checkParameters(['db']);
$GLOBALS['text_dir'] ??= null;
$GLOBALS['urlParams'] ??= null;
$GLOBALS['message'] ??= null;
$GLOBALS['errorUrl'] = Util::getScriptNameForOption($GLOBALS['cfg']['DefaultTabDatabase'], 'database');
$GLOBALS['errorUrl'] .= Url::getCommon(['db' => $GLOBALS['db']], '&');
if (! $this->hasDatabase()) {
return;
}
$GLOBALS['urlParams']['goto'] = Url::getFromRoute('/table/structure');
$GLOBALS['urlParams']['back'] = Url::getFromRoute('/view/create');
/** @var array|null $view */
$view = $request->getParsedBodyParam('view');
// View name is a compulsory field
if (isset($view['name']) && $view['name'] === '') {
$GLOBALS['message'] = Message::error(__('View name can not be empty!'));
$this->response->addJSON('message', $GLOBALS['message']);
$this->response->setRequestStatus(false);
return;
}
$createview = $request->hasBodyParam('createview');
$alterview = $request->hasBodyParam('alterview');
$ajaxdialog = $request->hasBodyParam('ajax_dialog');
if (($createview || $alterview) && $view !== null) {
$GLOBALS['sql_query'] = $this->getSqlQuery($createview, $view);
if (! $this->dbi->tryQuery($GLOBALS['sql_query'])) {
if (! $ajaxdialog) {
$GLOBALS['message'] = Message::rawError($this->dbi->getError());
return;
}
$this->response->addJSON(
'message',
Message::error(
'' . htmlspecialchars($GLOBALS['sql_query']) . '
'
. $this->dbi->getError(),
),
);
$this->response->setRequestStatus(false);
return;
}
$this->setSuccessResponse($view, $ajaxdialog, $request);
return;
}
$GLOBALS['sql_query'] = $request->getParsedBodyParam('sql_query', '');
// prefill values if not already filled from former submission
$viewData = [
'operation' => 'create',
'or_replace' => '',
'algorithm' => '',
'definer' => '',
'sql_security' => '',
'name' => '',
'column_names' => '',
'as' => $GLOBALS['sql_query'],
'with' => '',
];
// Used to prefill the fields when editing a view
if (isset($_GET['db'], $_GET['table'])) {
$item = $this->dbi->fetchSingleRow(
sprintf(
'SELECT `VIEW_DEFINITION`, `CHECK_OPTION`, `DEFINER`, `SECURITY_TYPE`
FROM `INFORMATION_SCHEMA`.`VIEWS`
WHERE TABLE_SCHEMA=%s
AND TABLE_NAME=%s;',
$this->dbi->quoteString($_GET['db']),
$this->dbi->quoteString($_GET['table']),
),
);
$createView = $this->dbi->getTable($_GET['db'], $_GET['table'])
->showCreate();
// CREATE ALGORITHM= DE...
$item['ALGORITHM'] = explode(' ', substr($createView, 17))[0];
$viewData['operation'] = 'alter';
$viewData['definer'] = $item['DEFINER'];
$viewData['sql_security'] = $item['SECURITY_TYPE'];
$viewData['name'] = $_GET['table'];
$viewData['as'] = $item['VIEW_DEFINITION'];
$viewData['with'] = $item['CHECK_OPTION'];
$viewData['algorithm'] = $item['ALGORITHM'];
// MySQL 8.0+ - issue #16194
if (empty($viewData['as'])) {
$parser = new Parser($createView);
/** @var CreateStatement $stmt */
$stmt = $parser->statements[0];
$viewData['as'] = isset($stmt->body) ? TokensList::build($stmt->body) : $viewData['as'];
}
}
if ($view !== null) {
$viewData = array_merge($viewData, $view);
}
$GLOBALS['urlParams']['db'] = $GLOBALS['db'];
$GLOBALS['urlParams']['reload'] = 1;
$this->addScriptFiles(['sql.js']);
echo $this->template->render('view_create', [
'ajax_dialog' => $ajaxdialog,
'text_dir' => $GLOBALS['text_dir'],
'url_params' => $GLOBALS['urlParams'],
'view' => $viewData,
'view_algorithm_options' => self::VIEW_ALGORITHM_OPTIONS,
'view_with_options' => self::VIEW_WITH_OPTIONS,
'view_security_options' => self::VIEW_SECURITY_OPTIONS,
]);
}
private function setSuccessResponse(array $view, bool $ajaxdialog, ServerRequest $request): void
{
// If different column names defined for VIEW
$viewColumns = [];
if (isset($view['column_names'])) {
$viewColumns = explode(',', $view['column_names']);
}
$systemDb = $this->dbi->getSystemDatabase();
$pmaTransformationData = $systemDb->getExistingTransformationData($GLOBALS['db']);
if ($pmaTransformationData !== false) {
$columnMap = $systemDb->getColumnMapFromSql($view['as'], $viewColumns);
// SQL for store new transformation details of VIEW
$newTransformationsSql = $systemDb->getNewTransformationDataSql(
$pmaTransformationData,
$columnMap,
$view['name'],
$GLOBALS['db'],
);
// Store new transformations
if ($newTransformationsSql !== '') {
$this->dbi->tryQuery($newTransformationsSql);
}
}
if ($ajaxdialog) {
$GLOBALS['message'] = Message::success();
/** @var StructureController $controller */
$controller = Core::getContainerBuilder()->get(StructureController::class);
$controller($request);
} else {
$this->response->addJSON(
'message',
Generator::getMessage(
Message::success(),
$GLOBALS['sql_query'],
),
);
$this->response->setRequestStatus(true);
}
}
/**
* Creates the view
*/
private function getSqlQuery(bool $createview, array $view): string
{
$separator = "\r\n";
if ($createview) {
$sqlQuery = 'CREATE';
if (isset($view['or_replace'])) {
$sqlQuery .= ' OR REPLACE';
}
} else {
$sqlQuery = 'ALTER';
}
if (
isset($view['algorithm'])
&& in_array($view['algorithm'], self::VIEW_ALGORITHM_OPTIONS)
) {
$sqlQuery .= $separator . ' ALGORITHM = ' . $view['algorithm'];
}
if (! empty($view['definer'])) {
if (! str_contains($view['definer'], '@')) {
$sqlQuery .= $separator . 'DEFINER='
. Util::backquote($view['definer']);
} else {
$definerArray = explode('@', $view['definer']);
$sqlQuery .= $separator . 'DEFINER=' . Util::backquote($definerArray[0]);
$sqlQuery .= '@' . Util::backquote($definerArray[1]) . ' ';
}
}
if (
isset($view['sql_security'])
&& in_array($view['sql_security'], self::VIEW_SECURITY_OPTIONS)
) {
$sqlQuery .= $separator . ' SQL SECURITY '
. $view['sql_security'];
}
$sqlQuery .= $separator . ' VIEW '
. Util::backquote($view['name']);
if (! empty($view['column_names'])) {
$sqlQuery .= $separator . ' (' . $view['column_names'] . ')';
}
$sqlQuery .= $separator . ' AS ' . $view['as'];
if (isset($view['with']) && in_array($view['with'], self::VIEW_WITH_OPTIONS)) {
$sqlQuery .= $separator . ' WITH ' . $view['with'] . ' CHECK OPTION';
}
return $sqlQuery;
}
}