339 lines
14 KiB
PHP
339 lines
14 KiB
PHP
<?php
|
|
declare(strict_types=1);
|
|
|
|
namespace PhpMyAdmin\Controllers\Table;
|
|
|
|
use PhpMyAdmin\Common;
|
|
use PhpMyAdmin\Sql;
|
|
use PhpMyAdmin\Url;
|
|
use PhpMyAdmin\Util;
|
|
use function is_array;
|
|
|
|
/**
|
|
* Handle row specific actions like edit, delete, export.
|
|
*/
|
|
class RowActionController extends AbstractController
|
|
{
|
|
public function index(): void
|
|
{
|
|
global $db, $goto, $pmaThemeImage, $sql_query, $table, $disp_message, $disp_query, $action;
|
|
global $submit_mult, $active_page, $err_url, $original_sql_query, $url_query, $original_url_query;
|
|
global $mult_btn, $query_type, $reload, $selected, $selected_fld;
|
|
|
|
if (isset($_POST['submit_mult'])) {
|
|
$submit_mult = $_POST['submit_mult'];
|
|
// workaround for IE problem:
|
|
} elseif (isset($_POST['submit_mult_delete_x'])) {
|
|
$submit_mult = 'row_delete';
|
|
}
|
|
|
|
if (isset($_POST['submit_mult_change_x'])
|
|
|| $submit_mult === 'row_edit' || $submit_mult === 'edit'
|
|
|| $submit_mult === 'row_copy' || $submit_mult === 'copy'
|
|
) {
|
|
$this->edit();
|
|
|
|
return;
|
|
}
|
|
|
|
if (isset($_POST['submit_mult_export_x']) || $submit_mult === 'row_export' || $submit_mult === 'export') {
|
|
$this->export();
|
|
|
|
return;
|
|
}
|
|
|
|
// If the 'Ask for confirmation' button was pressed, this can only come
|
|
// from 'delete' mode, so we set it straight away.
|
|
if (isset($_POST['mult_btn'])) {
|
|
$submit_mult = 'row_delete';
|
|
}
|
|
|
|
switch ($submit_mult) {
|
|
case 'row_delete':
|
|
// leave as is
|
|
break;
|
|
|
|
case 'delete':
|
|
$submit_mult = 'row_delete';
|
|
break;
|
|
}
|
|
|
|
if (! empty($submit_mult)) {
|
|
if (isset($_POST['goto'])
|
|
&& (! isset($_POST['rows_to_delete'])
|
|
|| ! is_array($_POST['rows_to_delete']))
|
|
) {
|
|
$this->response->setRequestStatus(false);
|
|
$this->response->addJSON('message', __('No row selected.'));
|
|
}
|
|
|
|
switch ($submit_mult) {
|
|
case 'row_delete':
|
|
default:
|
|
$action = Url::getFromRoute('/table/row-action');
|
|
$err_url = Url::getFromRoute('/table/row-action', $GLOBALS['url_params']);
|
|
if (! isset($_POST['mult_btn'])) {
|
|
$original_sql_query = $sql_query;
|
|
if (! empty($url_query)) {
|
|
$original_url_query = $url_query;
|
|
}
|
|
}
|
|
|
|
$goto = $_POST['goto'] ?? $goto ?? null;
|
|
$mult_btn = $_POST['mult_btn'] ?? $mult_btn ?? null;
|
|
$original_sql_query = $_POST['original_sql_query'] ?? $original_sql_query ?? null;
|
|
$query_type = $_POST['query_type'] ?? $query_type ?? null;
|
|
$reload = $_POST['reload'] ?? $reload ?? null;
|
|
$selected = $_POST['selected'] ?? $selected ?? null;
|
|
$selected_fld = $_POST['selected_fld'] ?? $selected_fld ?? null;
|
|
$sql_query = $_POST['sql_query'] ?? $sql_query ?? null;
|
|
$submit_mult = $_POST['submit_mult'] ?? $submit_mult ?? null;
|
|
$url_query = $_POST['url_query'] ?? $url_query ?? null;
|
|
|
|
if (! empty($submit_mult)
|
|
&& $submit_mult != __('With selected:')
|
|
&& (! empty($_POST['selected_tbl'])
|
|
|| ! empty($selected_fld)
|
|
|| ! empty($_POST['rows_to_delete']))
|
|
) {
|
|
// phpcs:disable PSR1.Files.SideEffects
|
|
define('PMA_SUBMIT_MULT', 1);
|
|
// phpcs:enable
|
|
|
|
if (! (isset($selected_fld) && ! empty($selected_fld))) {
|
|
// coming from browsing - do something with selected rows
|
|
$what = 'row_delete';
|
|
$selected = $_REQUEST['rows_to_delete'];
|
|
}
|
|
}
|
|
|
|
if (! empty($submit_mult) && ! empty($what)) {
|
|
if (strlen($table) > 0) {
|
|
Common::table();
|
|
$url_query .= Url::getCommon([
|
|
'goto' => Url::getFromRoute('/table/sql'),
|
|
'back' => Url::getFromRoute('/table/sql'),
|
|
], '&');
|
|
}
|
|
|
|
$full_query = '';
|
|
|
|
$i = 0;
|
|
foreach ($selected as $selectedValue) {
|
|
switch ($what) {
|
|
case 'row_delete':
|
|
$full_query .= 'DELETE FROM '
|
|
. Util::backquote(htmlspecialchars($table))
|
|
// Do not append a "LIMIT 1" clause here
|
|
// (it's not binlog friendly).
|
|
// We don't need the clause because the calling panel permits
|
|
// this feature only when there is a unique index.
|
|
. ' WHERE ' . htmlspecialchars($selectedValue)
|
|
. ';<br>';
|
|
break;
|
|
}
|
|
$i++;
|
|
}
|
|
|
|
$_url_params = [
|
|
'query_type' => $what,
|
|
];
|
|
|
|
if (mb_strpos(' ' . $action, 'tbl_') === 1 || mb_strpos($action, '?route=/table/') !== false
|
|
|| $what == 'row_delete'
|
|
) {
|
|
$_url_params['db'] = $db;
|
|
$_url_params['table'] = $table;
|
|
}
|
|
|
|
foreach ($selected as $selectedValue) {
|
|
if ($what == 'row_delete') {
|
|
$_url_params['selected'][] = 'DELETE FROM '
|
|
. Util::backquote($table)
|
|
. ' WHERE ' . $selectedValue . ' LIMIT 1;';
|
|
}
|
|
}
|
|
|
|
if ($what == 'row_delete') {
|
|
$_url_params['original_sql_query'] = $original_sql_query ?? null;
|
|
if (! empty($originalUrlQuery)) {
|
|
$_url_params['original_url_query'] = $original_url_query;
|
|
}
|
|
}
|
|
|
|
$this->render('mult_submits/other_actions', [
|
|
'action' => $action,
|
|
'url_params' => $_url_params,
|
|
'what' => $what,
|
|
'full_query' => $full_query,
|
|
'is_foreign_key_check' => Util::isForeignKeyCheck(),
|
|
]);
|
|
|
|
exit;
|
|
} elseif (! empty($mult_btn) && $mult_btn == __('Yes')) {
|
|
$default_fk_check_value = false;
|
|
|
|
if ($query_type == 'drop_tbl'
|
|
|| $query_type == 'empty_tbl'
|
|
|| $query_type == 'row_delete'
|
|
) {
|
|
$default_fk_check_value = Util::handleDisableFKCheckInit();
|
|
}
|
|
|
|
$aQuery = null;
|
|
$sql_query = '';
|
|
$sql_query_views = null;
|
|
// whether to run query after each pass
|
|
$run_parts = false;
|
|
$result = null;
|
|
$selectedCount = count($selected);
|
|
$deletes = false;
|
|
|
|
for ($i = 0; $i < $selectedCount; $i++) {
|
|
switch ($query_type) {
|
|
case 'row_delete':
|
|
$deletes = true;
|
|
$aQuery = $selected[$i];
|
|
$run_parts = true;
|
|
break;
|
|
}
|
|
|
|
if ($run_parts) {
|
|
$sql_query .= $aQuery . ';' . "\n";
|
|
$this->dbi->selectDb($db);
|
|
$result = $this->dbi->query($aQuery);
|
|
}
|
|
}
|
|
|
|
if ($deletes && ! empty($_REQUEST['pos'])) {
|
|
$sql = new Sql();
|
|
$_REQUEST['pos'] = $sql->calculatePosForLastPage(
|
|
$db,
|
|
$table,
|
|
$_REQUEST['pos'] ?? null
|
|
);
|
|
}
|
|
|
|
if ($query_type == 'drop_tbl'
|
|
|| $query_type == 'empty_tbl'
|
|
|| $query_type == 'row_delete'
|
|
) {
|
|
Util::handleDisableFKCheckCleanup($default_fk_check_value);
|
|
}
|
|
}
|
|
|
|
$_url_params = $GLOBALS['url_params'];
|
|
$_url_params['goto'] = Url::getFromRoute('/table/sql');
|
|
$url_query = Url::getCommon($_url_params);
|
|
|
|
/**
|
|
* Show result of multi submit operation
|
|
*/
|
|
// sql_query is not set when user does not confirm multi-delete
|
|
if ((! empty($submit_mult) || isset($_POST['mult_btn']))
|
|
&& ! empty($sql_query)
|
|
) {
|
|
$disp_message = __('Your SQL query has been executed successfully.');
|
|
$disp_query = $sql_query;
|
|
}
|
|
|
|
if (isset($original_sql_query)) {
|
|
$sql_query = $original_sql_query;
|
|
}
|
|
|
|
if (isset($original_url_query)) {
|
|
$url_query = $original_url_query;
|
|
}
|
|
|
|
$active_page = Url::getFromRoute('/sql');
|
|
$sql = new Sql();
|
|
$sql->executeQueryAndSendQueryResponse(
|
|
null,
|
|
false,
|
|
$db,
|
|
$table,
|
|
null,
|
|
null,
|
|
null,
|
|
null,
|
|
null,
|
|
null,
|
|
$goto,
|
|
$pmaThemeImage,
|
|
null,
|
|
null,
|
|
null,
|
|
$sql_query,
|
|
null,
|
|
null
|
|
);
|
|
}
|
|
}
|
|
}
|
|
|
|
private function edit(): void
|
|
{
|
|
global $containerBuilder, $submit_mult, $active_page, $where_clause;
|
|
|
|
$submit_mult = $submit_mult === 'copy' ? 'row_copy' : 'row_edit';
|
|
|
|
if ($submit_mult === 'row_copy') {
|
|
$_POST['default_action'] = 'insert';
|
|
}
|
|
|
|
if (isset($_POST['goto']) && (! isset($_POST['rows_to_delete']) || ! is_array($_POST['rows_to_delete']))) {
|
|
$this->response->setRequestStatus(false);
|
|
$this->response->addJSON('message', __('No row selected.'));
|
|
}
|
|
|
|
// As we got the rows to be edited from the
|
|
// 'rows_to_delete' checkbox, we use the index of it as the
|
|
// indicating WHERE clause. Then we build the array which is used
|
|
// for the /table/change script.
|
|
$where_clause = [];
|
|
if (isset($_POST['rows_to_delete']) && is_array($_POST['rows_to_delete'])) {
|
|
foreach ($_POST['rows_to_delete'] as $i => $i_where_clause) {
|
|
$where_clause[] = $i_where_clause;
|
|
}
|
|
}
|
|
|
|
$active_page = Url::getFromRoute('/table/change');
|
|
|
|
/** @var ChangeController $controller */
|
|
$controller = $containerBuilder->get(ChangeController::class);
|
|
$controller->index();
|
|
}
|
|
|
|
private function export(): void
|
|
{
|
|
global $containerBuilder, $submit_mult, $active_page, $single_table, $where_clause;
|
|
|
|
$submit_mult = 'row_export';
|
|
|
|
if (isset($_POST['goto']) && (! isset($_POST['rows_to_delete']) || ! is_array($_POST['rows_to_delete']))) {
|
|
$this->response->setRequestStatus(false);
|
|
$this->response->addJSON('message', __('No row selected.'));
|
|
}
|
|
|
|
// Needed to allow SQL export
|
|
$single_table = true;
|
|
|
|
// As we got the rows to be exported from the
|
|
// 'rows_to_delete' checkbox, we use the index of it as the
|
|
// indicating WHERE clause. Then we build the array which is used
|
|
// for the /table/change script.
|
|
$where_clause = [];
|
|
if (isset($_POST['rows_to_delete']) && is_array($_POST['rows_to_delete'])) {
|
|
foreach ($_POST['rows_to_delete'] as $i => $i_where_clause) {
|
|
$where_clause[] = $i_where_clause;
|
|
}
|
|
}
|
|
|
|
$active_page = Url::getFromRoute('/table/export');
|
|
|
|
/** @var ExportController $controller */
|
|
$controller = $containerBuilder->get(ExportController::class);
|
|
$controller->index();
|
|
}
|
|
}
|
