 
         if (($vendor == 'pgsql') || ($vendor == 'postgresql')) {
             self::$secure = "sslmode=require;sslcert=".$path.$cert.";sslkey=".$path.$key.";sslrootcert=".$path.$ca.";";
@@ -114,7 +118,9 @@ public static function securePDO(
                 \PDO::MYSQL_ATTR_SSL_KEY => $path.$key,
                 \PDO::MYSQL_ATTR_SSL_CERT => $path.$cert,
                 \PDO::MYSQL_ATTR_SSL_CA => $path.$ca,
-                \PDO::MYSQL_ATTR_SSL_VERIFY_SERVER_CERT => false,
+                \PDO::MYSQL_ATTR_SSL_CAPATH => $path,
+                \PDO::MYSQL_ATTR_SSL_CIPHER => 'DHE-RSA-AES256-SHA',
+                \PDO::MYSQL_ATTR_SSL_VERIFY_SERVER_CERT => false
             );
         } elseif (($vendor == 'sqlserver') || ($vendor == 'mssql') || ($vendor == 'sqlsrv')) {
             self::$secure = ";Encrypt=true;TrustServerCertificate=true";

shared/ezQuery.php

@@ -53,6 +53,7 @@ public static function clean($string)
      *      "emailAddress" => ''
      *  ];
      * 
+     * @return string certificate path
      */
     public static function createCertificate(
         string $privatekeyFile = 'certificate.key', 
@@ -63,7 +64,7 @@ public static function createCertificate(
         array $details = ["commonName" => "localhost"]
     ) 
     {
-        if (empty($ssl_path) || ! \is_dir($ssl_path)) {
+        if (empty($ssl_path)) {
             $ssl_path = \getcwd();
             $ssl_path = \preg_replace('/\\\/', \_DS, $ssl_path). \_DS;
         } else
@@ -88,6 +89,8 @@ public static function createCertificate(
 
         // Create a signing request file 
         \openssl_csr_export_to_file($csr, $ssl_path.$signingFile);
+
+        return $ssl_path;
     }
 
     /**