372 lines
13 KiB
PHP
372 lines
13 KiB
PHP
<?php
|
|
/* vim: expandtab sw=4 ts=4 sts=4: */
|
|
/**
|
|
* searchs the entire database
|
|
*
|
|
* @todo make use of UNION when searching multiple tables
|
|
* @todo display executed query, optional?
|
|
* @uses $cfg['UseDbSearch']
|
|
* @uses $GLOBALS['db']
|
|
* @uses $GLOBALS['strAccessDenied']
|
|
* @uses $GLOBALS['strSearchOption1']
|
|
* @uses $GLOBALS['strSearchOption2']
|
|
* @uses $GLOBALS['strSearchOption3']
|
|
* @uses $GLOBALS['strSearchOption4']
|
|
* @uses $GLOBALS['strSearchResultsFor']
|
|
* @uses $GLOBALS['strNumSearchResultsInTable']
|
|
* @uses $GLOBALS['strBrowse']
|
|
* @uses $GLOBALS['strDelete']
|
|
* @uses $GLOBALS['strNumSearchResultsTotal']
|
|
* @uses $GLOBALS['strSearchFormTitle']
|
|
* @uses $GLOBALS['strSearchNeedle']
|
|
* @uses $GLOBALS['strSearchType']
|
|
* @uses $GLOBALS['strSplitWordsWithSpace']
|
|
* @uses $GLOBALS['strSearchInTables']
|
|
* @uses $GLOBALS['strUnselectAll']
|
|
* @uses $GLOBALS['strSelectAll']
|
|
* @uses PMA_DBI_get_tables()
|
|
* @uses PMA_sqlAddslashes()
|
|
* @uses PMA_getSearchSqls()
|
|
* @uses PMA_DBI_fetch_value()
|
|
* @uses PMA_linkOrButton()
|
|
* @uses PMA_generate_common_url()
|
|
* @uses PMA_generate_common_hidden_inputs()
|
|
* @uses PMA_showMySQLDocu()
|
|
* @uses $_REQUEST['search_str']
|
|
* @uses $_REQUEST['submit_search']
|
|
* @uses $_REQUEST['search_option']
|
|
* @uses $_REQUEST['table_select']
|
|
* @uses $_REQUEST['unselectall']
|
|
* @uses $_REQUEST['selectall']
|
|
* @uses is_string()
|
|
* @uses htmlspecialchars()
|
|
* @uses array_key_exists()
|
|
* @uses is_array()
|
|
* @uses array_intersect()
|
|
* @uses sprintf()
|
|
* @uses in_array()
|
|
* @version $Id$
|
|
* @author Thomas Chaumeny <chaume92 at aol.com>
|
|
*/
|
|
|
|
/**
|
|
*
|
|
*/
|
|
require_once './libraries/common.lib.php';
|
|
|
|
/**
|
|
* Gets some core libraries and send headers
|
|
*/
|
|
require './libraries/db_common.inc.php';
|
|
|
|
/**
|
|
* init
|
|
*/
|
|
// If config variable $GLOBALS['cfg']['Usedbsearch'] is on false : exit.
|
|
if (! $GLOBALS['cfg']['UseDbSearch']) {
|
|
PMA_mysqlDie($GLOBALS['strAccessDenied'], '', false, $err_url);
|
|
} // end if
|
|
$url_query .= '&goto=db_search.php';
|
|
$url_params['goto'] = 'db_search.php';
|
|
|
|
/**
|
|
* @global array list of tables from the current database
|
|
*/
|
|
$tables = PMA_DBI_get_tables($GLOBALS['db']);
|
|
|
|
$search_options = array(
|
|
'1' => $GLOBALS['strSearchOption1'],
|
|
'2' => $GLOBALS['strSearchOption2'],
|
|
'3' => $GLOBALS['strSearchOption3'],
|
|
'4' => $GLOBALS['strSearchOption4'],
|
|
);
|
|
|
|
if (empty($_REQUEST['search_str']) || ! is_string($_REQUEST['search_str'])) {
|
|
unset($_REQUEST['submit_search']);
|
|
$searched = '';
|
|
} else {
|
|
$searched = htmlspecialchars($_REQUEST['search_str']);
|
|
$search_str = PMA_sqlAddslashes($_REQUEST['search_str'], true);
|
|
}
|
|
|
|
if (empty($_REQUEST['search_option']) || ! is_string($_REQUEST['search_option'])
|
|
|| ! array_key_exists($_REQUEST['search_option'], $search_options)) {
|
|
$search_option = 1;
|
|
unset($_REQUEST['submit_search']);
|
|
} else {
|
|
$search_option = (int) $_REQUEST['search_option'];
|
|
$option_str = $search_options[$_REQUEST['search_option']];
|
|
}
|
|
|
|
$tables_selected = array();
|
|
if (empty($_REQUEST['table_select']) || ! is_array($_REQUEST['table_select'])) {
|
|
unset($_REQUEST['submit_search']);
|
|
} elseif (! isset($_REQUEST['selectall']) && ! isset($_REQUEST['unselectall'])) {
|
|
$tables_selected = array_intersect($_REQUEST['table_select'], $tables);
|
|
}
|
|
|
|
if (isset($_REQUEST['selectall'])) {
|
|
$tables_selected = $tables;
|
|
} elseif (isset($_REQUEST['unselectall'])) {
|
|
$tables_selected = array();
|
|
}
|
|
|
|
/**
|
|
* Displays top links
|
|
*/
|
|
$sub_part = '';
|
|
require './libraries/db_links.inc.php';
|
|
|
|
|
|
/**
|
|
* 1. Main search form has been submitted
|
|
*/
|
|
if (isset($_REQUEST['submit_search'])) {
|
|
|
|
/**
|
|
* Builds the SQL search query
|
|
*
|
|
* @todo can we make use of fulltextsearch IN BOOLEAN MODE for this?
|
|
* @uses PMA_DBI_query
|
|
* PMA_MYSQL_INT_VERSION
|
|
* PMA_backquote
|
|
* PMA_DBI_free_result
|
|
* PMA_DBI_fetch_assoc
|
|
* $GLOBALS['db']
|
|
* explode
|
|
* count
|
|
* strlen
|
|
* @param string the table name
|
|
* @param string the string to search
|
|
* @param integer type of search (1 -> 1 word at least, 2 -> all words,
|
|
* 3 -> exact string, 4 -> regexp)
|
|
*
|
|
* @return array 3 SQL querys (for count, display and delete results)
|
|
*
|
|
* @global string the url to return to in case of errors
|
|
* @global string charset connection
|
|
*/
|
|
function PMA_getSearchSqls($table, $search_str, $search_option)
|
|
{
|
|
global $err_url, $charset_connection;
|
|
|
|
// Statement types
|
|
$sqlstr_select = 'SELECT';
|
|
$sqlstr_delete = 'DELETE';
|
|
|
|
// Fields to select
|
|
$res = PMA_DBI_query('SHOW ' . (PMA_MYSQL_INT_VERSION >= 40100 ? 'FULL ' : '') . 'FIELDS FROM ' . PMA_backquote($table) . ' FROM ' . PMA_backquote($GLOBALS['db']) . ';');
|
|
while ($current = PMA_DBI_fetch_assoc($res)) {
|
|
if (PMA_MYSQL_INT_VERSION >= 40100) {
|
|
list($current['Charset']) = explode('_', $current['Collation']);
|
|
}
|
|
$current['Field'] = PMA_backquote($current['Field']);
|
|
$tblfields[] = $current;
|
|
} // while
|
|
PMA_DBI_free_result($res);
|
|
unset($current, $res);
|
|
|
|
// Table to use
|
|
$sqlstr_from = ' FROM ' . PMA_backquote($GLOBALS['db']) . '.' . PMA_backquote($table);
|
|
|
|
$search_words = (($search_option > 2) ? array($search_str) : explode(' ', $search_str));
|
|
$search_wds_cnt = count($search_words);
|
|
|
|
$like_or_regex = (($search_option == 4) ? 'REGEXP' : 'LIKE');
|
|
$automatic_wildcard = (($search_option <3) ? '%' : '');
|
|
|
|
$fieldslikevalues = array();
|
|
foreach ($search_words as $search_word) {
|
|
// Eliminates empty values
|
|
// In MySQL 4.1, if a field has no collation we get NULL in Charset
|
|
// but in MySQL 5.0.x we get ''
|
|
if (strlen($search_words) === 0) {
|
|
continue;
|
|
}
|
|
|
|
$thefieldlikevalue = array();
|
|
foreach ($tblfields as $tblfield) {
|
|
if (PMA_MYSQL_INT_VERSION >= 40100
|
|
&& $tblfield['Charset'] != $charset_connection
|
|
&& $tblfield['Charset'] != 'NULL'
|
|
&& $tblfield['Charset'] != '') {
|
|
$prefix = 'CONVERT(_utf8 ';
|
|
$suffix = ' USING ' . $tblfield['Charset'] . ') COLLATE ' . $tblfield['Collation'];
|
|
} else {
|
|
$prefix = $suffix = '';
|
|
}
|
|
$thefieldlikevalue[] = $tblfield['Field']
|
|
. ' ' . $like_or_regex . ' '
|
|
. $prefix
|
|
. "'"
|
|
. $automatic_wildcard
|
|
. $search_word
|
|
. $automatic_wildcard . "'"
|
|
. $suffix;
|
|
} // end for
|
|
|
|
$fieldslikevalues[] = implode(' OR ', $thefieldlikevalue);
|
|
} // end for
|
|
|
|
$implode_str = ($search_option == 1 ? ' OR ' : ' AND ');
|
|
$sqlstr_where = ' WHERE (' . implode(') ' . $implode_str . ' (', $fieldslikevalues) . ')';
|
|
unset($fieldslikevalues);
|
|
|
|
// Builds complete queries
|
|
$sql['select_fields'] = $sqlstr_select . ' * ' . $sqlstr_from . $sqlstr_where;
|
|
// here, I think we need to still use the COUNT clause, even for
|
|
// VIEWs, anyway we have a WHERE clause that should limit results
|
|
$sql['select_count'] = $sqlstr_select . ' COUNT(*) AS `count`' . $sqlstr_from . $sqlstr_where;
|
|
$sql['delete'] = $sqlstr_delete . $sqlstr_from . $sqlstr_where;
|
|
|
|
return $sql;
|
|
} // end of the "PMA_getSearchSqls()" function
|
|
|
|
|
|
/**
|
|
* Displays the results
|
|
*/
|
|
$this_url_params = array(
|
|
'db' => $GLOBALS['db'],
|
|
'goto' => 'db_sql.php',
|
|
'pos' => 0,
|
|
'is_js_confirmed' => 0,
|
|
);
|
|
|
|
// Displays search string
|
|
echo '<br />' . "\n"
|
|
.'<table class="data">' . "\n"
|
|
.'<caption class="tblHeaders">' . "\n"
|
|
.sprintf($GLOBALS['strSearchResultsFor'],
|
|
$searched, $option_str) . "\n"
|
|
.'</caption>' . "\n";
|
|
|
|
$num_search_result_total = 0;
|
|
$odd_row = true;
|
|
|
|
foreach ($tables_selected as $each_table) {
|
|
// Gets the SQL statements
|
|
$newsearchsqls = PMA_getSearchSqls($each_table,
|
|
$search_str, $search_option);
|
|
|
|
// Executes the "COUNT" statement
|
|
$res_cnt = PMA_DBI_fetch_value($newsearchsqls['select_count']);
|
|
$num_search_result_total += $res_cnt;
|
|
|
|
$sql_query .= $newsearchsqls['select_count'];
|
|
|
|
echo '<tr class="' . ($odd_row ? 'odd' : 'even') . '">'
|
|
.'<td>' . sprintf($GLOBALS['strNumSearchResultsInTable'], $res_cnt,
|
|
htmlspecialchars($each_table)) . "</td>\n";
|
|
|
|
if ($res_cnt > 0) {
|
|
$this_url_params['sql_query'] = $newsearchsqls['select_fields'];
|
|
echo '<td>' . PMA_linkOrButton(
|
|
'sql.php' . PMA_generate_common_url($this_url_params),
|
|
$GLOBALS['strBrowse'], '') . "</td>\n";
|
|
|
|
$this_url_params['sql_query'] = $newsearchsqls['delete'];
|
|
echo '<td>' . PMA_linkOrButton(
|
|
'sql.php' . PMA_generate_common_url($this_url_params),
|
|
$GLOBALS['strDelete'], $newsearchsqls['delete']) . "</td>\n";
|
|
|
|
} else {
|
|
echo '<td> </td>' . "\n"
|
|
.'<td> </td>' . "\n";
|
|
}// end if else
|
|
$odd_row = ! $odd_row;
|
|
echo '</tr>' . "\n";
|
|
} // end for
|
|
|
|
echo '</table>' . "\n";
|
|
|
|
if (count($tables_selected) > 1) {
|
|
echo '<p>' . sprintf($GLOBALS['strNumSearchResultsTotal'],
|
|
$num_search_result_total) . '</p>' . "\n";
|
|
}
|
|
} // end 1.
|
|
|
|
|
|
/**
|
|
* 2. Displays the main search form
|
|
*/
|
|
?>
|
|
<a name="db_search"></a>
|
|
<form method="post" action="db_search.php" name="db_search">
|
|
<?php echo PMA_generate_common_hidden_inputs($GLOBALS['db']); ?>
|
|
<fieldset>
|
|
<legend><?php echo $GLOBALS['strSearchFormTitle']; ?></legend>
|
|
|
|
<table class="formlayout">
|
|
<tr><td><?php echo $GLOBALS['strSearchNeedle']; ?></td>
|
|
<td><input type="text" name="search_str" size="60"
|
|
value="<?php echo $searched; ?>" /></td>
|
|
</tr>
|
|
<tr><td align="right" valign="top">
|
|
<?php echo $GLOBALS['strSearchType']; ?></td>
|
|
<td><input type="radio" id="search_option_1" name="search_option"
|
|
value="1"<?php if ($search_option == 1) echo ' checked="checked"'; ?> />
|
|
<label for="search_option_1">
|
|
<?php echo $GLOBALS['strSearchOption1']; ?></label><sup>1</sup><br />
|
|
<input type="radio" id="search_option_2" name="search_option"
|
|
value="2"<?php if ($search_option == 2) echo ' checked="checked"'; ?> />
|
|
<label for="search_option_2">
|
|
<?php echo $GLOBALS['strSearchOption2']; ?></label><sup>1</sup><br />
|
|
<input type="radio" id="search_option_3" name="search_option"
|
|
value="3"<?php if ($search_option == 3) echo ' checked="checked"'; ?> />
|
|
<label for="search_option_3">
|
|
<?php echo $GLOBALS['strSearchOption3']; ?></label><br />
|
|
<input type="radio" id="search_option_4" name="search_option"
|
|
value="4"<?php if ($search_option == 4) echo ' checked="checked"'; ?> />
|
|
<label for="search_option_4">
|
|
<?php echo $GLOBALS['strSearchOption4']; ?></label>
|
|
|
|
<?php echo PMA_showMySQLDocu('Regexp', 'Regexp'); ?><br />
|
|
<br />
|
|
<sup>1</sup><?php echo $GLOBALS['strSplitWordsWithSpace']; ?></td>
|
|
</tr>
|
|
<tr><td align="right" valign="top">
|
|
<?php echo $GLOBALS['strSearchInTables']; ?></td>
|
|
<td rowspan="2">
|
|
<?php
|
|
echo ' <select name="table_select[]" size="6" multiple="multiple">' . "\n";
|
|
foreach ($tables as $each_table) {
|
|
if (in_array($each_table, $tables_selected)) {
|
|
$is_selected = ' selected="selected"';
|
|
} else {
|
|
$is_selected = '';
|
|
}
|
|
|
|
echo ' <option value="' . htmlspecialchars($each_table) . '"'
|
|
. $is_selected . '>'
|
|
. htmlspecialchars($each_table) . '</option>' . "\n";
|
|
} // end while
|
|
|
|
echo ' </select>' . "\n";
|
|
$alter_select =
|
|
'<a href="db_search.php' . PMA_generate_common_url(array_merge($url_params, array('selectall' => 1))) . '#db_search"'
|
|
. ' onclick="setSelectOptions(\'db_search\', \'table_select[]\', true); return false;">' . $GLOBALS['strSelectAll'] . '</a>'
|
|
. ' / '
|
|
. '<a href="db_search.php' . PMA_generate_common_url(array_merge($url_params, array('unselectall' => 1))) . '#db_search"'
|
|
. ' onclick="setSelectOptions(\'db_search\', \'table_select[]\', false); return false;">' . $GLOBALS['strUnselectAll'] . '</a>';
|
|
?>
|
|
</td>
|
|
</tr>
|
|
<tr><td align="right" valign="bottom">
|
|
<?php echo $alter_select; ?></td></tr>
|
|
</tr>
|
|
</table>
|
|
</fieldset>
|
|
<fieldset class="tblFooters">
|
|
<input type="submit" name="submit_search" value="<?php echo $GLOBALS['strGo']; ?>"
|
|
id="buttonGo" />
|
|
</fieldset>
|
|
</form>
|
|
|
|
<?php
|
|
/**
|
|
* Displays the footer
|
|
*/
|
|
require_once './libraries/footer.inc.php';
|
|
?>
|