768 lines
22 KiB
PHP
768 lines
22 KiB
PHP
<?php
|
|
/** Get database connection
|
|
* @return Min_DB
|
|
*/
|
|
function connection() {
|
|
// can be used in customization, $connection is minified
|
|
global $connection;
|
|
return $connection;
|
|
}
|
|
|
|
/** Unescape database identifier
|
|
* @param string text inside ``
|
|
* @return string
|
|
*/
|
|
function idf_unescape($idf) {
|
|
$last = substr($idf, -1);
|
|
return str_replace($last . $last, $last, substr($idf, 1, -1));
|
|
}
|
|
|
|
/** Escape string to use inside ''
|
|
* @param string
|
|
* @return string
|
|
*/
|
|
function escape_string($val) {
|
|
return substr(q($val), 1, -1);
|
|
}
|
|
|
|
/** Disable magic_quotes_gpc
|
|
* @param array e.g. (&$_GET, &$_POST, &$_COOKIE)
|
|
* @return null modified in place
|
|
*/
|
|
function remove_slashes($process) {
|
|
if (get_magic_quotes_gpc()) {
|
|
while (list($key, $val) = each($process)) {
|
|
foreach ($val as $k => $v) {
|
|
unset($process[$key][$k]);
|
|
if (is_array($v)) {
|
|
$process[$key][stripslashes($k)] = $v;
|
|
$process[] = &$process[$key][stripslashes($k)];
|
|
} else {
|
|
$process[$key][stripslashes($k)] = ($filter ? $v : stripslashes($v));
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
/** Escape or unescape string to use inside form []
|
|
* @param string
|
|
* @param bool
|
|
* @return string
|
|
*/
|
|
function bracket_escape($idf, $back = false) {
|
|
// escape brackets inside name="x[]"
|
|
static $trans = array(':' => ':1', ']' => ':2', '[' => ':3');
|
|
return strtr($idf, ($back ? array_flip($trans) : $trans));
|
|
}
|
|
|
|
/** Escape for HTML
|
|
* @param string
|
|
* @return string
|
|
*/
|
|
function h($string) {
|
|
return htmlspecialchars($string, ENT_QUOTES);
|
|
}
|
|
|
|
/** Escape for TD
|
|
* @param string
|
|
* @return string
|
|
*/
|
|
function nbsp($string) {
|
|
return (trim($string) != "" ? h($string) : " ");
|
|
}
|
|
|
|
/** Convert \n to <br>
|
|
* @param string
|
|
* @return string
|
|
*/
|
|
function nl_br($string) {
|
|
return str_replace("\n", "<br>", $string); // nl2br() uses XHTML before PHP 5.3
|
|
}
|
|
|
|
/** Generate HTML checkbox
|
|
* @param string
|
|
* @param string
|
|
* @param bool
|
|
* @param string
|
|
* @param string
|
|
* @return string
|
|
*/
|
|
function checkbox($name, $value, $checked, $label = "", $onclick = "") {
|
|
static $id = 0;
|
|
$id++;
|
|
$return = "<input type='checkbox'" . ($name ? " name='$name' value='" . h($value) . "'" : "") . ($checked ? " checked" : "") . ($onclick ? " onclick=\"$onclick\"" : "") . " id='checkbox-$id'>";
|
|
return ($label != "" ? "<label for='checkbox-$id'>$return" . h($label) . "</label>" : $return);
|
|
}
|
|
|
|
/** Generate list of HTML options
|
|
* @param array array of strings or arrays (creates optgroup)
|
|
* @param mixed
|
|
* @param bool always use array keys for value="", otherwise only string keys are used
|
|
* @return string
|
|
*/
|
|
function optionlist($options, $selected = null, $use_keys = false) {
|
|
$return = "";
|
|
foreach ($options as $k => $v) {
|
|
if (is_array($v)) {
|
|
$return .= '<optgroup label="' . h($k) . '">';
|
|
}
|
|
foreach ((is_array($v) ? $v : array($k => $v)) as $key => $val) {
|
|
$return .= '<option' . ($use_keys || is_string($key) ? ' value="' . h($key) . '"' : '') . (($use_keys || is_string($key) ? (string) $key : $val) === $selected ? ' selected' : '') . '>' . h($val);
|
|
}
|
|
if (is_array($v)) {
|
|
$return .= '</optgroup>';
|
|
}
|
|
}
|
|
return $return;
|
|
}
|
|
|
|
/** Generate HTML radio list
|
|
* @param string
|
|
* @param array
|
|
* @param string
|
|
* @param string true for no onchange, false for radio
|
|
* @return string
|
|
*/
|
|
function html_select($name, $options, $value = "", $onchange = true) {
|
|
if ($onchange) {
|
|
return "<select name='" . h($name) . "'" . (is_string($onchange) ? " onchange=\"$onchange\"" : "") . ">" . optionlist($options, $value) . "</select>";
|
|
}
|
|
$return = "";
|
|
foreach ($options as $key => $val) {
|
|
$return .= "<label><input type='radio' name='" . h($name) . "' value='" . h($key) . "'" . ($key == $value ? " checked" : "") . ">" . h($val) . "</label>";
|
|
}
|
|
return $return;
|
|
}
|
|
|
|
/** Get INI boolean value
|
|
* @param string
|
|
* @return bool
|
|
*/
|
|
function ini_bool($ini) {
|
|
$val = ini_get($ini);
|
|
return (eregi('^(on|true|yes)$', $val) || (int) $val); // boolean values set by php_value are strings
|
|
}
|
|
|
|
function q($string) {
|
|
global $connection;
|
|
return $connection->quote($string);
|
|
}
|
|
|
|
/** Get list of values from database
|
|
* @param string
|
|
* @param mixed
|
|
* @return array
|
|
*/
|
|
function get_vals($query, $column = 0) {
|
|
global $connection;
|
|
$return = array();
|
|
$result = $connection->query($query);
|
|
if (is_object($result)) {
|
|
while ($row = $result->fetch_row()) {
|
|
$return[] = $row[$column];
|
|
}
|
|
}
|
|
return $return;
|
|
}
|
|
|
|
/** Get keys from first column and values from second
|
|
* @param string
|
|
* @param Min_DB
|
|
* @return array
|
|
*/
|
|
function get_key_vals($query, $connection2 = null) {
|
|
global $connection;
|
|
if (!is_object($connection2)) {
|
|
$connection2 = $connection;
|
|
}
|
|
$return = array();
|
|
$result = $connection2->query($query);
|
|
while ($row = $result->fetch_row()) {
|
|
$return[$row[0]] = $row[1];
|
|
}
|
|
return $return;
|
|
}
|
|
|
|
/** Get all rows of result
|
|
* @param string
|
|
* @return array associative
|
|
*/
|
|
function get_rows($query, $connection2 = null, $error = "<p class='error'>") {
|
|
global $connection;
|
|
if (!is_object($connection2)) {
|
|
$connection2 = $connection;
|
|
}
|
|
$return = array();
|
|
$result = $connection2->query($query);
|
|
if (is_object($result)) { // can return true
|
|
while ($row = $result->fetch_assoc()) {
|
|
$return[] = $row;
|
|
}
|
|
} elseif (!$result && $error && (headers_sent() || ob_get_level())) {
|
|
echo $error . error() . "\n";
|
|
}
|
|
return $return;
|
|
}
|
|
|
|
/** Find unique identifier of a row
|
|
* @param array
|
|
* @param array result of indexes()
|
|
* @return array
|
|
*/
|
|
function unique_array($row, $indexes) {
|
|
foreach ($indexes as $index) {
|
|
if (ereg("PRIMARY|UNIQUE", $index["type"])) {
|
|
$return = array();
|
|
foreach ($index["columns"] as $key) {
|
|
if (!isset($row[$key])) { // NULL is ambiguous
|
|
continue 2;
|
|
}
|
|
$return[$key] = $row[$key];
|
|
}
|
|
return $return;
|
|
}
|
|
}
|
|
$return = array();
|
|
foreach ($row as $key => $val) {
|
|
if (!preg_match('~^(COUNT\\((\\*|(DISTINCT )?`(?:[^`]|``)+`)\\)|(AVG|GROUP_CONCAT|MAX|MIN|SUM)\\(`(?:[^`]|``)+`\\))$~', $key)) { //! columns looking like functions
|
|
$return[$key] = $val;
|
|
}
|
|
}
|
|
return $return;
|
|
}
|
|
|
|
/** Create SQL condition from parsed query string
|
|
* @param array parsed query string
|
|
* @return string
|
|
*/
|
|
function where($where) {
|
|
global $jush;
|
|
$return = array();
|
|
foreach ((array) $where["where"] as $key => $val) {
|
|
$return[] = idf_escape(bracket_escape($key, 1)) // 1 - back
|
|
. (ereg('\\.', $val) || $jush == "mssql" ? " LIKE " . exact_value(addcslashes($val, "%_")) : " = " . exact_value($val)) // LIKE because of floats, but slow with ints, in MS SQL because of text
|
|
; //! enum and set
|
|
}
|
|
foreach ((array) $where["null"] as $key) {
|
|
$return[] = idf_escape($key) . " IS NULL";
|
|
}
|
|
return implode(" AND ", $return);
|
|
}
|
|
|
|
/** Create SQL condition from query string
|
|
* @param string
|
|
* @return string
|
|
*/
|
|
function where_check($val) {
|
|
parse_str($val, $check);
|
|
remove_slashes(array(&$check));
|
|
return where($check);
|
|
}
|
|
|
|
/** Create query string where condition from value
|
|
* @param int condition order
|
|
* @param string column identifier
|
|
* @param string
|
|
* @return string
|
|
* @return string
|
|
*/
|
|
function where_link($i, $column, $value, $operator = "=") {
|
|
return "&where%5B$i%5D%5Bcol%5D=" . urlencode($column) . "&where%5B$i%5D%5Bop%5D=" . urlencode($operator) . "&where%5B$i%5D%5Bval%5D=" . urlencode($value);
|
|
}
|
|
|
|
/** Set cookie valid for 1 month
|
|
* @param string
|
|
* @param string
|
|
* @return bool
|
|
*/
|
|
function cookie($name, $value) {
|
|
global $HTTPS;
|
|
$params = array(
|
|
$name,
|
|
(ereg("\n", $value) ? "" : $value), // HTTP Response Splitting protection in PHP < 5.1.2
|
|
time() + 2592000, // 2592000 - 30 days
|
|
preg_replace('~\\?.*~', '', $_SERVER["REQUEST_URI"]),
|
|
"",
|
|
$HTTPS
|
|
);
|
|
if (version_compare(PHP_VERSION, '5.2.0') >= 0) {
|
|
$params[] = true; // HttpOnly
|
|
}
|
|
return call_user_func_array('setcookie', $params);
|
|
}
|
|
|
|
/** Restart stopped session
|
|
* @return null
|
|
*/
|
|
function restart_session() {
|
|
if (!ini_bool("session.use_cookies")) {
|
|
session_start();
|
|
}
|
|
}
|
|
|
|
/** Get session variable for current server
|
|
* @param string
|
|
* @return mixed
|
|
*/
|
|
function &get_session($key) {
|
|
return $_SESSION[$key][DRIVER][SERVER][$_GET["username"]];
|
|
}
|
|
|
|
/** Set session variable for current server
|
|
* @param string
|
|
* @param mixed
|
|
* @return mixed
|
|
*/
|
|
function set_session($key, $val) {
|
|
$_SESSION[$key][DRIVER][SERVER][$_GET["username"]] = $val; // used also in auth.inc.php
|
|
}
|
|
|
|
/** Get authenticated URL
|
|
* @param string
|
|
* @param string
|
|
* @param string
|
|
* @return string
|
|
*/
|
|
function auth_url($driver, $server, $username) {
|
|
global $drivers;
|
|
preg_match('~([^?]*)\\??(.*)~', remove_from_uri(implode("|", array_keys($drivers)) . "|username|" . session_name()), $match);
|
|
return "$match[1]?"
|
|
. (SID && !$_COOKIE ? SID . "&" : "")
|
|
. ($driver != "server" || $server != "" ? urlencode($driver) . "=" . urlencode($server) . "&" : "")
|
|
. "username=" . urlencode($username)
|
|
. ($match[2] ? "&$match[2]" : "")
|
|
;
|
|
}
|
|
|
|
/** Send Location header and exit
|
|
* @param string null to only set a message
|
|
* @param string
|
|
* @return null
|
|
*/
|
|
function redirect($location, $message = null) {
|
|
if (isset($message)) {
|
|
restart_session();
|
|
$_SESSION["messages"][] = $message;
|
|
}
|
|
if (isset($location)) {
|
|
header("Location: " . ($location != "" ? $location : "."));
|
|
exit;
|
|
}
|
|
}
|
|
|
|
/** Execute query and redirect if successful
|
|
* @param string
|
|
* @param string
|
|
* @param string
|
|
* @param bool
|
|
* @param bool
|
|
* @param bool
|
|
* @return bool
|
|
*/
|
|
function query_redirect($query, $location, $message, $redirect = true, $execute = true, $failed = false) {
|
|
global $connection, $error, $adminer;
|
|
if ($execute) {
|
|
$failed = !$connection->query($query);
|
|
}
|
|
$sql = "";
|
|
if ($query) {
|
|
$sql = $adminer->messageQuery($query);
|
|
}
|
|
if ($failed) {
|
|
$error = error() . $sql;
|
|
return false;
|
|
}
|
|
if ($redirect) {
|
|
redirect($location, $message . $sql);
|
|
}
|
|
return true;
|
|
}
|
|
|
|
/** Execute and remember query
|
|
* @param string null to return remembered queries
|
|
* @return Min_Result
|
|
*/
|
|
function queries($query = null) {
|
|
global $connection;
|
|
static $queries = array();
|
|
if (!isset($query)) {
|
|
// return executed queries without parameter
|
|
return implode(";\n", $queries);
|
|
}
|
|
$queries[] = $query;
|
|
return $connection->query($query);
|
|
}
|
|
|
|
/** Apply command to all array items
|
|
* @param string
|
|
* @param array
|
|
* @param callback
|
|
* @return bool
|
|
*/
|
|
function apply_queries($query, $tables, $escape = 'table') {
|
|
foreach ($tables as $table) {
|
|
if (!queries("$query " . $escape($table))) {
|
|
return false;
|
|
}
|
|
}
|
|
return true;
|
|
}
|
|
|
|
/** Redirect by remembered queries
|
|
* @param string
|
|
* @param string
|
|
* @param bool
|
|
* @return bool
|
|
*/
|
|
function queries_redirect($location, $message, $redirect) {
|
|
return query_redirect(queries(), $location, $message, $redirect, false, !$redirect);
|
|
}
|
|
|
|
/** Remove parameter from query string
|
|
* @param string
|
|
* @return string
|
|
*/
|
|
function remove_from_uri($param = "") {
|
|
return substr(preg_replace("~(?<=[?&])($param" . (SID ? "" : "|" . session_name()) . ")=[^&]*&~", '', "$_SERVER[REQUEST_URI]&"), 0, -1);
|
|
}
|
|
|
|
/** Generate page number for pagination
|
|
* @param int
|
|
* @return string
|
|
*/
|
|
function pagination($page, $current) {
|
|
return " " . ($page == $current ? $page + 1 : '<a href="' . h(remove_from_uri("page") . ($page ? "&page=$page" : "")) . '">' . ($page + 1) . "</a>");
|
|
}
|
|
|
|
/** Get file contents from $_FILES
|
|
* @param string
|
|
* @param bool
|
|
* @return mixed int for error, string otherwise
|
|
*/
|
|
function get_file($key, $decompress = false) {
|
|
$file = $_FILES[$key];
|
|
if (!$file || $file["error"]) {
|
|
return $file["error"];
|
|
}
|
|
return file_get_contents($decompress && ereg('\\.gz$', $file["name"]) ? "compress.zlib://$file[tmp_name]"
|
|
: ($decompress && ereg('\\.bz2$', $file["name"]) ? "compress.bzip2://$file[tmp_name]"
|
|
: $file["tmp_name"]
|
|
)); //! may not be reachable because of open_basedir
|
|
}
|
|
|
|
/** Determine upload error
|
|
* @param int
|
|
* @return string
|
|
*/
|
|
function upload_error($error) {
|
|
$max_size = ($error == UPLOAD_ERR_INI_SIZE ? ini_get("upload_max_filesize") : null); // post_max_size is checked in index.php
|
|
return ($error ? lang('Unable to upload a file.') . ($max_size ? " " . lang('Maximum allowed file size is %sB.', $max_size) : "") : lang('File does not exist.'));
|
|
}
|
|
|
|
/** Generate class for odd rows
|
|
* @param string return this for odd rows, empty to reset counter
|
|
* @return string
|
|
*/
|
|
function odd($return = ' class="odd"') {
|
|
static $i = 0;
|
|
if (!$return) { // reset counter
|
|
$i = -1;
|
|
}
|
|
return ($i++ % 2 ? $return : '');
|
|
}
|
|
|
|
/** Check whether the string is in UTF-8
|
|
* @param string
|
|
* @return bool
|
|
*/
|
|
function is_utf8($val) {
|
|
// don't print control chars except \t\r\n
|
|
return (preg_match('~~u', $val) && !preg_match('~[\\0-\\x8\\xB\\xC\\xE-\\x1F]~', $val));
|
|
}
|
|
|
|
/** Shorten UTF-8 string
|
|
* @param string
|
|
* @param int
|
|
* @param string
|
|
* @return string escaped string with appended ...
|
|
*/
|
|
function shorten_utf8($string, $length = 80, $suffix = "") {
|
|
if (!preg_match("(^([\t\r\n -\x{FFFF}]{0,$length})($)?)u", $string, $match)) { // ~s causes trash in $match[2] under some PHP versions, (.|\n) is slow
|
|
preg_match("(^([\t\r\n -~]{0,$length})($)?)", $string, $match);
|
|
}
|
|
return h($match[1]) . $suffix . (isset($match[2]) ? "" : "<i>...</i>");
|
|
}
|
|
|
|
/** Generate friendly URL
|
|
* @param string
|
|
* @return string
|
|
*/
|
|
function friendly_url($val) {
|
|
// used for blobs and export
|
|
return preg_replace('~[^a-z0-9_]~i', '-', $val);
|
|
}
|
|
|
|
/** Print hidden fields
|
|
* @param array
|
|
* @param array
|
|
* @return null
|
|
*/
|
|
function hidden_fields($process, $ignore = array()) {
|
|
while (list($key, $val) = each($process)) {
|
|
if (is_array($val)) {
|
|
foreach ($val as $k => $v) {
|
|
$process[$key . "[$k]"] = $v;
|
|
}
|
|
} elseif (!in_array($key, $ignore)) {
|
|
echo '<input type="hidden" name="' . h($key) . '" value="' . h($val) . '">';
|
|
}
|
|
}
|
|
}
|
|
|
|
/** Print hidden fields for GET forms
|
|
* @return null
|
|
*/
|
|
function hidden_fields_get() {
|
|
echo (SID && !$_COOKIE ? '<input type="hidden" name="' . session_name() . '" value="' . h(session_id()) . '">' : '');
|
|
echo (SERVER !== null ? '<input type="hidden" name="' . DRIVER . '" value="' . h(SERVER) . '">' : "");
|
|
echo '<input type="hidden" name="username" value="' . h($_GET["username"]) . '">';
|
|
}
|
|
|
|
/** Find out foreign keys for each column
|
|
* @param string
|
|
* @return array array($col => array())
|
|
*/
|
|
function column_foreign_keys($table) {
|
|
$return = array();
|
|
foreach (foreign_keys($table) as $foreign_key) {
|
|
foreach ($foreign_key["source"] as $val) {
|
|
$return[$val][] = $foreign_key;
|
|
}
|
|
}
|
|
return $return;
|
|
}
|
|
|
|
/** Print enum input field
|
|
* @param string "radio"|"checkbox"
|
|
* @param string
|
|
* @param array
|
|
* @param mixed int|string|array
|
|
* @return null
|
|
*/
|
|
function enum_input($type, $attrs, $field, $value) {
|
|
preg_match_all("~'((?:[^']|'')*)'~", $field["length"], $matches);
|
|
foreach ($matches[1] as $i => $val) {
|
|
$val = stripcslashes(str_replace("''", "'", $val));
|
|
$checked = (is_int($value) ? $value == $i+1 : (is_array($value) ? in_array($i+1, $value) : $value === $val));
|
|
echo " <label><input type='$type'$attrs value='" . ($i+1) . "'" . ($checked ? ' checked' : '') . '>' . h($val) . '</label>';
|
|
}
|
|
}
|
|
|
|
/** Print edit input field
|
|
* @param array one field from fields()
|
|
* @param mixed
|
|
* @param string
|
|
* @return null
|
|
*/
|
|
function input($field, $value, $function) {
|
|
global $types, $adminer, $jush;
|
|
$name = h(bracket_escape($field["field"]));
|
|
echo "<td class='function'>";
|
|
$functions = (isset($_GET["select"]) ? array("orig" => lang('original')) : array()) + $adminer->editFunctions($field);
|
|
$attrs = " name='fields[$name]'";
|
|
if ($field["type"] == "enum") {
|
|
echo nbsp($functions[""]) . "<td>" . ($functions["orig"] ? "<label><input type='radio'$attrs value='-1' checked><i>$functions[orig]</i></label> " : "");
|
|
echo $adminer->editInput($_GET["edit"], $field, $attrs, $value);
|
|
enum_input("radio", $attrs, $field, $value);
|
|
} else {
|
|
$first = 0;
|
|
foreach ($functions as $key => $val) {
|
|
if ($key === "" || !$val) {
|
|
break;
|
|
}
|
|
$first++;
|
|
}
|
|
$onchange = ($first ? " onchange=\"var f = this.form['function[" . addcslashes($name, "\r\n'\\") . "]']; if ($first > f.selectedIndex) f.selectedIndex = $first;\"" : "");
|
|
$attrs .= $onchange;
|
|
echo (count($functions) > 1 ? html_select("function[$name]", $functions, !isset($function) || in_array($function, $functions) || isset($functions[$function]) ? $function : "") : nbsp(reset($functions))) . '<td>';
|
|
$input = $adminer->editInput($_GET["edit"], $field, $attrs, $value); // usage in call is without a table
|
|
if ($input != "") {
|
|
echo $input;
|
|
} elseif ($field["type"] == "set") { //! 64 bits
|
|
preg_match_all("~'((?:[^']|'')*)'~", $field["length"], $matches);
|
|
foreach ($matches[1] as $i => $val) {
|
|
$val = stripcslashes(str_replace("''", "'", $val));
|
|
$checked = (is_int($value) ? ($value >> $i) & 1 : in_array($val, explode(",", $value), true));
|
|
echo " <label><input type='checkbox' name='fields[$name][$i]' value='" . (1 << $i) . "'" . ($checked ? ' checked' : '') . "$onchange>" . h($val) . '</label>';
|
|
}
|
|
} elseif (ereg('blob|bytea|raw|file', $field["type"]) && ini_bool("file_uploads")) {
|
|
echo "<input type='file' name='fields-$name'$onchange>";
|
|
} elseif (ereg('text|lob', $field["type"])) {
|
|
echo "<textarea " . ($jush != "sqlite" || ereg("\n", $value) ? "cols='50' rows='12'" : "cols='30' rows='1' style='height: 1.2em;'") . "$attrs>" . h($value) . '</textarea>'; // 1.2em - line-height
|
|
} else {
|
|
// int(3) is only a display hint
|
|
$maxlength = (!ereg('int', $field["type"]) && preg_match('~^([0-9]+)(,([0-9]+))?$~', $field["length"], $match) ? ((ereg("binary", $field["type"]) ? 2 : 1) * $match[1] + ($match[3] ? 1 : 0) + ($match[2] && !$field["unsigned"] ? 1 : 0)) : ($types[$field["type"]] ? $types[$field["type"]] + ($field["unsigned"] ? 0 : 1) : 0));
|
|
echo "<input value='" . h($value) . "'" . ($maxlength ? " maxlength='$maxlength'" : "") . (ereg('char|binary', $field["type"]) && $maxlength > 20 ? " size='40'" : "") . "$attrs>";
|
|
}
|
|
}
|
|
}
|
|
|
|
/** Process edit input field
|
|
* @param one field from fields()
|
|
* @return string
|
|
*/
|
|
function process_input($field) {
|
|
global $adminer;
|
|
$idf = bracket_escape($field["field"]);
|
|
$function = $_POST["function"][$idf];
|
|
$value = $_POST["fields"][$idf];
|
|
if ($field["type"] == "enum") {
|
|
if ($value == -1) {
|
|
return false;
|
|
}
|
|
if ($value == "") {
|
|
return "NULL";
|
|
}
|
|
return intval($value);
|
|
}
|
|
if ($field["auto_increment"] && $value == "") {
|
|
return null;
|
|
}
|
|
if ($function == "orig") {
|
|
return false;
|
|
}
|
|
if ($function == "NULL") {
|
|
return "NULL";
|
|
}
|
|
if ($field["type"] == "set") {
|
|
return array_sum((array) $value);
|
|
}
|
|
if (ereg('blob|bytea|raw|file', $field["type"]) && ini_bool("file_uploads")) {
|
|
$file = get_file("fields-$idf");
|
|
if (!is_string($file)) {
|
|
return false; //! report errors
|
|
}
|
|
return q($file);
|
|
}
|
|
return $adminer->processInput($field, $value, $function);
|
|
}
|
|
|
|
/** Print results of search in all tables
|
|
* @uses $_GET["where"][0]
|
|
* @uses $_POST["tables"]
|
|
* @return null
|
|
*/
|
|
function search_tables() {
|
|
global $adminer, $connection;
|
|
$_GET["where"][0]["op"] = "LIKE %%";
|
|
$_GET["where"][0]["val"] = $_POST["query"];
|
|
$found = false;
|
|
foreach (table_status() as $table => $table_status) {
|
|
$name = $adminer->tableName($table_status);
|
|
if (isset($table_status["Engine"]) && $name != "" && (!$_POST["tables"] || in_array($table, $_POST["tables"]))) {
|
|
$result = $connection->query("SELECT" . limit("1 FROM " . table($table), " WHERE " . implode(" AND ", $adminer->selectSearchProcess(fields($table), array())), 1));
|
|
if ($result->fetch_row()) {
|
|
if (!$found) {
|
|
echo "<ul>\n";
|
|
$found = true;
|
|
}
|
|
echo "<li><a href='" . h(ME . "select=" . urlencode($table) . "&where[0][op]=" . urlencode($_GET["where"][0]["op"]) . "&where[0][val]=" . urlencode($_GET["where"][0]["val"])) . "'>" . h($name) . "</a>\n";
|
|
}
|
|
}
|
|
}
|
|
echo ($found ? "</ul>" : "<p class='message'>" . lang('No tables.')) . "\n";
|
|
}
|
|
|
|
/** Print CSV row
|
|
* @param array
|
|
* @return null
|
|
*/
|
|
function dump_csv($row) {
|
|
foreach ($row as $key => $val) {
|
|
if (preg_match("~[\"\n,;]~", $val) || $val === "") {
|
|
$row[$key] = '"' . str_replace('"', '""', $val) . '"';
|
|
}
|
|
}
|
|
echo implode(($_POST["format"] == "csv" ? "," : ";"), $row) . "\n";
|
|
}
|
|
|
|
/** Apply SQL function
|
|
* @param string
|
|
* @param string escaped column identifier
|
|
* @return string
|
|
*/
|
|
function apply_sql_function($function, $column) {
|
|
return ($function ? ($function == "unixepoch" ? "DATETIME($column, '$function')" : ($function == "count distinct" ? "COUNT(DISTINCT " : strtoupper("$function(")) . "$column)") : $column);
|
|
}
|
|
|
|
/** Read password from file adminer.key in temporary directory or create one
|
|
* @return string or false if the file can not be created
|
|
*/
|
|
function password_file() {
|
|
$dir = ini_get("upload_tmp_dir"); // session_save_path() may contain other storage path
|
|
if (!$dir) {
|
|
if (function_exists('sys_get_temp_dir')) {
|
|
$dir = sys_get_temp_dir();
|
|
} else {
|
|
$filename = @tempnam("", ""); // @ - temp directory can be disabled by open_basedir
|
|
if (!$filename) {
|
|
return false;
|
|
}
|
|
$dir = dirname($filename);
|
|
unlink($filename);
|
|
}
|
|
}
|
|
$filename = "$dir/adminer.key";
|
|
$return = @file_get_contents($filename); // @ - can not exist
|
|
if ($return) {
|
|
return $return;
|
|
}
|
|
$fp = @fopen($filename, "w"); // @ - can have insufficient rights //! is not atomic
|
|
if ($fp) {
|
|
$return = md5(uniqid(mt_rand(), true));
|
|
fwrite($fp, $return);
|
|
fclose($fp);
|
|
}
|
|
return $return;
|
|
}
|
|
|
|
/** Check whether the string is e-mail address
|
|
* @param string
|
|
* @return bool
|
|
*/
|
|
function is_mail($email) {
|
|
$atom = '[-a-z0-9!#$%&\'*+/=?^_`{|}~]'; // characters of local-name
|
|
$domain = '[a-z0-9]([-a-z0-9]{0,61}[a-z0-9])'; // one domain component
|
|
$pattern = "$atom+(\\.$atom+)*@($domain?\\.)+$domain";
|
|
return preg_match("(^$pattern(,\\s*$pattern)*\$)i", $email);
|
|
}
|
|
|
|
/** Check whether the string is URL address
|
|
* @param string
|
|
* @return string "http", "https" or ""
|
|
*/
|
|
function is_url($string) {
|
|
$domain = '[a-z0-9]([-a-z0-9]{0,61}[a-z0-9])'; // one domain component //! IDN
|
|
return (preg_match("~^(https?)://($domain?\\.)+$domain(:[0-9]+)?(/.*)?(\\?.*)?(#.*)?\$~i", $string, $match) ? strtolower($match[1]) : ""); //! restrict path, query and fragment characters
|
|
}
|
|
|
|
/** Print header for hidden fieldset (close by </div></fieldset>)
|
|
* @param string
|
|
* @param string
|
|
* @param bool
|
|
* @return null
|
|
*/
|
|
function print_fieldset($id, $legend, $visible = false) {
|
|
echo "<fieldset><legend><a href='#fieldset-$id' onclick=\"return !toggle('fieldset-$id');\">$legend</a></legend><div id='fieldset-$id'" . ($visible ? "" : " class='hidden'") . ">\n";
|
|
}
|
|
|
|
/** Enclose $string to <b> if $bold is true
|
|
* @param string
|
|
* @param bool
|
|
* @return string
|
|
*/
|
|
function bold($string, $bold) {
|
|
return ($bold ? "<b>$string</b>" : $string);
|
|
}
|