"DELIMITER $$ CREATE EVENT `a` ON SCHEDULE EVERY MINUTE DO\n", 'routine' => "DELIMITER $$ CREATE PROCEDURE `a`()\n", 'trigger' => "DELIMITER $$ CREATE TRIGGER `a` AFTER INSERT ON `b` FOR EACH ROW\n", ]; public function __construct(private readonly ResponseFactory $responseFactory) { } public function __invoke(ServerRequest $request): Response { if (! $request->isAjax()) { return ResponseRenderer::getInstance()->response(); } /** * The SQL query to be analyzed. * * This does not need to be checked against XSS or MySQL injections because it is * never executed, just parsed. * * The client, which will receive the JSON response will decode the message and * and any HTML fragments that are displayed to the user will be encoded anyway. */ $sqlQuery = $request->getParsedBodyParamAsString('sql_query', ''); $options = $request->getParsedBodyParam('options', []); $editorType = is_array($options) ? ($options['editorType'] ?? null) : null; $prefix = is_string($editorType) ? self::EDITOR_SQL_PREFIX[$editorType] ?? '' : ''; $lints = Linter::lint($prefix . $sqlQuery); if ($prefix !== '') { // Adjust positions to account for prefix foreach ($lints as $i => $lint) { if ($lint['fromLine'] === 0) { continue; } $lints[$i]['fromLine'] -= 1; $lints[$i]['toLine'] -= 1; } } $response = $this->responseFactory->createResponse(); foreach (Core::headerJSON() as $name => $value) { $response = $response->withHeader($name, $value); } return $response->write((string) json_encode($lints)); } }