4d308ba364
Closing tags at the end of file are not mandatory. It is often suggested to omit to closing tags at the end of file to prevent unwanted effects as PHP will start output buffering if there is any character after closing tag. Reference: http://php.net/manual/en/language.basic-syntax.phptags.php Signed-off-by: Rahul Kadyan <hi@znck.me>
81 lines
2.3 KiB
PHP
81 lines
2.3 KiB
PHP
<?php
|
|
/* vim: set expandtab sw=4 ts=4 sts=4: */
|
|
/**
|
|
* "Echo" service to allow force downloading of exported charts (png or svg)
|
|
* and server status monitor settings
|
|
*
|
|
* @package PhpMyAdmin
|
|
*/
|
|
|
|
define('PMA_MINIMUM_COMMON', true);
|
|
require_once 'libraries/common.inc.php';
|
|
|
|
/* For chart exporting */
|
|
if (isset($_REQUEST['filename']) && isset($_REQUEST['image'])) {
|
|
$allowed = array(
|
|
'image/png' => 'png',
|
|
'image/svg+xml' => 'svg',
|
|
);
|
|
|
|
/* Check whether MIME type is allowed */
|
|
if (! isset($allowed[$_REQUEST['type']])) {
|
|
PMA_fatalError(__('Invalid export type'));
|
|
}
|
|
|
|
/*
|
|
* Check file name to match mime type and not contain new lines
|
|
* to prevent response splitting.
|
|
*/
|
|
$extension = $allowed[$_REQUEST['type']];
|
|
$valid_match = '/^[^\n\r]*\.' . $extension . '$/';
|
|
if (! preg_match($valid_match, $_REQUEST['filename'])) {
|
|
if (! preg_match('/^[^\n\r]*$/', $_REQUEST['filename'])) {
|
|
/* Filename is unsafe, discard it */
|
|
$filename = 'download.' . $extension;
|
|
} else {
|
|
/* Add extension */
|
|
$filename = $_REQUEST['filename'] . '.' . $extension;
|
|
}
|
|
} else {
|
|
/* Filename from request should be safe here */
|
|
$filename = $_REQUEST['filename'];
|
|
}
|
|
|
|
/** @var PMA_String $pmaString */
|
|
$pmaString = $GLOBALS['PMA_String'];
|
|
|
|
/* Decode data */
|
|
if ($extension != 'svg') {
|
|
$data = /*overload*/mb_substr(
|
|
$_REQUEST['image'],
|
|
/*overload*/mb_strpos($_REQUEST['image'], ',') + 1
|
|
);
|
|
$data = base64_decode($data);
|
|
} else {
|
|
$data = $_REQUEST['image'];
|
|
}
|
|
|
|
/* Send download header */
|
|
PMA_downloadHeader(
|
|
$filename,
|
|
$_REQUEST['type'],
|
|
/*overload*/mb_strlen($data)
|
|
);
|
|
|
|
/* Send data */
|
|
echo $data;
|
|
|
|
} else if (isset($_REQUEST['monitorconfig'])) {
|
|
/* For monitor chart config export */
|
|
PMA_downloadHeader('monitor.cfg', 'application/force-download');
|
|
echo urldecode($_REQUEST['monitorconfig']);
|
|
|
|
} else if (isset($_REQUEST['import'])) {
|
|
/* For monitor chart config import */
|
|
header('Content-type: text/plain');
|
|
if (!file_exists($_FILES['file']['tmp_name'])) {
|
|
exit();
|
|
}
|
|
echo file_get_contents($_FILES['file']['tmp_name']);
|
|
}
|
