4d308ba364
Closing tags at the end of file are not mandatory. It is often suggested to omit to closing tags at the end of file to prevent unwanted effects as PHP will start output buffering if there is any character after closing tag. Reference: http://php.net/manual/en/language.basic-syntax.phptags.php Signed-off-by: Rahul Kadyan <hi@znck.me>
467 lines
16 KiB
PHP
467 lines
16 KiB
PHP
<?php
|
|
/* vim: set expandtab sw=4 ts=4 sts=4: */
|
|
/**
|
|
* Manipulation of table data like inserting, replacing and updating
|
|
*
|
|
* Usually called as form action from tbl_change.php to insert or update table rows
|
|
*
|
|
* @todo 'edit_next' tends to not work as expected if used ...
|
|
* at least there is no order by it needs the original query
|
|
* and the row number and than replace the LIMIT clause
|
|
*
|
|
* @package PhpMyAdmin
|
|
*/
|
|
|
|
/**
|
|
* Gets some core libraries
|
|
*/
|
|
require_once 'libraries/common.inc.php';
|
|
|
|
/**
|
|
* functions implementation for this script
|
|
*/
|
|
require_once 'libraries/insert_edit.lib.php';
|
|
require_once 'libraries/transformations.lib.php';
|
|
|
|
// Check parameters
|
|
PMA_Util::checkParameters(array('db', 'table', 'goto'));
|
|
|
|
$GLOBALS['dbi']->selectDb($GLOBALS['db']);
|
|
|
|
/**
|
|
* Initializes some variables
|
|
*/
|
|
$goto_include = false;
|
|
|
|
$response = PMA_Response::getInstance();
|
|
$header = $response->getHeader();
|
|
$scripts = $header->getScripts();
|
|
$scripts->addFile('makegrid.js');
|
|
// Needed for generation of Inline Edit anchors
|
|
$scripts->addFile('sql.js');
|
|
$scripts->addFile('indexes.js');
|
|
$scripts->addFile('gis_data_editor.js');
|
|
|
|
// check whether insert row mode, if so include tbl_change.php
|
|
PMA_isInsertRow();
|
|
|
|
$after_insert_actions = array('new_insert', 'same_insert', 'edit_next');
|
|
if (isset($_REQUEST['after_insert'])
|
|
&& in_array($_REQUEST['after_insert'], $after_insert_actions)
|
|
) {
|
|
$url_params['after_insert'] = $_REQUEST['after_insert'];
|
|
if (isset($_REQUEST['where_clause'])) {
|
|
foreach ($_REQUEST['where_clause'] as $one_where_clause) {
|
|
if ($_REQUEST['after_insert'] == 'same_insert') {
|
|
$url_params['where_clause'][] = $one_where_clause;
|
|
} elseif ($_REQUEST['after_insert'] == 'edit_next') {
|
|
PMA_setSessionForEditNext($one_where_clause);
|
|
}
|
|
}
|
|
}
|
|
}
|
|
//get $goto_include for different cases
|
|
$goto_include = PMA_getGotoInclude($goto_include);
|
|
|
|
// Defines the url to return in case of failure of the query
|
|
$err_url = PMA_getErrorUrl($url_params);
|
|
|
|
/**
|
|
* Prepares the update/insert of a row
|
|
*/
|
|
list($loop_array, $using_key, $is_insert, $is_insertignore)
|
|
= PMA_getParamsForUpdateOrInsert();
|
|
|
|
$query = array();
|
|
$value_sets = array();
|
|
$func_no_param = array(
|
|
'CONNECTION_ID',
|
|
'CURRENT_USER',
|
|
'CURDATE',
|
|
'CURTIME',
|
|
'CURRENT_DATE',
|
|
'CURRENT_TIME',
|
|
'DATABASE',
|
|
'LAST_INSERT_ID',
|
|
'NOW',
|
|
'PI',
|
|
'RAND',
|
|
'SYSDATE',
|
|
'UNIX_TIMESTAMP',
|
|
'USER',
|
|
'UTC_DATE',
|
|
'UTC_TIME',
|
|
'UTC_TIMESTAMP',
|
|
'UUID',
|
|
'UUID_SHORT',
|
|
'VERSION',
|
|
);
|
|
$func_optional_param = array(
|
|
'RAND',
|
|
'UNIX_TIMESTAMP',
|
|
);
|
|
|
|
$gis_from_text_functions = array(
|
|
'GeomFromText',
|
|
'GeomCollFromText',
|
|
'LineFromText',
|
|
'MLineFromText',
|
|
'PointFromText',
|
|
'MPointFromText',
|
|
'PolyFromText',
|
|
'MPolyFromText',
|
|
);
|
|
|
|
$gis_from_wkb_functions = array(
|
|
'GeomFromWKB',
|
|
'GeomCollFromWKB',
|
|
'LineFromWKB',
|
|
'MLineFromWKB',
|
|
'PointFromWKB',
|
|
'MPointFromWKB',
|
|
'PolyFromWKB',
|
|
'MPolyFromWKB',
|
|
);
|
|
|
|
// to create an object of PMA_File class
|
|
require_once './libraries/File.class.php';
|
|
|
|
//if some posted fields need to be transformed.
|
|
$mime_map = PMA_getMIME($GLOBALS['db'], $GLOBALS['table']);
|
|
if ($mime_map === false) {
|
|
$mime_map = array();
|
|
}
|
|
|
|
$query_fields = array();
|
|
$insert_errors = array();
|
|
$row_skipped = false;
|
|
$unsaved_values = array();
|
|
foreach ($loop_array as $rownumber => $where_clause) {
|
|
// skip fields to be ignored
|
|
if (! $using_key && isset($_REQUEST['insert_ignore_' . $where_clause])) {
|
|
continue;
|
|
}
|
|
|
|
// Defines the SET part of the sql query
|
|
$query_values = array();
|
|
|
|
// Map multi-edit keys to single-level arrays, dependent on how we got the fields
|
|
$multi_edit_columns
|
|
= isset($_REQUEST['fields']['multi_edit'][$rownumber])
|
|
? $_REQUEST['fields']['multi_edit'][$rownumber]
|
|
: array();
|
|
$multi_edit_columns_name
|
|
= isset($_REQUEST['fields_name']['multi_edit'][$rownumber])
|
|
? $_REQUEST['fields_name']['multi_edit'][$rownumber]
|
|
: null;
|
|
$multi_edit_columns_prev
|
|
= isset($_REQUEST['fields_prev']['multi_edit'][$rownumber])
|
|
? $_REQUEST['fields_prev']['multi_edit'][$rownumber]
|
|
: null;
|
|
$multi_edit_funcs
|
|
= isset($_REQUEST['funcs']['multi_edit'][$rownumber])
|
|
? $_REQUEST['funcs']['multi_edit'][$rownumber]
|
|
: null;
|
|
$multi_edit_salt
|
|
= isset($_REQUEST['salt']['multi_edit'][$rownumber])
|
|
? $_REQUEST['salt']['multi_edit'][$rownumber]
|
|
:null;
|
|
$multi_edit_columns_type
|
|
= isset($_REQUEST['fields_type']['multi_edit'][$rownumber])
|
|
? $_REQUEST['fields_type']['multi_edit'][$rownumber]
|
|
: null;
|
|
$multi_edit_columns_null
|
|
= isset($_REQUEST['fields_null']['multi_edit'][$rownumber])
|
|
? $_REQUEST['fields_null']['multi_edit'][$rownumber]
|
|
: null;
|
|
$multi_edit_columns_null_prev
|
|
= isset($_REQUEST['fields_null_prev']['multi_edit'][$rownumber])
|
|
? $_REQUEST['fields_null_prev']['multi_edit'][$rownumber]
|
|
: null;
|
|
$multi_edit_auto_increment
|
|
= isset($_REQUEST['auto_increment']['multi_edit'][$rownumber])
|
|
? $_REQUEST['auto_increment']['multi_edit'][$rownumber]
|
|
: null;
|
|
|
|
// When a select field is nullified, it's not present in $_REQUEST
|
|
// so initialize it; this way, the foreach($multi_edit_columns) will process it
|
|
foreach ($multi_edit_columns_name as $key => $val) {
|
|
if (! isset($multi_edit_columns[$key])) {
|
|
$multi_edit_columns[$key] = '';
|
|
}
|
|
}
|
|
|
|
// Iterate in the order of $multi_edit_columns_name,
|
|
// not $multi_edit_columns, to avoid problems
|
|
// when inserting multiple entries
|
|
$insert_fail = false;
|
|
foreach ($multi_edit_columns_name as $key => $column_name) {
|
|
$current_value = $multi_edit_columns[$key];
|
|
// Note: $key is an md5 of the fieldname. The actual fieldname is
|
|
// available in $multi_edit_columns_name[$key]
|
|
|
|
$file_to_insert = new PMA_File();
|
|
$file_to_insert->checkTblChangeForm($key, $rownumber);
|
|
|
|
$possibly_uploaded_val = $file_to_insert->getContent();
|
|
if ($possibly_uploaded_val !== false) {
|
|
$current_value = $possibly_uploaded_val;
|
|
}
|
|
// Apply Input Transformation if defined
|
|
if (!empty($mime_map[$column_name])
|
|
&& !empty($mime_map[$column_name]['input_transformation'])
|
|
) {
|
|
$filename = 'libraries/plugins/transformations/'
|
|
. $mime_map[$column_name]['input_transformation'];
|
|
if (is_file($filename)) {
|
|
include_once $filename;
|
|
$classname = PMA_getTransformationClassName(
|
|
$mime_map[$column_name]['input_transformation']
|
|
);
|
|
$transformation_plugin = new $classname();
|
|
$transformation_options = PMA_Transformation_getOptions(
|
|
$mime_map[$column_name]['input_transformation_options']
|
|
);
|
|
$current_value = $transformation_plugin->applyTransformation(
|
|
$current_value, $transformation_options
|
|
);
|
|
// check if transformation was successful or not
|
|
// and accordingly set error messages & insert_fail
|
|
if (method_exists($transformation_plugin, 'isSuccess')
|
|
&& !$transformation_plugin->isSuccess()
|
|
) {
|
|
$insert_fail = true;
|
|
$row_skipped = true;
|
|
$insert_errors[] = sprintf(
|
|
__('Row: %1$s, Column: %2$s, Error: %3$s'),
|
|
$rownumber, $column_name,
|
|
$transformation_plugin->getError()
|
|
);
|
|
}
|
|
}
|
|
}
|
|
|
|
if ($file_to_insert->isError()) {
|
|
$message .= $file_to_insert->getError();
|
|
}
|
|
// delete $file_to_insert temporary variable
|
|
$file_to_insert->cleanUp();
|
|
|
|
$current_value = PMA_getCurrentValueForDifferentTypes(
|
|
$possibly_uploaded_val, $key, $multi_edit_columns_type,
|
|
$current_value, $multi_edit_auto_increment,
|
|
$rownumber, $multi_edit_columns_name, $multi_edit_columns_null,
|
|
$multi_edit_columns_null_prev, $is_insert,
|
|
$using_key, $where_clause, $table
|
|
);
|
|
|
|
$current_value_as_an_array = PMA_getCurrentValueAsAnArrayForMultipleEdit(
|
|
$multi_edit_funcs,
|
|
$multi_edit_salt, $gis_from_text_functions, $current_value,
|
|
$gis_from_wkb_functions, $func_optional_param, $func_no_param, $key
|
|
);
|
|
|
|
list($query_values, $query_fields)
|
|
= PMA_getQueryValuesForInsertAndUpdateInMultipleEdit(
|
|
$multi_edit_columns_name, $multi_edit_columns_null, $current_value,
|
|
$multi_edit_columns_prev, $multi_edit_funcs, $is_insert,
|
|
$query_values, $query_fields, $current_value_as_an_array,
|
|
$value_sets, $key, $multi_edit_columns_null_prev
|
|
);
|
|
if (isset($multi_edit_columns_null[$key])) {
|
|
$multi_edit_columns[$key] = null;
|
|
}
|
|
} //end of foreach
|
|
|
|
// temporarily store rows not inserted
|
|
// so that they can be populated again.
|
|
if ($insert_fail) {
|
|
$unsaved_values[$rownumber] = $multi_edit_columns;
|
|
}
|
|
if (!$insert_fail && count($query_values) > 0) {
|
|
if ($is_insert) {
|
|
$value_sets[] = implode(', ', $query_values);
|
|
} else {
|
|
// build update query
|
|
$query[] = 'UPDATE ' . PMA_Util::backquote($GLOBALS['db'])
|
|
. '.' . PMA_Util::backquote($GLOBALS['table'])
|
|
. ' SET ' . implode(', ', $query_values)
|
|
. ' WHERE ' . $where_clause
|
|
. ($_REQUEST['clause_is_unique'] ? '' : ' LIMIT 1');
|
|
}
|
|
}
|
|
} // end foreach ($loop_array as $where_clause)
|
|
unset($multi_edit_columns_name, $multi_edit_columns_prev, $multi_edit_funcs,
|
|
$multi_edit_columns_type, $multi_edit_columns_null, $func_no_param,
|
|
$multi_edit_auto_increment, $current_value_as_an_array, $key, $current_value,
|
|
$loop_array, $where_clause, $using_key, $multi_edit_columns_null_prev,
|
|
$insert_fail);
|
|
|
|
// Builds the sql query
|
|
if ($is_insert && count($value_sets) > 0) {
|
|
$query = PMA_buildSqlQuery($is_insertignore, $query_fields, $value_sets);
|
|
} elseif (empty($query) && ! isset($_REQUEST['preview_sql']) && !$row_skipped) {
|
|
// No change -> move back to the calling script
|
|
//
|
|
// Note: logic passes here for inline edit
|
|
$message = PMA_Message::success(__('No change'));
|
|
$active_page = $goto_include;
|
|
include '' . PMA_securePath($goto_include);
|
|
exit;
|
|
}
|
|
unset($multi_edit_columns, $is_insertignore);
|
|
|
|
// If there is a request for SQL previewing.
|
|
if (isset($_REQUEST['preview_sql'])) {
|
|
PMA_previewSQL($query);
|
|
}
|
|
|
|
/**
|
|
* Executes the sql query and get the result, then move back to the calling
|
|
* page
|
|
*/
|
|
list ($url_params, $total_affected_rows, $last_messages, $warning_messages,
|
|
$error_messages, $return_to_sql_query)
|
|
= PMA_executeSqlQuery($url_params, $query);
|
|
|
|
if ($is_insert && (count($value_sets) > 0 || $row_skipped)) {
|
|
$message = PMA_Message::getMessageForInsertedRows($total_affected_rows);
|
|
$unsaved_values = array_values($unsaved_values);
|
|
} else {
|
|
$message = PMA_Message::getMessageForAffectedRows($total_affected_rows);
|
|
}
|
|
if ($row_skipped) {
|
|
$goto_include = 'tbl_change.php';
|
|
$message->addMessages($insert_errors, '<br />');
|
|
$message->isError(true);
|
|
}
|
|
|
|
$message->addMessages($last_messages, '<br />');
|
|
|
|
if (! empty($warning_messages)) {
|
|
$message->addMessages($warning_messages, '<br />');
|
|
$message->isError(true);
|
|
}
|
|
if (! empty($error_messages)) {
|
|
$message->addMessages($error_messages);
|
|
$message->isError(true);
|
|
}
|
|
unset(
|
|
$error_messages, $warning_messages, $total_affected_rows,
|
|
$last_messages, $last_message, $row_skipped, $insert_errors
|
|
);
|
|
|
|
/**
|
|
* The following section only applies to grid editing.
|
|
* However, verifying isAjax() is not enough to ensure we are coming from
|
|
* grid editing. If we are coming from the Edit or Copy link in Browse mode,
|
|
* ajax_page_request is present in the POST parameters.
|
|
*/
|
|
if ($response->isAjax() && ! isset($_POST['ajax_page_request'])) {
|
|
/**
|
|
* If we are in grid editing, we need to process the relational and
|
|
* transformed fields, if they were edited. After that, output the correct
|
|
* link/transformed value and exit
|
|
*
|
|
* Logic taken from libraries/DisplayResults.class.php
|
|
*/
|
|
|
|
if (isset($_REQUEST['rel_fields_list']) && $_REQUEST['rel_fields_list'] != '') {
|
|
|
|
$map = PMA_getForeigners($db, $table, '', 'both');
|
|
|
|
$relation_fields = array();
|
|
parse_str($_REQUEST['rel_fields_list'], $relation_fields);
|
|
|
|
// loop for each relation cell
|
|
/** @var array $relation_fields */
|
|
foreach ($relation_fields as $cell_index => $curr_rel_field) {
|
|
foreach ($curr_rel_field as $relation_field => $relation_field_value) {
|
|
$where_comparison = "='" . $relation_field_value . "'";
|
|
$dispval = PMA_getDisplayValueForForeignTableColumn(
|
|
$where_comparison, $map, $relation_field
|
|
);
|
|
|
|
$extra_data['relations'][$cell_index]
|
|
= PMA_getLinkForRelationalDisplayField(
|
|
$map, $relation_field, $where_comparison,
|
|
$dispval, $relation_field_value
|
|
);
|
|
}
|
|
} // end of loop for each relation cell
|
|
}
|
|
if (isset($_REQUEST['do_transformations'])
|
|
&& $_REQUEST['do_transformations'] == true
|
|
) {
|
|
$edited_values = array();
|
|
parse_str($_REQUEST['transform_fields_list'], $edited_values);
|
|
|
|
if (! isset($extra_data)) {
|
|
$extra_data = array();
|
|
}
|
|
$transformation_types = array(
|
|
"input_transformation",
|
|
"transformation"
|
|
);
|
|
foreach ($mime_map as $transformation) {
|
|
$column_name = $transformation['column_name'];
|
|
foreach ($transformation_types as $type) {
|
|
$file = PMA_securePath($transformation[$type]);
|
|
$extra_data = PMA_transformEditedValues(
|
|
$db, $table, $transformation, $edited_values, $file,
|
|
$column_name, $extra_data, $type
|
|
);
|
|
}
|
|
} // end of loop for each $mime_map
|
|
}
|
|
|
|
// Need to check the inline edited value can be truncated by MySQL
|
|
// without informing while saving
|
|
$column_name = $_REQUEST['fields_name']['multi_edit'][0][0];
|
|
|
|
PMA_verifyWhetherValueCanBeTruncatedAndAppendExtraData(
|
|
$db, $table, $column_name, $extra_data
|
|
);
|
|
|
|
/**Get the total row count of the table*/
|
|
$extra_data['row_count'] = PMA_Table::countRecords(
|
|
$_REQUEST['db'], $_REQUEST['table']
|
|
);
|
|
|
|
$extra_data['sql_query']
|
|
= PMA_Util::getMessage($message, $GLOBALS['display_query']);
|
|
|
|
$response = PMA_Response::getInstance();
|
|
$response->isSuccess($message->isSuccess());
|
|
$response->addJSON('message', $message);
|
|
$response->addJSON($extra_data);
|
|
exit;
|
|
}
|
|
|
|
if (! empty($return_to_sql_query)) {
|
|
$disp_query = $GLOBALS['sql_query'];
|
|
$disp_message = $message;
|
|
unset($message);
|
|
$GLOBALS['sql_query'] = $return_to_sql_query;
|
|
}
|
|
|
|
$scripts->addFile('tbl_change.js');
|
|
$scripts->addFile('big_ints.js');
|
|
|
|
$active_page = $goto_include;
|
|
|
|
/**
|
|
* If user asked for "and then Insert another new row" we have to remove
|
|
* WHERE clause information so that tbl_change.php does not go back
|
|
* to the current record
|
|
*/
|
|
if (isset($_REQUEST['after_insert']) && 'new_insert' == $_REQUEST['after_insert']) {
|
|
unset($_REQUEST['where_clause']);
|
|
}
|
|
|
|
/**
|
|
* Load target page.
|
|
*/
|
|
require '' . PMA_securePath($goto_include);
|
|
exit;
|
