git-svn-id: https://adminer.svn.sourceforge.net/svnroot/adminer/trunk@507 7c3ca157-0c34-0410-bff1-cbf682f78f5c
78 lines
3.3 KiB
PHP
78 lines
3.3 KiB
PHP
<?php
|
|
if (isset($_POST["query"])) {
|
|
setcookie("highlight", $_POST["highlight"], strtotime("+1 month"), preg_replace('~\\?.*~', '', $_SERVER["REQUEST_URI"]));
|
|
$_COOKIE["highlight"] = $_POST["highlight"];
|
|
}
|
|
page_header(lang('SQL command'), $error);
|
|
|
|
if (!$error && $_POST) {
|
|
if (is_string($query = (isset($_POST["query"]) ? $_POST["query"] : get_file("sql_file")))) {
|
|
$delimiter = ";";
|
|
$offset = 0;
|
|
$empty = true;
|
|
while (rtrim($query)) {
|
|
if (!$offset && preg_match('~^\\s*DELIMITER\\s+(.+)~i', $query, $match)) {
|
|
$delimiter = preg_quote($match[1], '~');
|
|
$query = substr($query, strlen($match[0]));
|
|
} elseif (preg_match("~$delimiter|['`\"]|/\\*|-- |#|\$~", $query, $match, PREG_OFFSET_CAPTURE, $offset)) {
|
|
if ($match[0][0] && $match[0][0] != $delimiter) {
|
|
$pattern = ($match[0][0] == "-- " || $match[0][0] == "#" ? '~.*~' : ($match[0][0] == "/*" ? '~.*\\*/~sU' : '~\\G([^\\\\' . $match[0][0] . ']+|\\\\.)*(' . $match[0][0] . '|$)~s'));
|
|
preg_match($pattern, $query, $match, PREG_OFFSET_CAPTURE, $match[0][1] + 1);
|
|
$offset = $match[0][1] + strlen($match[0][0]);
|
|
} else {
|
|
$empty = false;
|
|
echo "<pre class='jush-sql'>" . htmlspecialchars(substr($query, 0, $match[0][1])) . "</pre>\n";
|
|
//! don't allow changing of character_set_results, convert encoding of displayed query
|
|
if (!$mysql->multi_query(substr($query, 0, $match[0][1]))) {
|
|
echo "<p class='error'>" . lang('Error in query') . ": " . htmlspecialchars($mysql->error) . "</p>\n";
|
|
} else {
|
|
do {
|
|
$result = $mysql->store_result();
|
|
if (is_object($result)) {
|
|
select($result);
|
|
} else {
|
|
if (preg_match("~^\\s*(CREATE|DROP)(\\s+|/\\*.*\\*/|(#|-- )[^\n]*\n)+(DATABASE|SCHEMA)\\b~isU", $query)) {
|
|
unset($_SESSION["databases"][$_GET["server"]]);
|
|
}
|
|
echo "<p class='message'>" . lang('Query executed OK, %d row(s) affected.', $mysql->affected_rows) . "</p>\n";
|
|
}
|
|
} while ($mysql->next_result());
|
|
}
|
|
$query = substr($query, $match[0][1] + strlen($match[0][0]));
|
|
$offset = 0;
|
|
}
|
|
}
|
|
}
|
|
if ($empty) {
|
|
echo "<p class='message'>" . lang('No commands to execute.') . "</p>\n";
|
|
}
|
|
} else {
|
|
echo "<p class='error'>" . lang('Unable to upload a file.') . "</p>\n";
|
|
}
|
|
}
|
|
?>
|
|
|
|
<form action="" method="post">
|
|
<p><textarea name="query" rows="20" cols="80" style="width: 98%;"><?php echo htmlspecialchars($_POST ? $_POST["query"] : $_GET["sql"]); ?></textarea></p>
|
|
<p>
|
|
<input type="hidden" name="token" value="<?php echo $token; ?>" />
|
|
<input type="submit" value="<?php echo lang('Execute'); ?>" />
|
|
<script type="text/javascript">// <![CDATA[
|
|
document.write('<label for="highlight"><input type="checkbox" name="highlight" id="highlight" value="jush"<?php echo ($_COOKIE["highlight"] == "jush" ? ' checked="checked"' : ''); ?> /><?php echo addcslashes(lang('Syntax highlighting'), "\r\n'\\"); ?></label>');
|
|
// ]]></script>
|
|
</p>
|
|
</form>
|
|
|
|
<?php
|
|
if (!ini_get("file_uploads")) {
|
|
echo "<p>" . lang('File uploads are disabled.') . "</p>\n";
|
|
} else { ?>
|
|
<form action="" method="post" enctype="multipart/form-data">
|
|
<p>
|
|
<?php echo lang('File upload'); ?>: <input type="file" name="sql_file" />
|
|
<input type="hidden" name="token" value="<?php echo $token; ?>" />
|
|
<input type="submit" value="<?php echo lang('Execute'); ?>" />
|
|
</p>
|
|
</form>
|
|
<?php } ?>
|