c7e9d9049a
* Replaced superglobal in LintController Signed-off-by: Maria Papadopoulou <1maria.papa@gmail.com>
67 lines
2.0 KiB
PHP
67 lines
2.0 KiB
PHP
<?php
|
|
/**
|
|
* Represents the interface between the linter and the query editor.
|
|
*/
|
|
|
|
declare(strict_types=1);
|
|
|
|
namespace PhpMyAdmin\Controllers;
|
|
|
|
use PhpMyAdmin\Core;
|
|
use PhpMyAdmin\Http\ServerRequest;
|
|
use PhpMyAdmin\Linter;
|
|
|
|
use function header;
|
|
use function json_encode;
|
|
use function sprintf;
|
|
|
|
/**
|
|
* Represents the interface between the linter and the query editor.
|
|
*/
|
|
class LintController extends AbstractController
|
|
{
|
|
public function __invoke(ServerRequest $request): void
|
|
{
|
|
$params = [
|
|
'sql_query' => $request->getParsedBodyParam('sql_query'),
|
|
'options' => $request->getParsedBodyParam('options'),
|
|
];
|
|
|
|
/**
|
|
* The SQL query to be analyzed.
|
|
*
|
|
* This does not need to be checked again XSS or MySQL injections because it is
|
|
* never executed, just parsed.
|
|
*
|
|
* The client, which will receive the JSON response will decode the message and
|
|
* and any HTML fragments that are displayed to the user will be encoded anyway.
|
|
*
|
|
* @var string
|
|
*/
|
|
$sqlQuery = ! empty($params['sql_query']) ? $params['sql_query'] : '';
|
|
|
|
$this->response->setAjax(true);
|
|
|
|
// Disabling standard response.
|
|
$this->response->disable();
|
|
|
|
foreach (Core::headerJSON() as $name => $value) {
|
|
header(sprintf('%s: %s', $name, $value));
|
|
}
|
|
|
|
if (! empty($params['options'])) {
|
|
$options = $params['options'];
|
|
|
|
if (! empty($options['routineEditor'])) {
|
|
$sqlQuery = 'CREATE PROCEDURE `a`() ' . $sqlQuery;
|
|
} elseif (! empty($options['triggerEditor'])) {
|
|
$sqlQuery = 'CREATE TRIGGER `a` AFTER INSERT ON `b` FOR EACH ROW ' . $sqlQuery;
|
|
} elseif (! empty($options['eventEditor'])) {
|
|
$sqlQuery = 'CREATE EVENT `a` ON SCHEDULE EVERY MINUTE DO ' . $sqlQuery;
|
|
}
|
|
}
|
|
|
|
echo json_encode(Linter::lint($sqlQuery));
|
|
}
|
|
}
|
