git-svn-id: https://adminer.svn.sourceforge.net/svnroot/adminer/trunk@1147 7c3ca157-0c34-0410-bff1-cbf682f78f5c
158 lines
5.9 KiB
PHP
158 lines
5.9 KiB
PHP
<?php
|
|
$history = &$_SESSION["history"][$_GET["server"]][DB];
|
|
if (!$error && $_POST["clear"]) {
|
|
$history = array();
|
|
redirect(remove_from_uri("history"));
|
|
}
|
|
|
|
page_header(lang('SQL command'), $error);
|
|
|
|
if (!$error && $_POST) {
|
|
$fp = false;
|
|
$query = $_POST["query"];
|
|
if ($_POST["webfile"]) {
|
|
$fp = @fopen((file_exists("adminer.sql") ? "adminer.sql"
|
|
: (file_exists("adminer.sql.gz") ? "compress.zlib://adminer.sql.gz"
|
|
: "compress.bzip2://adminer.sql.bz2"
|
|
)), "rb");
|
|
$query = ($fp ? fread($fp, 1e6) : false);
|
|
} elseif ($_POST["file"]) {
|
|
$query = get_file("sql_file", true);
|
|
}
|
|
if (is_string($query)) { // get_file() returns error as number, fread() as false
|
|
@ini_set("memory_limit", 2 * strlen($query) + memory_get_usage() + 2e6); // @ - may be disabled, 2 - substr and trim, 2e6 - other variables
|
|
if (strlen($query) && strlen($query) < 1e6 && (!$history || end($history) != $query)) { // don't add repeated and big queries
|
|
$history[] = $query;
|
|
}
|
|
$space = "(\\s|/\\*.*\\*/|(#|-- )[^\n]*\n|--\n)";
|
|
$alter_database = "(CREATE|DROP)$space+(DATABASE|SCHEMA)\\b~isU";
|
|
$databases = &$_SESSION["databases"][$_GET["server"]];
|
|
if (isset($databases) && !preg_match("~\\b$alter_database", $query)) { // quick check - may be inside string
|
|
//! false positive with $fp
|
|
session_write_close();
|
|
}
|
|
$delimiter = ";";
|
|
$offset = 0;
|
|
$empty = true;
|
|
$connection2 = (strlen(DB) ? connect() : null); // connection for exploring indexes and EXPLAIN (to not replace FOUND_ROWS()) //! PDO - silent error
|
|
if (is_object($connection2)) {
|
|
$connection2->select_db(DB);
|
|
}
|
|
$explain = 1;
|
|
while (strlen($query)) {
|
|
if (!$offset && preg_match('~^\\s*DELIMITER\\s+(.+)~i', $query, $match)) {
|
|
$delimiter = $match[1];
|
|
$query = substr($query, strlen($match[0]));
|
|
} else {
|
|
preg_match('(' . preg_quote($delimiter) . '|[\'`"]|/\\*|-- |#|$)', $query, $match, PREG_OFFSET_CAPTURE, $offset); // should always match
|
|
$found = $match[0][0];
|
|
$offset = $match[0][1] + strlen($found);
|
|
if (!$found && $fp && !feof($fp)) {
|
|
$query .= fread($fp, 1e6);
|
|
} else {
|
|
if (!$found && !strlen(rtrim($query))) {
|
|
break;
|
|
}
|
|
if (!$found || $found == $delimiter) { // end of a query
|
|
$empty = false;
|
|
$q = substr($query, 0, $match[0][1]);
|
|
echo "<pre class='jush-sql'>" . shorten_utf8(trim($q), 1000) . "</pre>\n";
|
|
ob_flush();
|
|
flush(); // can take a long time - show the running query
|
|
$start = explode(" ", microtime()); // microtime(true) is available since PHP 5
|
|
//! don't allow changing of character_set_results, convert encoding of displayed query
|
|
if (!$connection->multi_query($q)) {
|
|
echo "<p class='error'>" . lang('Error in query') . ": " . h($connection->error) . "\n";
|
|
if ($_POST["error_stops"]) {
|
|
break;
|
|
}
|
|
} else {
|
|
$end = explode(" ", microtime());
|
|
echo "<p class='time'>" . lang('%.3f s', max(0, $end[0] - $start[0] + $end[1] - $start[1])) . "</p>\n";
|
|
do {
|
|
$result = $connection->store_result();
|
|
if (is_object($result)) {
|
|
select($result, $connection2);
|
|
echo "<p>" . lang('%d row(s)', $result->num_rows);
|
|
if ($connection2 && preg_match("~^$space*SELECT$space+~isU", $q)) {
|
|
$id = "explain-$explain";
|
|
echo ", <a href='#$id' onclick=\"return !toggle('$id');\">EXPLAIN</a>\n";
|
|
echo "<div id='$id' class='hidden'>\n";
|
|
select($connection2->query("EXPLAIN $q"), $connection2);
|
|
echo "</div>\n";
|
|
$explain++;
|
|
}
|
|
} else {
|
|
if (preg_match("~^$space*$alter_database", $query)) {
|
|
$databases = null; // clear cache
|
|
}
|
|
echo "<p class='message'>" . lang('Query executed OK, %d row(s) affected.', $connection->affected_rows) . "\n";
|
|
}
|
|
unset($result); // free resultset
|
|
} while ($connection->next_result());
|
|
}
|
|
$query = substr($query, $offset);
|
|
$offset = 0;
|
|
} else { // find matching quote or comment end
|
|
while (preg_match('~' . ($found == '/*' ? '\\*/' : (ereg('-- |#', $found) ? "\n" : "$found|\\\\.")) . '|$~s', $query, $match, PREG_OFFSET_CAPTURE, $offset)) { //! respect sql_mode NO_BACKSLASH_ESCAPES
|
|
$s = $match[0][0];
|
|
$offset = $match[0][1] + strlen($s);
|
|
if (!$s && $fp && !feof($fp)) {
|
|
$query .= fread($fp, 1e6);
|
|
} elseif ($s[0] != "\\") {
|
|
break;
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
if ($empty) {
|
|
echo "<p class='message'>" . lang('No commands to execute.') . "\n";
|
|
}
|
|
} else {
|
|
echo "<p class='error'>" . upload_error($query) . "\n";
|
|
}
|
|
}
|
|
?>
|
|
|
|
<form action="" method="post" enctype="multipart/form-data">
|
|
<p><textarea name="query" rows="20" cols="80" style="width: 98%;"><?php
|
|
$q = $_GET["sql"];
|
|
if ($_POST) {
|
|
$q = $_POST["query"];
|
|
} elseif (strlen($_GET["history"])) {
|
|
$q = $history[$_GET["history"]];
|
|
}
|
|
echo h($q);
|
|
?></textarea>
|
|
<p>
|
|
<input type="hidden" name="token" value="<?php echo $token; ?>">
|
|
<input type="submit" value="<?php echo lang('Execute'); ?>">
|
|
<?php echo checkbox("error_stops", 1, $_POST["error_stops"], lang('Stop on error')); ?>
|
|
|
|
<p>
|
|
<?php
|
|
if (!ini_get("file_uploads")) {
|
|
echo lang('File uploads are disabled.');
|
|
} else { ?>
|
|
<?php echo lang('File upload'); ?>: <input type="file" name="sql_file">
|
|
<input type="submit" name="file" value="<?php echo lang('Run file'); ?>">
|
|
<?php } ?>
|
|
|
|
<p><?php echo lang('Webserver file %s', '<code>adminer.sql</code>'); ?> <input type="submit" name="webfile" value="<?php echo lang('Run file'); ?>">
|
|
|
|
<?php
|
|
if ($history) {
|
|
echo "<fieldset><legend>" . lang('History') . "</legend>\n";
|
|
foreach ($history as $key => $val) {
|
|
//! save and display timestamp
|
|
echo '<a href="' . h(ME . "sql=&history=$key") . '">' . lang('Edit') . '</a> <code class="jush-sql">' . shorten_utf8(ltrim(str_replace("\n", " ", str_replace("\r", "", preg_replace('~^(#|-- ).*~m', '', $val)))), 80, "</code>") . "<br>\n";
|
|
}
|
|
echo "<input type='submit' name='clear' value='" . lang('Clear') . "'>\n";
|
|
echo "</fieldset>\n";
|
|
}
|
|
?>
|
|
|
|
</form>
|