98034ba148
It makes it impossible to include bookmark library at any time as when it is included before configuration is loaded it caches false result for bookmarks support. And anyway, using superglobals is always bad idea. Signed-off-by: Michal Čihař <michal@cihar.com>
522 lines
19 KiB
PHP
522 lines
19 KiB
PHP
<?php
|
|
/* vim: set expandtab sw=4 ts=4 sts=4: */
|
|
/**
|
|
* functions for displaying the sql query form
|
|
*
|
|
* @usedby server_sql.php
|
|
* @usedby db_sql.php
|
|
* @usedby tbl_sql.php
|
|
* @usedby tbl_structure.php
|
|
* @usedby tbl_tracking.php
|
|
* @usedby querywindow.php
|
|
* @package PhpMyAdmin
|
|
*/
|
|
if (! defined('PHPMYADMIN')) {
|
|
exit;
|
|
}
|
|
|
|
/**
|
|
*
|
|
*/
|
|
require_once './libraries/file_listing.lib.php'; // used for file listing
|
|
require_once './libraries/bookmark.lib.php'; // used for bookmarks
|
|
|
|
/**
|
|
* return HTML for the sql query boxes
|
|
*
|
|
* @param boolean|string $query query to display in the textarea
|
|
* or true to display last executed
|
|
* @param boolean|string $display_tab sql|files|history|full|false
|
|
* what part to display
|
|
* false if not inside querywindow
|
|
* @param string $delimiter delimeter
|
|
*
|
|
* @return string
|
|
*
|
|
* @usedby server_sql.php
|
|
* @usedby db_sql.php
|
|
* @usedby tbl_sql.php
|
|
* @usedby tbl_structure.php
|
|
* @usedby tbl_tracking.php
|
|
* @usedby querywindow.php
|
|
*/
|
|
function PMA_getHtmlForSqlQueryForm(
|
|
$query = true, $display_tab = false, $delimiter = ';'
|
|
) {
|
|
$html = '';
|
|
// check tab to display if inside querywindow
|
|
if (! $display_tab) {
|
|
$display_tab = 'full';
|
|
$is_querywindow = false;
|
|
} else {
|
|
$is_querywindow = true;
|
|
}
|
|
|
|
// query to show
|
|
if (true === $query) {
|
|
$query = $GLOBALS['sql_query'];
|
|
}
|
|
|
|
// set enctype to multipart for file uploads
|
|
if ($GLOBALS['is_upload']) {
|
|
$enctype = ' enctype="multipart/form-data"';
|
|
} else {
|
|
$enctype = '';
|
|
}
|
|
|
|
$table = '';
|
|
$db = '';
|
|
if (! strlen($GLOBALS['db'])) {
|
|
// prepare for server related
|
|
$goto = empty($GLOBALS['goto']) ?
|
|
'server_sql.php' : $GLOBALS['goto'];
|
|
} elseif (! strlen($GLOBALS['table'])) {
|
|
// prepare for db related
|
|
$db = $GLOBALS['db'];
|
|
$goto = empty($GLOBALS['goto']) ?
|
|
'db_sql.php' : $GLOBALS['goto'];
|
|
} else {
|
|
$table = $GLOBALS['table'];
|
|
$db = $GLOBALS['db'];
|
|
$goto = empty($GLOBALS['goto']) ?
|
|
'tbl_sql.php' : $GLOBALS['goto'];
|
|
}
|
|
|
|
// start output
|
|
if ($is_querywindow) {
|
|
$html .= '<form method="post" id="sqlqueryform"';
|
|
$html .= ' action="import.php" ' . $enctype . ' name="sqlform">';
|
|
} else {
|
|
$html .= '<form method="post" action="import.php" ' . $enctype;
|
|
$html .= ' class="ajax"';
|
|
$html .= ' id="sqlqueryform" name="sqlform">' . "\n";
|
|
}
|
|
|
|
if ($is_querywindow) {
|
|
$html .= '<input type="hidden" name="focus_querywindow"'
|
|
. ' value="true" />' . "\n";
|
|
if ($display_tab != 'sql' && $display_tab != 'full') {
|
|
$html .= '<input type="hidden" name="sql_query"'
|
|
. ' value="" />' . "\n";
|
|
$html .= '<input type="hidden" name="show_query"'
|
|
. ' value="1" />' . "\n";
|
|
}
|
|
}
|
|
$html .= '<input type="hidden" name="is_js_confirmed" value="0" />'
|
|
. "\n" . PMA_URL_getHiddenInputs($db, $table) . "\n"
|
|
. '<input type="hidden" name="pos" value="0" />' . "\n"
|
|
. '<input type="hidden" name="goto" value="'
|
|
. htmlspecialchars($goto) . '" />' . "\n"
|
|
. '<input type="hidden" name="message_to_show" value="'
|
|
. __('Your SQL query has been executed successfully.') . '" />'
|
|
. "\n" . '<input type="hidden" name="prev_sql_query" value="'
|
|
. htmlspecialchars($query) . '" />' . "\n";
|
|
|
|
// display querybox
|
|
if ($display_tab === 'full' || $display_tab === 'sql') {
|
|
$html .= PMA_getHtmlForSqlQueryFormInsert(
|
|
$query, $is_querywindow, $delimiter
|
|
);
|
|
}
|
|
|
|
// display uploads
|
|
if ($display_tab === 'files' && $GLOBALS['is_upload']) {
|
|
$html .= PMA_getHtmlForSqlQueryFormUpload();
|
|
}
|
|
|
|
// Bookmark Support
|
|
if ($display_tab === 'full' || $display_tab === 'history') {
|
|
$cfgBookmark = PMA_Bookmark_getParams();
|
|
if ($cfgBookmark) {
|
|
$html .= PMA_getHtmlForSqlQueryFormBookmark();
|
|
}
|
|
}
|
|
|
|
// Encoding setting form appended by Y.Kawada
|
|
if (function_exists('PMA_Kanji_encodingForm')) {
|
|
$html .= PMA_Kanji_encodingForm();
|
|
}
|
|
|
|
$html .= '</form>' . "\n";
|
|
// print an empty div, which will be later filled with
|
|
// the sql query results by ajax
|
|
$html .= '<div id="sqlqueryresults"></div>';
|
|
|
|
return $html;
|
|
}
|
|
|
|
/**
|
|
* return HTML for Sql Query Form Insert
|
|
*
|
|
* @param string $query query to display in the textarea
|
|
* @param boolean $is_querywindow if inside querywindow or not
|
|
* @param string $delimiter default delimiter to use
|
|
*
|
|
* @return string
|
|
*
|
|
* @usedby PMA_getHtmlForSqlQueryForm()
|
|
*/
|
|
function PMA_getHtmlForSqlQueryFormInsert(
|
|
$query = '', $is_querywindow = false, $delimiter = ';'
|
|
) {
|
|
// enable auto select text in textarea
|
|
if ($GLOBALS['cfg']['TextareaAutoSelect']) {
|
|
$auto_sel = ' onclick="selectContent(this, sql_box_locked, true);"';
|
|
} else {
|
|
$auto_sel = '';
|
|
}
|
|
|
|
// enable locking if inside query window
|
|
if ($is_querywindow) {
|
|
$locking = ' onkeypress="document.sqlform.elements[\'LockFromUpdate\'].'
|
|
. 'checked = true;"';
|
|
$height = $GLOBALS['cfg']['TextareaRows'] * 1.25;
|
|
} else {
|
|
$locking = '';
|
|
$height = $GLOBALS['cfg']['TextareaRows'] * 2;
|
|
}
|
|
|
|
$table = '';
|
|
$db = '';
|
|
$fields_list = array();
|
|
if (! strlen($GLOBALS['db'])) {
|
|
// prepare for server related
|
|
$legend = sprintf(
|
|
__('Run SQL query/queries on server %s'),
|
|
'"' . htmlspecialchars(
|
|
! empty($GLOBALS['cfg']['Servers'][$GLOBALS['server']]['verbose'])
|
|
? $GLOBALS['cfg']['Servers'][$GLOBALS['server']]['verbose']
|
|
: $GLOBALS['cfg']['Servers'][$GLOBALS['server']]['host']
|
|
) . '"'
|
|
);
|
|
} elseif (! strlen($GLOBALS['table'])) {
|
|
// prepare for db related
|
|
$db = $GLOBALS['db'];
|
|
// if you want navigation:
|
|
$tmp_db_link = '<a href="' . $GLOBALS['cfg']['DefaultTabDatabase']
|
|
. '?' . PMA_URL_getCommon($db) . '"';
|
|
if ($is_querywindow) {
|
|
$tmp_db_link .= ' target="_self"'
|
|
. ' onclick="this.target=window.opener.frame_content.name"';
|
|
}
|
|
$tmp_db_link .= '>'
|
|
. htmlspecialchars($db) . '</a>';
|
|
// else use
|
|
// $tmp_db_link = htmlspecialchars($db);
|
|
$legend = sprintf(__('Run SQL query/queries on database %s'), $tmp_db_link);
|
|
if (empty($query)) {
|
|
$query = PMA_Util::expandUserString(
|
|
$GLOBALS['cfg']['DefaultQueryDatabase'], 'backquote'
|
|
);
|
|
}
|
|
} else {
|
|
$table = $GLOBALS['table'];
|
|
$db = $GLOBALS['db'];
|
|
// Get the list and number of fields
|
|
// we do a try_query here, because we could be in the query window,
|
|
// trying to synchonize and the table has not yet been created
|
|
$fields_list = $GLOBALS['dbi']->getColumns(
|
|
$db, $GLOBALS['table'], null, true
|
|
);
|
|
|
|
$tmp_db_link = '<a href="' . $GLOBALS['cfg']['DefaultTabDatabase']
|
|
. '?' . PMA_URL_getCommon($db) . '"';
|
|
if ($is_querywindow) {
|
|
$tmp_db_link .= 'target="_parent" '
|
|
. 'onclick="window.opener.location.href = \''
|
|
. $GLOBALS['cfg']['DefaultTabDatabase']
|
|
. '?' . PMA_URL_getCommon($db) . '\';return false;"';
|
|
}
|
|
$tmp_db_link .= '>'
|
|
. htmlspecialchars($db) . '</a>';
|
|
// else use
|
|
// $tmp_db_link = htmlspecialchars($db);
|
|
$legend = sprintf(__('Run SQL query/queries on database %s'), $tmp_db_link);
|
|
if (empty($query)) {
|
|
$query = PMA_Util::expandUserString(
|
|
$GLOBALS['cfg']['DefaultQueryTable'], 'backquote'
|
|
);
|
|
}
|
|
}
|
|
$legend .= ': ' . PMA_Util::showMySQLDocu('SELECT');
|
|
|
|
if (count($fields_list)) {
|
|
$sqlquerycontainer_id = 'sqlquerycontainer';
|
|
} else {
|
|
$sqlquerycontainer_id = 'sqlquerycontainerfull';
|
|
}
|
|
|
|
$html = '<a id="querybox"></a>'
|
|
. '<div id="queryboxcontainer">'
|
|
. '<fieldset id="queryboxf">';
|
|
$html .= '<legend>' . $legend . '</legend>';
|
|
$html .= '<div id="queryfieldscontainer">';
|
|
$html .= '<div id="' . $sqlquerycontainer_id . '">'
|
|
. '<textarea tabindex="100" name="sql_query" id="sqlquery"'
|
|
. ' cols="' . $GLOBALS['cfg']['TextareaCols'] . '"'
|
|
. ' rows="' . $height . '"'
|
|
. ' dir="' . $GLOBALS['text_dir'] . '"'
|
|
. $auto_sel . $locking . '>'
|
|
. htmlspecialchars($query)
|
|
. '</textarea>';
|
|
// Add buttons to generate query easily for
|
|
// select all, single select, insert, update and delete
|
|
if (count($fields_list)) {
|
|
$html .= '<input type="button" value="SELECT *" id="selectall"'
|
|
. ' class="button sqlbutton" />';
|
|
$html .= '<input type="button" value="SELECT" id="select"'
|
|
. ' class="button sqlbutton" />';
|
|
$html .= '<input type="button" value="INSERT" id="insert"'
|
|
. ' class="button sqlbutton" />';
|
|
$html .= '<input type="button" value="UPDATE" id="update"'
|
|
. ' class="button sqlbutton" />';
|
|
$html .= '<input type="button" value="DELETE" id="delete"'
|
|
. ' class="button sqlbutton" />';
|
|
}
|
|
$html .= '<input type="button" value="' . __('Clear') . '" id="clear"'
|
|
. ' class="button sqlbutton" />';
|
|
$html .= '</div>' . "\n";
|
|
|
|
if (count($fields_list)) {
|
|
$html .= '<div id="tablefieldscontainer">'
|
|
. '<label>' . __('Columns') . '</label>'
|
|
. '<select id="tablefields" name="dummy" '
|
|
. 'size="' . ($GLOBALS['cfg']['TextareaRows'] - 2) . '" '
|
|
. 'multiple="multiple" ondblclick="insertValueQuery()">';
|
|
foreach ($fields_list as $field) {
|
|
$html .= '<option value="'
|
|
. PMA_Util::backquote(htmlspecialchars($field['Field'])) . '"';
|
|
if (isset($field['Field'])
|
|
&& strlen($field['Field'])
|
|
&& isset($field['Comment'])
|
|
) {
|
|
$html .= ' title="' . htmlspecialchars($field['Comment']) . '"';
|
|
}
|
|
$html .= '>' . htmlspecialchars($field['Field']) . '</option>' . "\n";
|
|
}
|
|
$html .= '</select>'
|
|
. '<div id="tablefieldinsertbuttoncontainer">';
|
|
if (PMA_Util::showIcons('ActionLinksMode')) {
|
|
$html .= '<input type="button" class="button" name="insert"'
|
|
. ' value="<<" onclick="insertValueQuery()"'
|
|
. ' title="' . __('Insert') . '" />';
|
|
} else {
|
|
$html .= '<input type="button" class="button" name="insert"'
|
|
. ' value="' . __('Insert') . '"'
|
|
. ' onclick="insertValueQuery()" />';
|
|
}
|
|
$html .= '</div>' . "\n"
|
|
. '</div>' . "\n";
|
|
}
|
|
|
|
$html .= '<div class="clearfloat"></div>' . "\n";
|
|
$html .= '</div>' . "\n";
|
|
|
|
$cfgBookmark = PMA_Bookmark_getParams();
|
|
if ($cfgBookmark) {
|
|
$html .= '<div id="bookmarkoptions">';
|
|
$html .= '<div class="formelement">';
|
|
$html .= '<label for="bkm_label">'
|
|
. __('Bookmark this SQL query:') . '</label>';
|
|
$html .= '<input type="text" name="bkm_label" id="bkm_label"'
|
|
. ' tabindex="110" value="" />';
|
|
$html .= '</div>';
|
|
$html .= '<div class="formelement">';
|
|
$html .= '<input type="checkbox" name="bkm_all_users" tabindex="111"'
|
|
. ' id="id_bkm_all_users" value="true" />';
|
|
$html .= '<label for="id_bkm_all_users">'
|
|
. __('Let every user access this bookmark') . '</label>';
|
|
$html .= '</div>';
|
|
$html .= '<div class="formelement">';
|
|
$html .= '<input type="checkbox" name="bkm_replace" tabindex="112"'
|
|
. ' id="id_bkm_replace" value="true" />';
|
|
$html .= '<label for="id_bkm_replace">'
|
|
. __('Replace existing bookmark of same name') . '</label>';
|
|
$html .= '</div>';
|
|
$html .= '</div>';
|
|
}
|
|
|
|
$html .= '<div class="clearfloat"></div>' . "\n";
|
|
$html .= '</fieldset>' . "\n"
|
|
. '</div>' . "\n";
|
|
|
|
$html .= '<fieldset id="queryboxfooter" class="tblFooters">' . "\n";
|
|
$html .= '<div class="formelement">' . "\n";
|
|
|
|
if ($is_querywindow) {
|
|
$html .= '<input type="checkbox" '
|
|
. 'name="LockFromUpdate" checked="checked" tabindex="120" '
|
|
. 'id="checkbox_lock" /> <label for="checkbox_lock">'
|
|
. __('Do not overwrite this query from outside the window')
|
|
. '</label>';
|
|
}
|
|
$html .= '</div>' . "\n";
|
|
$html .= '<div class="formelement">' . "\n";
|
|
$html .= '<label for="id_sql_delimiter">[ ' . __('Delimiter')
|
|
. '</label>' . "\n";
|
|
$html .= '<input type="text" name="sql_delimiter" tabindex="131" size="3" '
|
|
. 'value="' . $delimiter . '" '
|
|
. 'id="id_sql_delimiter" /> ]';
|
|
|
|
$html .= '<input type="checkbox" name="show_query" value="1" '
|
|
. 'id="checkbox_show_query" tabindex="132" checked="checked" />'
|
|
. '<label for="checkbox_show_query">' . __('Show this query here again')
|
|
. '</label>';
|
|
|
|
if (! $is_querywindow) {
|
|
$html .= '<input type="checkbox" name="retain_query_box" value="1" '
|
|
. 'id="retain_query_box" tabindex="133" '
|
|
. ($GLOBALS['cfg']['RetainQueryBox'] === false
|
|
? '' : ' checked="checked"')
|
|
. ' />'
|
|
. '<label for="retain_query_box">' . __('Retain query box')
|
|
. '</label>';
|
|
}
|
|
$html .= '</div>' . "\n";
|
|
$html .= '<input type="submit" id="button_submit_query" name="SQL"';
|
|
if ($is_querywindow) {
|
|
$html .= 'onclick="var form = this.parentNode.parentNode;'
|
|
. ' window.opener.name = \'sqlParentWindow\';'
|
|
. ' form.target = \'sqlParentWindow\';'
|
|
. ' return checkSqlQuery(form);"';
|
|
}
|
|
$html .= ' tabindex="200" value="' . __('Go') . '" />' . "\n";
|
|
$html .= '<div class="clearfloat"></div>' . "\n";
|
|
$html .= '</fieldset>' . "\n";
|
|
|
|
return $html;
|
|
}
|
|
|
|
/**
|
|
* return HTML for sql Query Form Bookmark
|
|
*
|
|
* @return string|null
|
|
*
|
|
* @usedby PMA_getHtmlForSqlQueryForm()
|
|
*/
|
|
function PMA_getHtmlForSqlQueryFormBookmark()
|
|
{
|
|
$bookmark_list = PMA_Bookmark_getList($GLOBALS['db']);
|
|
if (! $bookmark_list || count($bookmark_list) < 1) {
|
|
return null;
|
|
}
|
|
|
|
$html = '<fieldset id="fieldsetBookmarkOptions">';
|
|
$html .= '<legend>';
|
|
$html .= __('Bookmarked SQL query') . '</legend>' . "\n";
|
|
$html .= '<div class="formelement">';
|
|
$html .= '<select name="id_bookmark" id="id_bookmark">' . "\n";
|
|
$html .= '<option value=""> </option>' . "\n";
|
|
foreach ($bookmark_list as $key => $value) {
|
|
$html .= '<option value="' . htmlspecialchars($key) . '">'
|
|
. htmlspecialchars($value) . '</option>' . "\n";
|
|
}
|
|
// is required for correct display with styles/line height
|
|
$html .= '</select> ' . "\n";
|
|
$html .= '</div>' . "\n";
|
|
$html .= '<div class="formelement">' . "\n";
|
|
$html .= __('Variable');
|
|
$html .= PMA_Util::showDocu('faq', 'faqbookmark');
|
|
$html .= '<input type="text" name="bookmark_variable" class="textfield"'
|
|
. ' size="10" />' . "\n";
|
|
$html .= '</div>' . "\n";
|
|
$html .= '<div class="formelement">' . "\n";
|
|
$html .= '<input type="radio" name="action_bookmark" value="0"'
|
|
. ' id="radio_bookmark_exe" checked="checked" />'
|
|
. '<label for="radio_bookmark_exe">' . __('Submit')
|
|
. '</label>' . "\n";
|
|
$html .= '<input type="radio" name="action_bookmark" value="1"'
|
|
. ' id="radio_bookmark_view" />'
|
|
. '<label for="radio_bookmark_view">' . __('View only')
|
|
. '</label>' . "\n";
|
|
$html .= '<input type="radio" name="action_bookmark" value="2"'
|
|
. ' id="radio_bookmark_del" />'
|
|
. '<label for="radio_bookmark_del">' . __('Delete')
|
|
. '</label>' . "\n";
|
|
$html .= '</div>' . "\n";
|
|
$html .= '<div class="clearfloat"></div>' . "\n";
|
|
$html .= '</fieldset>' . "\n";
|
|
|
|
$html .= '<fieldset id="fieldsetBookmarkOptionsFooter" class="tblFooters">';
|
|
$html .= '<input type="submit" name="SQL" id="button_submit_bookmark" value="'
|
|
. __('Go') . '" />';
|
|
$html .= '<div class="clearfloat"></div>' . "\n";
|
|
$html .= '</fieldset>' . "\n";
|
|
|
|
return $html;
|
|
}
|
|
|
|
/**
|
|
* return HTML for Sql Query Form Upload
|
|
*
|
|
* @return string
|
|
*
|
|
* @usedby PMA_getHtmlForSqlQueryForm()
|
|
*/
|
|
function PMA_getHtmlForSqlQueryFormUpload()
|
|
{
|
|
global $timeout_passed, $local_import_file;
|
|
|
|
$errors = array();
|
|
|
|
// we allow only SQL here
|
|
$matcher = '@\.sql(\.(' . PMA_supportedDecompressions() . '))?$@';
|
|
|
|
if (!empty($GLOBALS['cfg']['UploadDir'])) {
|
|
$files = PMA_getFileSelectOptions(
|
|
PMA_Util::userDir($GLOBALS['cfg']['UploadDir']), $matcher,
|
|
(isset($timeout_passed) && $timeout_passed && isset($local_import_file))
|
|
? $local_import_file
|
|
: ''
|
|
);
|
|
} else {
|
|
$files = '';
|
|
}
|
|
|
|
// start output
|
|
$html = '<fieldset id="">';
|
|
$html .= '<legend>';
|
|
$html .= __('Browse your computer:') . '</legend>';
|
|
$html .= '<div class="formelement">';
|
|
$html .= '<input type="file" name="sql_file" class="textfield" /> ';
|
|
$html .= PMA_Util::getFormattedMaximumUploadSize($GLOBALS['max_upload_size']);
|
|
// some browsers should respect this :)
|
|
$html .= PMA_Util::generateHiddenMaxFileSize($GLOBALS['max_upload_size']) . "\n";
|
|
$html .= '</div>';
|
|
|
|
if ($files === false) {
|
|
$errors[] = PMA_Message::error(
|
|
__('The directory you set for upload work cannot be reached.')
|
|
);
|
|
} elseif (!empty($files)) {
|
|
$html .= '<div class="formelement">';
|
|
$html .= '<strong>' . __('web server upload directory:') . '</strong>' . "\n";
|
|
$html .= '<select size="1" name="sql_localfile">' . "\n";
|
|
$html .= '<option value="" selected="selected"></option>' . "\n";
|
|
$html .= $files;
|
|
$html .= '</select>' . "\n";
|
|
$html .= '</div>';
|
|
}
|
|
|
|
$html .= '<div class="clearfloat"></div>' . "\n";
|
|
$html .= '</fieldset>';
|
|
|
|
$html .= '<fieldset id="" class="tblFooters">';
|
|
$html .= __('Character set of the file:') . "\n";
|
|
$html .= PMA_generateCharsetDropdownBox(
|
|
PMA_CSDROPDOWN_CHARSET,
|
|
'charset_of_file', null, 'utf8', false
|
|
);
|
|
$html .= '<input type="submit" name="SQL" value="' . __('Go')
|
|
. '" />' . "\n";
|
|
$html .= '<div class="clearfloat"></div>' . "\n";
|
|
$html .= '</fieldset>';
|
|
|
|
foreach ($errors as $error) {
|
|
$html .= $error->getDisplay();
|
|
}
|
|
|
|
return $html;
|
|
}
|
|
?>
|
