($maximum_time - 5)) { $timeout_passed = true; return true; } return false; } /** * Runs query inside import buffer. This is needed to allow displaying * of last SELECT, SHOW or HANDLER results and similar nice stuff. * * @param string $sql query to run * @param string $full query to display, this might be commented * @param array &$sql_data SQL parse data storage * * @return void * @access public */ public function executeQuery(string $sql, string $full, array &$sql_data): void { global $go_sql, $sql_query, $my_die, $error, $reload, $result, $msg, $cfg, $sql_query_disabled, $db; $result = $GLOBALS['dbi']->tryQuery($sql); // USE query changes the database, son need to track // while running multiple queries $is_use_query = mb_stripos($sql, "use ") !== false; $msg = '# '; if ($result === false) { // execution failed if (! isset($my_die)) { $my_die = []; } $my_die[] = [ 'sql' => $full, 'error' => $GLOBALS['dbi']->getError() ]; $msg .= __('Error'); if (! $cfg['IgnoreMultiSubmitErrors']) { $error = true; return; } } else { $a_num_rows = (int)@$GLOBALS['dbi']->numRows($result); $a_aff_rows = (int)@$GLOBALS['dbi']->affectedRows(); if ($a_num_rows > 0) { $msg .= __('Rows') . ': ' . $a_num_rows; } elseif ($a_aff_rows > 0) { $message = Message::getMessageForAffectedRows( $a_aff_rows ); $msg .= $message->getMessage(); } else { $msg .= __( 'MySQL returned an empty result set (i.e. zero ' . 'rows).' ); } if (($a_num_rows > 0) || $is_use_query) { $sql_data['valid_sql'][] = $sql; if (!isset($sql_data['valid_queries'])) { $sql_data['valid_queries'] = 0; } $sql_data['valid_queries']++; } } if (! $sql_query_disabled) { $sql_query .= $msg . "\n"; } // If a 'USE ' SQL-clause was found and the query // succeeded, set our current $db to the new one if ($result != false) { list($db, $reload) = $this->lookForUse( $sql, $db, $reload ); } $pattern = '@^[\s]*(DROP|CREATE)[\s]+(IF EXISTS[[:space:]]+)' . '?(TABLE|DATABASE)[[:space:]]+(.+)@im'; if ($result != false && preg_match($pattern, $sql) ) { $reload = true; } } /** * Runs query inside import buffer. This is needed to allow displaying * of last SELECT, SHOW or HANDLER results and similar nice stuff. * * @param string $sql query to run * @param string $full query to display, this might be commented * @param array &$sql_data SQL parse data storage * * @return void * @access public */ public function runQuery( string $sql = '', string $full = '', array &$sql_data = [] ): void { global $import_run_buffer, $go_sql, $complete_query, $display_query, $sql_query, $error, $reload, $result, $msg, $skip_queries, $executed_queries, $max_sql_len, $read_multiply, $cfg, $sql_query_disabled, $db, $run_query; $read_multiply = 1; if (!isset($import_run_buffer)) { // Do we have something to push into buffer? $import_run_buffer = $this->runQueryPost( $import_run_buffer, $sql, $full ); return; } // Should we skip something? if ($skip_queries > 0) { $skip_queries--; // Do we have something to push into buffer? $import_run_buffer = $this->runQueryPost( $import_run_buffer, $sql, $full ); return; } if (! empty($import_run_buffer['sql']) && trim($import_run_buffer['sql']) != '' ) { $max_sql_len = max( $max_sql_len, mb_strlen($import_run_buffer['sql']) ); if (! $sql_query_disabled) { $sql_query .= $import_run_buffer['full']; } $executed_queries++; if ($run_query && $executed_queries < 50) { $go_sql = true; if (! $sql_query_disabled) { $complete_query = $sql_query; $display_query = $sql_query; } else { $complete_query = ''; $display_query = ''; } $sql_query = $import_run_buffer['sql']; $sql_data['valid_sql'][] = $import_run_buffer['sql']; $sql_data['valid_full'][] = $import_run_buffer['full']; if (! isset($sql_data['valid_queries'])) { $sql_data['valid_queries'] = 0; } $sql_data['valid_queries']++; } elseif ($run_query) { /* Handle rollback from go_sql */ if ($go_sql && isset($sql_data['valid_full'])) { $queries = $sql_data['valid_sql']; $fulls = $sql_data['valid_full']; $count = $sql_data['valid_queries']; $go_sql = false; $sql_data['valid_sql'] = []; $sql_data['valid_queries'] = 0; unset($sql_data['valid_full']); for ($i = 0; $i < $count; $i++) { $this->executeQuery( $queries[$i], $fulls[$i], $sql_data ); } } $this->executeQuery( $import_run_buffer['sql'], $import_run_buffer['full'], $sql_data ); } // end run query // end non empty query } elseif (! empty($import_run_buffer['full'])) { if ($go_sql) { $complete_query .= $import_run_buffer['full']; $display_query .= $import_run_buffer['full']; } else { if (! $sql_query_disabled) { $sql_query .= $import_run_buffer['full']; } } } // check length of query unless we decided to pass it to sql.php // (if $run_query is false, we are just displaying so show // the complete query in the textarea) if (! $go_sql && $run_query) { if (! empty($sql_query)) { if (mb_strlen($sql_query) > 50000 || $executed_queries > 50 || $max_sql_len > 1000 ) { $sql_query = ''; $sql_query_disabled = true; } } } // Do we have something to push into buffer? $import_run_buffer = $this->runQueryPost($import_run_buffer, $sql, $full); // In case of ROLLBACK, notify the user. if (isset($_REQUEST['rollback_query'])) { $msg .= __('[ROLLBACK occurred.]'); } } /** * Return import run buffer * * @param array $import_run_buffer Buffer of queries for import * @param string $sql SQL query * @param string $full Query to display * * @return array Buffer of queries for import */ public function runQueryPost( ?array $import_run_buffer, string $sql, string $full ): array { if (!empty($sql) || !empty($full)) { $import_run_buffer = ['sql' => $sql, 'full' => $full]; return $import_run_buffer; } unset($GLOBALS['import_run_buffer']); return $import_run_buffer; } /** * Looks for the presence of USE to possibly change current db * * @param string $buffer buffer to examine * @param string $db current db * @param bool $reload reload * * @return array (current or new db, whether to reload) * @access public */ public function lookForUse(?string $buffer, ?string $db, ?bool $reload): array { if (preg_match('@^[\s]*USE[[:space:]]+([\S]+)@i', (string) $buffer, $match)) { $db = trim($match[1]); $db = trim($db, ';'); // for example, USE abc; // $db must not contain the escape characters generated by backquote() // ( used in buildSql() as: backquote($db_name), and then called // in runQuery() which in turn calls lookForUse() ) $db = Util::unQuote($db); $reload = true; } return [$db, $reload]; } /** * Returns next part of imported file/buffer * * @param int $size size of buffer to read * (this is maximal size function will return) * * @return string|bool part of file/buffer * @access public */ public function getNextChunk(int $size = 32768) { global $compression, $import_handle, $charset_conversion, $charset_of_file, $read_multiply; // Add some progression while reading large amount of data if ($read_multiply <= 8) { $size *= $read_multiply; } else { $size *= 8; } $read_multiply++; // We can not read too much if ($size > $GLOBALS['read_limit']) { $size = $GLOBALS['read_limit']; } if ($this->checkTimeout()) { return false; } if ($GLOBALS['finished']) { return true; } if ($GLOBALS['import_file'] == 'none') { // Well this is not yet supported and tested, // but should return content of textarea if (mb_strlen($GLOBALS['import_text']) < $size) { $GLOBALS['finished'] = true; return $GLOBALS['import_text']; } else { $r = mb_substr($GLOBALS['import_text'], 0, $size); $GLOBALS['offset'] += $size; $GLOBALS['import_text'] = mb_substr($GLOBALS['import_text'], $size); return $r; } } $result = $import_handle->read($size); $GLOBALS['finished'] = $import_handle->eof(); $GLOBALS['offset'] += $size; if ($charset_conversion) { return Encoding::convertString($charset_of_file, 'utf-8', $result); } /** * Skip possible byte order marks (I do not think we need more * charsets, but feel free to add more, you can use wikipedia for * reference: ) * * @todo BOM could be used for charset autodetection */ if ($GLOBALS['offset'] == $size) { // UTF-8 if (strncmp($result, "\xEF\xBB\xBF", 3) == 0) { $result = mb_substr($result, 3); // UTF-16 BE, LE } elseif (strncmp($result, "\xFE\xFF", 2) == 0 || strncmp($result, "\xFF\xFE", 2) == 0 ) { $result = mb_substr($result, 2); } } return $result; } /** * Returns the "Excel" column name (i.e. 1 = "A", 26 = "Z", 27 = "AA", etc.) * * This functions uses recursion to build the Excel column name. * * The column number (1-26) is converted to the responding * ASCII character (A-Z) and returned. * * If the column number is bigger than 26 (= num of letters in alphabet), * an extra character needs to be added. To find this extra character, * the number is divided by 26 and this value is passed to another instance * of the same function (hence recursion). In that new instance the number is * evaluated again, and if it is still bigger than 26, it is divided again * and passed to another instance of the same function. This continues until * the number is smaller than 26. Then the last called function returns * the corresponding ASCII character to the function that called it. * Each time a called function ends an extra character is added to the column name. * When the first function is reached, the last character is added and the complete * column name is returned. * * @param int $num the column number * * @return string The column's "Excel" name * @access public */ public function getColumnAlphaName(int $num): string { $A = 65; // ASCII value for capital "A" $col_name = ""; if ($num > 26) { $div = (int)($num / 26); $remain = (int)($num % 26); // subtract 1 of divided value in case the modulus is 0, // this is necessary because A-Z has no 'zero' if ($remain == 0) { $div--; } // recursive function call $col_name = $this->getColumnAlphaName($div); // use modulus as new column number $num = $remain; } if ($num == 0) { // use 'Z' if column number is 0, // this is necessary because A-Z has no 'zero' $col_name .= mb_chr(($A + 26) - 1); } else { // convert column number to ASCII character $col_name .= mb_chr(($A + $num) - 1); } return $col_name; } /** * Returns the column number based on the Excel name. * So "A" = 1, "Z" = 26, "AA" = 27, etc. * * Basically this is a base26 (A-Z) to base10 (0-9) conversion. * It iterates through all characters in the column name and * calculates the corresponding value, based on character value * (A = 1, ..., Z = 26) and position in the string. * * @param string $name column name(i.e. "A", or "BC", etc.) * * @return int The column number * @access public */ public function getColumnNumberFromName(string $name): int { if (empty($name)) { return 0; } $name = mb_strtoupper($name); $num_chars = mb_strlen($name); $column_number = 0; for ($i = 0; $i < $num_chars; ++$i) { // read string from back to front $char_pos = ($num_chars - 1) - $i; // convert capital character to ASCII value // and subtract 64 to get corresponding decimal value // ASCII value of "A" is 65, "B" is 66, etc. // Decimal equivalent of "A" is 1, "B" is 2, etc. $number = (int)(mb_ord($name[$char_pos]) - 64); // base26 to base10 conversion : multiply each number // with corresponding value of the position, in this case // $i=0 : 1; $i=1 : 26; $i=2 : 676; ... $column_number += $number * pow(26, $i); } return $column_number; } /** * Obtains the precision (total # of digits) from a size of type decimal * * @param string $last_cumulative_size Size of type decimal * * @return int Precision of the given decimal size notation * @access public */ public function getDecimalPrecision(string $last_cumulative_size): int { return (int) substr( $last_cumulative_size, 0, strpos($last_cumulative_size, ",") ); } /** * Obtains the scale (# of digits to the right of the decimal point) * from a size of type decimal * * @param string $last_cumulative_size Size of type decimal * * @return int Scale of the given decimal size notation * @access public */ public function getDecimalScale(string $last_cumulative_size): int { return (int) substr( $last_cumulative_size, (strpos($last_cumulative_size, ",") + 1), (strlen($last_cumulative_size) - strpos($last_cumulative_size, ",")) ); } /** * Obtains the decimal size of a given cell * * @param string $cell cell content * * @return array Contains the precision, scale, and full size * representation of the given decimal cell * @access public */ public function getDecimalSize(string $cell): array { $curr_size = mb_strlen($cell); $decPos = mb_strpos($cell, "."); $decPrecision = ($curr_size - 1) - $decPos; $m = $curr_size - 1; $d = $decPrecision; return [$m, $d, ($m . "," . $d)]; } /** * Obtains the size of the given cell * * @param string|int $last_cumulative_size Last cumulative column size * @param int $last_cumulative_type Last cumulative column type * (NONE or VARCHAR or DECIMAL or INT or BIGINT) * @param int $curr_type Type of the current cell * (NONE or VARCHAR or DECIMAL or INT or BIGINT) * @param string $cell The current cell * * @return string|int Size of the given cell in the type-appropriate format * @access public * * @todo Handle the error cases more elegantly */ public function detectSize( $last_cumulative_size, int $last_cumulative_type, int $curr_type, string $cell ) { $curr_size = mb_strlen($cell); /** * If the cell is NULL, don't treat it as a varchar */ if (! strcmp('NULL', $cell)) { return $last_cumulative_size; } elseif ($curr_type == self::VARCHAR) { /** * What to do if the current cell is of type VARCHAR */ /** * The last cumulative type was VARCHAR */ if ($last_cumulative_type == self::VARCHAR) { if ($curr_size >= $last_cumulative_size) { return $curr_size; } return $last_cumulative_size; } elseif ($last_cumulative_type == self::DECIMAL) { /** * The last cumulative type was DECIMAL */ $oldM = $this->getDecimalPrecision($last_cumulative_size); if ($curr_size >= $oldM) { return $curr_size; } return $oldM; } elseif ($last_cumulative_type == self::BIGINT || $last_cumulative_type == self::INT) { /** * The last cumulative type was BIGINT or INT */ if ($curr_size >= $last_cumulative_size) { return $curr_size; } return $last_cumulative_size; } elseif (! isset($last_cumulative_type) || $last_cumulative_type == self::NONE) { /** * This is the first row to be analyzed */ return $curr_size; } /** * An error has DEFINITELY occurred */ /** * TODO: Handle this MUCH more elegantly */ return -1; } elseif ($curr_type == self::DECIMAL) { /** * What to do if the current cell is of type DECIMAL */ /** * The last cumulative type was VARCHAR */ if ($last_cumulative_type == self::VARCHAR) { /* Convert $last_cumulative_size from varchar to decimal format */ $size = $this->getDecimalSize($cell); if ($size[self::M] >= $last_cumulative_size) { return $size[self::M]; } return $last_cumulative_size; } elseif ($last_cumulative_type == self::DECIMAL) { /** * The last cumulative type was DECIMAL */ $size = $this->getDecimalSize($cell); $oldM = $this->getDecimalPrecision($last_cumulative_size); $oldD = $this->getDecimalScale($last_cumulative_size); /* New val if M or D is greater than current largest */ if ($size[self::M] > $oldM || $size[self::D] > $oldD) { /* Take the largest of both types */ return (string) ((($size[self::M] > $oldM) ? $size[self::M] : $oldM) . "," . (($size[self::D] > $oldD) ? $size[self::D] : $oldD)); } return $last_cumulative_size; } elseif ($last_cumulative_type == self::BIGINT || $last_cumulative_type == self::INT) { /** * The last cumulative type was BIGINT or INT */ /* Convert $last_cumulative_size from int to decimal format */ $size = $this->getDecimalSize($cell); if ($size[self::M] >= $last_cumulative_size) { return $size[self::FULL]; } return ($last_cumulative_size . "," . $size[self::D]); } elseif (! isset($last_cumulative_type) || $last_cumulative_type == self::NONE) { /** * This is the first row to be analyzed */ /* First row of the column */ $size = $this->getDecimalSize($cell); return $size[self::FULL]; } /** * An error has DEFINITELY occurred */ /** * TODO: Handle this MUCH more elegantly */ return -1; } elseif ($curr_type == self::BIGINT || $curr_type == self::INT) { /** * What to do if the current cell is of type BIGINT or INT */ /** * The last cumulative type was VARCHAR */ if ($last_cumulative_type == self::VARCHAR) { if ($curr_size >= $last_cumulative_size) { return $curr_size; } return $last_cumulative_size; } elseif ($last_cumulative_type == self::DECIMAL) { /** * The last cumulative type was DECIMAL */ $oldM = $this->getDecimalPrecision($last_cumulative_size); $oldD = $this->getDecimalScale($last_cumulative_size); $oldInt = $oldM - $oldD; $newInt = mb_strlen((string)$cell); /* See which has the larger integer length */ if ($oldInt >= $newInt) { /* Use old decimal size */ return $last_cumulative_size; } /* Use $newInt + $oldD as new M */ return (($newInt + $oldD) . "," . $oldD); } elseif ($last_cumulative_type == self::BIGINT || $last_cumulative_type == self::INT) { /** * The last cumulative type was BIGINT or INT */ if ($curr_size >= $last_cumulative_size) { return $curr_size; } return $last_cumulative_size; } elseif (! isset($last_cumulative_type) || $last_cumulative_type == self::NONE) { /** * This is the first row to be analyzed */ return $curr_size; } /** * An error has DEFINITELY occurred */ /** * TODO: Handle this MUCH more elegantly */ return -1; } /** * An error has DEFINITELY occurred */ /** * TODO: Handle this MUCH more elegantly */ return -1; } /** * Determines what MySQL type a cell is * * @param int $last_cumulative_type Last cumulative column type * (VARCHAR or INT or BIGINT or DECIMAL or NONE) * @param string $cell String representation of the cell for which * a best-fit type is to be determined * * @return int The MySQL type representation * (VARCHAR or INT or BIGINT or DECIMAL or NONE) * @access public */ public function detectType(?int $last_cumulative_type, ?string $cell): int { /** * If numeric, determine if decimal, int or bigint * Else, we call it varchar for simplicity */ if (! strcmp('NULL', (string) $cell)) { if ($last_cumulative_type === null || $last_cumulative_type == self::NONE) { return self::NONE; } return $last_cumulative_type; } if (!is_numeric($cell)) { return self::VARCHAR; } if ($cell == (string)(float)$cell && mb_strpos($cell, ".") !== false && mb_substr_count($cell, ".") == 1 ) { return self::DECIMAL; } if (abs($cell) > 2147483647) { return self::BIGINT; } return self::INT; } /** * Determines if the column types are int, decimal, or string * * @param array &$table array(string $table_name, array $col_names, array $rows) * * @return array|bool array(array $types, array $sizes) * @access public * * @link https://wiki.phpmyadmin.net/pma/Import * * @todo Handle the error case more elegantly */ public function analyzeTable(array &$table) { /* Get number of rows in table */ $numRows = count($table[self::ROWS]); /* Get number of columns */ $numCols = count($table[self::COL_NAMES]); /* Current type for each column */ $types = []; $sizes = []; /* Initialize $sizes to all 0's */ for ($i = 0; $i < $numCols; ++$i) { $sizes[$i] = 0; } /* Initialize $types to NONE */ for ($i = 0; $i < $numCols; ++$i) { $types[$i] = self::NONE; } /* If the passed array is not of the correct form, do not process it */ if (!is_array($table) || is_array($table[self::TBL_NAME]) || !is_array($table[self::COL_NAMES]) || !is_array($table[self::ROWS]) ) { /** * TODO: Handle this better */ return false; } /* Analyze each column */ for ($i = 0; $i < $numCols; ++$i) { /* Analyze the column in each row */ for ($j = 0; $j < $numRows; ++$j) { /* Determine type of the current cell */ $curr_type = $this->detectType($types[$i], $table[self::ROWS][$j][$i]); /* Determine size of the current cell */ $sizes[$i] = $this->detectSize( $sizes[$i], $types[$i], $curr_type, $table[self::ROWS][$j][$i] ); /** * If a type for this column has already been declared, * only alter it if it was a number and a varchar was found */ if ($curr_type != self::NONE) { if ($curr_type == self::VARCHAR) { $types[$i] = self::VARCHAR; } elseif ($curr_type == self::DECIMAL) { if ($types[$i] != self::VARCHAR) { $types[$i] = self::DECIMAL; } } elseif ($curr_type == self::BIGINT) { if ($types[$i] != self::VARCHAR && $types[$i] != self::DECIMAL) { $types[$i] = self::BIGINT; } } elseif ($curr_type == self::INT) { if ($types[$i] != self::VARCHAR && $types[$i] != self::DECIMAL && $types[$i] != self::BIGINT ) { $types[$i] = self::INT; } } } } } /* Check to ensure that all types are valid */ $len = count($types); for ($n = 0; $n < $len; ++$n) { if (! strcmp((string) self::NONE, (string) $types[$n])) { $types[$n] = self::VARCHAR; $sizes[$n] = '10'; } } return [$types, $sizes]; } /** * Builds and executes SQL statements to create the database and tables * as necessary, as well as insert all the data. * * @param string $db_name Name of the database * @param array &$tables Array of tables for the specified database * @param array|null &$analyses Analyses of the tables * @param array|null &$additional_sql Additional SQL statements to be executed * @param array|null $options Associative array of options * @param array &$sql_data 2-element array with sql data * * @return void * @access public * * @link https://wiki.phpmyadmin.net/pma/Import */ public function buildSql( string $db_name, array &$tables, ?array &$analyses = null, ?array &$additional_sql = null, ?array $options = null, array &$sql_data ): void { /* Needed to quell the beast that is Message */ $import_notice = null; /* Take care of the options */ if (isset($options['db_collation'])&& ! is_null($options['db_collation'])) { $collation = $options['db_collation']; } else { $collation = "utf8_general_ci"; } if (isset($options['db_charset']) && ! is_null($options['db_charset'])) { $charset = $options['db_charset']; } else { $charset = "utf8"; } if (isset($options['create_db'])) { $create_db = $options['create_db']; } else { $create_db = true; } /* Create SQL code to handle the database */ $sql = []; if ($create_db) { $sql[] = "CREATE DATABASE IF NOT EXISTS " . Util::backquote($db_name) . " DEFAULT CHARACTER SET " . $charset . " COLLATE " . $collation . ";"; } /** * The calling plug-in should include this statement, * if necessary, in the $additional_sql parameter * * $sql[] = "USE " . backquote($db_name); */ /* Execute the SQL statements create above */ $sql_len = count($sql); for ($i = 0; $i < $sql_len; ++$i) { $this->runQuery($sql[$i], $sql[$i], $sql_data); } /* No longer needed */ unset($sql); /* Run the $additional_sql statements supplied by the caller plug-in */ if ($additional_sql != null) { /* Clean the SQL first */ $additional_sql_len = count($additional_sql); /** * Only match tables for now, because CREATE IF NOT EXISTS * syntax is lacking or nonexisting for views, triggers, * functions, and procedures. * * See: https://bugs.mysql.com/bug.php?id=15287 * * To the best of my knowledge this is still an issue. * * $pattern = 'CREATE (TABLE|VIEW|TRIGGER|FUNCTION|PROCEDURE)'; */ $pattern = '/CREATE [^`]*(TABLE)/'; $replacement = 'CREATE \\1 IF NOT EXISTS'; /* Change CREATE statements to CREATE IF NOT EXISTS to support * inserting into existing structures */ for ($i = 0; $i < $additional_sql_len; ++$i) { $additional_sql[$i] = preg_replace( $pattern, $replacement, $additional_sql[$i] ); /* Execute the resulting statements */ $this->runQuery($additional_sql[$i], $additional_sql[$i], $sql_data); } } if ($analyses != null) { $type_array = [ self::NONE => "NULL", self::VARCHAR => "varchar", self::INT => "int", self::DECIMAL => "decimal", self::BIGINT => "bigint", self::GEOMETRY => 'geometry' ]; /* TODO: Do more checking here to make sure they really are matched */ if (count($tables) != count($analyses)) { exit(); } /* Create SQL code to create the tables */ $num_tables = count($tables); for ($i = 0; $i < $num_tables; ++$i) { $num_cols = count($tables[$i][self::COL_NAMES]); $tempSQLStr = "CREATE TABLE IF NOT EXISTS " . Util::backquote($db_name) . '.' . Util::backquote($tables[$i][self::TBL_NAME]) . " ("; for ($j = 0; $j < $num_cols; ++$j) { $size = $analyses[$i][self::SIZES][$j]; if ((int)$size == 0) { $size = 10; } $tempSQLStr .= Util::backquote( $tables[$i][self::COL_NAMES][$j] ) . " " . $type_array[$analyses[$i][self::TYPES][$j]]; if ($analyses[$i][self::TYPES][$j] != self::GEOMETRY) { $tempSQLStr .= "(" . $size . ")"; } if ($j != (count($tables[$i][self::COL_NAMES]) - 1)) { $tempSQLStr .= ", "; } } $tempSQLStr .= ") DEFAULT CHARACTER SET " . $charset . " COLLATE " . $collation . ";"; /** * Each SQL statement is executed immediately * after it is formed so that we don't have * to store them in a (possibly large) buffer */ $this->runQuery($tempSQLStr, $tempSQLStr, $sql_data); } } /** * Create the SQL statements to insert all the data * * Only one insert query is formed for each table */ $tempSQLStr = ""; $col_count = 0; $num_tables = count($tables); for ($i = 0; $i < $num_tables; ++$i) { $num_cols = count($tables[$i][self::COL_NAMES]); $num_rows = count($tables[$i][self::ROWS]); $tempSQLStr = "INSERT INTO " . Util::backquote($db_name) . '.' . Util::backquote($tables[$i][self::TBL_NAME]) . " ("; for ($m = 0; $m < $num_cols; ++$m) { $tempSQLStr .= Util::backquote($tables[$i][self::COL_NAMES][$m]); if ($m != ($num_cols - 1)) { $tempSQLStr .= ", "; } } $tempSQLStr .= ") VALUES "; for ($j = 0; $j < $num_rows; ++$j) { $tempSQLStr .= "("; for ($k = 0; $k < $num_cols; ++$k) { // If fully formatted SQL, no need to enclose // with apostrophes, add slashes etc. if ($analyses != null && isset($analyses[$i][self::FORMATTEDSQL][$col_count]) && $analyses[$i][self::FORMATTEDSQL][$col_count] == true ) { $tempSQLStr .= (string) $tables[$i][self::ROWS][$j][$k]; } else { if ($analyses != null) { $is_varchar = ($analyses[$i][self::TYPES][$col_count] === self::VARCHAR); } else { $is_varchar = ! is_numeric($tables[$i][self::ROWS][$j][$k]); } /* Don't put quotes around NULL fields */ if (! strcmp($tables[$i][self::ROWS][$j][$k], 'NULL')) { $is_varchar = false; } $tempSQLStr .= (($is_varchar) ? "'" : ""); $tempSQLStr .= $GLOBALS['dbi']->escapeString( (string) $tables[$i][self::ROWS][$j][$k] ); $tempSQLStr .= (($is_varchar) ? "'" : ""); } if ($k != ($num_cols - 1)) { $tempSQLStr .= ", "; } if ($col_count == ($num_cols - 1)) { $col_count = 0; } else { $col_count++; } /* Delete the cell after we are done with it */ unset($tables[$i][self::ROWS][$j][$k]); } $tempSQLStr .= ")"; if ($j != ($num_rows - 1)) { $tempSQLStr .= ",\n "; } $col_count = 0; /* Delete the row after we are done with it */ unset($tables[$i][self::ROWS][$j]); } $tempSQLStr .= ";"; /** * Each SQL statement is executed immediately * after it is formed so that we don't have * to store them in a (possibly large) buffer */ $this->runQuery($tempSQLStr, $tempSQLStr, $sql_data); } /* No longer needed */ unset($tempSQLStr); /** * A work in progress */ /* Add the viewable structures from $additional_sql * to $tables so they are also displayed */ $view_pattern = '@VIEW `[^`]+`\.`([^`]+)@'; $table_pattern = '@CREATE TABLE IF NOT EXISTS `([^`]+)`@'; /* Check a third pattern to make sure its not a "USE `db_name`;" statement */ $regs = []; $inTables = false; $additional_sql_len = is_null($additional_sql) ? 0 : count($additional_sql); for ($i = 0; $i < $additional_sql_len; ++$i) { preg_match($view_pattern, $additional_sql[$i], $regs); if (count($regs) == 0) { preg_match($table_pattern, $additional_sql[$i], $regs); } if (count($regs)) { for ($n = 0; $n < $num_tables; ++$n) { if (! strcmp($regs[1], $tables[$n][self::TBL_NAME])) { $inTables = true; break; } } if (! $inTables) { $tables[] = [self::TBL_NAME => $regs[1]]; } } /* Reset the array */ $regs = []; $inTables = false; } $params = ['db' => (string)$db_name]; $db_url = 'db_structure.php' . Url::getCommon($params); $db_ops_url = 'db_operations.php' . Url::getCommon($params); $message = '

'; $message .= '' . __( 'The following structures have either been created or altered. Here you can:' ) . '
'; $message .= ''; global $import_notice; $import_notice = $message; unset($tables); } /** * Stops the import on (mostly upload/file related) error * * @param Message $error_message The error message * * @return void * @access public * */ public function stop(Message $error_message): void { global $import_handle, $file_to_unlink; // Close open handles if ($import_handle !== false && $import_handle !== null) { $import_handle->close(); } // Delete temporary file if ($file_to_unlink != '') { unlink($file_to_unlink); } $msg = $error_message->getDisplay(); $_SESSION['Import_message']['message'] = $msg; $response = Response::getInstance(); $response->setRequestStatus(false); $response->addJSON('message', Message::error($msg)); exit; } /** * Handles request for Simulation of UPDATE/DELETE queries. * * @return void */ public function handleSimulateDmlRequest(): void { $response = Response::getInstance(); $error = false; $error_msg = __('Only single-table UPDATE and DELETE queries can be simulated.'); $sql_delimiter = $_REQUEST['sql_delimiter']; $sql_data = []; $queries = explode($sql_delimiter, $GLOBALS['sql_query']); foreach ($queries as $sql_query) { if (empty($sql_query)) { continue; } // Parsing the query. $parser = new Parser($sql_query); if (empty($parser->statements[0])) { continue; } $statement = $parser->statements[0]; $analyzed_sql_results = [ 'query' => $sql_query, 'parser' => $parser, 'statement' => $statement, ]; if ((!(($statement instanceof UpdateStatement) || ($statement instanceof DeleteStatement))) || (!empty($statement->join)) ) { $error = $error_msg; break; } $tables = Query::getTables($statement); if (count($tables) > 1) { $error = $error_msg; break; } // Get the matched rows for the query. $result = $this->getMatchedRows($analyzed_sql_results); if (! $error = $GLOBALS['dbi']->getError()) { $sql_data[] = $result; } else { break; } } if ($error) { $message = Message::rawError($error); $response->addJSON('message', $message); $response->addJSON('sql_data', false); } else { $response->addJSON('sql_data', $sql_data); } } /** * Find the matching rows for UPDATE/DELETE query. * * @param array $analyzed_sql_results Analyzed SQL results from parser. * * @return array */ public function getMatchedRows(array $analyzed_sql_results = []): array { $statement = $analyzed_sql_results['statement']; $matched_row_query = ''; if ($statement instanceof DeleteStatement) { $matched_row_query = $this->getSimulatedDeleteQuery($analyzed_sql_results); } elseif ($statement instanceof UpdateStatement) { $matched_row_query = $this->getSimulatedUpdateQuery($analyzed_sql_results); } // Execute the query and get the number of matched rows. $matched_rows = $this->executeMatchedRowQuery($matched_row_query); // URL to matched rows. $_url_params = [ 'db' => $GLOBALS['db'], 'sql_query' => $matched_row_query ]; $matched_rows_url = 'sql.php' . Url::getCommon($_url_params); return [ 'sql_query' => Util::formatSql($analyzed_sql_results['query']), 'matched_rows' => $matched_rows, 'matched_rows_url' => $matched_rows_url ]; } /** * Transforms a UPDATE query into SELECT statement. * * @param array $analyzed_sql_results Analyzed SQL results from parser. * * @return string SQL query */ public function getSimulatedUpdateQuery(array $analyzed_sql_results): string { $table_references = Query::getTables( $analyzed_sql_results['statement'] ); $where = Query::getClause( $analyzed_sql_results['statement'], $analyzed_sql_results['parser']->list, 'WHERE' ); if (empty($where)) { $where = '1'; } $columns = []; $diff = []; foreach ($analyzed_sql_results['statement']->set as $set) { $columns[] = $set->column; $not_equal_operator = ' <> '; if (strtoupper($set->value) == 'NULL') { $not_equal_operator = ' IS NOT '; } $diff[] = $set->column . $not_equal_operator . $set->value; } if (!empty($diff)) { $where .= ' AND (' . implode(' OR ', $diff) . ')'; } $order_and_limit = ''; if (!empty($analyzed_sql_results['statement']->order)) { $order_and_limit .= ' ORDER BY ' . Query::getClause( $analyzed_sql_results['statement'], $analyzed_sql_results['parser']->list, 'ORDER BY' ); } if (!empty($analyzed_sql_results['statement']->limit)) { $order_and_limit .= ' LIMIT ' . Query::getClause( $analyzed_sql_results['statement'], $analyzed_sql_results['parser']->list, 'LIMIT' ); } return 'SELECT ' . implode(', ', $columns) . ' FROM ' . implode(', ', $table_references) . ' WHERE ' . $where . $order_and_limit; } /** * Transforms a DELETE query into SELECT statement. * * @param array $analyzed_sql_results Analyzed SQL results from parser. * * @return string SQL query */ public function getSimulatedDeleteQuery(array $analyzed_sql_results): string { $table_references = Query::getTables( $analyzed_sql_results['statement'] ); $where = Query::getClause( $analyzed_sql_results['statement'], $analyzed_sql_results['parser']->list, 'WHERE' ); if (empty($where)) { $where = '1'; } $order_and_limit = ''; if (!empty($analyzed_sql_results['statement']->order)) { $order_and_limit .= ' ORDER BY ' . Query::getClause( $analyzed_sql_results['statement'], $analyzed_sql_results['parser']->list, 'ORDER BY' ); } if (!empty($analyzed_sql_results['statement']->limit)) { $order_and_limit .= ' LIMIT ' . Query::getClause( $analyzed_sql_results['statement'], $analyzed_sql_results['parser']->list, 'LIMIT' ); } return 'SELECT * FROM ' . implode(', ', $table_references) . ' WHERE ' . $where . $order_and_limit; } /** * Executes the matched_row_query and returns the resultant row count. * * @param string $matched_row_query SQL query * * @return integer Number of rows returned */ public function executeMatchedRowQuery(string $matched_row_query): int { $GLOBALS['dbi']->selectDb($GLOBALS['db']); // Execute the query. $result = $GLOBALS['dbi']->tryQuery($matched_row_query); // Count the number of rows in the result set. $result = $GLOBALS['dbi']->numRows($result); return $result; } /** * Handles request for ROLLBACK. * * @param string $sql_query SQL query(s) * * @return void */ public function handleRollbackRequest(string $sql_query): void { $sql_delimiter = $_REQUEST['sql_delimiter']; $queries = explode($sql_delimiter, $sql_query); $error = false; $error_msg = __( 'Only INSERT, UPDATE, DELETE and REPLACE ' . 'SQL queries containing transactional engine tables can be rolled back.' ); foreach ($queries as $sql_query) { if (empty($sql_query)) { continue; } // Check each query for ROLLBACK support. if (! $this->checkIfRollbackPossible($sql_query)) { $global_error = $GLOBALS['dbi']->getError(); if ($global_error) { $error = $global_error; } else { $error = $error_msg; } break; } } if ($error) { unset($_REQUEST['rollback_query']); $response = Response::getInstance(); $message = Message::rawError($error); $response->addJSON('message', $message); exit; } else { // If everything fine, START a transaction. $GLOBALS['dbi']->query('START TRANSACTION'); } } /** * Checks if ROLLBACK is possible for a SQL query or not. * * @param string $sql_query SQL query * * @return bool */ public function checkIfRollbackPossible(string $sql_query): bool { $parser = new Parser($sql_query); if (empty($parser->statements[0])) { return false; } $statement = $parser->statements[0]; // Check if query is supported. if (!(($statement instanceof InsertStatement) || ($statement instanceof UpdateStatement) || ($statement instanceof DeleteStatement) || ($statement instanceof ReplaceStatement)) ) { return false; } // Get table_references from the query. $tables = Query::getTables($statement); // Check if each table is 'InnoDB'. foreach ($tables as $table) { if (! $this->isTableTransactional($table)) { return false; } } return true; } /** * Checks if a table is 'InnoDB' or not. * * @param string $table Table details * * @return bool */ public function isTableTransactional(string $table): bool { $table = explode('.', $table); if (count($table) == 2) { $db = Util::unQuote($table[0]); $table = Util::unQuote($table[1]); } else { $db = $GLOBALS['db']; $table = Util::unQuote($table[0]); } // Query to check if table exists. $check_table_query = 'SELECT * FROM ' . Util::backquote($db) . '.' . Util::backquote($table) . ' ' . 'LIMIT 1'; $result = $GLOBALS['dbi']->tryQuery($check_table_query); if (! $result) { return false; } // List of Transactional Engines. $transactional_engines = [ 'INNODB', 'FALCON', 'NDB', 'INFINIDB', 'TOKUDB', 'XTRADB', 'SEQUENCE', 'BDB' ]; // Query to check if table is 'Transactional'. $check_query = 'SELECT `ENGINE` FROM `information_schema`.`tables` ' . 'WHERE `table_name` = "' . $table . '" ' . 'AND `table_schema` = "' . $db . '" ' . 'AND UPPER(`engine`) IN ("' . implode('", "', $transactional_engines) . '")'; $result = $GLOBALS['dbi']->tryQuery($check_query); return $GLOBALS['dbi']->numRows($result) == 1; } }