1, "str" => "str_val", "arr" => ['val1', 'val2', 'val3'], "sarr" => [ 'arr1' => [1, 2, 3], [3, ['a', 'b', 'c'], 4] ] ]; $this->assertEquals( Core::arrayRead('int', $arr), $arr['int'] ); $this->assertEquals( Core::arrayRead('str', $arr), $arr['str'] ); $this->assertEquals( Core::arrayRead('arr/0', $arr), $arr['arr'][0] ); $this->assertEquals( Core::arrayRead('arr/1', $arr), $arr['arr'][1] ); $this->assertEquals( Core::arrayRead('arr/2', $arr), $arr['arr'][2] ); $this->assertEquals( Core::arrayRead('sarr/arr1/0', $arr), $arr['sarr']['arr1'][0] ); $this->assertEquals( Core::arrayRead('sarr/arr1/1', $arr), $arr['sarr']['arr1'][1] ); $this->assertEquals( Core::arrayRead('sarr/arr1/2', $arr), $arr['sarr']['arr1'][2] ); $this->assertEquals( Core::arrayRead('sarr/0/0', $arr), $arr['sarr'][0][0] ); $this->assertEquals( Core::arrayRead('sarr/0/1', $arr), $arr['sarr'][0][1] ); $this->assertEquals( Core::arrayRead('sarr/0/1/2', $arr), $arr['sarr'][0][1][2] ); $this->assertEquals( Core::arrayRead('sarr/not_exiting/1', $arr), null ); $this->assertEquals( Core::arrayRead('sarr/not_exiting/1', $arr, 0), 0 ); $this->assertEquals( Core::arrayRead('sarr/not_exiting/1', $arr, 'default_val'), 'default_val' ); } /** * Test for Core::arrayWrite * * @return void */ public function testArrayWrite() { $arr = [ "int" => 1, "str" => "str_val", "arr" => ['val1', 'val2', 'val3'], "sarr" => [ 'arr1' => [1, 2, 3], [3, ['a', 'b', 'c'], 4] ] ]; Core::arrayWrite('int', $arr, 5); $this->assertEquals($arr['int'], 5); Core::arrayWrite('str', $arr, '_str'); $this->assertEquals($arr['str'], '_str'); Core::arrayWrite('arr/0', $arr, 'val_arr_0'); $this->assertEquals($arr['arr'][0], 'val_arr_0'); Core::arrayWrite('arr/1', $arr, 'val_arr_1'); $this->assertEquals($arr['arr'][1], 'val_arr_1'); Core::arrayWrite('arr/2', $arr, 'val_arr_2'); $this->assertEquals($arr['arr'][2], 'val_arr_2'); Core::arrayWrite('sarr/arr1/0', $arr, 'val_sarr_arr_0'); $this->assertEquals($arr['sarr']['arr1'][0], 'val_sarr_arr_0'); Core::arrayWrite('sarr/arr1/1', $arr, 'val_sarr_arr_1'); $this->assertEquals($arr['sarr']['arr1'][1], 'val_sarr_arr_1'); Core::arrayWrite('sarr/arr1/2', $arr, 'val_sarr_arr_2'); $this->assertEquals($arr['sarr']['arr1'][2], 'val_sarr_arr_2'); Core::arrayWrite('sarr/0/0', $arr, 5); $this->assertEquals($arr['sarr'][0][0], 5); Core::arrayWrite('sarr/0/1/0', $arr, 'e'); $this->assertEquals($arr['sarr'][0][1][0], 'e'); Core::arrayWrite('sarr/not_existing/1', $arr, 'some_val'); $this->assertEquals($arr['sarr']['not_existing'][1], 'some_val'); Core::arrayWrite('sarr/0/2', $arr, null); $this->assertNull($arr['sarr'][0][2]); } /** * Test for Core::arrayRemove * * @return void */ public function testArrayRemove() { $arr = [ "int" => 1, "str" => "str_val", "arr" => ['val1', 'val2', 'val3'], "sarr" => [ 'arr1' => [1, 2, 3], [3, ['a', 'b', 'c'], 4] ] ]; Core::arrayRemove('int', $arr); $this->assertArrayNotHasKey('int', $arr); Core::arrayRemove('str', $arr); $this->assertArrayNotHasKey('str', $arr); Core::arrayRemove('arr/0', $arr); $this->assertArrayNotHasKey(0, $arr['arr']); Core::arrayRemove('arr/1', $arr); $this->assertArrayNotHasKey(1, $arr['arr']); Core::arrayRemove('arr/2', $arr); $this->assertArrayNotHasKey('arr', $arr); $tmp_arr = $arr; Core::arrayRemove('sarr/not_existing/1', $arr); $this->assertEquals($tmp_arr, $arr); Core::arrayRemove('sarr/arr1/0', $arr); $this->assertArrayNotHasKey(0, $arr['sarr']['arr1']); Core::arrayRemove('sarr/arr1/1', $arr); $this->assertArrayNotHasKey(1, $arr['sarr']['arr1']); Core::arrayRemove('sarr/arr1/2', $arr); $this->assertArrayNotHasKey('arr1', $arr['sarr']); Core::arrayRemove('sarr/0/0', $arr); $this->assertArrayNotHasKey(0, $arr['sarr'][0]); Core::arrayRemove('sarr/0/1/0', $arr); $this->assertArrayNotHasKey(0, $arr['sarr'][0][1]); Core::arrayRemove('sarr/0/1/1', $arr); $this->assertArrayNotHasKey(1, $arr['sarr'][0][1]); Core::arrayRemove('sarr/0/1/2', $arr); $this->assertArrayNotHasKey(1, $arr['sarr'][0]); Core::arrayRemove('sarr/0/2', $arr); $this->assertEmpty($arr); } /** * Test for Core::checkPageValidity * * @param string $page Page * @param array|null $whiteList White list * @param int $expected Expected value * * @return void * * @dataProvider providerTestGotoNowhere */ public function testGotoNowhere($page, $whiteList, $expected) { $this->assertSame($expected, Core::checkPageValidity($page, $whiteList)); } /** * Data provider for testGotoNowhere * * @return array */ public function providerTestGotoNowhere() { return [ ['', [], false], ['', [''], false], ['export.php', [], true], ['export.php', $this->goto_whitelist, true], ['shell.php', $this->goto_whitelist, false], ['index.php?sql.php&test=true', $this->goto_whitelist, true], ['index.php%3Fsql.php%26test%3Dtrue', $this->goto_whitelist, true], ]; } /** * Test for Core::cleanupPathInfo * * @param string $php_self The PHP_SELF value * @param string $request The REQUEST_URI value * @param string $path_info The PATH_INFO value * @param string $expected Expected result * * @return void * * @dataProvider providerTestPathInfo */ public function testPathInfo($php_self, $request, $path_info, $expected) { $_SERVER['PHP_SELF'] = $php_self; $_SERVER['REQUEST_URI'] = $request; $_SERVER['PATH_INFO'] = $path_info; Core::cleanupPathInfo(); $this->assertEquals( $expected, $GLOBALS['PMA_PHP_SELF'] ); } /** * Data provider for Core::cleanupPathInfo tests * * @return array */ public function providerTestPathInfo() { return [ [ '/phpmyadmin/index.php/; cookieinj=value/', '/phpmyadmin/index.php/;%20cookieinj=value///', '/; cookieinj=value/', '/phpmyadmin/index.php' ], [ '', '/phpmyadmin/index.php/;%20cookieinj=value///', '/; cookieinj=value/', '/phpmyadmin/index.php' ], [ '', '//example.com/../phpmyadmin/index.php', '', '/phpmyadmin/index.php' ], [ '', '//example.com/../../.././phpmyadmin/index.php', '', '/phpmyadmin/index.php' ], [ '', '/page.php/malicouspathinfo?malicouspathinfo', 'malicouspathinfo', '/page.php' ], [ '/phpmyadmin/./index.php', '/phpmyadmin/./index.php', '', '/phpmyadmin/index.php' ], [ '/phpmyadmin/index.php', '/phpmyadmin/index.php', '', '/phpmyadmin/index.php' ], [ '', '/phpmyadmin/index.php', '', '/phpmyadmin/index.php' ], ]; } /** * Test for Core::fatalError * * @return void */ public function testFatalErrorMessage() { $this->expectOutputRegex("/FatalError!/"); Core::fatalError("FatalError!"); } /** * Test for Core::fatalError * * @return void */ public function testFatalErrorMessageWithArgs() { $message = "Fatal error #%d in file %s."; $params = [1, 'error_file.php']; $this->expectOutputRegex("/Fatal error #1 in file error_file.php./"); Core::fatalError($message, $params); $message = "Fatal error in file %s."; $params = 'error_file.php'; $this->expectOutputRegex("/Fatal error in file error_file.php./"); Core::fatalError($message, $params); } /** * Test for Core::getRealSize * * @param string $size Size * @param int $expected Expected value * * @return void * * @dataProvider providerTestGetRealSize */ public function testGetRealSize($size, $expected) { $this->assertEquals($expected, Core::getRealSize($size)); } /** * Data provider for testGetRealSize * * @return array */ public function providerTestGetRealSize() { return [ ['0', 0], ['1kb', 1024], ['1024k', 1024 * 1024], ['8m', 8 * 1024 * 1024], ['12gb', 12 * 1024 * 1024 * 1024], ['1024', 1024], ]; } /** * Test for Core::getPHPDocLink * * @return void */ public function testGetPHPDocLink() { $lang = _pgettext('PHP documentation language', 'en'); $this->assertEquals( Core::getPHPDocLink('function'), './url.php?url=https%3A%2F%2Fsecure.php.net%2Fmanual%2F' . $lang . '%2Ffunction' ); } /** * Test for Core::linkURL * * @param string $link URL where to go * @param string $url Expected value * * @return void * * @dataProvider providerTestLinkURL */ public function testLinkURL($link, $url) { $this->assertEquals(Core::linkURL($link), $url); } /** * Data provider for testLinkURL * * @return array */ public function providerTestLinkURL() { return [ ['https://wiki.phpmyadmin.net', './url.php?url=https%3A%2F%2Fwiki.phpmyadmin.net'], ['https://wiki.phpmyadmin.net', './url.php?url=https%3A%2F%2Fwiki.phpmyadmin.net'], ['wiki.phpmyadmin.net', 'wiki.phpmyadmin.net'], ['index.php?db=phpmyadmin', 'index.php?db=phpmyadmin'] ]; } /** * Test for Core::sendHeaderLocation * * @return void */ public function testSendHeaderLocationWithoutSidWithIis() { $GLOBALS['server'] = 0; $GLOBALS['PMA_Config'] = new Config(); $GLOBALS['PMA_Config']->enableBc(); $GLOBALS['PMA_Config']->set('PMA_IS_IIS', true); $testUri = 'https://example.com/test.php'; $this->mockResponse('Location: ' . $testUri); Core::sendHeaderLocation($testUri); // sets $GLOBALS['header'] $this->tearDown(); $this->mockResponse('Refresh: 0; ' . $testUri); Core::sendHeaderLocation($testUri, true); // sets $GLOBALS['header'] } /** * Test for Core::sendHeaderLocation * * @return void */ public function testSendHeaderLocationWithoutSidWithoutIis() { $GLOBALS['server'] = 0; $GLOBALS['PMA_Config'] = new Config(); $GLOBALS['PMA_Config']->enableBc(); $GLOBALS['PMA_Config']->set('PMA_IS_IIS', null); $testUri = 'https://example.com/test.php'; $this->mockResponse('Location: ' . $testUri); Core::sendHeaderLocation($testUri); // sets $GLOBALS['header'] } /** * Test for Core::sendHeaderLocation * * @return void */ public function testSendHeaderLocationIisLongUri() { $GLOBALS['server'] = 0; $GLOBALS['PMA_Config'] = new Config(); $GLOBALS['PMA_Config']->enableBc(); $GLOBALS['PMA_Config']->set('PMA_IS_IIS', true); // over 600 chars $testUri = 'https://example.com/test.php?testlonguri=over600chars&test=test' . '&test=test&test=test&test=test&test=test&test=test&test=test' . '&test=test&test=test&test=test&test=test&test=test&test=test' . '&test=test&test=test&test=test&test=test&test=test&test=test' . '&test=test&test=test&test=test&test=test&test=test&test=test' . '&test=test&test=test&test=test&test=test&test=test&test=test' . '&test=test&test=test&test=test&test=test&test=test&test=test' . '&test=test&test=test&test=test&test=test&test=test&test=test' . '&test=test&test=test&test=test&test=test&test=test&test=test' . '&test=test&test=test&test=test&test=test&test=test&test=test' . '&test=test&test=test'; $testUri_html = htmlspecialchars($testUri); $testUri_js = Sanitize::escapeJsString($testUri); $header = "\n\n - - - " . "\n " . "\n " . "\n " . "\n \n \n\n\n "; $this->expectOutputString($header); $this->mockResponse(); Core::sendHeaderLocation($testUri); } /** * Test for Core::ifSetOr * * @return void */ public function testVarSet() { $default = 'foo'; $in = 'bar'; $out = Core::ifSetOr($in, $default); $this->assertEquals($in, $out); } /** * Test for Core::ifSetOr * * @return void */ public function testVarSetWrongType() { $default = 'foo'; $in = 'bar'; $out = Core::ifSetOr($in, $default, 'boolean'); $this->assertEquals($out, $default); } /** * Test for Core::ifSetOr * * @return void */ public function testVarNotSet() { $default = 'foo'; // $in is not set! $out = Core::ifSetOr($in, $default); $this->assertEquals($out, $default); } /** * Test for Core::ifSetOr * * @return void */ public function testVarNotSetNoDefault() { // $in is not set! $out = Core::ifSetOr($in); $this->assertNull($out); } /** * Test for unserializing * * @param string $url URL to test * @param mixed $expected Expected result * * @return void * * @dataProvider provideTestIsAllowedDomain */ public function testIsAllowedDomain($url, $expected) { $_SERVER['SERVER_NAME'] = 'server.local'; $this->assertEquals( $expected, Core::isAllowedDomain($url) ); } /** * Test data provider * * @return array */ public function provideTestIsAllowedDomain() { return [ ['https://www.phpmyadmin.net/', true], ['http://duckduckgo.com\\@github.com', false], ['https://github.com/', true], ['https://github.com:123/', false], ['https://user:pass@github.com:123/', false], ['https://user:pass@github.com/', false], ['https://server.local/', true], ['./relative/', false], ]; } /** * Test for Core::isValid * * @param mixed $var Variable to check * @param mixed $type Type * @param mixed $compare Compared value * * @return void * * @dataProvider providerTestNoVarType */ public function testNoVarType($var, $type, $compare) { $this->assertTrue(Core::isValid($var, $type, $compare)); } /** * Data provider for testNoVarType * * @return array */ public static function providerTestNoVarType() { return [ [0, false, 0], [0, false, 1], [1, false, null], [1.1, false, null], ['', false, null], [' ', false, null], ['0', false, null], ['string', false, null], [[], false, null], [[1, 2, 3], false, null], [true, false, null], [false, false, null]]; } /** * Test for Core::isValid * * @return void */ public function testVarNotSetAfterTest() { Core::isValid($var); $this->assertFalse(isset($var)); } /** * Test for Core::isValid * * @return void */ public function testNotSet() { $this->assertFalse(Core::isValid($var)); } /** * Test for Core::isValid * * @return void */ public function testEmptyString() { $var = ''; $this->assertFalse(Core::isValid($var)); } /** * Test for Core::isValid * * @return void */ public function testNotEmptyString() { $var = '0'; $this->assertTrue(Core::isValid($var)); } /** * Test for Core::isValid * * @return void */ public function testZero() { $var = 0; $this->assertTrue(Core::isValid($var)); $this->assertTrue(Core::isValid($var, 'int')); } /** * Test for Core::isValid * * @return void */ public function testNullFail() { $var = null; $this->assertFalse(Core::isValid($var)); $var = 'null_text'; $this->assertFalse(Core::isValid($var, 'null')); } /** * Test for Core::isValid * * @return void */ public function testNotSetArray() { /** @var $array undefined array */ $this->assertFalse(Core::isValid($array['x'])); } /** * Test for Core::isValid * * @return void */ public function testScalarString() { $var = 'string'; $this->assertTrue(Core::isValid($var, 'len')); $this->assertTrue(Core::isValid($var, 'scalar')); $this->assertTrue(Core::isValid($var)); } /** * Test for Core::isValid * * @return void */ public function testScalarInt() { $var = 1; $this->assertTrue(Core::isValid($var, 'int')); $this->assertTrue(Core::isValid($var, 'scalar')); } /** * Test for Core::isValid * * @return void */ public function testScalarFloat() { $var = 1.1; $this->assertTrue(Core::isValid($var, 'float')); $this->assertTrue(Core::isValid($var, 'double')); $this->assertTrue(Core::isValid($var, 'scalar')); } /** * Test for Core::isValid * * @return void */ public function testScalarBool() { $var = true; $this->assertTrue(Core::isValid($var, 'scalar')); $this->assertTrue(Core::isValid($var, 'bool')); $this->assertTrue(Core::isValid($var, 'boolean')); } /** * Test for Core::isValid * * @return void */ public function testNotScalarArray() { $var = ['test']; $this->assertFalse(Core::isValid($var, 'scalar')); } /** * Test for Core::isValid * * @return void */ public function testNotScalarNull() { $var = null; $this->assertFalse(Core::isValid($var, 'scalar')); } /** * Test for Core::isValid * * @return void */ public function testNumericInt() { $var = 1; $this->assertTrue(Core::isValid($var, 'numeric')); } /** * Test for Core::isValid * * @return void */ public function testNumericFloat() { $var = 1.1; $this->assertTrue(Core::isValid($var, 'numeric')); } /** * Test for Core::isValid * * @return void */ public function testNumericZero() { $var = 0; $this->assertTrue(Core::isValid($var, 'numeric')); } /** * Test for Core::isValid * * @return void */ public function testNumericString() { $var = '+0.1'; $this->assertTrue(Core::isValid($var, 'numeric')); } /** * Test for Core::isValid * * @return void */ public function testValueInArray() { $var = 'a'; $this->assertTrue(Core::isValid($var, ['a', 'b',])); } /** * Test for Core::isValid * * @return void */ public function testValueNotInArray() { $var = 'c'; $this->assertFalse(Core::isValid($var, ['a', 'b',])); } /** * Test for Core::isValid * * @return void */ public function testNumericIdentical() { $var = 1; $compare = 1; $this->assertTrue(Core::isValid($var, 'identic', $compare)); $var = 1; $compare += 2; $this->assertFalse(Core::isValid($var, 'identic', $compare)); $var = 1; $compare = '1'; $this->assertFalse(Core::isValid($var, 'identic', $compare)); } /** * Test for Core::isValid * * @param mixed $var Variable * @param mixed $compare Compare * * @return void * * @dataProvider provideTestSimilarType */ public function testSimilarType($var, $compare) { $this->assertTrue(Core::isValid($var, 'similar', $compare)); $this->assertTrue(Core::isValid($var, 'equal', $compare)); $this->assertTrue(Core::isValid($compare, 'similar', $var)); $this->assertTrue(Core::isValid($compare, 'equal', $var)); } /** * Data provider for testSimilarType * * @return array */ public function provideTestSimilarType() { return [ [1, 1], [1.5, 1.5], [true, true], ['string', "string"], [[1, 2, 3.4], [1, 2, 3.4]], [[1, '2', '3.4', 5, 'text'], ['1', '2', 3.4,'5']] ]; } /** * Test for Core::isValid * * @return void */ public function testOtherTypes() { $var = new CoreTest(); $this->assertFalse(Core::isValid($var, 'class')); } /** * Test for unserializing * * @param string $data Serialized data * @param mixed $expected Expected result * * @return void * * @dataProvider provideTestSafeUnserialize */ public function testSafeUnserialize($data, $expected) { $this->assertEquals( $expected, Core::safeUnserialize($data) ); } /** * Test data provider * * @return array */ public function provideTestSafeUnserialize() { return [ ['s:6:"foobar";', 'foobar'], ['foobar', null], ['b:0;', false], ['O:1:"a":1:{s:5:"value";s:3:"100";}', null], ['O:8:"stdClass":1:{s:5:"field";O:8:"stdClass":0:{}}', null], ['a:2:{i:0;s:90:"1234567890;a345678901234567890123456789012345678901234567890123456789012345678901234567890";i:1;O:8:"stdClass":0:{}}', null], [serialize([1, 2, 3]), [1, 2, 3]], [serialize('string""'), 'string""'], [serialize(['foo' => 'bar']), ['foo' => 'bar']], [serialize(['1', new stdClass(), '2']), null], ]; } /** * Test for MySQL host sanitizing * * @param string $host Test host name * @param string $expected Expected result * * @return void * * @dataProvider provideTestSanitizeMySQLHost */ public function testSanitizeMySQLHost($host, $expected) { $this->assertEquals( $expected, Core::sanitizeMySQLHost($host) ); } /** * Test data provider * * @return array */ public function provideTestSanitizeMySQLHost() { return [ ['p:foo.bar', 'foo.bar'], ['p:p:foo.bar', 'foo.bar'], ['bar.baz', 'bar.baz'], ['P:example.com', 'example.com'], ]; } /** * Test for replacing dots. * * @return void */ public function testReplaceDots() { $this->assertEquals( Core::securePath('../../../etc/passwd'), './././etc/passwd' ); $this->assertEquals( Core::securePath('/var/www/../phpmyadmin'), '/var/www/./phpmyadmin' ); $this->assertEquals( Core::securePath('./path/with..dots/../../file..php'), './path/with.dots/././file.php' ); } /** * Test for Core::warnMissingExtension * * @return void */ public function testMissingExtensionFatal() { $ext = 'php_ext'; $warn = 'The ' . $ext . ' extension is missing. Please check your PHP configuration.'; $this->expectOutputRegex('@' . preg_quote($warn, '@') . '@'); Core::warnMissingExtension($ext, true); } /** * Test for Core::warnMissingExtension * * @return void */ public function testMissingExtensionFatalWithExtra() { $ext = 'php_ext'; $extra = 'Appended Extra String'; $warn = 'The ' . $ext . ' extension is missing. Please check your PHP configuration.' . ' ' . $extra; ob_start(); Core::warnMissingExtension($ext, true, $extra); $printed = ob_get_contents(); ob_end_clean(); $this->assertGreaterThan(0, mb_strpos($printed, $warn)); } }