398b7a9f4a
This is a hook-in to the 'delete multiple records' and basically just wraps all data in some kind of Ueber-Array. It should be compatible with single records editing. I tried various combinations already and it seems to work. But this can heavily break stuff, so expect this to be EXPERIMENTAL! We should only release RC1 after this has been thoroughly tested (will do so in the next days by myself). What maybe needs fixing is the way of evaluating $goto/ $err_url and similars. As I am not much into that redirection stuff, maybe one can see if I did something wrong in the area.
252 lines
9.6 KiB
PHP
252 lines
9.6 KiB
PHP
<?php
|
|
/* $Id$ */
|
|
// vim: expandtab sw=4 ts=4 sts=4:
|
|
|
|
|
|
/**
|
|
* Gets some core libraries
|
|
*/
|
|
require_once('./libraries/grab_globals.lib.php');
|
|
require_once('./libraries/common.lib.php');
|
|
|
|
// Check parameters
|
|
PMA_checkParameters(array('db','table','goto'));
|
|
|
|
/**
|
|
* Initializes some variables
|
|
*/
|
|
// Defines the url to return in case of success of the query
|
|
if (isset($sql_query)) {
|
|
$sql_query = urldecode($sql_query);
|
|
}
|
|
if (!isset($dontlimitchars)) {
|
|
$dontlimitchars = 0;
|
|
}
|
|
$is_gotofile = FALSE;
|
|
if (isset($after_insert) && $after_insert == 'new_insert') {
|
|
$goto = 'tbl_change.php?'
|
|
. PMA_generate_common_url($db, $table, '&')
|
|
. '&goto=' . urlencode($goto)
|
|
. '&pos=' . $pos
|
|
. '&session_max_rows=' . $session_max_rows
|
|
. '&disp_direction=' . $disp_direction
|
|
. '&repeat_cells=' . $repeat_cells
|
|
. '&dontlimitchars=' . $dontlimitchars
|
|
. (empty($sql_query) ? '' : '&sql_query=' . urlencode($sql_query));
|
|
} else if ($goto == 'sql.php') {
|
|
$goto = 'sql.php?'
|
|
. PMA_generate_common_url($db, $table, '&')
|
|
. '&pos=' . $pos
|
|
. '&session_max_rows=' . $session_max_rows
|
|
. '&disp_direction=' . $disp_direction
|
|
. '&repeat_cells=' . $repeat_cells
|
|
. '&dontlimitchars=' . $dontlimitchars
|
|
. '&sql_query=' . urlencode($sql_query);
|
|
} else if (!empty($goto)) {
|
|
// Security checkings
|
|
$is_gotofile = preg_replace('@^([^?]+).*$@', '\\1', $goto);
|
|
if (!@file_exists('./' . $is_gotofile)) {
|
|
$goto = (empty($table)) ? 'db_details.php' : 'tbl_properties.php';
|
|
$is_gotofile = TRUE;
|
|
} else {
|
|
$is_gotofile = ($is_gotofile == $goto);
|
|
}
|
|
}
|
|
|
|
// Defines the url to return in case of failure of the query
|
|
if (isset($err_url)) {
|
|
$err_url = urldecode($err_url);
|
|
} else {
|
|
$err_url = str_replace('&', '&', $goto)
|
|
. (empty($primary_key) ? '' : '&primary_key=' . (is_array($primary_key) ? $primary_key[0] : $primary_key));
|
|
}
|
|
|
|
// Resets tables defined in the configuration file
|
|
if (isset($funcs)) {
|
|
reset($funcs);
|
|
}
|
|
|
|
// Misc
|
|
$seen_binary = FALSE;
|
|
|
|
/**
|
|
* Prepares the update of a row
|
|
*/
|
|
if (isset($primary_key) && ($submit_type != $strInsertAsNewRow)) {
|
|
$loop_array = (is_array($primary_key) ? $primary_key : array(0 => $primary_key));
|
|
PMA_mysql_select_db($db);
|
|
$query = array();
|
|
$message = '';
|
|
|
|
foreach($loop_array AS $primary_key_index => $enc_primary_key) {
|
|
// Restore the "primary key" to a convenient format
|
|
$primary_key = urldecode($enc_primary_key);
|
|
|
|
// Defines the SET part of the sql query
|
|
$valuelist = '';
|
|
|
|
// Map multi-edit keys to single-level arrays, dependent on how we got the fields
|
|
$me_fields = (isset($fields['multi_edit']) ? $fields['multi_edit'][$enc_primary_key] : $fields);
|
|
$me_fields_prev = (isset($fields_prev['multi_edit']) ? $fields_prev['multi_edit'][$enc_primary_key] : $fields_prev);
|
|
$me_funcs = (isset($funcs['multi_edit']) ? $funcs['multi_edit'][$enc_primary_key] : $funcs);
|
|
$me_fields_type = (isset($fields_type['multi_edit']) ? $fields_type['multi_edit'][$enc_primary_key] : $fields_type);
|
|
$me_fields_null = (isset($fields_null['multi_edit']) ? $fields_null['multi_edit'][$enc_primary_key] : $fields_null);
|
|
|
|
foreach($me_fields AS $key => $val) {
|
|
$encoded_key = $key;
|
|
$key = urldecode($key);
|
|
|
|
require('./tbl_replace_fields.php');
|
|
|
|
// No change for this column and no MySQL function is used -> next column
|
|
if (empty($me_funcs[$encoded_key])
|
|
&& isset($me_fields_prev) && isset($me_fields_prev[$encoded_key])
|
|
&& ("'" . PMA_sqlAddslashes(urldecode($me_fields_prev[$encoded_key])) . "'" == $val)) {
|
|
continue;
|
|
}
|
|
else if (!empty($val)) {
|
|
if (empty($me_funcs[$encoded_key])) {
|
|
$valuelist .= PMA_backquote($key) . ' = ' . $val . ', ';
|
|
} else if ($val == '\'\''
|
|
&& (preg_match('@^(NOW|CURDATE|CURTIME|UNIX_TIMESTAMP|RAND|USER|LAST_INSERT_ID)$@', $me_funcs[$encoded_key]))) {
|
|
$valuelist .= PMA_backquote($key) . ' = ' . $me_funcs[$encoded_key] . '(), ';
|
|
} else {
|
|
$valuelist .= PMA_backquote($key) . ' = ' . $me_funcs[$encoded_key] . "($val), ";
|
|
}
|
|
}
|
|
} // end while
|
|
|
|
// Builds the sql update query
|
|
$valuelist = preg_replace('@, $@', '', $valuelist);
|
|
if (!empty($valuelist)) {
|
|
$query[] = 'UPDATE ' . PMA_backquote($table) . ' SET ' . $valuelist . ' WHERE' . $primary_key
|
|
. ' LIMIT 1';
|
|
$message = $strAffectedRows . ' <br />';
|
|
}
|
|
}
|
|
|
|
if (empty($valuelist)) {
|
|
// No change -> move back to the calling script
|
|
$message = $strNoModification;
|
|
if ($is_gotofile) {
|
|
$js_to_run = 'functions.js';
|
|
require_once('./header.inc.php');
|
|
require('./' . preg_replace('@\.\.*@', '.', $goto));
|
|
} else {
|
|
header('Location: ' . $cfg['PmaAbsoluteUri'] . $goto . '&disp_message=' . urlencode($message) . '&disp_query=');
|
|
}
|
|
exit();
|
|
}
|
|
} // end row update
|
|
|
|
|
|
/**
|
|
* Prepares the insert of a row
|
|
*/
|
|
else {
|
|
$loop_array = (isset($primary_key) && is_array($primary_key) ? $primary_key : array(0 => (isset($primary_key) ? $primary_key : null)));
|
|
$query = array();
|
|
$message = '';
|
|
PMA_mysql_select_db($db);
|
|
|
|
foreach($loop_array AS $primary_key_index => $enc_primary_key) {
|
|
$fieldlist = '';
|
|
$valuelist = '';
|
|
|
|
$me_fields = (isset($fields['multi_edit']) ? $fields['multi_edit'][$enc_primary_key] : $fields);
|
|
$me_fields_prev = (isset($fields_prev['multi_edit']) ? $fields_prev['multi_edit'][$enc_primary_key] : $fields_prev);
|
|
$me_funcs = (isset($funcs['multi_edit']) ? $funcs['multi_edit'][$enc_primary_key] : $funcs);
|
|
$me_fields_type = (isset($fields_type['multi_edit']) ? $fields_type['multi_edit'][$enc_primary_key] : $fields_type);
|
|
$me_fields_null = (isset($fields_null['multi_edit']) ? $fields_null['multi_edit'][$enc_primary_key] : $fields_null);
|
|
|
|
// garvin: Get, if sent, any protected fields to insert them here:
|
|
if (isset($me_fields_type) && is_array($me_fields_type) && isset($enc_primary_key)) {
|
|
$prot_local_query = 'SELECT * FROM ' . PMA_backquote($table) . ' WHERE ' . urldecode($enc_primary_key);
|
|
$prot_result = PMA_mysql_query($prot_local_query) or PMA_mysqlDie('', $prot_local_query, '', $err_url);
|
|
$prot_row = PMA_mysql_fetch_array($prot_result);
|
|
}
|
|
|
|
foreach($me_fields AS $key => $val) {
|
|
$encoded_key = $key;
|
|
$key = urldecode($key);
|
|
$fieldlist .= PMA_backquote($key) . ', ';
|
|
|
|
require('./tbl_replace_fields.php');
|
|
|
|
if (empty($me_funcs[$encoded_key])) {
|
|
$valuelist .= $val . ', ';
|
|
} else if (($val == '\'\''
|
|
&& preg_match('@^(UNIX_TIMESTAMP|RAND|LAST_INSERT_ID)$@', $me_funcs[$encoded_key]))
|
|
|| preg_match('@^(NOW|CURDATE|CURTIME|USER)$@', $me_funcs[$encoded_key])) {
|
|
$valuelist .= $me_funcs[$encoded_key] . '(), ';
|
|
} else {
|
|
$valuelist .= $me_funcs[$encoded_key] . '(' . $val . '), ';
|
|
}
|
|
} // end while
|
|
|
|
// Builds the sql insert query
|
|
$fieldlist = preg_replace('@, $@', '', $fieldlist);
|
|
$valuelist = preg_replace('@, $@', '', $valuelist);
|
|
$query[] = 'INSERT INTO ' . PMA_backquote($table) . ' (' . $fieldlist . ') VALUES (' . $valuelist . ')';
|
|
$message = $strInsertedRows . ' ';
|
|
}
|
|
} // end row insertion
|
|
|
|
|
|
/**
|
|
* Executes the sql query and get the result, then move back to the calling
|
|
* page
|
|
*/
|
|
$sql_query = implode(';', $query) . ';';
|
|
$total_affected_rows = 0;
|
|
|
|
foreach($query AS $query_index => $single_query) {
|
|
$result = PMA_mysql_query($single_query);
|
|
if (!$result) {
|
|
if ($cfg['IgnoreMultiSubmitErrors']) {
|
|
$message .= PMA_mysql_error();
|
|
} else {
|
|
$error = PMA_mysql_error();
|
|
require_once('./header.inc.php');
|
|
PMA_mysqlDie($error, '', '', $err_url);
|
|
}
|
|
} else {
|
|
if (@mysql_affected_rows()) {
|
|
$total_affected_rows += @mysql_affected_rows;
|
|
}
|
|
|
|
$insert_id = mysql_insert_id();
|
|
if ($insert_id != 0) {
|
|
$message .= '<br />'.$strInsertedRowId . ' ' . $insert_id;
|
|
}
|
|
} // end if
|
|
}
|
|
|
|
if ($total_affected_rows != 0) {
|
|
$message .= '<br />' . $total_affected_rows;
|
|
} else {
|
|
$message .= $strModifications;
|
|
}
|
|
|
|
if ($is_gotofile) {
|
|
if ($goto == 'db_details.php' && !empty($table)) {
|
|
unset($table);
|
|
}
|
|
$js_to_run = 'functions.js';
|
|
$active_page = $goto;
|
|
require_once('./header.inc.php');
|
|
require('./' . preg_replace('@\.\.*@', '.', $goto));
|
|
} else {
|
|
// I don't understand this one:
|
|
//$add_query = (strpos(' ' . $goto, 'tbl_change') ? '&disp_query=' . urlencode($sql_query) : '');
|
|
|
|
// if we have seen binary,
|
|
// we do not append the query to the Location so it won't be displayed
|
|
// on the resulting page
|
|
// Nijel: we also need to limit size of url...
|
|
$add_query = (!$seen_binary && strlen($sql_query) < 1024 ? '&disp_query=' . urlencode($sql_query) : '');
|
|
header('Location: ' . $cfg['PmaAbsoluteUri'] . $goto . '&disp_message=' . urlencode($message) . $add_query);
|
|
}
|
|
exit();
|
|
?>
|