c6bb867787
Seems we changed the flag behavior here: cd1b8a9b77 (diff-bb8d8aecc2e174245e8b95be9344176aba8971d024f3b2c2311b8e58ddd59b31L149)
I'm not sure whether that was intentional, but it causes the `Database server` panel to always show compared to pre 5.2.0.
Truth be told, it doesn't make sense to have that flag and then the additional checks in the block when we know it's `true`, so I updated the code to take care of that.
Signed-off-by: Andrija Vučinić <andrija.vucinic@gmail.com>
455 lines
16 KiB
PHP
455 lines
16 KiB
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
namespace PhpMyAdmin\Controllers;
|
|
|
|
use PhpMyAdmin\Charsets;
|
|
use PhpMyAdmin\CheckUserPrivileges;
|
|
use PhpMyAdmin\Config;
|
|
use PhpMyAdmin\ConfigStorage\Relation;
|
|
use PhpMyAdmin\DatabaseInterface;
|
|
use PhpMyAdmin\Git;
|
|
use PhpMyAdmin\Html\Generator;
|
|
use PhpMyAdmin\LanguageManager;
|
|
use PhpMyAdmin\Message;
|
|
use PhpMyAdmin\RecentFavoriteTable;
|
|
use PhpMyAdmin\ResponseRenderer;
|
|
use PhpMyAdmin\Server\Select;
|
|
use PhpMyAdmin\Template;
|
|
use PhpMyAdmin\ThemeManager;
|
|
use PhpMyAdmin\Url;
|
|
use PhpMyAdmin\Util;
|
|
use PhpMyAdmin\Version;
|
|
|
|
use function __;
|
|
use function count;
|
|
use function extension_loaded;
|
|
use function file_exists;
|
|
use function ini_get;
|
|
use function mb_strlen;
|
|
use function preg_match;
|
|
use function sprintf;
|
|
use function trigger_error;
|
|
|
|
use const E_USER_NOTICE;
|
|
use const E_USER_WARNING;
|
|
use const PHP_VERSION;
|
|
use const SODIUM_CRYPTO_SECRETBOX_KEYBYTES;
|
|
|
|
class HomeController extends AbstractController
|
|
{
|
|
/** @var Config */
|
|
private $config;
|
|
|
|
/** @var ThemeManager */
|
|
private $themeManager;
|
|
|
|
/** @var DatabaseInterface */
|
|
private $dbi;
|
|
|
|
public function __construct(
|
|
ResponseRenderer $response,
|
|
Template $template,
|
|
Config $config,
|
|
ThemeManager $themeManager,
|
|
DatabaseInterface $dbi
|
|
) {
|
|
parent::__construct($response, $template);
|
|
$this->config = $config;
|
|
$this->themeManager = $themeManager;
|
|
$this->dbi = $dbi;
|
|
}
|
|
|
|
public function __invoke(): void
|
|
{
|
|
global $cfg, $server, $collation_connection, $message, $show_query, $db, $table, $errorUrl;
|
|
|
|
if ($this->response->isAjax() && ! empty($_REQUEST['access_time'])) {
|
|
return;
|
|
}
|
|
|
|
$this->addScriptFiles(['home.js']);
|
|
|
|
// This is for $cfg['ShowDatabasesNavigationAsTree'] = false;
|
|
// See: https://github.com/phpmyadmin/phpmyadmin/issues/16520
|
|
// The DB is defined here and sent to the JS front-end to refresh the DB tree
|
|
$db = $_POST['db'] ?? '';
|
|
$table = '';
|
|
$show_query = '1';
|
|
$errorUrl = Url::getFromRoute('/');
|
|
|
|
if ($server > 0 && $this->dbi->isSuperUser()) {
|
|
$this->dbi->selectDb('mysql');
|
|
}
|
|
|
|
$languageManager = LanguageManager::getInstance();
|
|
|
|
if (! empty($message)) {
|
|
$displayMessage = Generator::getMessage($message);
|
|
unset($message);
|
|
}
|
|
|
|
if (isset($_SESSION['partial_logout'])) {
|
|
$partialLogout = Message::success(__(
|
|
'You were logged out from one server, to logout completely '
|
|
. 'from phpMyAdmin, you need to logout from all servers.'
|
|
))->getDisplay();
|
|
unset($_SESSION['partial_logout']);
|
|
}
|
|
|
|
$syncFavoriteTables = RecentFavoriteTable::getInstance('favorite')
|
|
->getHtmlSyncFavoriteTables();
|
|
|
|
$hasServer = $server > 0 || count($cfg['Servers']) > 1;
|
|
if ($hasServer) {
|
|
$hasServerSelection = $cfg['ServerDefault'] == 0
|
|
|| (! $cfg['NavigationDisplayServers']
|
|
&& (count($cfg['Servers']) > 1
|
|
|| ($server == 0 && count($cfg['Servers']) === 1)));
|
|
if ($hasServerSelection) {
|
|
$serverSelection = Select::render(true, true);
|
|
}
|
|
|
|
if ($server > 0) {
|
|
$checkUserPrivileges = new CheckUserPrivileges($this->dbi);
|
|
$checkUserPrivileges->getPrivileges();
|
|
|
|
$charsets = Charsets::getCharsets($this->dbi, $cfg['Server']['DisableIS']);
|
|
$collations = Charsets::getCollations($this->dbi, $cfg['Server']['DisableIS']);
|
|
$charsetsList = [];
|
|
foreach ($charsets as $charset) {
|
|
$collationsList = [];
|
|
foreach ($collations[$charset->getName()] as $collation) {
|
|
$collationsList[] = [
|
|
'name' => $collation->getName(),
|
|
'description' => $collation->getDescription(),
|
|
'is_selected' => $collation_connection === $collation->getName(),
|
|
];
|
|
}
|
|
|
|
$charsetsList[] = [
|
|
'name' => $charset->getName(),
|
|
'description' => $charset->getDescription(),
|
|
'collations' => $collationsList,
|
|
];
|
|
}
|
|
}
|
|
}
|
|
|
|
$availableLanguages = [];
|
|
if (empty($cfg['Lang']) && $languageManager->hasChoice()) {
|
|
$availableLanguages = $languageManager->sortedLanguages();
|
|
}
|
|
|
|
$databaseServer = [];
|
|
if ($server > 0 && $cfg['ShowServerInfo']) {
|
|
$hostInfo = '';
|
|
if (! empty($cfg['Server']['verbose'])) {
|
|
$hostInfo .= $cfg['Server']['verbose'];
|
|
$hostInfo .= ' (';
|
|
}
|
|
|
|
$hostInfo .= $this->dbi->getHostInfo();
|
|
|
|
if (! empty($cfg['Server']['verbose'])) {
|
|
$hostInfo .= ')';
|
|
}
|
|
|
|
$serverCharset = Charsets::getServerCharset($this->dbi, $cfg['Server']['DisableIS']);
|
|
$databaseServer = [
|
|
'host' => $hostInfo,
|
|
'type' => Util::getServerType(),
|
|
'connection' => Generator::getServerSSL(),
|
|
'version' => $this->dbi->getVersionString() . ' - ' . $this->dbi->getVersionComment(),
|
|
'protocol' => $this->dbi->getProtoInfo(),
|
|
'user' => $this->dbi->fetchValue('SELECT USER();'),
|
|
'charset' => $serverCharset->getDescription() . ' (' . $serverCharset->getName() . ')',
|
|
];
|
|
}
|
|
|
|
$webServer = [];
|
|
if ($cfg['ShowServerInfo']) {
|
|
$webServer['software'] = $_SERVER['SERVER_SOFTWARE'] ?? null;
|
|
|
|
if ($server > 0) {
|
|
$clientVersion = $this->dbi->getClientInfo();
|
|
if (preg_match('#\d+\.\d+\.\d+#', $clientVersion)) {
|
|
$clientVersion = 'libmysql - ' . $clientVersion;
|
|
}
|
|
|
|
$webServer['database'] = $clientVersion;
|
|
$webServer['php_extensions'] = Util::listPHPExtensions();
|
|
$webServer['php_version'] = PHP_VERSION;
|
|
}
|
|
}
|
|
|
|
$relation = new Relation($this->dbi);
|
|
if ($server > 0) {
|
|
$relationParameters = $relation->getRelationParameters();
|
|
if (! $relationParameters->hasAllFeatures() && $cfg['PmaNoRelation_DisableWarning'] == false) {
|
|
$messageText = __(
|
|
'The phpMyAdmin configuration storage is not completely '
|
|
. 'configured, some extended features have been deactivated. '
|
|
. '%sFind out why%s. '
|
|
);
|
|
if ($cfg['ZeroConf'] == true) {
|
|
$messageText .= '<br>' .
|
|
__('Or alternately go to \'Operations\' tab of any database to set it up there.');
|
|
}
|
|
|
|
$messageInstance = Message::notice($messageText);
|
|
$messageInstance->addParamHtml(
|
|
'<a href="' . Url::getFromRoute('/check-relations')
|
|
. '" data-post="' . Url::getCommon() . '">'
|
|
);
|
|
$messageInstance->addParamHtml('</a>');
|
|
/* Show error if user has configured something, notice elsewhere */
|
|
if (! empty($cfg['Servers'][$server]['pmadb'])) {
|
|
$messageInstance->isError(true);
|
|
}
|
|
|
|
$configStorageMessage = $messageInstance->getDisplay();
|
|
}
|
|
}
|
|
|
|
$this->checkRequirements();
|
|
|
|
$git = new Git($this->config->get('ShowGitRevision') ?? true);
|
|
|
|
$this->render('home/index', [
|
|
'db' => $db,
|
|
'table' => $table,
|
|
'message' => $displayMessage ?? '',
|
|
'partial_logout' => $partialLogout ?? '',
|
|
'is_git_revision' => $git->isGitRevision(),
|
|
'server' => $server,
|
|
'sync_favorite_tables' => $syncFavoriteTables,
|
|
'has_server' => $hasServer,
|
|
'is_demo' => $cfg['DBG']['demo'],
|
|
'has_server_selection' => $hasServerSelection ?? false,
|
|
'server_selection' => $serverSelection ?? '',
|
|
'has_change_password_link' => $cfg['Server']['auth_type'] !== 'config' && $cfg['ShowChgPassword'],
|
|
'charsets' => $charsetsList ?? [],
|
|
'available_languages' => $availableLanguages,
|
|
'database_server' => $databaseServer,
|
|
'web_server' => $webServer,
|
|
'show_php_info' => $cfg['ShowPhpInfo'],
|
|
'is_version_checked' => $cfg['VersionCheck'],
|
|
'phpmyadmin_version' => Version::VERSION,
|
|
'phpmyadmin_major_version' => Version::SERIES,
|
|
'config_storage_message' => $configStorageMessage ?? '',
|
|
'has_theme_manager' => $cfg['ThemeManager'],
|
|
'themes' => $this->themeManager->getThemesArray(),
|
|
]);
|
|
}
|
|
|
|
private function checkRequirements(): void
|
|
{
|
|
global $cfg, $server;
|
|
|
|
$this->checkPhpExtensionsRequirements();
|
|
|
|
if ($cfg['LoginCookieValidityDisableWarning'] == false) {
|
|
/**
|
|
* Check whether session.gc_maxlifetime limits session validity.
|
|
*/
|
|
$gc_time = (int) ini_get('session.gc_maxlifetime');
|
|
if ($gc_time < $cfg['LoginCookieValidity']) {
|
|
trigger_error(
|
|
__(
|
|
'Your PHP parameter [a@https://www.php.net/manual/en/session.' .
|
|
'configuration.php#ini.session.gc-maxlifetime@_blank]session.' .
|
|
'gc_maxlifetime[/a] is lower than cookie validity configured ' .
|
|
'in phpMyAdmin, because of this, your login might expire sooner ' .
|
|
'than configured in phpMyAdmin.'
|
|
),
|
|
E_USER_WARNING
|
|
);
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Check whether LoginCookieValidity is limited by LoginCookieStore.
|
|
*/
|
|
if ($cfg['LoginCookieStore'] != 0 && $cfg['LoginCookieStore'] < $cfg['LoginCookieValidity']) {
|
|
trigger_error(
|
|
__(
|
|
'Login cookie store is lower than cookie validity configured in ' .
|
|
'phpMyAdmin, because of this, your login will expire sooner than ' .
|
|
'configured in phpMyAdmin.'
|
|
),
|
|
E_USER_WARNING
|
|
);
|
|
}
|
|
|
|
/**
|
|
* Warning if using the default MySQL controluser account
|
|
*/
|
|
if (
|
|
isset($cfg['Server']['controluser'], $cfg['Server']['controlpass'])
|
|
&& $server != 0
|
|
&& $cfg['Server']['controluser'] === 'pma'
|
|
&& $cfg['Server']['controlpass'] === 'pmapass'
|
|
) {
|
|
trigger_error(
|
|
__(
|
|
'Your server is running with default values for the ' .
|
|
'controluser and password (controlpass) and is open to ' .
|
|
'intrusion; you really should fix this security weakness' .
|
|
' by changing the password for controluser \'pma\'.'
|
|
),
|
|
E_USER_WARNING
|
|
);
|
|
}
|
|
|
|
/**
|
|
* Check if user does not have defined blowfish secret and it is being used.
|
|
*/
|
|
if (! empty($_SESSION['encryption_key'])) {
|
|
if (empty($cfg['blowfish_secret'])) {
|
|
trigger_error(
|
|
__(
|
|
'The configuration file now needs a secret passphrase (blowfish_secret).'
|
|
),
|
|
E_USER_WARNING
|
|
);
|
|
} elseif (mb_strlen($cfg['blowfish_secret'], '8bit') !== SODIUM_CRYPTO_SECRETBOX_KEYBYTES) {
|
|
trigger_error(
|
|
sprintf(
|
|
__(
|
|
'The secret passphrase in configuration (blowfish_secret) is not the correct length.'
|
|
. ' It should be %d bytes long.'
|
|
),
|
|
SODIUM_CRYPTO_SECRETBOX_KEYBYTES
|
|
),
|
|
E_USER_WARNING
|
|
);
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Check for existence of config directory which should not exist in
|
|
* production environment.
|
|
*/
|
|
if (@file_exists(ROOT_PATH . 'config')) {
|
|
trigger_error(
|
|
__(
|
|
'Directory [code]config[/code], which is used by the setup script, ' .
|
|
'still exists in your phpMyAdmin directory. It is strongly ' .
|
|
'recommended to remove it once phpMyAdmin has been configured. ' .
|
|
'Otherwise the security of your server may be compromised by ' .
|
|
'unauthorized people downloading your configuration.'
|
|
),
|
|
E_USER_WARNING
|
|
);
|
|
}
|
|
|
|
/**
|
|
* Warning about Suhosin only if its simulation mode is not enabled
|
|
*/
|
|
if (
|
|
$cfg['SuhosinDisableWarning'] == false
|
|
&& ini_get('suhosin.request.max_value_length')
|
|
&& ini_get('suhosin.simulation') == '0'
|
|
) {
|
|
trigger_error(
|
|
sprintf(
|
|
__(
|
|
'Server running with Suhosin. Please refer to %sdocumentation%s for possible issues.'
|
|
),
|
|
'[doc@faq1-38]',
|
|
'[/doc]'
|
|
),
|
|
E_USER_WARNING
|
|
);
|
|
}
|
|
|
|
/* Missing template cache */
|
|
if ($this->config->getTempDir('twig') === null) {
|
|
trigger_error(
|
|
sprintf(
|
|
__(
|
|
'The $cfg[\'TempDir\'] (%s) is not accessible. ' .
|
|
'phpMyAdmin is not able to cache templates and will ' .
|
|
'be slow because of this.'
|
|
),
|
|
$this->config->get('TempDir')
|
|
),
|
|
E_USER_WARNING
|
|
);
|
|
}
|
|
|
|
$this->checkLanguageStats();
|
|
}
|
|
|
|
private function checkLanguageStats(): void
|
|
{
|
|
global $cfg, $lang;
|
|
|
|
/**
|
|
* Warning about incomplete translations.
|
|
*
|
|
* The data file is created while creating release by ./scripts/remove-incomplete-mo
|
|
*/
|
|
if (! @file_exists(ROOT_PATH . 'libraries/language_stats.inc.php')) {
|
|
return;
|
|
}
|
|
|
|
/** @psalm-suppress MissingFile */
|
|
include ROOT_PATH . 'libraries/language_stats.inc.php';
|
|
/*
|
|
* This message is intentionally not translated, because we're
|
|
* handling incomplete translations here and focus on english
|
|
* speaking users.
|
|
*/
|
|
if (
|
|
! isset($GLOBALS['language_stats'][$lang])
|
|
|| $GLOBALS['language_stats'][$lang] >= $cfg['TranslationWarningThreshold']
|
|
) {
|
|
return;
|
|
}
|
|
|
|
trigger_error(
|
|
'You are using an incomplete translation, please help to make it '
|
|
. 'better by [a@https://www.phpmyadmin.net/translate/'
|
|
. '@_blank]contributing[/a].',
|
|
E_USER_NOTICE
|
|
);
|
|
}
|
|
|
|
private function checkPhpExtensionsRequirements(): void
|
|
{
|
|
/**
|
|
* mbstring is used for handling multibytes inside parser, so it is good
|
|
* to tell user something might be broken without it, see bug #1063149.
|
|
*/
|
|
if (! extension_loaded('mbstring')) {
|
|
trigger_error(
|
|
__(
|
|
'The mbstring PHP extension was not found and you seem to be using'
|
|
. ' a multibyte charset. Without the mbstring extension phpMyAdmin'
|
|
. ' is unable to split strings correctly and it may result in'
|
|
. ' unexpected results.'
|
|
),
|
|
E_USER_WARNING
|
|
);
|
|
}
|
|
|
|
/**
|
|
* Missing functionality
|
|
*/
|
|
if (extension_loaded('curl') || ini_get('allow_url_fopen')) {
|
|
return;
|
|
}
|
|
|
|
trigger_error(
|
|
__(
|
|
'The curl extension was not found and allow_url_fopen is '
|
|
. 'disabled. Due to this some features such as error reporting '
|
|
. 'or version check are disabled.'
|
|
)
|
|
);
|
|
}
|
|
}
|
