phpmyadmin/libraries/classes/Controllers/Table/RowActionController.php
Maurício Meneghini Fauth 0e88a5ba0f Extract actions from /table/row-action route
Signed-off-by: Maurício Meneghini Fauth <mauricio@fauth.dev>
2020-04-30 01:29:36 -03:00

292 lines
9.3 KiB
PHP

<?php
declare(strict_types=1);
namespace PhpMyAdmin\Controllers\Table;
use PhpMyAdmin\Common;
use PhpMyAdmin\Sql;
use PhpMyAdmin\Url;
use PhpMyAdmin\Util;
use function is_array;
/**
* Handle row specific actions like edit, delete, export.
*/
class RowActionController extends AbstractController
{
public function delete(): void
{
global $db, $goto, $pmaThemeImage, $sql_query, $table, $disp_message, $disp_query, $action;
global $submit_mult, $active_page, $err_url, $original_sql_query, $url_query, $original_url_query;
global $mult_btn, $query_type, $reload, $selected, $selected_fld;
$submit_mult = $_POST['submit_mult'] ?? '';
if ($submit_mult === 'delete' || isset($_POST['mult_btn'])) {
$submit_mult = 'row_delete';
}
if (empty($submit_mult)) {
return;
}
if (isset($_POST['goto']) && (! isset($_POST['rows_to_delete']) || ! is_array($_POST['rows_to_delete']))) {
$this->response->setRequestStatus(false);
$this->response->addJSON('message', __('No row selected.'));
}
$action = Url::getFromRoute('/table/row-action');
$err_url = Url::getFromRoute('/table/row-action', $GLOBALS['url_params']);
if (! isset($_POST['mult_btn'])) {
$original_sql_query = $sql_query;
if (! empty($url_query)) {
$original_url_query = $url_query;
}
}
$goto = $_POST['goto'] ?? $goto ?? '';
$mult_btn = $_POST['mult_btn'] ?? $mult_btn ?? null;
$original_sql_query = $_POST['original_sql_query'] ?? $original_sql_query ?? null;
$query_type = $_POST['query_type'] ?? $query_type ?? null;
$reload = $_POST['reload'] ?? $reload ?? null;
$selected = $_POST['selected'] ?? $selected ?? [];
$selected_fld = $_POST['selected_fld'] ?? $selected_fld ?? null;
$sql_query = $_POST['sql_query'] ?? $sql_query ?? '';
$submit_mult = $_POST['submit_mult'] ?? $submit_mult ?? null;
$url_query = $_POST['url_query'] ?? $url_query ?? null;
if (! empty($submit_mult)
&& $submit_mult != __('With selected:')
&& (! empty($_POST['selected_tbl'])
|| ! empty($selected_fld)
|| ! empty($_POST['rows_to_delete']))
) {
// phpcs:disable PSR1.Files.SideEffects
define('PMA_SUBMIT_MULT', 1);
// phpcs:enable
if (! (isset($selected_fld) && ! empty($selected_fld))) {
// coming from browsing - do something with selected rows
$what = 'row_delete';
$selected = $_REQUEST['rows_to_delete'];
}
}
if (! empty($mult_btn) && $mult_btn == __('Yes')) {
$default_fk_check_value = false;
if ($query_type == 'drop_tbl'
|| $query_type == 'empty_tbl'
|| $query_type == 'row_delete'
) {
$default_fk_check_value = Util::handleDisableFKCheckInit();
}
$aQuery = '';
$sql_query = '';
$sql_query_views = null;
// whether to run query after each pass
$run_parts = false;
$result = null;
$selectedCount = count($selected);
$deletes = false;
for ($i = 0; $i < $selectedCount; $i++) {
switch ($query_type) {
case 'row_delete':
$deletes = true;
$aQuery = $selected[$i];
$run_parts = true;
break;
}
if ($run_parts) {
$sql_query .= $aQuery . ';' . "\n";
$this->dbi->selectDb($db);
$result = $this->dbi->query($aQuery);
}
}
if ($deletes && ! empty($_REQUEST['pos'])) {
$sql = new Sql();
$_REQUEST['pos'] = $sql->calculatePosForLastPage(
$db,
$table,
$_REQUEST['pos'] ?? null
);
}
if ($query_type == 'drop_tbl'
|| $query_type == 'empty_tbl'
|| $query_type == 'row_delete'
) {
Util::handleDisableFKCheckCleanup($default_fk_check_value);
}
}
$_url_params = $GLOBALS['url_params'];
$_url_params['goto'] = Url::getFromRoute('/table/sql');
$url_query = Url::getCommon($_url_params);
/**
* Show result of multi submit operation
*/
// sql_query is not set when user does not confirm multi-delete
if ((! empty($submit_mult) || isset($_POST['mult_btn']))
&& ! empty($sql_query)
) {
$disp_message = __('Your SQL query has been executed successfully.');
$disp_query = $sql_query;
}
if (isset($original_sql_query)) {
$sql_query = $original_sql_query;
}
if (isset($original_url_query)) {
$url_query = $original_url_query;
}
$active_page = Url::getFromRoute('/sql');
$sql = new Sql();
$sql->executeQueryAndSendQueryResponse(
null,
false,
$db,
$table,
null,
null,
null,
null,
null,
null,
$goto,
$pmaThemeImage,
null,
null,
null,
$sql_query,
null,
null
);
}
public function confirmDelete(): void
{
global $db, $table, $sql_query;
$selected = $_POST['rows_to_delete'] ?? null;
if (! isset($selected) || ! is_array($selected)) {
$this->response->setRequestStatus(false);
$this->response->addJSON('message', __('No row selected.'));
return;
}
Common::table();
$rows = [];
foreach ($selected as $row) {
$rows[] = sprintf('DELETE FROM %s WHERE %s LIMIT 1;', Util::backquote($table), $row);
}
$hiddenInputs = [
'db' => $db,
'table' => $table,
'selected' => $rows,
'original_sql_query' => $sql_query,
'query_type' => 'row_delete',
'fk_checks' => '0',
];
$this->render('table/row_action/confirm_delete', [
'table' => $table,
'selected' => $selected,
'hidden_inputs' => $hiddenInputs,
'is_foreign_key_check' => Util::isForeignKeyCheck(),
]);
}
public function edit(): void
{
global $containerBuilder, $submit_mult, $active_page, $where_clause;
$submit_mult = $_POST['submit_mult'] ?? '';
if (empty($submit_mult)) {
return;
}
if ($submit_mult === 'edit') {
$submit_mult = 'row_edit';
} elseif ($submit_mult === 'copy') {
$submit_mult = 'row_copy';
}
if ($submit_mult === 'row_copy') {
$_POST['default_action'] = 'insert';
}
if (isset($_POST['goto']) && (! isset($_POST['rows_to_delete']) || ! is_array($_POST['rows_to_delete']))) {
$this->response->setRequestStatus(false);
$this->response->addJSON('message', __('No row selected.'));
return;
}
// As we got the rows to be edited from the
// 'rows_to_delete' checkbox, we use the index of it as the
// indicating WHERE clause. Then we build the array which is used
// for the /table/change script.
$where_clause = [];
if (isset($_POST['rows_to_delete']) && is_array($_POST['rows_to_delete'])) {
foreach ($_POST['rows_to_delete'] as $i => $i_where_clause) {
$where_clause[] = $i_where_clause;
}
}
$active_page = Url::getFromRoute('/table/change');
/** @var ChangeController $controller */
$controller = $containerBuilder->get(ChangeController::class);
$controller->index();
}
public function export(): void
{
global $containerBuilder, $active_page, $single_table, $where_clause, $submit_mult;
$submit_mult = 'row_export';
if (isset($_POST['goto']) && (! isset($_POST['rows_to_delete']) || ! is_array($_POST['rows_to_delete']))) {
$this->response->setRequestStatus(false);
$this->response->addJSON('message', __('No row selected.'));
return;
}
// Needed to allow SQL export
$single_table = true;
// As we got the rows to be exported from the
// 'rows_to_delete' checkbox, we use the index of it as the
// indicating WHERE clause. Then we build the array which is used
// for the /table/change script.
$where_clause = [];
if (isset($_POST['rows_to_delete']) && is_array($_POST['rows_to_delete'])) {
foreach ($_POST['rows_to_delete'] as $i => $i_where_clause) {
$where_clause[] = $i_where_clause;
}
}
$active_page = Url::getFromRoute('/table/export');
/** @var ExportController $controller */
$controller = $containerBuilder->get(ExportController::class);
$controller->index();
}
}