63e6410728
- Changes static methods to instance methods - Extract response handling to the controllers - Add unit tests for the DbTableExists class - Remove the AbstractController::hasDatabase() method Signed-off-by: Maurício Meneghini Fauth <mauricio@fauth.dev>
313 lines
11 KiB
PHP
313 lines
11 KiB
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
namespace PhpMyAdmin\Controllers\Table;
|
|
|
|
use PhpMyAdmin\Config\PageSettings;
|
|
use PhpMyAdmin\ConfigStorage\Relation;
|
|
use PhpMyAdmin\Controllers\AbstractController;
|
|
use PhpMyAdmin\Core;
|
|
use PhpMyAdmin\DbTableExists;
|
|
use PhpMyAdmin\Html\Generator;
|
|
use PhpMyAdmin\Http\ServerRequest;
|
|
use PhpMyAdmin\Identifiers\DatabaseName;
|
|
use PhpMyAdmin\Identifiers\TableName;
|
|
use PhpMyAdmin\InsertEdit;
|
|
use PhpMyAdmin\Message;
|
|
use PhpMyAdmin\ResponseRenderer;
|
|
use PhpMyAdmin\Template;
|
|
use PhpMyAdmin\Url;
|
|
|
|
use function __;
|
|
use function array_fill;
|
|
use function count;
|
|
use function is_array;
|
|
use function is_string;
|
|
use function str_contains;
|
|
use function str_starts_with;
|
|
use function strlen;
|
|
use function trim;
|
|
|
|
/**
|
|
* Displays form for editing and inserting new table rows.
|
|
*/
|
|
class ChangeController extends AbstractController
|
|
{
|
|
public function __construct(
|
|
ResponseRenderer $response,
|
|
Template $template,
|
|
private InsertEdit $insertEdit,
|
|
private Relation $relation,
|
|
private PageSettings $pageSettings,
|
|
private readonly DbTableExists $dbTableExists,
|
|
) {
|
|
parent::__construct($response, $template);
|
|
}
|
|
|
|
public function __invoke(ServerRequest $request): void
|
|
{
|
|
$GLOBALS['text_dir'] ??= null;
|
|
$GLOBALS['disp_message'] ??= null;
|
|
$GLOBALS['urlParams'] ??= null;
|
|
$GLOBALS['errorUrl'] ??= null;
|
|
$GLOBALS['where_clause'] ??= null;
|
|
$GLOBALS['unsaved_values'] ??= null;
|
|
$GLOBALS['result'] ??= null;
|
|
$GLOBALS['current_result'] ??= null;
|
|
|
|
$this->pageSettings->init('Edit');
|
|
$this->response->addHTML($this->pageSettings->getErrorHTML());
|
|
$this->response->addHTML($this->pageSettings->getHTML());
|
|
|
|
$databaseName = DatabaseName::tryFrom($request->getParam('db'));
|
|
if ($databaseName === null || ! $this->dbTableExists->hasDatabase($databaseName)) {
|
|
if ($request->isAjax()) {
|
|
$this->response->setRequestStatus(false);
|
|
$this->response->addJSON('message', Message::error(__('No databases selected.')));
|
|
|
|
return;
|
|
}
|
|
|
|
$this->redirect('/', ['reload' => true, 'message' => __('No databases selected.')]);
|
|
|
|
return;
|
|
}
|
|
|
|
$tableName = TableName::tryFrom($request->getParam('table'));
|
|
if ($tableName === null || ! $this->dbTableExists->hasTable($databaseName, $tableName)) {
|
|
if ($request->isAjax()) {
|
|
$this->response->setRequestStatus(false);
|
|
$this->response->addJSON('message', Message::error(__('No table selected.')));
|
|
|
|
return;
|
|
}
|
|
|
|
$this->redirect('/', ['reload' => true, 'message' => __('No table selected.')]);
|
|
|
|
return;
|
|
}
|
|
|
|
if ($request->hasQueryParam('where_clause') && $request->hasQueryParam('where_clause_signature')) {
|
|
$whereClause = $request->getQueryParam('where_clause');
|
|
if (Core::checkSqlQuerySignature($whereClause, $request->getQueryParam('where_clause_signature'))) {
|
|
$GLOBALS['where_clause'] = $whereClause;
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Determine whether Insert or Edit and set global variables
|
|
*/
|
|
[
|
|
$insertMode,
|
|
$GLOBALS['where_clause'],
|
|
$whereClauseArray,
|
|
$whereClauses,
|
|
$GLOBALS['result'],
|
|
$rows,
|
|
$foundUniqueIndex,
|
|
$afterInsert,
|
|
] = $this->insertEdit->determineInsertOrEdit(
|
|
$GLOBALS['where_clause'] ?? null,
|
|
$GLOBALS['db'],
|
|
$GLOBALS['table'],
|
|
);
|
|
// Increase number of rows if unsaved rows are more
|
|
if (! empty($GLOBALS['unsaved_values']) && count($rows) < count($GLOBALS['unsaved_values'])) {
|
|
$rows = array_fill(0, count($GLOBALS['unsaved_values']), false);
|
|
}
|
|
|
|
/**
|
|
* Defines the url to return to in case of error in a sql statement
|
|
* (at this point, $GLOBALS['goto'] will be set but could be empty)
|
|
*/
|
|
if (empty($GLOBALS['goto'])) {
|
|
if (strlen($GLOBALS['table']) > 0) {
|
|
// avoid a problem (see bug #2202709)
|
|
$GLOBALS['goto'] = Url::getFromRoute('/table/sql');
|
|
} else {
|
|
$GLOBALS['goto'] = Url::getFromRoute('/database/sql');
|
|
}
|
|
}
|
|
|
|
/** @var mixed $sqlQuery */
|
|
$sqlQuery = $request->getParsedBodyParam('sql_query');
|
|
$GLOBALS['urlParams'] = ['db' => $GLOBALS['db'], 'sql_query' => is_string($sqlQuery) ? $sqlQuery : ''];
|
|
|
|
if (str_starts_with($GLOBALS['goto'] ?? '', 'index.php?route=/table')) {
|
|
$GLOBALS['urlParams']['table'] = $GLOBALS['table'];
|
|
}
|
|
|
|
$GLOBALS['errorUrl'] = $GLOBALS['goto'] . Url::getCommon(
|
|
$GLOBALS['urlParams'],
|
|
! str_contains($GLOBALS['goto'], '?') ? '?' : '&',
|
|
);
|
|
unset($GLOBALS['urlParams']);
|
|
|
|
$commentsMap = $this->insertEdit->getCommentsMap($GLOBALS['db'], $GLOBALS['table']);
|
|
|
|
/**
|
|
* START REGULAR OUTPUT
|
|
*/
|
|
|
|
$this->addScriptFiles([
|
|
'makegrid.js',
|
|
'sql.js',
|
|
'table/change.js',
|
|
'vendor/jquery/additional-methods.js',
|
|
'gis_data_editor.js',
|
|
]);
|
|
|
|
/**
|
|
* Displays the query submitted and its result
|
|
*
|
|
* $disp_message come from /table/replace
|
|
*/
|
|
if (! empty($GLOBALS['disp_message'])) {
|
|
$this->response->addHTML(Generator::getMessage($GLOBALS['disp_message']));
|
|
}
|
|
|
|
$tableColumns = $this->insertEdit->getTableColumns($GLOBALS['db'], $GLOBALS['table']);
|
|
|
|
// retrieve keys into foreign fields, if any
|
|
$foreigners = $this->relation->getForeigners($GLOBALS['db'], $GLOBALS['table']);
|
|
|
|
// Retrieve form parameters for insert/edit form
|
|
$formParams = $this->insertEdit->getFormParametersForInsertForm(
|
|
$GLOBALS['db'],
|
|
$GLOBALS['table'],
|
|
$whereClauses,
|
|
$whereClauseArray,
|
|
$GLOBALS['errorUrl'],
|
|
);
|
|
|
|
/**
|
|
* Displays the form
|
|
*/
|
|
// Had to put the URI because when hosted on an https server,
|
|
// some browsers send wrongly this form to the http server.
|
|
|
|
$htmlOutput = '';
|
|
|
|
$GLOBALS['urlParams']['db'] = $GLOBALS['db'];
|
|
$GLOBALS['urlParams']['table'] = $GLOBALS['table'];
|
|
$GLOBALS['urlParams'] = $this->urlParamsInEditMode($GLOBALS['urlParams'], $whereClauseArray);
|
|
|
|
$hasBlobField = false;
|
|
foreach ($tableColumns as $tableColumn) {
|
|
if ($this->insertEdit->isColumn($tableColumn->type, ['blob', 'tinyblob', 'mediumblob', 'longblob'])) {
|
|
$hasBlobField = true;
|
|
break;
|
|
}
|
|
}
|
|
|
|
//Insert/Edit form
|
|
//If table has blob fields we have to disable ajax.
|
|
$isUpload = $GLOBALS['config']->get('enable_upload');
|
|
$htmlOutput .= $this->insertEdit->getHtmlForInsertEditFormHeader($hasBlobField, $isUpload);
|
|
|
|
$htmlOutput .= Url::getHiddenInputs($formParams);
|
|
|
|
// user can toggle the display of Function column and column types
|
|
// (currently does not work for multi-edits)
|
|
if (! $GLOBALS['cfg']['ShowFunctionFields'] || ! $GLOBALS['cfg']['ShowFieldTypesInDataEditView']) {
|
|
$htmlOutput .= __('Show');
|
|
}
|
|
|
|
if (! $GLOBALS['cfg']['ShowFunctionFields']) {
|
|
$htmlOutput .= $this->insertEdit->showTypeOrFunction('function', $GLOBALS['urlParams'], false);
|
|
}
|
|
|
|
if (! $GLOBALS['cfg']['ShowFieldTypesInDataEditView']) {
|
|
$htmlOutput .= $this->insertEdit->showTypeOrFunction('type', $GLOBALS['urlParams'], false);
|
|
}
|
|
|
|
$GLOBALS['plugin_scripts'] = [];
|
|
foreach ($rows as $rowId => $currentRow) {
|
|
$GLOBALS['current_result'] = (isset($GLOBALS['result'])
|
|
&& is_array($GLOBALS['result']) && isset($GLOBALS['result'][$rowId])
|
|
? $GLOBALS['result'][$rowId]
|
|
: $GLOBALS['result']);
|
|
$repopulate = [];
|
|
$checked = true;
|
|
if (isset($GLOBALS['unsaved_values'][$rowId])) {
|
|
$repopulate = $GLOBALS['unsaved_values'][$rowId];
|
|
$checked = false;
|
|
}
|
|
|
|
if ($insertMode && $rowId > 0) {
|
|
$htmlOutput .= $this->insertEdit->getHtmlForIgnoreOption($rowId, $checked);
|
|
}
|
|
|
|
$htmlOutput .= $this->insertEdit->getHtmlForInsertEditRow(
|
|
$GLOBALS['urlParams'],
|
|
$tableColumns,
|
|
$commentsMap,
|
|
$GLOBALS['current_result'],
|
|
$insertMode,
|
|
$currentRow ?: [],
|
|
$isUpload,
|
|
$foreigners,
|
|
$GLOBALS['table'],
|
|
$GLOBALS['db'],
|
|
$rowId,
|
|
$GLOBALS['text_dir'],
|
|
$repopulate,
|
|
$whereClauseArray,
|
|
);
|
|
}
|
|
|
|
$this->addScriptFiles($GLOBALS['plugin_scripts']);
|
|
|
|
unset($GLOBALS['unsaved_values'], $GLOBALS['plugin_scripts']);
|
|
|
|
$isNumeric = InsertEdit::isWhereClauseNumeric($GLOBALS['where_clause']);
|
|
$htmlOutput .= $this->template->render('table/insert/actions_panel', [
|
|
'where_clause' => $GLOBALS['where_clause'],
|
|
'after_insert' => $afterInsert ?? 'back',
|
|
'found_unique_key' => $foundUniqueIndex,
|
|
'is_numeric' => $isNumeric,
|
|
]);
|
|
|
|
$htmlOutput .= '</form>';
|
|
|
|
$htmlOutput .= $this->insertEdit->getHtmlForGisEditor();
|
|
// end Insert/Edit form
|
|
|
|
if ($insertMode) {
|
|
//Continue insertion form
|
|
$htmlOutput .= $this->insertEdit->getContinueInsertionForm(
|
|
$GLOBALS['table'],
|
|
$GLOBALS['db'],
|
|
$whereClauseArray,
|
|
$GLOBALS['errorUrl'],
|
|
);
|
|
}
|
|
|
|
$this->response->addHTML($htmlOutput);
|
|
}
|
|
|
|
/**
|
|
* Add some url parameters
|
|
*
|
|
* @param mixed[] $urlParams containing $db and $table as url parameters
|
|
* @param mixed[] $whereClauseArray where clauses array
|
|
*
|
|
* @return mixed[] Add some url parameters to $url_params array and return it
|
|
*/
|
|
public function urlParamsInEditMode(
|
|
array $urlParams,
|
|
array $whereClauseArray,
|
|
): array {
|
|
foreach ($whereClauseArray as $whereClause) {
|
|
$urlParams['where_clause'] = trim($whereClause);
|
|
}
|
|
|
|
if (! empty($_POST['sql_query'])) {
|
|
$urlParams['sql_query'] = $_POST['sql_query'];
|
|
}
|
|
|
|
return $urlParams;
|
|
}
|
|
}
|
