diff --git a/browse_foreigners.php b/browse_foreigners.php index 6c2be738b..ea981d7ef 100644 --- a/browse_foreigners.php +++ b/browse_foreigners.php @@ -9,7 +9,7 @@ /** * Gets a core script and starts output buffering work */ -require_once('./libraries/common.lib.php'); +require_once('./libraries/common.inc.php'); PMA_checkParameters(array('db', 'table', 'field')); diff --git a/calendar.php b/calendar.php index f971f7a32..fe46fc35e 100644 --- a/calendar.php +++ b/calendar.php @@ -8,7 +8,7 @@ /** * */ -require_once('./libraries/common.lib.php'); +require_once('./libraries/common.inc.php'); require_once('./libraries/header_http.inc.php'); $page_title = $strCalendar; require('./libraries/header_meta_style.inc.php'); diff --git a/chk_rel.php b/chk_rel.php index 71889a6c2..9c0bcf747 100644 --- a/chk_rel.php +++ b/chk_rel.php @@ -8,7 +8,7 @@ /** * Gets some core libraries */ -require_once('./libraries/common.lib.php'); +require_once('./libraries/common.inc.php'); require_once('./libraries/db_common.inc.php'); require_once('./libraries/relation.lib.php'); diff --git a/db_create.php b/db_create.php index 5e7e8d4ec..35542cc49 100644 --- a/db_create.php +++ b/db_create.php @@ -8,7 +8,7 @@ /** * Gets some core libraries */ -require_once('./libraries/common.lib.php'); +require_once('./libraries/common.inc.php'); $js_to_run = 'functions.js'; require_once('./libraries/header.inc.php'); require_once('./libraries/mysql_charsets.lib.php'); diff --git a/db_datadict.php b/db_datadict.php index e88c3e401..10fff3805 100644 --- a/db_datadict.php +++ b/db_datadict.php @@ -8,7 +8,7 @@ /** * Gets the variables sent or posted to this script, then displays headers */ -require_once('./libraries/common.lib.php'); +require_once('./libraries/common.inc.php'); if (!isset($selected_tbl)) { require_once('./libraries/header.inc.php'); diff --git a/db_export.php b/db_export.php index f87d2a237..180e082b2 100644 --- a/db_export.php +++ b/db_export.php @@ -13,7 +13,7 @@ /** * Gets some core libraries */ -require_once('./libraries/common.lib.php'); +require_once('./libraries/common.inc.php'); $sub_part = '_export'; require_once('./libraries/db_common.inc.php'); diff --git a/db_import.php b/db_import.php index 9d9893980..f5fbe7d23 100644 --- a/db_import.php +++ b/db_import.php @@ -8,7 +8,7 @@ /** * */ -require_once('./libraries/common.lib.php'); +require_once('./libraries/common.inc.php'); /** * Gets tables informations and displays top links diff --git a/db_operations.php b/db_operations.php index b28c9e2c5..210b2f5ed 100644 --- a/db_operations.php +++ b/db_operations.php @@ -15,7 +15,7 @@ /** * requirements */ -require_once './libraries/common.lib.php'; +require_once './libraries/common.inc.php'; require_once './libraries/Table.class.php'; require_once './libraries/mysql_charsets.lib.php'; diff --git a/db_printview.php b/db_printview.php index a32b44fa6..d164a46b1 100644 --- a/db_printview.php +++ b/db_printview.php @@ -8,7 +8,7 @@ /** * */ -require_once './libraries/common.lib.php'; +require_once './libraries/common.inc.php'; /** * Gets the variables sent or posted to this script, then displays headers diff --git a/db_qbe.php b/db_qbe.php index b780a5c16..996e9d2a5 100644 --- a/db_qbe.php +++ b/db_qbe.php @@ -9,7 +9,7 @@ /** * requirements */ -require_once './libraries/common.lib.php'; +require_once './libraries/common.inc.php'; require_once './libraries/Table.class.php'; require_once './libraries/relation.lib.php'; diff --git a/db_search.php b/db_search.php index 3886f91d2..878e7c90c 100644 --- a/db_search.php +++ b/db_search.php @@ -52,7 +52,7 @@ /** * */ -require_once './libraries/common.lib.php'; +require_once './libraries/common.inc.php'; /** * Gets some core libraries and send headers diff --git a/db_sql.php b/db_sql.php index a1174fa4e..77aeef90e 100644 --- a/db_sql.php +++ b/db_sql.php @@ -8,7 +8,7 @@ /** * */ -require_once('./libraries/common.lib.php'); +require_once('./libraries/common.inc.php'); /** * Runs common work diff --git a/db_structure.php b/db_structure.php index 390208d3a..95bea781a 100644 --- a/db_structure.php +++ b/db_structure.php @@ -8,7 +8,7 @@ /** * */ -require_once './libraries/common.lib.php'; +require_once './libraries/common.inc.php'; require_once './libraries/Table.class.php'; /** diff --git a/export.php b/export.php index f68675b31..78320d471 100644 --- a/export.php +++ b/export.php @@ -8,7 +8,7 @@ /** * Get the variables sent or posted to this script and a core script */ -require_once './libraries/common.lib.php'; +require_once './libraries/common.inc.php'; require_once './libraries/zip.lib.php'; require_once './libraries/plugin_interface.lib.php'; diff --git a/import.php b/import.php index b721148a4..30ee72102 100644 --- a/import.php +++ b/import.php @@ -9,7 +9,7 @@ /** * Get the variables sent or posted to this script and a core script */ -require_once('./libraries/common.lib.php'); +require_once('./libraries/common.inc.php'); $js_to_run = 'functions.js'; // default values diff --git a/index.php b/index.php index a85af76dd..0d837b671 100644 --- a/index.php +++ b/index.php @@ -4,8 +4,6 @@ * forms frameset * * @version $Id$ - * @uses libraries/common.lib.php global fnctions - * @uses libraries/relation.lib.php table relations * @uses $GLOBALS['strNoFrames'] * @uses $GLOBALS['cfg']['QueryHistoryDB'] * @uses $GLOBALS['cfg']['Server']['user'] @@ -13,8 +11,8 @@ * @uses $GLOBALS['cfg']['DefaultTabDatabase'] as src for the mainframe * @uses $GLOBALS['cfg']['NaviWidth'] for navi frame width * @uses $GLOBALS['collation_connection'] from $_REQUEST (grab_globals.lib.php) - * or common.lib.php - * @uses $GLOBALS['available_languages'] from common.lib.php (select_lang.lib.php) + * or common.inc.php + * @uses $GLOBALS['available_languages'] from common.inc.php (select_lang.lib.php) * @uses $GLOBALS['db'] * @uses $GLOBALS['charset'] * @uses $GLOBALS['lang'] @@ -33,7 +31,7 @@ /** * Gets core libraries and defines some variables */ -require_once './libraries/common.lib.php'; +require_once './libraries/common.inc.php'; /** * Includes the ThemeManager if it hasn't been included yet diff --git a/libraries/Config.class.php b/libraries/Config.class.php index 368da045a..b20b50220 100644 --- a/libraries/Config.class.php +++ b/libraries/Config.class.php @@ -420,7 +420,7 @@ class PMA_Config // Now, a collation information could come from REQUEST // (an example of this: the collation selector in main.php) // so the following handles the setting of collation_connection - // and later, in common.lib.php, the cookie will be set + // and later, in common.inc.php, the cookie will be set // according to this. $this->checkCollationConnection(); diff --git a/libraries/check_user_privileges.lib.php b/libraries/check_user_privileges.lib.php index 38eb5bec4..93f477901 100644 --- a/libraries/check_user_privileges.lib.php +++ b/libraries/check_user_privileges.lib.php @@ -2,7 +2,7 @@ /* vim: set expandtab sw=4 ts=4 sts=4: */ /** * Get user's global privileges and some db-specific privileges - * ($controllink and $userlink are links to MySQL defined in the "common.lib.php" library) + * ($controllink and $userlink are links to MySQL defined in the "common.inc.php" library) * Note: if no controluser is defined, $controllink contains $userlink * * @version $Id$ diff --git a/libraries/common.inc.php b/libraries/common.inc.php new file mode 100644 index 000000000..65e6a88e3 --- /dev/null +++ b/libraries/common.inc.php @@ -0,0 +1,869 @@ + 1000) { + die('possible exploit'); +} + +/** + * Check for numeric keys + * (if register_globals is on, numeric key can be found in $GLOBALS) + */ +foreach ($GLOBALS as $key => $dummy) { + if (is_numeric($key)) { + die('numeric key detected'); + } +} + +/** + * just to be sure there was no import (registering) before here + * we empty the global space + */ +$variables_whitelist = array ( + 'GLOBALS', + '_SERVER', + '_GET', + '_POST', + '_REQUEST', + '_FILES', + '_ENV', + '_COOKIE', + '_SESSION', +); + +foreach (get_defined_vars() as $key => $value) { + if (! in_array($key, $variables_whitelist)) { + unset($$key); + } +} +unset($key, $value, $variables_whitelist); + + +/** + * Subforms - some functions need to be called by form, cause of the limited url + * length, but if this functions inside another form you cannot just open a new + * form - so phpMyAdmin uses 'arrays' inside this form + * + * + *
+ * ... main form elments ... + * + * ... other subform data ... + * + * ... other subforms ... + * + * ... other subform data ... + * + * ... main form elments ... + * + * + *
$tmp) { + PMA_removeCookie($cookie_name); + } + $_COOKIE = array(); + PMA_setCookie('pmaCookieVer', $pma_cookie_version); +} + +/** + * include deprecated grab_globals only if required + */ +if (empty($__redirect) && !defined('PMA_NO_VARIABLES_IMPORT')) { + require './libraries/grab_globals.lib.php'; +} + +/** + * include session handling after the globals, to prevent overwriting + */ +require_once './libraries/session.inc.php'; + +/** + * init some variables LABEL_variables_init + */ + +/** + * holds errors + * @global array $GLOBALS['PMA_errors'] + */ +$GLOBALS['PMA_errors'] = array(); + +/** + * holds params to be passed to next page + * @global array $GLOBALS['url_params'] + */ +$GLOBALS['url_params'] = array(); + +/** + * the whitelist for $GLOBALS['goto'] + * @global array $goto_whitelist + */ +$goto_whitelist = array( + //'browse_foreigners.php', + //'calendar.php', + //'changelog.php', + //'chk_rel.php', + 'db_create.php', + 'db_datadict.php', + 'db_sql.php', + 'db_export.php', + 'db_importdocsql.php', + 'db_qbe.php', + 'db_structure.php', + 'db_import.php', + 'db_operations.php', + 'db_printview.php', + 'db_search.php', + //'Documentation.html', + //'error.php', + 'export.php', + 'import.php', + //'index.php', + //'navigation.php', + //'license.php', + 'main.php', + 'pdf_pages.php', + 'pdf_schema.php', + //'phpinfo.php', + 'querywindow.php', + //'readme.php', + 'server_binlog.php', + 'server_collations.php', + 'server_databases.php', + 'server_engines.php', + 'server_export.php', + 'server_import.php', + 'server_privileges.php', + 'server_processlist.php', + 'server_sql.php', + 'server_status.php', + 'server_variables.php', + 'sql.php', + 'tbl_addfield.php', + 'tbl_alter.php', + 'tbl_change.php', + 'tbl_create.php', + 'tbl_import.php', + 'tbl_indexes.php', + 'tbl_move_copy.php', + 'tbl_printview.php', + 'tbl_sql.php', + 'tbl_export.php', + 'tbl_operations.php', + 'tbl_structure.php', + 'tbl_relation.php', + 'tbl_replace.php', + 'tbl_row_action.php', + 'tbl_select.php', + //'themes.php', + 'transformation_overview.php', + 'transformation_wrapper.php', + 'translators.html', + 'user_password.php', +); + +/** + * check $__redirect against whitelist + */ +if (! PMA_checkPageValidity($__redirect, $goto_whitelist)) { + $__redirect = null; +} + +/** + * holds page that should be displayed + * @global string $GLOBALS['goto'] + */ +$GLOBALS['goto'] = ''; +// Security fix: disallow accessing serious server files via "?goto=" +if (PMA_checkPageValidity($_REQUEST['goto'], $goto_whitelist)) { + $GLOBALS['goto'] = $_REQUEST['goto']; + $GLOBALS['url_params']['goto'] = $_REQUEST['goto']; +} else { + unset($_REQUEST['goto'], $_GET['goto'], $_POST['goto'], $_COOKIE['goto']); +} + +/** + * returning page + * @global string $GLOBALS['back'] + */ +if (PMA_checkPageValidity($_REQUEST['back'], $goto_whitelist)) { + $GLOBALS['back'] = $_REQUEST['back']; +} else { + unset($_REQUEST['back'], $_GET['back'], $_POST['back'], $_COOKIE['back']); +} + +/** + * Check whether user supplied token is valid, if not remove any possibly + * dangerous stuff from request. + * + * remember that some objects in the session with session_start and __wakeup() + * could access this variables before we reach this point + * f.e. PMA_Config: fontsize + * + * @todo variables should be handled by their respective owners (objects) + * f.e. lang, server, convcharset, collation_connection in PMA_Config + */ +if ((isset($_REQUEST['token']) && !is_string($_REQUEST['token'])) || empty($_REQUEST['token']) || $_SESSION[' PMA_token '] != $_REQUEST['token']) { + /** + * List of parameters which are allowed from unsafe source + */ + $allow_list = array( + 'db', 'table', 'lang', 'server', 'convcharset', 'collation_connection', 'target', + /* Session ID */ + 'phpMyAdmin', + /* Cookie preferences */ + 'pma_lang', 'pma_charset', 'pma_collation_connection', + /* Possible login form */ + 'pma_servername', 'pma_username', 'pma_password', + ); + /** + * Require cleanup functions + */ + require_once('./libraries/cleanup.lib.php'); + /** + * Do actual cleanup + */ + PMA_remove_request_vars($allow_list); + +} + + +/** + * @global string $convcharset + * @see select_lang.lib.php + */ +if (isset($_REQUEST['convcharset'])) { + $convcharset = strip_tags($_REQUEST['convcharset']); +} + +/** + * current selected database + * @global string $GLOBALS['db'] + */ +$GLOBALS['db'] = ''; +if (isset($_REQUEST['db']) && is_string($_REQUEST['db'])) { + // can we strip tags from this? + // only \ and / is not allowed in db names for MySQL + $GLOBALS['db'] = $_REQUEST['db']; + $GLOBALS['url_params']['db'] = $GLOBALS['db']; +} + +/** + * current selected table + * @global string $GLOBALS['table'] + */ +$GLOBALS['table'] = ''; +if (isset($_REQUEST['table']) && is_string($_REQUEST['table'])) { + // can we strip tags from this? + // only \ and / is not allowed in table names for MySQL + $GLOBALS['table'] = $_REQUEST['table']; + $GLOBALS['url_params']['table'] = $GLOBALS['table']; +} + +/** + * sql query to be executed + * @global string $GLOBALS['sql_query'] + */ +if (isset($_REQUEST['sql_query']) && is_string($_REQUEST['sql_query'])) { + $GLOBALS['sql_query'] = $_REQUEST['sql_query']; +} + +//$_REQUEST['set_theme'] // checked later in this file LABEL_theme_setup +//$_REQUEST['server']; // checked later in this file +//$_REQUEST['lang']; // checked by LABEL_loading_language_file + + + +/******************************************************************************/ +/* parsing config file LABEL_parsing_config_file */ + +if (empty($_SESSION['PMA_Config'])) { + /** + * We really need this one! + */ + if (! function_exists('preg_replace')) { + PMA_fatalError('strCantLoad', 'pcre'); + } + + /** + * @global PMA_Config $_SESSION['PMA_Config'] + */ + $_SESSION['PMA_Config'] = new PMA_Config('./config.inc.php'); + +} elseif (version_compare(phpversion(), '5', 'lt')) { + /** + * @todo move all __wakeup() functionality into session.inc.php + */ + $_SESSION['PMA_Config']->__wakeup(); +} + +if (!defined('PMA_MINIMUM_COMMON')) { + $_SESSION['PMA_Config']->checkPmaAbsoluteUri(); +} + +/** + * BC - enable backward compatibility + * exports all config settings into $GLOBALS ($GLOBALS['cfg']) + */ +$_SESSION['PMA_Config']->enableBc(); + + +/** + * check https connection + */ +if ($_SESSION['PMA_Config']->get('ForceSSL') + && !$_SESSION['PMA_Config']->get('is_https')) { + PMA_sendHeaderLocation( + preg_replace('/^http/', 'https', + $_SESSION['PMA_Config']->get('PmaAbsoluteUri')) + . PMA_generate_common_url($_GET)); + exit; +} + + +/******************************************************************************/ +/* loading language file LABEL_loading_language_file */ + +/** + * Added messages while developing: + */ +if (file_exists('./lang/added_messages.php')) { + include './lang/added_messages.php'; +} + +/** + * Includes the language file if it hasn't been included yet + */ +require './libraries/language.lib.php'; + + +/** + * check for errors occured while loading config + * this check is done here after loading lang files to present errors in locale + */ +if ($_SESSION['PMA_Config']->error_config_file) { + $GLOBALS['PMA_errors'][] = $strConfigFileError + . '

' + . ($_SESSION['PMA_Config']->getSource() == './config.inc.php' ? + '' . $_SESSION['PMA_Config']->getSource() . '' + : + '' . $_SESSION['PMA_Config']->getSource() . ''); +} +if ($_SESSION['PMA_Config']->error_config_default_file) { + $GLOBALS['PMA_errors'][] = sprintf($strConfigDefaultFileError, + $_SESSION['PMA_Config']->default_source); +} +if ($_SESSION['PMA_Config']->error_pma_uri) { + $GLOBALS['PMA_errors'][] = sprintf($strPmaUriError); +} + +/** + * current server + * @global integer $GLOBALS['server'] + */ +$GLOBALS['server'] = 0; + +/** + * Servers array fixups. + * $default_server comes from PMA_Config::enableBc() + * @todo merge into PMA_Config + */ +// Do we have some server? +if (!isset($cfg['Servers']) || count($cfg['Servers']) == 0) { + // No server => create one with defaults + $cfg['Servers'] = array(1 => $default_server); +} else { + // We have server(s) => apply default config + $new_servers = array(); + + foreach ($cfg['Servers'] as $server_index => $each_server) { + + // Detect wrong configuration + if (!is_int($server_index) || $server_index < 1) { + $GLOBALS['PMA_errors'][] = sprintf($strInvalidServerIndex, $server_index); + } + + $each_server = array_merge($default_server, $each_server); + + // Don't use servers with no hostname + if ($each_server['connect_type'] == 'tcp' && empty($each_server['host'])) { + $GLOBALS['PMA_errors'][] = sprintf($strInvalidServerHostname, $server_index); + } + + // Final solution to bug #582890 + // If we are using a socket connection + // and there is nothing in the verbose server name + // or the host field, then generate a name for the server + // in the form of "Server 2", localized of course! + if ($each_server['connect_type'] == 'socket' && empty($each_server['host']) && empty($each_server['verbose'])) { + $each_server['verbose'] = $GLOBALS['strServer'] . $server_index; + } + + $new_servers[$server_index] = $each_server; + } + $cfg['Servers'] = $new_servers; + unset($new_servers, $server_index, $each_server); +} + +// Cleanup +unset($default_server); + + +/******************************************************************************/ +/* setup themes LABEL_theme_setup */ + +/** + * @global PMA_Theme_Manager $_SESSION['PMA_Theme_Manager'] + */ +if (! isset($_SESSION['PMA_Theme_Manager'])) { + $_SESSION['PMA_Theme_Manager'] = new PMA_Theme_Manager; +} else { + /** + * @todo move all __wakeup() functionality into session.inc.php + */ + $_SESSION['PMA_Theme_Manager']->checkConfig(); +} + +// for the theme per server feature +if (isset($_REQUEST['server']) && !isset($_REQUEST['set_theme'])) { + $GLOBALS['server'] = $_REQUEST['server']; + $tmp = $_SESSION['PMA_Theme_Manager']->getThemeCookie(); + if (empty($tmp)) { + $tmp = $_SESSION['PMA_Theme_Manager']->theme_default; + } + $_SESSION['PMA_Theme_Manager']->setActiveTheme($tmp); + unset($tmp); +} +/** + * @todo move into PMA_Theme_Manager::__wakeup() + */ +if (isset($_REQUEST['set_theme'])) { + // if user selected a theme + $_SESSION['PMA_Theme_Manager']->setActiveTheme($_REQUEST['set_theme']); +} + +/** + * the theme object + * @global PMA_Theme $_SESSION['PMA_Theme'] + */ +$_SESSION['PMA_Theme'] = $_SESSION['PMA_Theme_Manager']->theme; + +// BC +/** + * the active theme + * @global string $GLOBALS['theme'] + */ +$GLOBALS['theme'] = $_SESSION['PMA_Theme']->getName(); +/** + * the theme path + * @global string $GLOBALS['pmaThemePath'] + */ +$GLOBALS['pmaThemePath'] = $_SESSION['PMA_Theme']->getPath(); +/** + * the theme image path + * @global string $GLOBALS['pmaThemeImage'] + */ +$GLOBALS['pmaThemeImage'] = $_SESSION['PMA_Theme']->getImgPath(); + +/** + * load layout file if exists + */ +if (@file_exists($_SESSION['PMA_Theme']->getLayoutFile())) { + include $_SESSION['PMA_Theme']->getLayoutFile(); + /** + * @todo remove if all themes are update use Navi instead of Left as frame name + */ + if (! isset($GLOBALS['cfg']['NaviWidth']) + && isset($GLOBALS['cfg']['LeftWidth'])) { + $GLOBALS['cfg']['NaviWidth'] = $GLOBALS['cfg']['LeftWidth']; + } +} + +if (! defined('PMA_MINIMUM_COMMON')) { + /** + * Charset conversion. + */ + require_once './libraries/charset_conversion.lib.php'; + + /** + * String handling + */ + require_once './libraries/string.lib.php'; + + /** + * Lookup server by name + * by Arnold - Helder Hosting + * (see FAQ 4.8) + */ + if (! empty($_REQUEST['server']) && is_string($_REQUEST['server']) && ! ctype_digit($_REQUEST['server'])) { + foreach ($cfg['Servers'] as $i => $server) { + if ($server['host'] == $_REQUEST['server']) { + $_REQUEST['server'] = $i; + break; + } + } + if (is_string($_REQUEST['server'])) { + unset($_REQUEST['server']); + } + unset($i); + } + + /** + * If no server is selected, make sure that $cfg['Server'] is empty (so + * that nothing will work), and skip server authentication. + * We do NOT exit here, but continue on without logging into any server. + * This way, the welcome page will still come up (with no server info) and + * present a choice of servers in the case that there are multiple servers + * and '$cfg['ServerDefault'] = 0' is set. + */ + + if (isset($_REQUEST['server']) && (is_string($_REQUEST['server']) || is_numeric($_REQUEST['server'])) && ! empty($_REQUEST['server']) && ! empty($cfg['Servers'][$_REQUEST['server']])) { + $GLOBALS['server'] = $_REQUEST['server']; + $cfg['Server'] = $cfg['Servers'][$GLOBALS['server']]; + } else { + if (!empty($cfg['Servers'][$cfg['ServerDefault']])) { + $GLOBALS['server'] = $cfg['ServerDefault']; + $cfg['Server'] = $cfg['Servers'][$GLOBALS['server']]; + } else { + $GLOBALS['server'] = 0; + $cfg['Server'] = array(); + } + } + $GLOBALS['url_params']['server'] = $GLOBALS['server']; + + if (! empty($cfg['Server'])) { + + /** + * Loads the proper database interface for this server + */ + require_once './libraries/database_interface.lib.php'; + + // Gets the authentication library that fits the $cfg['Server'] settings + // and run authentication + + // (for a quick check of path disclosure in auth/cookies:) + $coming_from_common = true; + + // to allow HTTP or http + $cfg['Server']['auth_type'] = strtolower($cfg['Server']['auth_type']); + if (! file_exists('./libraries/auth/' . $cfg['Server']['auth_type'] . '.auth.lib.php')) { + PMA_fatalError($strInvalidAuthMethod . ' ' . $cfg['Server']['auth_type']); + } + /** + * the required auth type plugin + */ + require_once './libraries/auth/' . $cfg['Server']['auth_type'] . '.auth.lib.php'; + + if (!PMA_auth_check()) { + PMA_auth(); + } else { + PMA_auth_set_user(); + } + + // Check IP-based Allow/Deny rules as soon as possible to reject the + // user + // Based on mod_access in Apache: + // http://cvs.apache.org/viewcvs.cgi/httpd-2.0/modules/aaa/mod_access.c?rev=1.37&content-type=text/vnd.viewcvs-markup + // Look at: "static int check_dir_access(request_rec *r)" + // Robbat2 - May 10, 2002 + if (isset($cfg['Server']['AllowDeny']) + && isset($cfg['Server']['AllowDeny']['order'])) { + + /** + * ip based access library + */ + require_once './libraries/ip_allow_deny.lib.php'; + + $allowDeny_forbidden = false; // default + if ($cfg['Server']['AllowDeny']['order'] == 'allow,deny') { + $allowDeny_forbidden = true; + if (PMA_allowDeny('allow')) { + $allowDeny_forbidden = false; + } + if (PMA_allowDeny('deny')) { + $allowDeny_forbidden = true; + } + } elseif ($cfg['Server']['AllowDeny']['order'] == 'deny,allow') { + if (PMA_allowDeny('deny')) { + $allowDeny_forbidden = true; + } + if (PMA_allowDeny('allow')) { + $allowDeny_forbidden = false; + } + } elseif ($cfg['Server']['AllowDeny']['order'] == 'explicit') { + if (PMA_allowDeny('allow') + && !PMA_allowDeny('deny')) { + $allowDeny_forbidden = false; + } else { + $allowDeny_forbidden = true; + } + } // end if ... elseif ... elseif + + // Ejects the user if banished + if ($allowDeny_forbidden) { + PMA_auth_fails(); + } + unset($allowDeny_forbidden); //Clean up after you! + } // end if + + // is root allowed? + if (!$cfg['Server']['AllowRoot'] && $cfg['Server']['user'] == 'root') { + $allowDeny_forbidden = true; + PMA_auth_fails(); + unset($allowDeny_forbidden); //Clean up after you! + } + + $bkp_track_err = @ini_set('track_errors', 1); + + // Try to connect MySQL with the control user profile (will be used to + // get the privileges list for the current user but the true user link + // must be open after this one so it would be default one for all the + // scripts) + $controllink = false; + if ($cfg['Server']['controluser'] != '') { + $controllink = PMA_DBI_connect($cfg['Server']['controluser'], + $cfg['Server']['controlpass'], true); + } + if (! $controllink) { + $controllink = PMA_DBI_connect($cfg['Server']['user'], + $cfg['Server']['password'], true); + } // end if ... else + + // Pass #1 of DB-Config to read in master level DB-Config will go here + // Robbat2 - May 11, 2002 + + // Connects to the server (validates user's login) + $userlink = PMA_DBI_connect($cfg['Server']['user'], + $cfg['Server']['password'], false); + + // Pass #2 of DB-Config to read in user level DB-Config will go here + // Robbat2 - May 11, 2002 + + @ini_set('track_errors', $bkp_track_err); + unset($bkp_track_err); + + /** + * If we auto switched to utf-8 we need to reread messages here + */ + if (defined('PMA_LANG_RELOAD')) { + require './libraries/language.lib.php'; + } + + /** + * SQL Parser code + */ + require_once './libraries/sqlparser.lib.php'; + + /** + * SQL Validator interface code + */ + require_once './libraries/sqlvalidator.lib.php'; + + /** + * the PMA_List_Database class + */ + require_once './libraries/PMA_List_Database.class.php'; + $PMA_List_Database = new PMA_List_Database($userlink, $controllink); + + } // end server connecting + + /** + * Kanji encoding convert feature appended by Y.Kawada (2002/2/20) + */ + if (@function_exists('mb_convert_encoding') + && strpos(' ' . $lang, 'ja-') + && file_exists('./libraries/kanji-encoding.lib.php')) { + require_once './libraries/kanji-encoding.lib.php'; + /** + * enable multibyte string support + */ + define('PMA_MULTIBYTE_ENCODING', 1); + } // end if + + /** + * save some settings in cookies + * @todo should be done in PMA_Config + */ + PMA_setCookie('pma_lang', $GLOBALS['lang']); + PMA_setCookie('pma_charset', $GLOBALS['convcharset']); + PMA_setCookie('pma_collation_connection', $GLOBALS['collation_connection']); + + $_SESSION['PMA_Theme_Manager']->setThemeCookie(); +} // end if !defined('PMA_MINIMUM_COMMON') + +if (!empty($__redirect) && in_array($__redirect, $goto_whitelist)) { + // to handle bug #1388167 + if (isset($_GET['is_js_confirmed'])) { + $is_js_confirmed = 1; + } + /** + * include subform target page + */ + require $__redirect; + exit(); +} +?> diff --git a/libraries/common.lib.php b/libraries/common.lib.php index 2e5b70e58..2f77de6a8 100644 --- a/libraries/common.lib.php +++ b/libraries/common.lib.php @@ -1,1458 +1,927 @@ '; + } else { + return $alternate; + } +} /** - * Avoid problems with magic_quotes_runtime - */ -@ini_set('magic_quotes_runtime', false); - - -/******************************************************************************/ -/* definition of functions LABEL_definition_of_functions */ -/** - * Removes insecure parts in a path; used before include() or - * require() when a part of the path comes from an insecure source - * like a cookie or form. + * Displays the maximum size for an upload * - * @param string The path to check + * @uses $GLOBALS['strMaximumSize'] + * @uses PMA_formatByteDown() + * @uses sprintf() + * @param integer the size * - * @return string The secured path + * @return string the message * * @access public - * @author Marc Delisle (lem9@users.sourceforge.net) */ -function PMA_securePath($path) +function PMA_displayMaximumUploadSize($max_upload_size) { - // change .. to . - $path = preg_replace('@\.\.*@', '.', $path); - - return $path; -} // end function - -/** - * displays the given error message on phpMyAdmin error page in foreign language, - * ends script execution and closes session - * - * @todo use detected argument separator (PMA_Config) - * @uses $GLOBALS['session_name'] - * @uses $GLOBALS['text_dir'] - * @uses $GLOBALS['strError'] - * @uses $GLOBALS['available_languages'] - * @uses $GLOBALS['lang'] - * @uses PMA_removeCookie() - * @uses select_lang.lib.php - * @uses $_COOKIE - * @uses substr() - * @uses header() - * @uses urlencode() - * @param string $error_message the error message or named error message - */ -function PMA_fatalError($error_message, $message_args = null) -{ - if (! isset($GLOBALS['available_languages'])) { - $GLOBALS['cfg'] = array('DefaultLang' => 'en-iso-8859-1', - 'AllowAnywhereRecoding' => false); - // Loads the language file - require_once './libraries/select_lang.lib.php'; - if (isset($strError)) { - $GLOBALS['strError'] = $strError; - } - if (isset($text_dir)) { - $GLOBALS['text_dir'] = $text_dir; - } - } - - if (substr($error_message, 0, 3) === 'str') { - if (isset($$error_message)) { - $error_message = $$error_message; - } elseif (isset($GLOBALS[$error_message])) { - $error_message = $GLOBALS[$error_message]; - } - } - - if (is_string($message_args)) { - $error_message = sprintf($error_message, $message_args); - } elseif (is_array($message_args)) { - $error_message = vsprintf($error_message, $message_args); - } - $error_message = strtr($error_message, array('
' => '[br]')); - - // Displays the error message - // (do not use & for parameters sent by header) - header('Location: error.php' - . '?lang=' . urlencode($GLOBALS['available_languages'][$GLOBALS['lang']][2]) - . '&dir=' . urlencode($GLOBALS['text_dir']) - . '&type=' . urlencode($GLOBALS['strError']) - . '&error=' . urlencode($error_message)); - - // on fatal errors it cannot hurt to always delete the current session - if (isset($GLOBALS['session_name']) && isset($_COOKIE[$GLOBALS['session_name']])) { - PMA_removeCookie($GLOBALS['session_name']); - } - - exit; + list($max_size, $max_unit) = PMA_formatByteDown($max_upload_size); + return '(' . sprintf($GLOBALS['strMaximumSize'], $max_size, $max_unit) . ')'; } /** - * returns count of tables in given db + * Generates a hidden field which should indicate to the browser + * the maximum size for upload * - * @uses PMA_DBI_try_query() - * @uses PMA_backquote() - * @uses PMA_DBI_QUERY_STORE() - * @uses PMA_DBI_num_rows() - * @uses PMA_DBI_free_result() - * @param string $db database to count tables for - * @return integer count of tables in $db + * @param integer the size + * + * @return string the INPUT field + * + * @access public */ -function PMA_getTableCount($db) + function PMA_generateHiddenMaxFileSize($max_size) + { + return ''; + } + +/** + * Add slashes before "'" and "\" characters so a value containing them can + * be used in a sql comparison. + * + * @uses str_replace() + * @param string the string to slash + * @param boolean whether the string will be used in a 'LIKE' clause + * (it then requires two more escaped sequences) or not + * @param boolean whether to treat cr/lfs as escape-worthy entities + * (converts \n to \\n, \r to \\r) + * + * @param boolean whether this function is used as part of the + * "Create PHP code" dialog + * + * @return string the slashed string + * + * @access public + */ +function PMA_sqlAddslashes($a_string = '', $is_like = false, $crlf = false, $php_code = false) { - $tables = PMA_DBI_try_query( - 'SHOW TABLES FROM ' . PMA_backquote($db) . ';', - null, PMA_DBI_QUERY_STORE); - if ($tables) { - $num_tables = PMA_DBI_num_rows($tables); - PMA_DBI_free_result($tables); + if ($is_like) { + $a_string = str_replace('\\', '\\\\\\\\', $a_string); } else { - $num_tables = 0; + $a_string = str_replace('\\', '\\\\', $a_string); } - return $num_tables; -} - -/** - * Converts numbers like 10M into bytes - * Used with permission from Moodle (http://moodle.org) by Martin Dougiamas - * (renamed with PMA prefix to avoid double definition when embedded - * in Moodle) - * - * @uses each() - * @uses strlen() - * @uses substr() - * @param string $size - * @return integer $size - */ -function PMA_get_real_size($size = 0) -{ - if (! $size) { - return 0; + if ($crlf) { + $a_string = str_replace("\n", '\n', $a_string); + $a_string = str_replace("\r", '\r', $a_string); + $a_string = str_replace("\t", '\t', $a_string); } - $scan['gb'] = 1073741824; //1024 * 1024 * 1024; - $scan['g'] = 1073741824; //1024 * 1024 * 1024; - $scan['mb'] = 1048576; - $scan['m'] = 1048576; - $scan['kb'] = 1024; - $scan['k'] = 1024; - $scan['b'] = 1; - - foreach ($scan as $unit => $factor) { - if (strlen($size) > strlen($unit) - && strtolower(substr($size, strlen($size) - strlen($unit))) == $unit) { - return substr($size, 0, strlen($size) - strlen($unit)) * $factor; - } - } - - return $size; -} // end function PMA_get_real_size() - -/** - * loads php module - * - * @uses PHP_OS - * @uses extension_loaded() - * @uses ini_get() - * @uses function_exists() - * @uses ob_start() - * @uses phpinfo() - * @uses strip_tags() - * @uses ob_get_contents() - * @uses ob_end_clean() - * @uses preg_match() - * @uses strtoupper() - * @uses substr() - * @uses dl() - * @param string $module name if module to load - * @return boolean success loading module - */ -function PMA_dl($module) -{ - static $dl_allowed = null; - - if (extension_loaded($module)) { - return true; - } - - if (null === $dl_allowed) { - if (!@ini_get('safe_mode') - && @ini_get('enable_dl') - && @function_exists('dl')) { - ob_start(); - phpinfo(INFO_GENERAL); /* Only general info */ - $a = strip_tags(ob_get_contents()); - ob_end_clean(); - if (preg_match('@Thread Safety[[:space:]]*enabled@', $a)) { - if (preg_match('@Server API[[:space:]]*\(CGI\|CLI\)@', $a)) { - $dl_allowed = true; - } else { - $dl_allowed = false; - } - } else { - $dl_allowed = true; - } - } else { - $dl_allowed = false; - } - } - - if (!$dl_allowed) { - return false; - } - - /* Once we require PHP >= 4.3, we might use PHP_SHLIB_SUFFIX here */ - if (strtoupper(substr(PHP_OS, 0, 3)) === 'WIN') { - $module_file = 'php_' . $module . '.dll'; - } elseif (PHP_OS=='HP-UX') { - $module_file = $module . '.sl'; + if ($php_code) { + $a_string = str_replace('\'', '\\\'', $a_string); } else { - $module_file = $module . '.so'; + $a_string = str_replace('\'', '\'\'', $a_string); } - return @dl($module_file); + return $a_string; +} // end of the 'PMA_sqlAddslashes()' function + + +/** + * Add slashes before "_" and "%" characters for using them in MySQL + * database, table and field names. + * Note: This function does not escape backslashes! + * + * @uses str_replace() + * @param string the string to escape + * + * @return string the escaped string + * + * @access public + */ +function PMA_escape_mysql_wildcards($name) +{ + $name = str_replace('_', '\\_', $name); + $name = str_replace('%', '\\%', $name); + + return $name; +} // end of the 'PMA_escape_mysql_wildcards()' function + +/** + * removes slashes before "_" and "%" characters + * Note: This function does not unescape backslashes! + * + * @uses str_replace() + * @param string $name the string to escape + * @return string the escaped string + * @access public + */ +function PMA_unescape_mysql_wildcards($name) +{ + $name = str_replace('\\_', '_', $name); + $name = str_replace('\\%', '%', $name); + + return $name; +} // end of the 'PMA_unescape_mysql_wildcards()' function + +/** + * removes quotes (',",`) from a quoted string + * + * checks if the sting is quoted and removes this quotes + * + * @uses str_replace() + * @uses substr() + * @param string $quoted_string string to remove quotes from + * @param string $quote type of quote to remove + * @return string unqoted string + */ +function PMA_unQuote($quoted_string, $quote = null) +{ + $quotes = array(); + + if (null === $quote) { + $quotes[] = '`'; + $quotes[] = '"'; + $quotes[] = "'"; + } else { + $quotes[] = $quote; + } + + foreach ($quotes as $quote) { + if (substr($quoted_string, 0, 1) === $quote + && substr($quoted_string, -1, 1) === $quote ) { + $unquoted_string = substr($quoted_string, 1, -1); + // replace escaped quotes + $unquoted_string = str_replace($quote . $quote, $quote, $unquoted_string); + return $unquoted_string; + } + } + + return $quoted_string; } /** - * merges array recursive like array_merge_recursive() but keyed-values are - * always overwritten. + * format sql strings * - * array PMA_array_merge_recursive(array $array1[, array $array2[, array ...]]) - * - * @see http://php.net/array_merge - * @see http://php.net/array_merge_recursive - * @uses func_num_args() - * @uses func_get_arg() + * @todo move into PMA_Sql + * @uses PMA_SQP_isError() + * @uses PMA_SQP_formatHtml() + * @uses PMA_SQP_formatNone() * @uses is_array() - * @uses call_user_func_array() - * @param array array to merge - * @param array array to merge - * @param array ... - * @return array merged array + * @param mixed pre-parsed SQL structure + * + * @return string the formatted sql + * + * @global array the configuration array + * @global boolean whether the current statement is a multiple one or not + * + * @access public + * + * @author Robin Johnson */ -function PMA_array_merge_recursive() +function PMA_formatSql($parsed_sql, $unparsed_sql = '') { - switch(func_num_args()) { - case 0 : - return false; - break; - case 1 : - // when does that happen? - return func_get_arg(0); - break; - case 2 : - $args = func_get_args(); - if (!is_array($args[0]) || !is_array($args[1])) { - return $args[1]; - } - foreach ($args[1] as $key2 => $value2) { - if (isset($args[0][$key2]) && !is_int($key2)) { - $args[0][$key2] = PMA_array_merge_recursive($args[0][$key2], - $value2); - } else { - // we erase the parent array, otherwise we cannot override a directive that - // contains array elements, like this: - // (in config.default.php) $cfg['ForeignKeyDropdownOrder'] = array('id-content','content-id'); - // (in config.inc.php) $cfg['ForeignKeyDropdownOrder'] = array('content-id'); - if (is_int($key2) && $key2 == 0) { - unset($args[0]); - } - $args[0][$key2] = $value2; - } - } - return $args[0]; - break; - default : - $args = func_get_args(); - $args[1] = PMA_array_merge_recursive($args[0], $args[1]); - array_shift($args); - return call_user_func_array('PMA_array_merge_recursive', $args); - break; + global $cfg; + + // Check that we actually have a valid set of parsed data + // well, not quite + // first check for the SQL parser having hit an error + if (PMA_SQP_isError()) { + return $parsed_sql; } -} - -/** - * calls $function vor every element in $array recursively - * - * this function is protected against deep recursion attack CVE-2006-1549, - * 1000 seems to be more than enough - * - * @see http://www.php-security.org/MOPB/MOPB-02-2007.html - * @see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1549 - * - * @uses PMA_arrayWalkRecursive() - * @uses is_array() - * @uses is_string() - * @param array $array array to walk - * @param string $function function to call for every array element - */ -function PMA_arrayWalkRecursive(&$array, $function, $apply_to_keys_also = false) -{ - static $recursive_counter = 0; - if (++$recursive_counter > 1000) { - die('possible deep recursion attack'); - } - foreach ($array as $key => $value) { - if (is_array($value)) { - PMA_arrayWalkRecursive($array[$key], $function, $apply_to_keys_also); - } else { - $array[$key] = $function($value); - } - - if ($apply_to_keys_also && is_string($key)) { - $new_key = $function($key); - if ($new_key != $key) { - $array[$new_key] = $array[$key]; - unset($array[$key]); - } - } - } - $recursive_counter++; -} - -/** - * boolean phpMyAdmin.PMA_checkPageValidity(string &$page, array $whitelist) - * - * checks given given $page against given $whitelist and returns true if valid - * it ignores optionaly query paramters in $page (script.php?ignored) - * - * @uses in_array() - * @uses urldecode() - * @uses substr() - * @uses strpos() - * @param string &$page page to check - * @param array $whitelist whitelist to check page against - * @return boolean whether $page is valid or not (in $whitelist or not) - */ -function PMA_checkPageValidity(&$page, $whitelist) -{ - if (! isset($page) || !is_string($page)) { - return false; - } - - if (in_array($page, $whitelist)) { - return true; - } elseif (in_array(substr($page, 0, strpos($page . '?', '?')), $whitelist)) { - return true; - } else { - $_page = urldecode($page); - if (in_array(substr($_page, 0, strpos($_page . '?', '?')), $whitelist)) { - return true; - } - } - return false; -} - -/** - * trys to find the value for the given environment vriable name - * - * searchs in $_SERVER, $_ENV than trys getenv() and apache_getenv() - * in this order - * - * @uses $_SERVER - * @uses $_ENV - * @uses getenv() - * @uses function_exists() - * @uses apache_getenv() - * @param string $var_name variable name - * @return string value of $var or empty string - */ -function PMA_getenv($var_name) { - if (isset($_SERVER[$var_name])) { - return $_SERVER[$var_name]; - } elseif (isset($_ENV[$var_name])) { - return $_ENV[$var_name]; - } elseif (getenv($var_name)) { - return getenv($var_name); - } elseif (function_exists('apache_getenv') - && apache_getenv($var_name, true)) { - return apache_getenv($var_name, true); - } - - return ''; -} - -/** - * removes cookie - * - * @uses PMA_Config::isHttps() - * @uses PMA_Config::getCookiePath() - * @uses setcookie() - * @uses time() - * @param string $cookie name of cookie to remove - * @return boolean result of setcookie() - */ -function PMA_removeCookie($cookie) -{ - return setcookie($cookie, '', time() - 3600, - PMA_Config::getCookiePath(), '', PMA_Config::isHttps()); -} - -/** - * sets cookie if value is different from current cokkie value, - * or removes if value is equal to default - * - * @uses PMA_Config::isHttps() - * @uses PMA_Config::getCookiePath() - * @uses $_COOKIE - * @uses PMA_removeCookie() - * @uses setcookie() - * @uses time() - * @param string $cookie name of cookie to remove - * @param mixed $value new cookie value - * @param string $default default value - * @param int $validity validity of cookie in seconds (default is one month) - * @param bool $httponlt whether cookie is only for HTTP (and not for scripts) - * @return boolean result of setcookie() - */ -function PMA_setCookie($cookie, $value, $default = null, $validity = null, $httponly = true) -{ - if ($validity == null) { - $validity = 2592000; - } - if (strlen($value) && null !== $default && $value === $default - && isset($_COOKIE[$cookie])) { - // remove cookie, default value is used - return PMA_removeCookie($cookie); - } - - if (! strlen($value) && isset($_COOKIE[$cookie])) { - // remove cookie, value is empty - return PMA_removeCookie($cookie); - } - - if (! isset($_COOKIE[$cookie]) || $_COOKIE[$cookie] !== $value) { - // set cookie with new value - /* Calculate cookie validity */ - if ($validity == 0) { - $v = 0; - } else { - $v = time() + $validity; - } - /* Use native support for httponly cookies if available */ - if (version_compare(PHP_VERSION, '5.2.0', 'ge')) { - return setcookie($cookie, $value, $v, - PMA_Config::getCookiePath(), '', PMA_Config::isHttps(), $httponly); - } else { - return setcookie($cookie, $value, $v, - PMA_Config::getCookiePath() . ($httponly ? '; HttpOnly' : ''), '', PMA_Config::isHttps()); - } - } - - // cookie has already $value as value - return true; -} - -/** - * include here only libraries which contain only function definitions - * no code in main()! - */ -/** - * Input sanitizing - */ -require_once './libraries/sanitizing.lib.php'; -/** - * the PMA_Theme class - */ -require_once './libraries/Theme.class.php'; -/** - * the PMA_Theme_Manager class - */ -require_once './libraries/Theme_Manager.class.php'; -/** - * the PMA_Config class - */ -require_once './libraries/Config.class.php'; -/** - * the PMA_Table class - */ -require_once './libraries/Table.class.php'; - - -if (!defined('PMA_MINIMUM_COMMON')) { - - /** - * Java script escaping. - */ - require_once './libraries/js_escape.lib.php'; - - /** - * Exponential expression / raise number into power - * - * @uses function_exists() - * @uses bcpow() - * @uses gmp_pow() - * @uses gmp_strval() - * @uses pow() - * @param number $base - * @param number $exp - * @param string pow function use, or false for auto-detect - * @return mixed string or float - */ - function PMA_pow($base, $exp, $use_function = false) - { - static $pow_function = null; - if (null == $pow_function) { - if (function_exists('bcpow')) { - // BCMath Arbitrary Precision Mathematics Function - $pow_function = 'bcpow'; - } elseif (function_exists('gmp_pow')) { - // GMP Function - $pow_function = 'gmp_pow'; - } else { - // PHP function - $pow_function = 'pow'; - } - } - - if (! $use_function) { - $use_function = $pow_function; - } - - switch ($use_function) { - case 'bcpow' : - $pow = bcpow($base, $exp); - break; - case 'gmp_pow' : - $pow = gmp_strval(gmp_pow($base, $exp)); - break; - case 'pow' : - $base = (float) $base; - $exp = (int) $exp; - if ($exp < 0) { - return false; - } - $pow = pow($base, $exp); - break; - default: - $pow = $use_function($base, $exp); - } - - return $pow; - } - - /** - * string PMA_getIcon(string $icon) - * - * @uses $GLOBALS['pmaThemeImage'] - * @param $icon name of icon - * @return html img tag - */ - function PMA_getIcon($icon, $alternate = '') - { - if ($GLOBALS['cfg']['PropertiesIconic']) { - return '' . $alternate . ''; - } else { - return $alternate; - } - } - - /** - * Displays the maximum size for an upload - * - * @uses $GLOBALS['strMaximumSize'] - * @uses PMA_formatByteDown() - * @uses sprintf() - * @param integer the size - * - * @return string the message - * - * @access public - */ - function PMA_displayMaximumUploadSize($max_upload_size) - { - list($max_size, $max_unit) = PMA_formatByteDown($max_upload_size); - return '(' . sprintf($GLOBALS['strMaximumSize'], $max_size, $max_unit) . ')'; - } - - /** - * Generates a hidden field which should indicate to the browser - * the maximum size for upload - * - * @param integer the size - * - * @return string the INPUT field - * - * @access public - */ - function PMA_generateHiddenMaxFileSize($max_size) - { - return ''; - } - - /** - * Add slashes before "'" and "\" characters so a value containing them can - * be used in a sql comparison. - * - * @uses str_replace() - * @param string the string to slash - * @param boolean whether the string will be used in a 'LIKE' clause - * (it then requires two more escaped sequences) or not - * @param boolean whether to treat cr/lfs as escape-worthy entities - * (converts \n to \\n, \r to \\r) - * - * @param boolean whether this function is used as part of the - * "Create PHP code" dialog - * - * @return string the slashed string - * - * @access public - */ - function PMA_sqlAddslashes($a_string = '', $is_like = false, $crlf = false, $php_code = false) - { - if ($is_like) { - $a_string = str_replace('\\', '\\\\\\\\', $a_string); - } else { - $a_string = str_replace('\\', '\\\\', $a_string); - } - - if ($crlf) { - $a_string = str_replace("\n", '\n', $a_string); - $a_string = str_replace("\r", '\r', $a_string); - $a_string = str_replace("\t", '\t', $a_string); - } - - if ($php_code) { - $a_string = str_replace('\'', '\\\'', $a_string); - } else { - $a_string = str_replace('\'', '\'\'', $a_string); - } - - return $a_string; - } // end of the 'PMA_sqlAddslashes()' function - - - /** - * Add slashes before "_" and "%" characters for using them in MySQL - * database, table and field names. - * Note: This function does not escape backslashes! - * - * @uses str_replace() - * @param string the string to escape - * - * @return string the escaped string - * - * @access public - */ - function PMA_escape_mysql_wildcards($name) - { - $name = str_replace('_', '\\_', $name); - $name = str_replace('%', '\\%', $name); - - return $name; - } // end of the 'PMA_escape_mysql_wildcards()' function - - /** - * removes slashes before "_" and "%" characters - * Note: This function does not unescape backslashes! - * - * @uses str_replace() - * @param string $name the string to escape - * @return string the escaped string - * @access public - */ - function PMA_unescape_mysql_wildcards($name) - { - $name = str_replace('\\_', '_', $name); - $name = str_replace('\\%', '%', $name); - - return $name; - } // end of the 'PMA_unescape_mysql_wildcards()' function - - /** - * removes quotes (',",`) from a quoted string - * - * checks if the sting is quoted and removes this quotes - * - * @uses str_replace() - * @uses substr() - * @param string $quoted_string string to remove quotes from - * @param string $quote type of quote to remove - * @return string unqoted string - */ - function PMA_unQuote($quoted_string, $quote = null) - { - $quotes = array(); - - if (null === $quote) { - $quotes[] = '`'; - $quotes[] = '"'; - $quotes[] = "'"; - } else { - $quotes[] = $quote; - } - - foreach ($quotes as $quote) { - if (substr($quoted_string, 0, 1) === $quote - && substr($quoted_string, -1, 1) === $quote ) { - $unquoted_string = substr($quoted_string, 1, -1); - // replace escaped quotes - $unquoted_string = str_replace($quote . $quote, $quote, $unquoted_string); - return $unquoted_string; - } - } - - return $quoted_string; - } - - /** - * format sql strings - * - * @todo move into PMA_Sql - * @uses PMA_SQP_isError() - * @uses PMA_SQP_formatHtml() - * @uses PMA_SQP_formatNone() - * @uses is_array() - * @param mixed pre-parsed SQL structure - * - * @return string the formatted sql - * - * @global array the configuration array - * @global boolean whether the current statement is a multiple one or not - * - * @access public - * - * @author Robin Johnson - */ - function PMA_formatSql($parsed_sql, $unparsed_sql = '') - { - global $cfg; - - // Check that we actually have a valid set of parsed data - // well, not quite - // first check for the SQL parser having hit an error - if (PMA_SQP_isError()) { - return $parsed_sql; - } - // then check for an array - if (!is_array($parsed_sql)) { - // We don't so just return the input directly - // This is intended to be used for when the SQL Parser is turned off - $formatted_sql = '
' . "\n"
-                            . (($cfg['SQP']['fmtType'] == 'none' && $unparsed_sql != '') ? $unparsed_sql : $parsed_sql) . "\n"
-                            . '
'; - return $formatted_sql; - } - - $formatted_sql = ''; - - switch ($cfg['SQP']['fmtType']) { - case 'none': - if ($unparsed_sql != '') { - $formatted_sql = "
\n" . PMA_SQP_formatNone(array('raw' => $unparsed_sql)) . "\n
"; - } else { - $formatted_sql = PMA_SQP_formatNone($parsed_sql); - } - break; - case 'html': - $formatted_sql = PMA_SQP_formatHtml($parsed_sql, 'color'); - break; - case 'text': - //$formatted_sql = PMA_SQP_formatText($parsed_sql); - $formatted_sql = PMA_SQP_formatHtml($parsed_sql, 'text'); - break; - default: - break; - } // end switch - + // then check for an array + if (!is_array($parsed_sql)) { + // We don't so just return the input directly + // This is intended to be used for when the SQL Parser is turned off + $formatted_sql = '
' . "\n"
+                        . (($cfg['SQP']['fmtType'] == 'none' && $unparsed_sql != '') ? $unparsed_sql : $parsed_sql) . "\n"
+                        . '
'; return $formatted_sql; - } // end of the "PMA_formatSql()" function - - - /** - * Displays a link to the official MySQL documentation - * - * @uses $cfg['MySQLManualType'] - * @uses $cfg['MySQLManualBase'] - * @uses $cfg['ReplaceHelpImg'] - * @uses $GLOBALS['mysql_4_1_doc_lang'] - * @uses $GLOBALS['mysql_5_1_doc_lang'] - * @uses $GLOBALS['mysql_5_0_doc_lang'] - * @uses $GLOBALS['strDocu'] - * @uses $GLOBALS['pmaThemeImage'] - * @uses PMA_MYSQL_INT_VERSION - * @uses strtolower() - * @uses str_replace() - * @param string chapter of "HTML, one page per chapter" documentation - * @param string contains name of page/anchor that is being linked - * @param bool whether to use big icon (like in left frame) - * - * @return string the html link - * - * @access public - */ - function PMA_showMySQLDocu($chapter, $link, $big_icon = false) - { - global $cfg; - - if ($cfg['MySQLManualType'] == 'none' || empty($cfg['MySQLManualBase'])) { - return ''; - } - - // Fixup for newly used names: - $chapter = str_replace('_', '-', strtolower($chapter)); - $link = str_replace('_', '-', strtolower($link)); - - switch ($cfg['MySQLManualType']) { - case 'chapters': - if (empty($chapter)) { - $chapter = 'index'; - } - $url = $cfg['MySQLManualBase'] . '/' . $chapter . '.html#' . $link; - break; - case 'big': - $url = $cfg['MySQLManualBase'] . '#' . $link; - break; - case 'searchable': - if (empty($link)) { - $link = 'index'; - } - $url = $cfg['MySQLManualBase'] . '/' . $link . '.html'; - break; - case 'viewable': - default: - if (empty($link)) { - $link = 'index'; - } - $mysql = '5.0'; - $lang = 'en'; - if (defined('PMA_MYSQL_INT_VERSION')) { - if (PMA_MYSQL_INT_VERSION < 50000) { - $mysql = '4.1'; - if (!empty($GLOBALS['mysql_4_1_doc_lang'])) { - $lang = $GLOBALS['mysql_4_1_doc_lang']; - } - } elseif (PMA_MYSQL_INT_VERSION >= 50100) { - $mysql = '5.1'; - if (!empty($GLOBALS['mysql_5_1_doc_lang'])) { - $lang = $GLOBALS['mysql_5_1_doc_lang']; - } - } elseif (PMA_MYSQL_INT_VERSION >= 50000) { - $mysql = '5.0'; - if (!empty($GLOBALS['mysql_5_0_doc_lang'])) { - $lang = $GLOBALS['mysql_5_0_doc_lang']; - } - } - } - $url = $cfg['MySQLManualBase'] . '/' . $mysql . '/' . $lang . '/' . $link . '.html'; - break; - } - - if ($big_icon) { - return '' . $GLOBALS['strDocu'] . ''; - } elseif ($GLOBALS['cfg']['ReplaceHelpImg']) { - return '' . $GLOBALS['strDocu'] . ''; - } else { - return '[' . $GLOBALS['strDocu'] . ']'; - } - } // end of the 'PMA_showMySQLDocu()' function - - /** - * Displays a hint icon, on mouse over show the hint - * - * @uses $GLOBALS['pmaThemeImage'] - * @uses PMA_jsFormat() - * @param string the error message - * - * @access public - */ - function PMA_showHint($hint_message) - { - //return '' . $hint_message . ''; - return 'Tip'; } + $formatted_sql = ''; + + switch ($cfg['SQP']['fmtType']) { + case 'none': + if ($unparsed_sql != '') { + $formatted_sql = "
\n" . PMA_SQP_formatNone(array('raw' => $unparsed_sql)) . "\n
"; + } else { + $formatted_sql = PMA_SQP_formatNone($parsed_sql); + } + break; + case 'html': + $formatted_sql = PMA_SQP_formatHtml($parsed_sql, 'color'); + break; + case 'text': + //$formatted_sql = PMA_SQP_formatText($parsed_sql); + $formatted_sql = PMA_SQP_formatHtml($parsed_sql, 'text'); + break; + default: + break; + } // end switch + + return $formatted_sql; +} // end of the "PMA_formatSql()" function + + +/** + * Displays a link to the official MySQL documentation + * + * @uses $cfg['MySQLManualType'] + * @uses $cfg['MySQLManualBase'] + * @uses $cfg['ReplaceHelpImg'] + * @uses $GLOBALS['mysql_4_1_doc_lang'] + * @uses $GLOBALS['mysql_5_1_doc_lang'] + * @uses $GLOBALS['mysql_5_0_doc_lang'] + * @uses $GLOBALS['strDocu'] + * @uses $GLOBALS['pmaThemeImage'] + * @uses PMA_MYSQL_INT_VERSION + * @uses strtolower() + * @uses str_replace() + * @param string chapter of "HTML, one page per chapter" documentation + * @param string contains name of page/anchor that is being linked + * @param bool whether to use big icon (like in left frame) + * + * @return string the html link + * + * @access public + */ +function PMA_showMySQLDocu($chapter, $link, $big_icon = false) +{ + global $cfg; + + if ($cfg['MySQLManualType'] == 'none' || empty($cfg['MySQLManualBase'])) { + return ''; + } + + // Fixup for newly used names: + $chapter = str_replace('_', '-', strtolower($chapter)); + $link = str_replace('_', '-', strtolower($link)); + + switch ($cfg['MySQLManualType']) { + case 'chapters': + if (empty($chapter)) { + $chapter = 'index'; + } + $url = $cfg['MySQLManualBase'] . '/' . $chapter . '.html#' . $link; + break; + case 'big': + $url = $cfg['MySQLManualBase'] . '#' . $link; + break; + case 'searchable': + if (empty($link)) { + $link = 'index'; + } + $url = $cfg['MySQLManualBase'] . '/' . $link . '.html'; + break; + case 'viewable': + default: + if (empty($link)) { + $link = 'index'; + } + $mysql = '5.0'; + $lang = 'en'; + if (defined('PMA_MYSQL_INT_VERSION')) { + if (PMA_MYSQL_INT_VERSION < 50000) { + $mysql = '4.1'; + if (!empty($GLOBALS['mysql_4_1_doc_lang'])) { + $lang = $GLOBALS['mysql_4_1_doc_lang']; + } + } elseif (PMA_MYSQL_INT_VERSION >= 50100) { + $mysql = '5.1'; + if (!empty($GLOBALS['mysql_5_1_doc_lang'])) { + $lang = $GLOBALS['mysql_5_1_doc_lang']; + } + } elseif (PMA_MYSQL_INT_VERSION >= 50000) { + $mysql = '5.0'; + if (!empty($GLOBALS['mysql_5_0_doc_lang'])) { + $lang = $GLOBALS['mysql_5_0_doc_lang']; + } + } + } + $url = $cfg['MySQLManualBase'] . '/' . $mysql . '/' . $lang . '/' . $link . '.html'; + break; + } + + if ($big_icon) { + return '' . $GLOBALS['strDocu'] . ''; + } elseif ($GLOBALS['cfg']['ReplaceHelpImg']) { + return '' . $GLOBALS['strDocu'] . ''; + } else { + return '[' . $GLOBALS['strDocu'] . ']'; + } +} // end of the 'PMA_showMySQLDocu()' function + +/** + * Displays a hint icon, on mouse over show the hint + * + * @uses $GLOBALS['pmaThemeImage'] + * @uses PMA_jsFormat() + * @param string the error message + * + * @access public + */ +function PMA_showHint($hint_message) +{ + //return '' . $hint_message . ''; + return 'Tip'; +} + +/** + * Displays a MySQL error message in the right frame. + * + * @uses footer.inc.php + * @uses header.inc.php + * @uses $GLOBALS['sql_query'] + * @uses $GLOBALS['strError'] + * @uses $GLOBALS['strSQLQuery'] + * @uses $GLOBALS['pmaThemeImage'] + * @uses $GLOBALS['strEdit'] + * @uses $GLOBALS['strMySQLSaid'] + * @uses $cfg['PropertiesIconic'] + * @uses PMA_backquote() + * @uses PMA_DBI_getError() + * @uses PMA_formatSql() + * @uses PMA_generate_common_hidden_inputs() + * @uses PMA_generate_common_url() + * @uses PMA_showMySQLDocu() + * @uses PMA_sqlAddslashes() + * @uses PMA_SQP_isError() + * @uses PMA_SQP_parse() + * @uses PMA_SQP_getErrorString() + * @uses strtolower() + * @uses urlencode() + * @uses str_replace() + * @uses nl2br() + * @uses substr() + * @uses preg_replace() + * @uses preg_match() + * @uses explode() + * @uses implode() + * @uses is_array() + * @uses function_exists() + * @uses htmlspecialchars() + * @uses trim() + * @uses strstr() + * @param string the error message + * @param string the sql query that failed + * @param boolean whether to show a "modify" link or not + * @param string the "back" link url (full path is not required) + * @param boolean EXIT the page? + * + * @global string the curent table + * @global string the current db + * + * @access public + */ +function PMA_mysqlDie($error_message = '', $the_query = '', + $is_modify_link = true, $back_url = '', $exit = true) +{ + global $table, $db; + /** - * Displays a MySQL error message in the right frame. - * - * @uses footer.inc.php - * @uses header.inc.php - * @uses $GLOBALS['sql_query'] - * @uses $GLOBALS['strError'] - * @uses $GLOBALS['strSQLQuery'] - * @uses $GLOBALS['pmaThemeImage'] - * @uses $GLOBALS['strEdit'] - * @uses $GLOBALS['strMySQLSaid'] - * @uses $cfg['PropertiesIconic'] - * @uses PMA_backquote() - * @uses PMA_DBI_getError() - * @uses PMA_formatSql() - * @uses PMA_generate_common_hidden_inputs() - * @uses PMA_generate_common_url() - * @uses PMA_showMySQLDocu() - * @uses PMA_sqlAddslashes() - * @uses PMA_SQP_isError() - * @uses PMA_SQP_parse() - * @uses PMA_SQP_getErrorString() - * @uses strtolower() - * @uses urlencode() - * @uses str_replace() - * @uses nl2br() - * @uses substr() - * @uses preg_replace() - * @uses preg_match() - * @uses explode() - * @uses implode() - * @uses is_array() - * @uses function_exists() - * @uses htmlspecialchars() - * @uses trim() - * @uses strstr() - * @param string the error message - * @param string the sql query that failed - * @param boolean whether to show a "modify" link or not - * @param string the "back" link url (full path is not required) - * @param boolean EXIT the page? - * - * @global string the curent table - * @global string the current db - * - * @access public + * start http output, display html headers */ - function PMA_mysqlDie($error_message = '', $the_query = '', - $is_modify_link = true, $back_url = '', $exit = true) - { - global $table, $db; + require_once './libraries/header.inc.php'; - /** - * start http output, display html headers - */ - require_once './libraries/header.inc.php'; - - if (!$error_message) { - $error_message = PMA_DBI_getError(); - } - if (!$the_query && !empty($GLOBALS['sql_query'])) { - $the_query = $GLOBALS['sql_query']; - } + if (!$error_message) { + $error_message = PMA_DBI_getError(); + } + if (!$the_query && !empty($GLOBALS['sql_query'])) { + $the_query = $GLOBALS['sql_query']; + } + // --- Added to solve bug #641765 + // Robbat2 - 12 January 2003, 9:46PM + // Revised, Robbat2 - 13 January 2003, 2:59PM + if (!function_exists('PMA_SQP_isError') || PMA_SQP_isError()) { + $formatted_sql = htmlspecialchars($the_query); + } elseif (empty($the_query) || trim($the_query) == '') { + $formatted_sql = ''; + } else { + $formatted_sql = PMA_formatSql(PMA_SQP_parse($the_query), $the_query); + } + // --- + echo "\n" . '' . "\n"; + echo '

' . $GLOBALS['strError'] . '

' . "\n"; + // if the config password is wrong, or the MySQL server does not + // respond, do not show the query that would reveal the + // username/password + if (!empty($the_query) && !strstr($the_query, 'connect')) { // --- Added to solve bug #641765 // Robbat2 - 12 January 2003, 9:46PM // Revised, Robbat2 - 13 January 2003, 2:59PM - if (!function_exists('PMA_SQP_isError') || PMA_SQP_isError()) { - $formatted_sql = htmlspecialchars($the_query); - } elseif (empty($the_query) || trim($the_query) == '') { - $formatted_sql = ''; - } else { - $formatted_sql = PMA_formatSql(PMA_SQP_parse($the_query), $the_query); + if (function_exists('PMA_SQP_isError') && PMA_SQP_isError()) { + echo PMA_SQP_getErrorString() . "\n"; + echo '
' . "\n"; } // --- - echo "\n" . '' . "\n"; - echo '

' . $GLOBALS['strError'] . '

' . "\n"; - // if the config password is wrong, or the MySQL server does not - // respond, do not show the query that would reveal the - // username/password - if (!empty($the_query) && !strstr($the_query, 'connect')) { - // --- Added to solve bug #641765 - // Robbat2 - 12 January 2003, 9:46PM - // Revised, Robbat2 - 13 January 2003, 2:59PM - if (function_exists('PMA_SQP_isError') && PMA_SQP_isError()) { - echo PMA_SQP_getErrorString() . "\n"; - echo '
' . "\n"; + // modified to show me the help on sql errors (Michael Keck) + echo '

' . $GLOBALS['strSQLQuery'] . ':' . "\n"; + if (strstr(strtolower($formatted_sql), 'select')) { // please show me help to the error on select + echo PMA_showMySQLDocu('SQL-Syntax', 'SELECT'); + } + if ($is_modify_link && isset($db)) { + if (isset($table)) { + $doedit_goto = ''; + } else { + $doedit_goto = ''; } - // --- - // modified to show me the help on sql errors (Michael Keck) - echo '

' . $GLOBALS['strSQLQuery'] . ':' . "\n"; - if (strstr(strtolower($formatted_sql), 'select')) { // please show me help to the error on select - echo PMA_showMySQLDocu('SQL-Syntax', 'SELECT'); + if ($GLOBALS['cfg']['PropertiesIconic']) { + echo $doedit_goto + . '' . $GLOBALS['strEdit'] .'' + . ''; + } else { + echo ' [' + . $doedit_goto . $GLOBALS['strEdit'] . '' + . ']' . "\n"; } - if ($is_modify_link && isset($db)) { - if (isset($table)) { - $doedit_goto = ''; - } else { - $doedit_goto = ''; - } - if ($GLOBALS['cfg']['PropertiesIconic']) { - echo $doedit_goto - . '' . $GLOBALS['strEdit'] .'' - . ''; - } else { - echo ' [' - . $doedit_goto . $GLOBALS['strEdit'] . '' - . ']' . "\n"; - } - } // end if - echo '

' . "\n" - .'

' . "\n" - .' ' . $formatted_sql . "\n" - .'

' . "\n"; } // end if + echo '

' . "\n" + .'

' . "\n" + .' ' . $formatted_sql . "\n" + .'

' . "\n"; + } // end if - $tmp_mysql_error = ''; // for saving the original $error_message - if (!empty($error_message)) { - $tmp_mysql_error = strtolower($error_message); // save the original $error_message - $error_message = htmlspecialchars($error_message); - $error_message = preg_replace("@((\015\012)|(\015)|(\012)){3,}@", "\n\n", $error_message); - } - // modified to show me the help on error-returns (Michael Keck) - // (now error-messages-server) - echo '

' . "\n" - . ' ' . $GLOBALS['strMySQLSaid'] . '' - . PMA_showMySQLDocu('Error-messages-server', 'Error-messages-server') - . "\n" - . '

' . "\n"; + $tmp_mysql_error = ''; // for saving the original $error_message + if (!empty($error_message)) { + $tmp_mysql_error = strtolower($error_message); // save the original $error_message + $error_message = htmlspecialchars($error_message); + $error_message = preg_replace("@((\015\012)|(\015)|(\012)){3,}@", "\n\n", $error_message); + } + // modified to show me the help on error-returns (Michael Keck) + // (now error-messages-server) + echo '

' . "\n" + . ' ' . $GLOBALS['strMySQLSaid'] . '' + . PMA_showMySQLDocu('Error-messages-server', 'Error-messages-server') + . "\n" + . '

' . "\n"; - // The error message will be displayed within a CODE segment. - // To preserve original formatting, but allow wordwrapping, we do a couple of replacements + // The error message will be displayed within a CODE segment. + // To preserve original formatting, but allow wordwrapping, we do a couple of replacements - // Replace all non-single blanks with their HTML-counterpart - $error_message = str_replace(' ', '  ', $error_message); - // Replace TAB-characters with their HTML-counterpart - $error_message = str_replace("\t", '    ', $error_message); - // Replace linebreaks - $error_message = nl2br($error_message); + // Replace all non-single blanks with their HTML-counterpart + $error_message = str_replace(' ', '  ', $error_message); + // Replace TAB-characters with their HTML-counterpart + $error_message = str_replace("\t", '    ', $error_message); + // Replace linebreaks + $error_message = nl2br($error_message); - echo '' . "\n" - . $error_message . "\n" - . '
' . "\n"; + echo '' . "\n" + . $error_message . "\n" + . '
' . "\n"; - // feature request #1036254: - // Add a link by MySQL-Error #1062 - Duplicate entry - // 2004-10-20 by mkkeck - // 2005-01-17 modified by mkkeck bugfix - if (substr($error_message, 1, 4) == '1062') { - // get the duplicate entry + // feature request #1036254: + // Add a link by MySQL-Error #1062 - Duplicate entry + // 2004-10-20 by mkkeck + // 2005-01-17 modified by mkkeck bugfix + if (substr($error_message, 1, 4) == '1062') { + // get the duplicate entry - // get table name - /** - * @todo what would be the best delimiter, while avoiding special - * characters that can become high-ascii after editing, depending - * upon which editor is used by the developer? - */ - $error_table = array(); - if (preg_match('@ALTER\s*TABLE\s*\`([^\`]+)\`@iu', $the_query, $error_table)) { - $error_table = $error_table[1]; - } elseif (preg_match('@INSERT\s*INTO\s*\`([^\`]+)\`@iu', $the_query, $error_table)) { - $error_table = $error_table[1]; - } elseif (preg_match('@UPDATE\s*\`([^\`]+)\`@iu', $the_query, $error_table)) { - $error_table = $error_table[1]; - } elseif (preg_match('@INSERT\s*\`([^\`]+)\`@iu', $the_query, $error_table)) { - $error_table = $error_table[1]; - } - - // get fields - $error_fields = array(); - if (preg_match('@\(([^\)]+)\)@i', $the_query, $error_fields)) { - $error_fields = explode(',', $error_fields[1]); - } elseif (preg_match('@(`[^`]+`)\s*=@i', $the_query, $error_fields)) { - $error_fields = explode(',', $error_fields[1]); - } - if (is_array($error_table) || is_array($error_fields)) { - - // duplicate value - $duplicate_value = array(); - preg_match('@\'([^\']+)\'@i', $tmp_mysql_error, $duplicate_value); - $duplicate_value = $duplicate_value[1]; - - $sql = ' - SELECT * - FROM ' . PMA_backquote($error_table) . ' - WHERE CONCAT_WS("-", ' . implode(', ', $error_fields) . ') - = "' . PMA_sqlAddslashes($duplicate_value) . '" - ORDER BY ' . implode(', ', $error_fields); - unset($error_table, $error_fields, $duplicate_value); - - echo '
' ."\n" - .' ' . "\n" - .' ' . PMA_generate_common_hidden_inputs($db, $table) . "\n" - .' ' . "\n" - .'
' . "\n"; - unset($sql); - } - } // end of show duplicate entry - - echo '
'; - echo '
'; - - if (!empty($back_url) && $exit) { - $goto_back_url=''; - echo '[ ' . $goto_back_url . $GLOBALS['strBack'] . ' ]'; - } - echo '
' . "\n\n"; - if ($exit) { - /** - * display footer and exit - */ - require_once './libraries/footer.inc.php'; - } - } // end of the 'PMA_mysqlDie()' function - - /** - * Returns a string formatted with CONVERT ... USING - * if MySQL supports it - * - * @uses PMA_MYSQL_INT_VERSION - * @uses $GLOBALS['collation_connection'] - * @uses explode() - * @param string the string itself - * @param string the mode: quoted or unquoted (this one by default) - * - * @return the formatted string - * - * @access private - */ - function PMA_convert_using($string, $mode='unquoted') - { - if ($mode == 'quoted') { - $possible_quote = "'"; - } else { - $possible_quote = ""; + // get table name + /** + * @todo what would be the best delimiter, while avoiding special + * characters that can become high-ascii after editing, depending + * upon which editor is used by the developer? + */ + $error_table = array(); + if (preg_match('@ALTER\s*TABLE\s*\`([^\`]+)\`@iu', $the_query, $error_table)) { + $error_table = $error_table[1]; + } elseif (preg_match('@INSERT\s*INTO\s*\`([^\`]+)\`@iu', $the_query, $error_table)) { + $error_table = $error_table[1]; + } elseif (preg_match('@UPDATE\s*\`([^\`]+)\`@iu', $the_query, $error_table)) { + $error_table = $error_table[1]; + } elseif (preg_match('@INSERT\s*\`([^\`]+)\`@iu', $the_query, $error_table)) { + $error_table = $error_table[1]; } - if (PMA_MYSQL_INT_VERSION >= 40100) { - list($conn_charset) = explode('_', $GLOBALS['collation_connection']); - $converted_string = "CONVERT(" . $possible_quote . $string . $possible_quote . " USING " . $conn_charset . ")"; - } else { - $converted_string = $possible_quote . $string . $possible_quote; + // get fields + $error_fields = array(); + if (preg_match('@\(([^\)]+)\)@i', $the_query, $error_fields)) { + $error_fields = explode(',', $error_fields[1]); + } elseif (preg_match('@(`[^`]+`)\s*=@i', $the_query, $error_fields)) { + $error_fields = explode(',', $error_fields[1]); } - return $converted_string; - } // end function + if (is_array($error_table) || is_array($error_fields)) { - /** - * Send HTTP header, taking IIS limits into account (600 seems ok) - * - * @uses PMA_IS_IIS - * @uses PMA_COMING_FROM_COOKIE_LOGIN - * @uses PMA_get_arg_separator() - * @uses SID - * @uses strlen() - * @uses strpos() - * @uses header() - * @uses session_write_close() - * @uses headers_sent() - * @uses function_exists() - * @uses debug_print_backtrace() - * @uses trigger_error() - * @uses defined() - * @param string $uri the header to send - * @return boolean always true - */ - function PMA_sendHeaderLocation($uri) - { - if (PMA_IS_IIS && strlen($uri) > 600) { + // duplicate value + $duplicate_value = array(); + preg_match('@\'([^\']+)\'@i', $tmp_mysql_error, $duplicate_value); + $duplicate_value = $duplicate_value[1]; - echo '- - -' . "\n"; - echo '' . "\n"; - echo '' . "\n"; - echo '' . "\n"; - echo '' . "\n"; - echo '' . "\n"; - echo '//]]>' . "\n"; - echo '' . "\n"; - echo '' . "\n"; - echo '' . "\n"; + $sql = ' + SELECT * + FROM ' . PMA_backquote($error_table) . ' + WHERE CONCAT_WS("-", ' . implode(', ', $error_fields) . ') + = "' . PMA_sqlAddslashes($duplicate_value) . '" + ORDER BY ' . implode(', ', $error_fields); + unset($error_table, $error_fields, $duplicate_value); - } else { - if (SID) { - if (strpos($uri, '?') === false) { - header('Location: ' . $uri . '?' . SID); - } else { - $separator = PMA_get_arg_separator(); - header('Location: ' . $uri . $separator . SID); - } + echo '
' ."\n" + .' ' . "\n" + .' ' . PMA_generate_common_hidden_inputs($db, $table) . "\n" + .' ' . "\n" + .'
' . "\n"; + unset($sql); + } + } // end of show duplicate entry + + echo '
'; + echo '
'; + + if (!empty($back_url) && $exit) { + $goto_back_url=''; + echo '[ ' . $goto_back_url . $GLOBALS['strBack'] . ' ]'; + } + echo '
' . "\n\n"; + if ($exit) { + /** + * display footer and exit + */ + require_once './libraries/footer.inc.php'; + } +} // end of the 'PMA_mysqlDie()' function + +/** + * Returns a string formatted with CONVERT ... USING + * if MySQL supports it + * + * @uses PMA_MYSQL_INT_VERSION + * @uses $GLOBALS['collation_connection'] + * @uses explode() + * @param string the string itself + * @param string the mode: quoted or unquoted (this one by default) + * + * @return the formatted string + * + * @access private + */ +function PMA_convert_using($string, $mode='unquoted') +{ + if ($mode == 'quoted') { + $possible_quote = "'"; + } else { + $possible_quote = ""; + } + + if (PMA_MYSQL_INT_VERSION >= 40100) { + list($conn_charset) = explode('_', $GLOBALS['collation_connection']); + $converted_string = "CONVERT(" . $possible_quote . $string . $possible_quote . " USING " . $conn_charset . ")"; + } else { + $converted_string = $possible_quote . $string . $possible_quote; + } + return $converted_string; +} // end function + +/** + * Send HTTP header, taking IIS limits into account (600 seems ok) + * + * @uses PMA_IS_IIS + * @uses PMA_COMING_FROM_COOKIE_LOGIN + * @uses PMA_get_arg_separator() + * @uses SID + * @uses strlen() + * @uses strpos() + * @uses header() + * @uses session_write_close() + * @uses headers_sent() + * @uses function_exists() + * @uses debug_print_backtrace() + * @uses trigger_error() + * @uses defined() + * @param string $uri the header to send + * @return boolean always true + */ +function PMA_sendHeaderLocation($uri) +{ + if (PMA_IS_IIS && strlen($uri) > 600) { + + echo '- - -' . "\n"; + echo '' . "\n"; + echo '' . "\n"; + echo '' . "\n"; + echo '' . "\n"; + echo '' . "\n"; + echo '//]]>' . "\n"; + echo '' . "\n"; + echo '' . "\n"; + echo '' . "\n"; + + } else { + if (SID) { + if (strpos($uri, '?') === false) { + header('Location: ' . $uri . '?' . SID); } else { - session_write_close(); - if (headers_sent()) { - if (function_exists('debug_print_backtrace')) { - echo '
';
-                        debug_print_backtrace();
-                        echo '
'; - } - trigger_error('PMA_sendHeaderLocation called when headers are already sent!', E_USER_ERROR); - } - // bug #1523784: IE6 does not like 'Refresh: 0', it - // results in a blank page - // but we need it when coming from the cookie login panel) - if (PMA_IS_IIS && defined('PMA_COMING_FROM_COOKIE_LOGIN')) { - header('Refresh: 0; ' . $uri); - } else { - header('Location: ' . $uri); + $separator = PMA_get_arg_separator(); + header('Location: ' . $uri . $separator . SID); + } + } else { + session_write_close(); + if (headers_sent()) { + if (function_exists('debug_print_backtrace')) { + echo '
';
+                    debug_print_backtrace();
+                    echo '
'; } + trigger_error('PMA_sendHeaderLocation called when headers are already sent!', E_USER_ERROR); + } + // bug #1523784: IE6 does not like 'Refresh: 0', it + // results in a blank page + // but we need it when coming from the cookie login panel) + if (PMA_IS_IIS && defined('PMA_COMING_FROM_COOKIE_LOGIN')) { + header('Refresh: 0; ' . $uri); + } else { + header('Location: ' . $uri); } } } +} - /** - * returns array with tables of given db with extended infomation and grouped - * - * @uses $cfg['LeftFrameTableSeparator'] - * @uses $cfg['LeftFrameTableLevel'] - * @uses $cfg['ShowTooltipAliasTB'] - * @uses $cfg['NaturalOrder'] - * @uses PMA_backquote() - * @uses count() - * @uses array_merge - * @uses uksort() - * @uses strstr() - * @uses explode() - * @param string $db name of db - * return array (rekursive) grouped table list - */ - function PMA_getTableList($db, $tables = null) - { - $sep = $GLOBALS['cfg']['LeftFrameTableSeparator']; +/** + * returns array with tables of given db with extended infomation and grouped + * + * @uses $cfg['LeftFrameTableSeparator'] + * @uses $cfg['LeftFrameTableLevel'] + * @uses $cfg['ShowTooltipAliasTB'] + * @uses $cfg['NaturalOrder'] + * @uses PMA_backquote() + * @uses count() + * @uses array_merge + * @uses uksort() + * @uses strstr() + * @uses explode() + * @param string $db name of db + * return array (rekursive) grouped table list + */ +function PMA_getTableList($db, $tables = null) +{ + $sep = $GLOBALS['cfg']['LeftFrameTableSeparator']; - if ( null === $tables ) { - $tables = PMA_DBI_get_tables_full($db); - if ($GLOBALS['cfg']['NaturalOrder']) { - uksort($tables, 'strnatcasecmp'); - } + if ( null === $tables ) { + $tables = PMA_DBI_get_tables_full($db); + if ($GLOBALS['cfg']['NaturalOrder']) { + uksort($tables, 'strnatcasecmp'); } - - if (count($tables) < 1) { - return $tables; - } - - $default = array( - 'Name' => '', - 'Rows' => 0, - 'Comment' => '', - 'disp_name' => '', - ); - - $table_groups = array(); - - foreach ($tables as $table_name => $table) { - - // check for correct row count - if (null === $table['Rows']) { - // Do not check exact row count here, - // if row count is invalid possibly the table is defect - // and this would break left frame; - // but we can check row count if this is a view, - // since PMA_Table::countRecords() returns a limited row count - // in this case. - - // set this because PMA_Table::countRecords() can use it - $tbl_is_view = PMA_Table::isView($db, $table['Name']); - - if ($tbl_is_view) { - $table['Rows'] = PMA_Table::countRecords($db, $table['Name'], - $return = true); - } - } - - // in $group we save the reference to the place in $table_groups - // where to store the table info - if ($GLOBALS['cfg']['LeftFrameDBTree'] - && $sep && strstr($table_name, $sep)) - { - $parts = explode($sep, $table_name); - - $group =& $table_groups; - $i = 0; - $group_name_full = ''; - while ($i < count($parts) - 1 - && $i < $GLOBALS['cfg']['LeftFrameTableLevel']) { - $group_name = $parts[$i] . $sep; - $group_name_full .= $group_name; - - if (!isset($group[$group_name])) { - $group[$group_name] = array(); - $group[$group_name]['is' . $sep . 'group'] = true; - $group[$group_name]['tab' . $sep . 'count'] = 1; - $group[$group_name]['tab' . $sep . 'group'] = $group_name_full; - } elseif (!isset($group[$group_name]['is' . $sep . 'group'])) { - $table = $group[$group_name]; - $group[$group_name] = array(); - $group[$group_name][$group_name] = $table; - unset($table); - $group[$group_name]['is' . $sep . 'group'] = true; - $group[$group_name]['tab' . $sep . 'count'] = 1; - $group[$group_name]['tab' . $sep . 'group'] = $group_name_full; - } else { - $group[$group_name]['tab' . $sep . 'count']++; - } - $group =& $group[$group_name]; - $i++; - } - } else { - if (!isset($table_groups[$table_name])) { - $table_groups[$table_name] = array(); - } - $group =& $table_groups; - } - - - if ($GLOBALS['cfg']['ShowTooltipAliasTB'] - && $GLOBALS['cfg']['ShowTooltipAliasTB'] !== 'nested') { - // switch tooltip and name - $table['Comment'] = $table['Name']; - $table['disp_name'] = $table['Comment']; - } else { - $table['disp_name'] = $table['Name']; - } - - $group[$table_name] = array_merge($default, $table); - } - - return $table_groups; } - /* ----------------------- Set of misc functions ----------------------- */ + if (count($tables) < 1) { + return $tables; + } + $default = array( + 'Name' => '', + 'Rows' => 0, + 'Comment' => '', + 'disp_name' => '', + ); - /** - * Adds backquotes on both sides of a database, table or field name. - * and escapes backquotes inside the name with another backquote - * - * example: - * - * echo PMA_backquote('owner`s db'); // `owner``s db` - * - * - * - * @uses PMA_backquote() - * @uses is_array() - * @uses strlen() - * @uses str_replace() - * @param mixed $a_name the database, table or field name to "backquote" - * or array of it - * @param boolean $do_it a flag to bypass this function (used by dump - * functions) - * @return mixed the "backquoted" database, table or field name if the - * current MySQL release is >= 3.23.6, the original one - * else - * @access public - */ - function PMA_backquote($a_name, $do_it = true) - { - if (! $do_it) { - return $a_name; + $table_groups = array(); + + foreach ($tables as $table_name => $table) { + + // check for correct row count + if (null === $table['Rows']) { + // Do not check exact row count here, + // if row count is invalid possibly the table is defect + // and this would break left frame; + // but we can check row count if this is a view, + // since PMA_Table::countRecords() returns a limited row count + // in this case. + + // set this because PMA_Table::countRecords() can use it + $tbl_is_view = PMA_Table::isView($db, $table['Name']); + + if ($tbl_is_view) { + $table['Rows'] = PMA_Table::countRecords($db, $table['Name'], + $return = true); + } } - if (is_array($a_name)) { - $result = array(); - foreach ($a_name as $key => $val) { - $result[$key] = PMA_backquote($val); - } - return $result; - } + // in $group we save the reference to the place in $table_groups + // where to store the table info + if ($GLOBALS['cfg']['LeftFrameDBTree'] + && $sep && strstr($table_name, $sep)) + { + $parts = explode($sep, $table_name); - // '0' is also empty for php :-( - if (strlen($a_name) && $a_name !== '*') { - return '`' . str_replace('`', '``', $a_name) . '`'; + $group =& $table_groups; + $i = 0; + $group_name_full = ''; + while ($i < count($parts) - 1 + && $i < $GLOBALS['cfg']['LeftFrameTableLevel']) { + $group_name = $parts[$i] . $sep; + $group_name_full .= $group_name; + + if (!isset($group[$group_name])) { + $group[$group_name] = array(); + $group[$group_name]['is' . $sep . 'group'] = true; + $group[$group_name]['tab' . $sep . 'count'] = 1; + $group[$group_name]['tab' . $sep . 'group'] = $group_name_full; + } elseif (!isset($group[$group_name]['is' . $sep . 'group'])) { + $table = $group[$group_name]; + $group[$group_name] = array(); + $group[$group_name][$group_name] = $table; + unset($table); + $group[$group_name]['is' . $sep . 'group'] = true; + $group[$group_name]['tab' . $sep . 'count'] = 1; + $group[$group_name]['tab' . $sep . 'group'] = $group_name_full; + } else { + $group[$group_name]['tab' . $sep . 'count']++; + } + $group =& $group[$group_name]; + $i++; + } } else { - return $a_name; + if (!isset($table_groups[$table_name])) { + $table_groups[$table_name] = array(); + } + $group =& $table_groups; } - } // end of the 'PMA_backquote()' function - /** - * Defines the value depending on the user OS. - * - * @uses PMA_USR_OS - * @return string the value to use - * - * @access public - */ - function PMA_whichCrlf() - { + if ($GLOBALS['cfg']['ShowTooltipAliasTB'] + && $GLOBALS['cfg']['ShowTooltipAliasTB'] !== 'nested') { + // switch tooltip and name + $table['Comment'] = $table['Name']; + $table['disp_name'] = $table['Comment']; + } else { + $table['disp_name'] = $table['Name']; + } + + $group[$table_name] = array_merge($default, $table); + } + + return $table_groups; +} + +/* ----------------------- Set of misc functions ----------------------- */ + + +/** + * Adds backquotes on both sides of a database, table or field name. + * and escapes backquotes inside the name with another backquote + * + * example: + * + * echo PMA_backquote('owner`s db'); // `owner``s db` + * + * + * + * @uses PMA_backquote() + * @uses is_array() + * @uses strlen() + * @uses str_replace() + * @param mixed $a_name the database, table or field name to "backquote" + * or array of it + * @param boolean $do_it a flag to bypass this function (used by dump + * functions) + * @return mixed the "backquoted" database, table or field name if the + * current MySQL release is >= 3.23.6, the original one + * else + * @access public + */ +function PMA_backquote($a_name, $do_it = true) +{ + if (! $do_it) { + return $a_name; + } + + if (is_array($a_name)) { + $result = array(); + foreach ($a_name as $key => $val) { + $result[$key] = PMA_backquote($val); + } + return $result; + } + + // '0' is also empty for php :-( + if (strlen($a_name) && $a_name !== '*') { + return '`' . str_replace('`', '``', $a_name) . '`'; + } else { + return $a_name; + } +} // end of the 'PMA_backquote()' function + + +/** + * Defines the value depending on the user OS. + * + * @uses PMA_USR_OS + * @return string the value to use + * + * @access public + */ +function PMA_whichCrlf() +{ + $the_crlf = "\n"; + + // The 'PMA_USR_OS' constant is defined in "./libraries/defines.lib.php" + // Win case + if (PMA_USR_OS == 'Win') { + $the_crlf = "\r\n"; + } + // Others + else { $the_crlf = "\n"; + } - // The 'PMA_USR_OS' constant is defined in "./libraries/defines.lib.php" - // Win case - if (PMA_USR_OS == 'Win') { - $the_crlf = "\r\n"; - } - // Others - else { - $the_crlf = "\n"; - } + return $the_crlf; +} // end of the 'PMA_whichCrlf()' function - return $the_crlf; - } // end of the 'PMA_whichCrlf()' function +/** + * Reloads navigation if needed. + * + * @uses $GLOBALS['reload'] + * @uses $GLOBALS['db'] + * @uses PMA_generate_common_url() + * @global array configuration + * + * @access public + */ +function PMA_reloadNavigation() +{ + global $cfg; - /** - * Reloads navigation if needed. - * - * @uses $GLOBALS['reload'] - * @uses $GLOBALS['db'] - * @uses PMA_generate_common_url() - * @global array configuration - * - * @access public - */ - function PMA_reloadNavigation() - { - global $cfg; - - // Reloads the navigation frame via JavaScript if required - if (isset($GLOBALS['reload']) && $GLOBALS['reload']) { - echo "\n"; - $reload_url = './navigation.php?' . PMA_generate_common_url((isset($GLOBALS['db']) ? $GLOBALS['db'] : ''), '', '&'); - ?> + // Reloads the navigation frame via JavaScript if required + if (isset($GLOBALS['reload']) && $GLOBALS['reload']) { + echo "\n"; + $reload_url = './navigation.php?' . PMA_generate_common_url((isset($GLOBALS['db']) ? $GLOBALS['db'] : ''), '', '&'); + ?> - ' . "\n"; + echo '//' . "\n"; + echo '' . "\n"; + } // end if + } // end if ... elseif - if (null === $sql_query) { - if (! empty($GLOBALS['display_query'])) { - $sql_query = $GLOBALS['display_query']; - } elseif ($cfg['SQP']['fmtType'] == 'none' && ! empty($GLOBALS['unparsed_sql'])) { - $sql_query = $GLOBALS['unparsed_sql']; - } elseif (! empty($GLOBALS['sql_query'])) { - $sql_query = $GLOBALS['sql_query']; - } else { - $sql_query = ''; - } - } - - // Corrects the tooltip text via JS if required - // @todo this is REALLY the wrong place to do this - very unexpected here - if ( isset($GLOBALS['table']) && strlen($GLOBALS['table']) && $cfg['ShowTooltip']) { - $result = PMA_DBI_try_query('SHOW TABLE STATUS FROM ' . PMA_backquote($GLOBALS['db']) . ' LIKE \'' . PMA_sqlAddslashes($GLOBALS['table'], true) . '\''); + // Checks if the table needs to be repaired after a TRUNCATE query. + // @todo this should only be done if isset($GLOBALS['sql_query']), what about $GLOBALS['display_query']??? + // @todo this is REALLY the wrong place to do this - very unexpected here + if (isset($GLOBALS['table']) && isset($GLOBALS['sql_query']) + && $GLOBALS['sql_query'] == 'TRUNCATE TABLE ' . PMA_backquote($GLOBALS['table'])) { + if (!isset($tbl_status)) { + $result = @PMA_DBI_try_query('SHOW TABLE STATUS FROM ' . PMA_backquote($GLOBALS['db']) . ' LIKE \'' . PMA_sqlAddslashes($GLOBALS['table'], true) . '\''); if ($result) { $tbl_status = PMA_DBI_fetch_assoc($result); - $tooltip = (empty($tbl_status['Comment'])) - ? '' - : $tbl_status['Comment'] . ' '; - $tooltip .= '(' . PMA_formatNumber($tbl_status['Rows'], 0) . ' ' . $GLOBALS['strRows'] . ')'; PMA_DBI_free_result($result); - $uni_tbl = PMA_jsFormat($GLOBALS['db'] . '.' . $GLOBALS['table'], false); - echo "\n"; - echo '' . "\n"; - } // end if - } // end if ... elseif - - // Checks if the table needs to be repaired after a TRUNCATE query. - // @todo this should only be done if isset($GLOBALS['sql_query']), what about $GLOBALS['display_query']??? - // @todo this is REALLY the wrong place to do this - very unexpected here - if (isset($GLOBALS['table']) && isset($GLOBALS['sql_query']) - && $GLOBALS['sql_query'] == 'TRUNCATE TABLE ' . PMA_backquote($GLOBALS['table'])) { - if (!isset($tbl_status)) { - $result = @PMA_DBI_try_query('SHOW TABLE STATUS FROM ' . PMA_backquote($GLOBALS['db']) . ' LIKE \'' . PMA_sqlAddslashes($GLOBALS['table'], true) . '\''); - if ($result) { - $tbl_status = PMA_DBI_fetch_assoc($result); - PMA_DBI_free_result($result); - } - } - if (isset($tbl_status) && (int) $tbl_status['Index_length'] > 1024) { - PMA_DBI_try_query('REPAIR TABLE ' . PMA_backquote($GLOBALS['table'])); } } - unset($tbl_status); - echo '
' . "\n"; - - echo '
' . "\n"; - if (!empty($GLOBALS['show_error_header'])) { - echo '
' . "\n"; - echo '

' . $GLOBALS['strError'] . '

' . "\n"; + if (isset($tbl_status) && (int) $tbl_status['Index_length'] > 1024) { + PMA_DBI_try_query('REPAIR TABLE ' . PMA_backquote($GLOBALS['table'])); } + } + unset($tbl_status); + echo '
' . "\n"; - echo '
'; - echo PMA_sanitize($message); - if (isset($GLOBALS['special_message'])) { - echo PMA_sanitize($GLOBALS['special_message']); - unset($GLOBALS['special_message']); - } + echo '
' . "\n"; + if (!empty($GLOBALS['show_error_header'])) { + echo '
' . "\n"; + echo '

' . $GLOBALS['strError'] . '

' . "\n"; + } + + echo '
'; + echo PMA_sanitize($message); + if (isset($GLOBALS['special_message'])) { + echo PMA_sanitize($GLOBALS['special_message']); + unset($GLOBALS['special_message']); + } + echo '
'; + + if (!empty($GLOBALS['show_error_header'])) { echo '
'; + } - if (!empty($GLOBALS['show_error_header'])) { - echo '
'; + if ($cfg['ShowSQL'] == true && ! empty($sql_query)) { + // Basic url query part + $url_qpart = '?' . PMA_generate_common_url(isset($GLOBALS['db']) ? $GLOBALS['db'] : '', isset($GLOBALS['table']) ? $GLOBALS['table'] : ''); + + // Html format the query to be displayed + // The nl2br function isn't used because its result isn't a valid + // xhtml1.0 statement before php4.0.5 ("
" and not "
") + // If we want to show some sql code it is easiest to create it here + /* SQL-Parser-Analyzer */ + + if (!empty($GLOBALS['show_as_php'])) { + $new_line = '\'
' . "\n" . '        . \' '; + } + if (isset($new_line)) { + /* SQL-Parser-Analyzer */ + $query_base = PMA_sqlAddslashes(htmlspecialchars($sql_query), false, false, true); + /* SQL-Parser-Analyzer */ + $query_base = preg_replace("@((\015\012)|(\015)|(\012))+@", $new_line, $query_base); + } else { + $query_base = $sql_query; } - if ($cfg['ShowSQL'] == true && ! empty($sql_query)) { - // Basic url query part - $url_qpart = '?' . PMA_generate_common_url(isset($GLOBALS['db']) ? $GLOBALS['db'] : '', isset($GLOBALS['table']) ? $GLOBALS['table'] : ''); + $max_characters = 1000; + if (strlen($query_base) > $max_characters) { + define('PMA_QUERY_TOO_BIG',1); + } - // Html format the query to be displayed - // The nl2br function isn't used because its result isn't a valid - // xhtml1.0 statement before php4.0.5 ("
" and not "
") - // If we want to show some sql code it is easiest to create it here - /* SQL-Parser-Analyzer */ - - if (!empty($GLOBALS['show_as_php'])) { - $new_line = '\'
' . "\n" . '        . \' '; - } - if (isset($new_line)) { - /* SQL-Parser-Analyzer */ - $query_base = PMA_sqlAddslashes(htmlspecialchars($sql_query), false, false, true); - /* SQL-Parser-Analyzer */ - $query_base = preg_replace("@((\015\012)|(\015)|(\012))+@", $new_line, $query_base); - } else { - $query_base = $sql_query; - } - - $max_characters = 1000; - if (strlen($query_base) > $max_characters) { - define('PMA_QUERY_TOO_BIG',1); - } - - // Parse SQL if needed - if (isset($GLOBALS['parsed_sql']) && $query_base == $GLOBALS['parsed_sql']['raw']) { - $parsed_sql = $GLOBALS['parsed_sql']; - } else { - // when the query is large (for example an INSERT of binary - // data), the parser chokes; so avoid parsing the query - if (! defined('PMA_QUERY_TOO_BIG')) { - $parsed_sql = PMA_SQP_parse($query_base); - } - } - - // Analyze it - if (isset($parsed_sql)) { - $analyzed_display_query = PMA_SQP_analyze($parsed_sql); - } - - // Here we append the LIMIT added for navigation, to - // enable its display. Adding it higher in the code - // to $sql_query would create a problem when - // using the Refresh or Edit links. - - // Only append it on SELECTs. - - /** - * @todo what would be the best to do when someone hits Refresh: - * use the current LIMITs ? - */ - - if (isset($analyzed_display_query[0]['queryflags']['select_from']) - && isset($GLOBALS['sql_limit_to_append'])) { - $query_base = $analyzed_display_query[0]['section_before_limit'] . "\n" . $GLOBALS['sql_limit_to_append'] . $analyzed_display_query[0]['section_after_limit']; - // Need to reparse query + // Parse SQL if needed + if (isset($GLOBALS['parsed_sql']) && $query_base == $GLOBALS['parsed_sql']['raw']) { + $parsed_sql = $GLOBALS['parsed_sql']; + } else { + // when the query is large (for example an INSERT of binary + // data), the parser chokes; so avoid parsing the query + if (! defined('PMA_QUERY_TOO_BIG')) { $parsed_sql = PMA_SQP_parse($query_base); } + } - if (!empty($GLOBALS['show_as_php'])) { - $query_base = '$sql = \'' . $query_base; - } elseif (!empty($GLOBALS['validatequery'])) { - $query_base = PMA_validateSQL($query_base); - } else { - if (isset($parsed_sql)) { - $query_base = PMA_formatSql($parsed_sql, $query_base); - } - } + // Analyze it + if (isset($parsed_sql)) { + $analyzed_display_query = PMA_SQP_analyze($parsed_sql); + } - // Prepares links that may be displayed to edit/explain the query - // (don't go to default pages, we must go to the page - // where the query box is available) + // Here we append the LIMIT added for navigation, to + // enable its display. Adding it higher in the code + // to $sql_query would create a problem when + // using the Refresh or Edit links. - $edit_target = isset($GLOBALS['db']) ? (isset($GLOBALS['table']) ? 'tbl_sql.php' : 'db_sql.php') : 'server_sql.php'; + // Only append it on SELECTs. - if (isset($cfg['SQLQuery']['Edit']) - && ($cfg['SQLQuery']['Edit'] == true) - && (!empty($edit_target)) - && ! defined('PMA_QUERY_TOO_BIG')) { + /** + * @todo what would be the best to do when someone hits Refresh: + * use the current LIMITs ? + */ - if ($cfg['EditInWindow'] == true) { - $onclick = 'window.parent.focus_querywindow(\'' . PMA_jsFormat($sql_query, false) . '\'); return false;'; - } else { - $onclick = ''; - } + if (isset($analyzed_display_query[0]['queryflags']['select_from']) + && isset($GLOBALS['sql_limit_to_append'])) { + $query_base = $analyzed_display_query[0]['section_before_limit'] . "\n" . $GLOBALS['sql_limit_to_append'] . $analyzed_display_query[0]['section_after_limit']; + // Need to reparse query + $parsed_sql = PMA_SQP_parse($query_base); + } - $edit_link = $edit_target - . $url_qpart - . '&sql_query=' . urlencode($sql_query) - . '&show_query=1#querybox'; - $edit_link = ' [' . PMA_linkOrButton($edit_link, $GLOBALS['strEdit'], array('onclick' => $onclick)) . ']'; - } else { - $edit_link = ''; - } - - // Want to have the query explained (Mike Beck 2002-05-22) - // but only explain a SELECT (that has not been explained) - /* SQL-Parser-Analyzer */ - if (isset($cfg['SQLQuery']['Explain']) - && $cfg['SQLQuery']['Explain'] == true - && ! defined('PMA_QUERY_TOO_BIG')) { - - // Detect if we are validating as well - // To preserve the validate uRL data - if (!empty($GLOBALS['validatequery'])) { - $explain_link_validate = '&validatequery=1'; - } else { - $explain_link_validate = ''; - } - - $explain_link = 'import.php' - . $url_qpart - . $explain_link_validate - . '&sql_query='; - - if (preg_match('@^SELECT[[:space:]]+@i', $sql_query)) { - $explain_link .= urlencode('EXPLAIN ' . $sql_query); - $message = $GLOBALS['strExplain']; - } elseif (preg_match('@^EXPLAIN[[:space:]]+SELECT[[:space:]]+@i', $sql_query)) { - $explain_link .= urlencode(substr($sql_query, 8)); - $message = $GLOBALS['strNoExplain']; - } else { - $explain_link = ''; - } - if (!empty($explain_link)) { - $explain_link = ' [' . PMA_linkOrButton($explain_link, $message) . ']'; - } - } else { - $explain_link = ''; - } //show explain - - // Also we would like to get the SQL formed in some nice - // php-code (Mike Beck 2002-05-22) - if (isset($cfg['SQLQuery']['ShowAsPHP']) - && $cfg['SQLQuery']['ShowAsPHP'] == true - && ! defined('PMA_QUERY_TOO_BIG')) { - $php_link = 'import.php' - . $url_qpart - . '&show_query=1' - . '&sql_query=' . urlencode($sql_query) - . '&show_as_php='; - - if (!empty($GLOBALS['show_as_php'])) { - $php_link .= '0'; - $message = $GLOBALS['strNoPhp']; - } else { - $php_link .= '1'; - $message = $GLOBALS['strPhp']; - } - $php_link = ' [' . PMA_linkOrButton($php_link, $message) . ']'; - - if (isset($GLOBALS['show_as_php'])) { - $runquery_link - = 'import.php' - . $url_qpart - . '&show_query=1' - . '&sql_query=' . urlencode($sql_query); - $php_link .= ' [' . PMA_linkOrButton($runquery_link, $GLOBALS['strRunQuery']) . ']'; - } - - } else { - $php_link = ''; - } //show as php - - // Refresh query - if (isset($cfg['SQLQuery']['Refresh']) - && $cfg['SQLQuery']['Refresh'] - && preg_match('@^(SELECT|SHOW)[[:space:]]+@i', $sql_query)) { - - $refresh_link = 'import.php' - . $url_qpart - . '&show_query=1' - . (isset($_GET['pos']) ? '&pos=' . $_GET['pos'] : '') - . '&sql_query=' . urlencode($sql_query); - $refresh_link = ' [' . PMA_linkOrButton($refresh_link, $GLOBALS['strRefresh']) . ']'; - } else { - $refresh_link = ''; - } //show as php - - if (isset($cfg['SQLValidator']['use']) - && $cfg['SQLValidator']['use'] == true - && isset($cfg['SQLQuery']['Validate']) - && $cfg['SQLQuery']['Validate'] == true) { - $validate_link = 'import.php' - . $url_qpart - . '&show_query=1' - . '&sql_query=' . urlencode($sql_query) - . '&validatequery='; - if (!empty($GLOBALS['validatequery'])) { - $validate_link .= '0'; - $validate_message = $GLOBALS['strNoValidateSQL'] ; - } else { - $validate_link .= '1'; - $validate_message = $GLOBALS['strValidateSQL'] ; - } - $validate_link = ' [' . PMA_linkOrButton($validate_link, $validate_message) . ']'; - } else { - $validate_link = ''; - } //validator - unset($sql_query); - - // Displays the message - echo '
' . "\n"; - echo ' ' . $GLOBALS['strSQLQuery'] . ':'; - echo '
'; - // when uploading a 700 Kio binary file into a LONGBLOB, - // I get a white page, strlen($query_base) is 2 x 700 Kio - // so put a hard limit here (let's say 1000) - if (defined('PMA_QUERY_TOO_BIG')) { - echo ' ' . substr($query_base,0,$max_characters) . '[...]'; - } else { - echo ' ' . $query_base; - } - - //Clean up the end of the PHP - if (!empty($GLOBALS['show_as_php'])) { - echo '\';'; - } - echo '
'; - echo '
' . "\n"; - - if (!empty($edit_target)) { - echo '
'; - echo $edit_link . $explain_link . $php_link . $refresh_link . $validate_link; - echo '
'; + if (!empty($GLOBALS['show_as_php'])) { + $query_base = '$sql = \'' . $query_base; + } elseif (!empty($GLOBALS['validatequery'])) { + $query_base = PMA_validateSQL($query_base); + } else { + if (isset($parsed_sql)) { + $query_base = PMA_formatSql($parsed_sql, $query_base); } } - echo '

' . "\n"; - } // end of the 'PMA_showMessage()' function + + // Prepares links that may be displayed to edit/explain the query + // (don't go to default pages, we must go to the page + // where the query box is available) + + $edit_target = isset($GLOBALS['db']) ? (isset($GLOBALS['table']) ? 'tbl_sql.php' : 'db_sql.php') : 'server_sql.php'; + + if (isset($cfg['SQLQuery']['Edit']) + && ($cfg['SQLQuery']['Edit'] == true) + && (!empty($edit_target)) + && ! defined('PMA_QUERY_TOO_BIG')) { + + if ($cfg['EditInWindow'] == true) { + $onclick = 'window.parent.focus_querywindow(\'' . PMA_jsFormat($sql_query, false) . '\'); return false;'; + } else { + $onclick = ''; + } + + $edit_link = $edit_target + . $url_qpart + . '&sql_query=' . urlencode($sql_query) + . '&show_query=1#querybox'; + $edit_link = ' [' . PMA_linkOrButton($edit_link, $GLOBALS['strEdit'], array('onclick' => $onclick)) . ']'; + } else { + $edit_link = ''; + } + + // Want to have the query explained (Mike Beck 2002-05-22) + // but only explain a SELECT (that has not been explained) + /* SQL-Parser-Analyzer */ + if (isset($cfg['SQLQuery']['Explain']) + && $cfg['SQLQuery']['Explain'] == true + && ! defined('PMA_QUERY_TOO_BIG')) { + + // Detect if we are validating as well + // To preserve the validate uRL data + if (!empty($GLOBALS['validatequery'])) { + $explain_link_validate = '&validatequery=1'; + } else { + $explain_link_validate = ''; + } + + $explain_link = 'import.php' + . $url_qpart + . $explain_link_validate + . '&sql_query='; + + if (preg_match('@^SELECT[[:space:]]+@i', $sql_query)) { + $explain_link .= urlencode('EXPLAIN ' . $sql_query); + $message = $GLOBALS['strExplain']; + } elseif (preg_match('@^EXPLAIN[[:space:]]+SELECT[[:space:]]+@i', $sql_query)) { + $explain_link .= urlencode(substr($sql_query, 8)); + $message = $GLOBALS['strNoExplain']; + } else { + $explain_link = ''; + } + if (!empty($explain_link)) { + $explain_link = ' [' . PMA_linkOrButton($explain_link, $message) . ']'; + } + } else { + $explain_link = ''; + } //show explain + + // Also we would like to get the SQL formed in some nice + // php-code (Mike Beck 2002-05-22) + if (isset($cfg['SQLQuery']['ShowAsPHP']) + && $cfg['SQLQuery']['ShowAsPHP'] == true + && ! defined('PMA_QUERY_TOO_BIG')) { + $php_link = 'import.php' + . $url_qpart + . '&show_query=1' + . '&sql_query=' . urlencode($sql_query) + . '&show_as_php='; + + if (!empty($GLOBALS['show_as_php'])) { + $php_link .= '0'; + $message = $GLOBALS['strNoPhp']; + } else { + $php_link .= '1'; + $message = $GLOBALS['strPhp']; + } + $php_link = ' [' . PMA_linkOrButton($php_link, $message) . ']'; + + if (isset($GLOBALS['show_as_php'])) { + $runquery_link + = 'import.php' + . $url_qpart + . '&show_query=1' + . '&sql_query=' . urlencode($sql_query); + $php_link .= ' [' . PMA_linkOrButton($runquery_link, $GLOBALS['strRunQuery']) . ']'; + } + + } else { + $php_link = ''; + } //show as php + + // Refresh query + if (isset($cfg['SQLQuery']['Refresh']) + && $cfg['SQLQuery']['Refresh'] + && preg_match('@^(SELECT|SHOW)[[:space:]]+@i', $sql_query)) { + + $refresh_link = 'import.php' + . $url_qpart + . '&show_query=1' + . (isset($_GET['pos']) ? '&pos=' . $_GET['pos'] : '') + . '&sql_query=' . urlencode($sql_query); + $refresh_link = ' [' . PMA_linkOrButton($refresh_link, $GLOBALS['strRefresh']) . ']'; + } else { + $refresh_link = ''; + } //show as php + + if (isset($cfg['SQLValidator']['use']) + && $cfg['SQLValidator']['use'] == true + && isset($cfg['SQLQuery']['Validate']) + && $cfg['SQLQuery']['Validate'] == true) { + $validate_link = 'import.php' + . $url_qpart + . '&show_query=1' + . '&sql_query=' . urlencode($sql_query) + . '&validatequery='; + if (!empty($GLOBALS['validatequery'])) { + $validate_link .= '0'; + $validate_message = $GLOBALS['strNoValidateSQL'] ; + } else { + $validate_link .= '1'; + $validate_message = $GLOBALS['strValidateSQL'] ; + } + $validate_link = ' [' . PMA_linkOrButton($validate_link, $validate_message) . ']'; + } else { + $validate_link = ''; + } //validator + unset($sql_query); + + // Displays the message + echo '
' . "\n"; + echo ' ' . $GLOBALS['strSQLQuery'] . ':'; + echo '
'; + // when uploading a 700 Kio binary file into a LONGBLOB, + // I get a white page, strlen($query_base) is 2 x 700 Kio + // so put a hard limit here (let's say 1000) + if (defined('PMA_QUERY_TOO_BIG')) { + echo ' ' . substr($query_base,0,$max_characters) . '[...]'; + } else { + echo ' ' . $query_base; + } + + //Clean up the end of the PHP + if (!empty($GLOBALS['show_as_php'])) { + echo '\';'; + } + echo '
'; + echo '
' . "\n"; + + if (!empty($edit_target)) { + echo '
'; + echo $edit_link . $explain_link . $php_link . $refresh_link . $validate_link; + echo '
'; + } + } + echo '

' . "\n"; +} // end of the 'PMA_showMessage()' function - /** - * Formats $value to byte view - * - * @param double the value to format - * @param integer the sensitiveness - * @param integer the number of decimals to retain - * - * @return array the formatted value and its unit - * - * @access public - * - * @author staybyte - * @version 1.2 - 18 July 2002 - */ - function PMA_formatByteDown($value, $limes = 6, $comma = 0) - { - $dh = PMA_pow(10, $comma); - $li = PMA_pow(10, $limes); - $return_value = $value; - $unit = $GLOBALS['byteUnits'][0]; +/** + * Formats $value to byte view + * + * @param double the value to format + * @param integer the sensitiveness + * @param integer the number of decimals to retain + * + * @return array the formatted value and its unit + * + * @access public + * + * @author staybyte + * @version 1.2 - 18 July 2002 + */ +function PMA_formatByteDown($value, $limes = 6, $comma = 0) +{ + $dh = PMA_pow(10, $comma); + $li = PMA_pow(10, $limes); + $return_value = $value; + $unit = $GLOBALS['byteUnits'][0]; - for ($d = 6, $ex = 15; $d >= 1; $d--, $ex-=3) { - if (isset($GLOBALS['byteUnits'][$d]) && $value >= $li * PMA_pow(10, $ex)) { - // use 1024.0 to avoid integer overflow on 64-bit machines - $value = round($value / (PMA_pow(1024, $d) / $dh)) /$dh; - $unit = $GLOBALS['byteUnits'][$d]; + for ($d = 6, $ex = 15; $d >= 1; $d--, $ex-=3) { + if (isset($GLOBALS['byteUnits'][$d]) && $value >= $li * PMA_pow(10, $ex)) { + // use 1024.0 to avoid integer overflow on 64-bit machines + $value = round($value / (PMA_pow(1024, $d) / $dh)) /$dh; + $unit = $GLOBALS['byteUnits'][$d]; + break 1; + } // end if + } // end for + + if ($unit != $GLOBALS['byteUnits'][0]) { + $return_value = number_format($value, $comma, $GLOBALS['number_decimal_separator'], $GLOBALS['number_thousands_separator']); + } else { + $return_value = number_format($value, 0, $GLOBALS['number_decimal_separator'], $GLOBALS['number_thousands_separator']); + } + + return array($return_value, $unit); +} // end of the 'PMA_formatByteDown' function + +/** + * Formats $value to the given length and appends SI prefixes + * $comma is not substracted from the length + * with a $length of 0 no truncation occurs, number is only formated + * to the current locale + * + * examples: + * + * echo PMA_formatNumber(123456789, 6); // 123,457 k + * echo PMA_formatNumber(-123456789, 4, 2); // -123.46 M + * echo PMA_formatNumber(-0.003, 6); // -3 m + * echo PMA_formatNumber(0.003, 3, 3); // 0.003 + * echo PMA_formatNumber(0.00003, 3, 2); // 0.03 m + * echo PMA_formatNumber(0, 6); // 0 + * + * + * @param double $value the value to format + * @param integer $length the max length + * @param integer $comma the number of decimals to retain + * @param boolean $only_down do not reformat numbers below 1 + * + * @return string the formatted value and its unit + * + * @access public + * + * @author staybyte, sebastian mendel + * @version 1.1.0 - 2005-10-27 + */ +function PMA_formatNumber($value, $length = 3, $comma = 0, $only_down = false) +{ + if ($length === 0) { + return number_format($value, + $comma, + $GLOBALS['number_decimal_separator'], + $GLOBALS['number_thousands_separator']); + } + + // this units needs no translation, ISO + $units = array( + -8 => 'y', + -7 => 'z', + -6 => 'a', + -5 => 'f', + -4 => 'p', + -3 => 'n', + -2 => 'µ', + -1 => 'm', + 0 => ' ', + 1 => 'k', + 2 => 'M', + 3 => 'G', + 4 => 'T', + 5 => 'P', + 6 => 'E', + 7 => 'Z', + 8 => 'Y' + ); + + // we need at least 3 digits to be displayed + if (3 > $length + $comma) { + $length = 3 - $comma; + } + + // check for negativ value to retain sign + if ($value < 0) { + $sign = '-'; + $value = abs($value); + } else { + $sign = ''; + } + + $dh = PMA_pow(10, $comma); + $li = PMA_pow(10, $length); + $unit = $units[0]; + + if ($value >= 1) { + for ($d = 8; $d >= 0; $d--) { + if (isset($units[$d]) && $value >= $li * PMA_pow(1000, $d-1)) { + $value = round($value / (PMA_pow(1000, $d) / $dh)) /$dh; + $unit = $units[$d]; break 1; } // end if } // end for + } elseif (!$only_down && (float) $value !== 0.0) { + for ($d = -8; $d <= 8; $d++) { + if (isset($units[$d]) && $value <= $li * PMA_pow(1000, $d-1)) { + $value = round($value / (PMA_pow(1000, $d) / $dh)) /$dh; + $unit = $units[$d]; + break 1; + } // end if + } // end for + } // end if ($value >= 1) elseif (!$only_down && (float) $value !== 0.0) - if ($unit != $GLOBALS['byteUnits'][0]) { - $return_value = number_format($value, $comma, $GLOBALS['number_decimal_separator'], $GLOBALS['number_thousands_separator']); - } else { - $return_value = number_format($value, 0, $GLOBALS['number_decimal_separator'], $GLOBALS['number_thousands_separator']); - } + $value = number_format($value, + $comma, + $GLOBALS['number_decimal_separator'], + $GLOBALS['number_thousands_separator']); - return array($return_value, $unit); - } // end of the 'PMA_formatByteDown' function + return $sign . $value . ' ' . $unit; +} // end of the 'PMA_formatNumber' function - /** - * Formats $value to the given length and appends SI prefixes - * $comma is not substracted from the length - * with a $length of 0 no truncation occurs, number is only formated - * to the current locale - * - * examples: - * - * echo PMA_formatNumber(123456789, 6); // 123,457 k - * echo PMA_formatNumber(-123456789, 4, 2); // -123.46 M - * echo PMA_formatNumber(-0.003, 6); // -3 m - * echo PMA_formatNumber(0.003, 3, 3); // 0.003 - * echo PMA_formatNumber(0.00003, 3, 2); // 0.03 m - * echo PMA_formatNumber(0, 6); // 0 - * - * - * @param double $value the value to format - * @param integer $length the max length - * @param integer $comma the number of decimals to retain - * @param boolean $only_down do not reformat numbers below 1 - * - * @return string the formatted value and its unit - * - * @access public - * - * @author staybyte, sebastian mendel - * @version 1.1.0 - 2005-10-27 - */ - function PMA_formatNumber($value, $length = 3, $comma = 0, $only_down = false) - { - if ($length === 0) { - return number_format($value, - $comma, - $GLOBALS['number_decimal_separator'], - $GLOBALS['number_thousands_separator']); - } +/** + * Extracts ENUM / SET options from a type definition string + * + * @param string The column type definition + * + * @return array The options or + * boolean false in case of an error. + * + * @author rabus + */ +function PMA_getEnumSetOptions($type_def) +{ + $open = strpos($type_def, '('); + $close = strrpos($type_def, ')'); + if (!$open || !$close) { + return false; + } + $options = substr($type_def, $open + 2, $close - $open - 3); + $options = explode('\',\'', $options); + return $options; +} // end of the 'PMA_getEnumSetOptions' function - // this units needs no translation, ISO - $units = array( - -8 => 'y', - -7 => 'z', - -6 => 'a', - -5 => 'f', - -4 => 'p', - -3 => 'n', - -2 => 'µ', - -1 => 'm', - 0 => ' ', - 1 => 'k', - 2 => 'M', - 3 => 'G', - 4 => 'T', - 5 => 'P', - 6 => 'E', - 7 => 'Z', - 8 => 'Y' - ); +/** + * Writes localised date + * + * @param string the current timestamp + * + * @return string the formatted date + * + * @access public + */ +function PMA_localisedDate($timestamp = -1, $format = '') +{ + global $datefmt, $month, $day_of_week; - // we need at least 3 digits to be displayed - if (3 > $length + $comma) { - $length = 3 - $comma; - } - - // check for negativ value to retain sign - if ($value < 0) { - $sign = '-'; - $value = abs($value); - } else { - $sign = ''; - } - - $dh = PMA_pow(10, $comma); - $li = PMA_pow(10, $length); - $unit = $units[0]; - - if ($value >= 1) { - for ($d = 8; $d >= 0; $d--) { - if (isset($units[$d]) && $value >= $li * PMA_pow(1000, $d-1)) { - $value = round($value / (PMA_pow(1000, $d) / $dh)) /$dh; - $unit = $units[$d]; - break 1; - } // end if - } // end for - } elseif (!$only_down && (float) $value !== 0.0) { - for ($d = -8; $d <= 8; $d++) { - if (isset($units[$d]) && $value <= $li * PMA_pow(1000, $d-1)) { - $value = round($value / (PMA_pow(1000, $d) / $dh)) /$dh; - $unit = $units[$d]; - break 1; - } // end if - } // end for - } // end if ($value >= 1) elseif (!$only_down && (float) $value !== 0.0) - - $value = number_format($value, - $comma, - $GLOBALS['number_decimal_separator'], - $GLOBALS['number_thousands_separator']); - - return $sign . $value . ' ' . $unit; - } // end of the 'PMA_formatNumber' function - - /** - * Extracts ENUM / SET options from a type definition string - * - * @param string The column type definition - * - * @return array The options or - * boolean false in case of an error. - * - * @author rabus - */ - function PMA_getEnumSetOptions($type_def) - { - $open = strpos($type_def, '('); - $close = strrpos($type_def, ')'); - if (!$open || !$close) { - return false; - } - $options = substr($type_def, $open + 2, $close - $open - 3); - $options = explode('\',\'', $options); - return $options; - } // end of the 'PMA_getEnumSetOptions' function - - /** - * Writes localised date - * - * @param string the current timestamp - * - * @return string the formatted date - * - * @access public - */ - function PMA_localisedDate($timestamp = -1, $format = '') - { - global $datefmt, $month, $day_of_week; - - if ($format == '') { - $format = $datefmt; - } - - if ($timestamp == -1) { - $timestamp = time(); - } - - $date = preg_replace('@%[aA]@', $day_of_week[(int)strftime('%w', $timestamp)], $format); - $date = preg_replace('@%[bB]@', $month[(int)strftime('%m', $timestamp)-1], $date); - - return strftime($date, $timestamp); - } // end of the 'PMA_localisedDate()' function - - - /** - * returns a tab for tabbed navigation. - * If the variables $link and $args ar left empty, an inactive tab is created - * - * @uses $GLOBALS['strEmpty'] - * @uses $GLOBALS['strDrop'] - * @uses $GLOBALS['active_page'] - * @uses $GLOBALS['url_query'] - * @uses $cfg['MainPageIconic'] - * @uses $GLOBALS['pmaThemeImage'] - * @uses PMA_generate_common_url() - * @uses E_USER_NOTICE - * @uses htmlentities() - * @uses urlencode() - * @uses sprintf() - * @uses trigger_error() - * @uses array_merge() - * @uses basename() - * @param array $tab array with all options - * @return string html code for one tab, a link if valid otherwise a span - * @access public - */ - function PMA_getTab($tab) - { - // default values - $defaults = array( - 'text' => '', - 'class' => '', - 'active' => false, - 'link' => '', - 'sep' => '?', - 'attr' => '', - 'args' => '', - 'warning' => '', - ); - - $tab = array_merge($defaults, $tab); - - // determine additionnal style-class - if (empty($tab['class'])) { - if ($tab['text'] == $GLOBALS['strEmpty'] - || $tab['text'] == $GLOBALS['strDrop']) { - $tab['class'] = 'caution'; - } elseif (!empty($tab['active']) - || (isset($GLOBALS['active_page']) - && $GLOBALS['active_page'] == $tab['link']) - || basename(PMA_getenv('PHP_SELF')) == $tab['link']) - { - $tab['class'] = 'active'; - } - } - - if (!empty($tab['warning'])) { - $tab['class'] .= ' warning'; - $tab['attr'] .= ' title="' . htmlspecialchars($tab['warning']) . '"'; - } - - // build the link - if (!empty($tab['link'])) { - $tab['link'] = htmlentities($tab['link']); - $tab['link'] = $tab['link'] . $tab['sep'] - .(empty($GLOBALS['url_query']) ? - PMA_generate_common_url() : $GLOBALS['url_query']); - if (!empty($tab['args'])) { - foreach ($tab['args'] as $param => $value) { - $tab['link'] .= '&' . urlencode($param) . '=' - . urlencode($value); - } - } - } - - // display icon, even if iconic is disabled but the link-text is missing - if (($GLOBALS['cfg']['MainPageIconic'] || empty($tab['text'])) - && isset($tab['icon'])) { - $image = '%2$s%2$s'; - $tab['text'] = sprintf($image, htmlentities($tab['icon']), $tab['text']); - } - // check to not display an empty link-text - elseif (empty($tab['text'])) { - $tab['text'] = '?'; - trigger_error('empty linktext in function ' . __FUNCTION__ . '()', - E_USER_NOTICE); - } - - if (!empty($tab['link'])) { - $out = '' - . $tab['text'] . ''; - } else { - $out = '' - . $tab['text'] . ''; - } - - return $out; - } // end of the 'PMA_getTab()' function - - /** - * returns html-code for a tab navigation - * - * @uses PMA_getTab() - * @uses htmlentities() - * @param array $tabs one element per tab - * @param string $tag_id id used for the html-tag - * @return string html-code for tab-navigation - */ - function PMA_getTabs($tabs, $tag_id = 'topmenu') - { - $tab_navigation = - '
' . "\n" - .'
    ' . "\n"; - - foreach ($tabs as $tab) { - $tab_navigation .= '
  • ' . PMA_getTab($tab) . '
  • ' . "\n"; - } - - $tab_navigation .= - '
' . "\n" - .'
' - .'
' . "\n"; - - return $tab_navigation; + if ($format == '') { + $format = $datefmt; } + if ($timestamp == -1) { + $timestamp = time(); + } - /** - * Displays a link, or a button if the link's URL is too large, to - * accommodate some browsers' limitations - * - * @param string the URL - * @param string the link message - * @param mixed $tag_params string: js confirmation - * array: additional tag params (f.e. style="") - * @param boolean $new_form we set this to false when we are already in - * a form, to avoid generating nested forms - * - * @return string the results to be echoed or saved in an array - */ - function PMA_linkOrButton($url, $message, $tag_params = array(), - $new_form = true, $strip_img = false, $target = '') - { - if (! is_array($tag_params)) { - $tmp = $tag_params; - $tag_params = array(); - if (!empty($tmp)) { - $tag_params['onclick'] = 'return confirmLink(this, \'' . $tmp . '\')'; + $date = preg_replace('@%[aA]@', $day_of_week[(int)strftime('%w', $timestamp)], $format); + $date = preg_replace('@%[bB]@', $month[(int)strftime('%m', $timestamp)-1], $date); + + return strftime($date, $timestamp); +} // end of the 'PMA_localisedDate()' function + + +/** + * returns a tab for tabbed navigation. + * If the variables $link and $args ar left empty, an inactive tab is created + * + * @uses $GLOBALS['strEmpty'] + * @uses $GLOBALS['strDrop'] + * @uses $GLOBALS['active_page'] + * @uses $GLOBALS['url_query'] + * @uses $cfg['MainPageIconic'] + * @uses $GLOBALS['pmaThemeImage'] + * @uses PMA_generate_common_url() + * @uses E_USER_NOTICE + * @uses htmlentities() + * @uses urlencode() + * @uses sprintf() + * @uses trigger_error() + * @uses array_merge() + * @uses basename() + * @param array $tab array with all options + * @return string html code for one tab, a link if valid otherwise a span + * @access public + */ +function PMA_getTab($tab) +{ + // default values + $defaults = array( + 'text' => '', + 'class' => '', + 'active' => false, + 'link' => '', + 'sep' => '?', + 'attr' => '', + 'args' => '', + 'warning' => '', + ); + + $tab = array_merge($defaults, $tab); + + // determine additionnal style-class + if (empty($tab['class'])) { + if ($tab['text'] == $GLOBALS['strEmpty'] + || $tab['text'] == $GLOBALS['strDrop']) { + $tab['class'] = 'caution'; + } elseif (!empty($tab['active']) + || (isset($GLOBALS['active_page']) + && $GLOBALS['active_page'] == $tab['link']) + || basename(PMA_getenv('PHP_SELF')) == $tab['link']) + { + $tab['class'] = 'active'; + } + } + + if (!empty($tab['warning'])) { + $tab['class'] .= ' warning'; + $tab['attr'] .= ' title="' . htmlspecialchars($tab['warning']) . '"'; + } + + // build the link + if (!empty($tab['link'])) { + $tab['link'] = htmlentities($tab['link']); + $tab['link'] = $tab['link'] . $tab['sep'] + .(empty($GLOBALS['url_query']) ? + PMA_generate_common_url() : $GLOBALS['url_query']); + if (!empty($tab['args'])) { + foreach ($tab['args'] as $param => $value) { + $tab['link'] .= '&' . urlencode($param) . '=' + . urlencode($value); } - unset($tmp); } - if (! empty($target)) { - $tag_params['target'] = htmlentities($target); + } + + // display icon, even if iconic is disabled but the link-text is missing + if (($GLOBALS['cfg']['MainPageIconic'] || empty($tab['text'])) + && isset($tab['icon'])) { + $image = '%2$s%2$s'; + $tab['text'] = sprintf($image, htmlentities($tab['icon']), $tab['text']); + } + // check to not display an empty link-text + elseif (empty($tab['text'])) { + $tab['text'] = '?'; + trigger_error('empty linktext in function ' . __FUNCTION__ . '()', + E_USER_NOTICE); + } + + if (!empty($tab['link'])) { + $out = '' + . $tab['text'] . ''; + } else { + $out = '' + . $tab['text'] . ''; + } + + return $out; +} // end of the 'PMA_getTab()' function + +/** + * returns html-code for a tab navigation + * + * @uses PMA_getTab() + * @uses htmlentities() + * @param array $tabs one element per tab + * @param string $tag_id id used for the html-tag + * @return string html-code for tab-navigation + */ +function PMA_getTabs($tabs, $tag_id = 'topmenu') +{ + $tab_navigation = + '
' . "\n" + .'
    ' . "\n"; + + foreach ($tabs as $tab) { + $tab_navigation .= '
  • ' . PMA_getTab($tab) . '
  • ' . "\n"; + } + + $tab_navigation .= + '
' . "\n" + .'
' + .'
' . "\n"; + + return $tab_navigation; +} + + +/** + * Displays a link, or a button if the link's URL is too large, to + * accommodate some browsers' limitations + * + * @param string the URL + * @param string the link message + * @param mixed $tag_params string: js confirmation + * array: additional tag params (f.e. style="") + * @param boolean $new_form we set this to false when we are already in + * a form, to avoid generating nested forms + * + * @return string the results to be echoed or saved in an array + */ +function PMA_linkOrButton($url, $message, $tag_params = array(), + $new_form = true, $strip_img = false, $target = '') +{ + if (! is_array($tag_params)) { + $tmp = $tag_params; + $tag_params = array(); + if (!empty($tmp)) { + $tag_params['onclick'] = 'return confirmLink(this, \'' . $tmp . '\')'; + } + unset($tmp); + } + if (! empty($target)) { + $tag_params['target'] = htmlentities($target); + } + + $tag_params_strings = array(); + foreach ($tag_params as $par_name => $par_value) { + // htmlspecialchars() only on non javascript + $par_value = substr($par_name, 0, 2) == 'on' + ? $par_value + : htmlspecialchars($par_value); + $tag_params_strings[] = $par_name . '="' . $par_value . '"'; + } + + // previously the limit was set to 2047, it seems 1000 is better + if (strlen($url) <= 1000) { + // no whitespace within an else Safari will make it part of the link + $ret = "\n" . '' + . $message . '' . "\n"; + } else { + // no spaces (linebreaks) at all + // or after the hidden fields + // IE will display them all + + // add class=link to submit button + if (empty($tag_params['class'])) { + $tag_params['class'] = 'link'; } - $tag_params_strings = array(); - foreach ($tag_params as $par_name => $par_value) { - // htmlspecialchars() only on non javascript - $par_value = substr($par_name, 0, 2) == 'on' - ? $par_value - : htmlspecialchars($par_value); - $tag_params_strings[] = $par_name . '="' . $par_value . '"'; + // decode encoded url separators + $separator = PMA_get_arg_separator(); + // on most places separator is still hard coded ... + if ($separator !== '&') { + // ... so always replace & with $separator + $url = str_replace(htmlentities('&'), $separator, $url); + $url = str_replace('&', $separator, $url); } + $url = str_replace(htmlentities($separator), $separator, $url); + // end decode - // previously the limit was set to 2047, it seems 1000 is better - if (strlen($url) <= 1000) { - // no whitespace within an else Safari will make it part of the link - $ret = "\n" . '' - . $message . '' . "\n"; + $url_parts = parse_url($url); + $query_parts = explode($separator, $url_parts['query']); + if ($new_form) { + $ret = '