521 lines
19 KiB
PHP
521 lines
19 KiB
PHP
<?php
|
|
/* vim: set expandtab sw=4 ts=4 sts=4: */
|
|
/**
|
|
* functions for displaying the sql query form
|
|
*
|
|
* @usedby server_sql.php
|
|
* @usedby db_sql.php
|
|
* @usedby tbl_sql.php
|
|
* @usedby tbl_structure.php
|
|
* @usedby tbl_tracking.php
|
|
* @usedby querywindow.php
|
|
* @package PhpMyAdmin
|
|
*/
|
|
if (! defined('PHPMYADMIN')) {
|
|
exit;
|
|
}
|
|
|
|
/**
|
|
*
|
|
*/
|
|
require_once './libraries/file_listing.lib.php'; // used for file listing
|
|
require_once './libraries/bookmark.lib.php'; // used for bookmarks
|
|
|
|
/**
|
|
* return HTML for the sql query boxes
|
|
*
|
|
* @param boolean|string $query query to display in the textarea
|
|
* or true to display last executed
|
|
* @param boolean|string $display_tab sql|files|history|full|false
|
|
* what part to display
|
|
* false if not inside querywindow
|
|
* @param string $delimiter delimeter
|
|
*
|
|
* @return string
|
|
*
|
|
* @usedby server_sql.php
|
|
* @usedby db_sql.php
|
|
* @usedby tbl_sql.php
|
|
* @usedby tbl_structure.php
|
|
* @usedby tbl_tracking.php
|
|
* @usedby querywindow.php
|
|
*/
|
|
function PMA_getHtmlForSqlQueryForm(
|
|
$query = true, $display_tab = false, $delimiter = ';'
|
|
) {
|
|
$html = '';
|
|
// check tab to display if inside querywindow
|
|
if (! $display_tab) {
|
|
$display_tab = 'full';
|
|
$is_querywindow = false;
|
|
} else {
|
|
$is_querywindow = true;
|
|
}
|
|
|
|
// query to show
|
|
if (true === $query) {
|
|
$query = $GLOBALS['sql_query'];
|
|
}
|
|
|
|
// set enctype to multipart for file uploads
|
|
if ($GLOBALS['is_upload']) {
|
|
$enctype = ' enctype="multipart/form-data"';
|
|
} else {
|
|
$enctype = '';
|
|
}
|
|
|
|
$table = '';
|
|
$db = '';
|
|
if (! strlen($GLOBALS['db'])) {
|
|
// prepare for server related
|
|
$goto = empty($GLOBALS['goto']) ?
|
|
'server_sql.php' : $GLOBALS['goto'];
|
|
} elseif (! strlen($GLOBALS['table'])) {
|
|
// prepare for db related
|
|
$db = $GLOBALS['db'];
|
|
$goto = empty($GLOBALS['goto']) ?
|
|
'db_sql.php' : $GLOBALS['goto'];
|
|
} else {
|
|
$table = $GLOBALS['table'];
|
|
$db = $GLOBALS['db'];
|
|
$goto = empty($GLOBALS['goto']) ?
|
|
'tbl_sql.php' : $GLOBALS['goto'];
|
|
}
|
|
|
|
// start output
|
|
if ($is_querywindow) {
|
|
$html .= '<form method="post" id="sqlqueryform"';
|
|
$html .= ' action="import.php" ' . $enctype . ' name="sqlform">';
|
|
} else {
|
|
$html .= '<form method="post" action="import.php" ' . $enctype;
|
|
$html .= ' class="ajax"';
|
|
$html .= ' id="sqlqueryform" name="sqlform">' . "\n";
|
|
}
|
|
|
|
if ($is_querywindow) {
|
|
$html .= '<input type="hidden" name="focus_querywindow"'
|
|
.' value="true" />' . "\n";
|
|
if ($display_tab != 'sql' && $display_tab != 'full') {
|
|
$html .= '<input type="hidden" name="sql_query"'
|
|
.' value="" />' . "\n";
|
|
$html .= '<input type="hidden" name="show_query"'
|
|
.' value="1" />' . "\n";
|
|
}
|
|
}
|
|
$html .= '<input type="hidden" name="is_js_confirmed" value="0" />'
|
|
. "\n" . PMA_URL_getHiddenInputs($db, $table) . "\n"
|
|
.'<input type="hidden" name="pos" value="0" />' . "\n"
|
|
.'<input type="hidden" name="goto" value="'
|
|
.htmlspecialchars($goto) . '" />' . "\n"
|
|
.'<input type="hidden" name="message_to_show" value="'
|
|
. __('Your SQL query has been executed successfully') . '" />'
|
|
. "\n" .'<input type="hidden" name="prev_sql_query" value="'
|
|
. htmlspecialchars($query) . '" />' . "\n";
|
|
|
|
// display querybox
|
|
if ($display_tab === 'full' || $display_tab === 'sql') {
|
|
$html .= PMA_getHtmlForSqlQueryFormInsert(
|
|
$query, $is_querywindow, $delimiter
|
|
);
|
|
}
|
|
|
|
// display uploads
|
|
if ($display_tab === 'files' && $GLOBALS['is_upload']) {
|
|
$html .= PMA_getHtmlForSqlQueryFormUpload();
|
|
}
|
|
|
|
// Bookmark Support
|
|
if ($display_tab === 'full' || $display_tab === 'history') {
|
|
if (! empty($GLOBALS['cfg']['Bookmark'])) {
|
|
$html .= PMA_getHtmlForSqlQueryFormBookmark();
|
|
}
|
|
}
|
|
|
|
// Encoding setting form appended by Y.Kawada
|
|
if (function_exists('PMA_Kanji_encodingForm')) {
|
|
$html .= PMA_Kanji_encodingForm();
|
|
}
|
|
|
|
$html .= '</form>' . "\n";
|
|
// print an empty div, which will be later filled with
|
|
// the sql query results by ajax
|
|
$html .= '<div id="sqlqueryresults"></div>';
|
|
|
|
return $html;
|
|
}
|
|
|
|
/**
|
|
* return HTML for Sql Query Form Insert
|
|
*
|
|
* @param string $query query to display in the textarea
|
|
* @param boolean $is_querywindow if inside querywindow or not
|
|
* @param string $delimiter default delimiter to use
|
|
*
|
|
* @return string
|
|
*
|
|
* @usedby PMA_getHtmlForSqlQueryForm()
|
|
*/
|
|
function PMA_getHtmlForSqlQueryFormInsert(
|
|
$query = '', $is_querywindow = false, $delimiter = ';'
|
|
) {
|
|
// enable auto select text in textarea
|
|
if ($GLOBALS['cfg']['TextareaAutoSelect']) {
|
|
$auto_sel = ' onclick="selectContent(this, sql_box_locked, true);"';
|
|
} else {
|
|
$auto_sel = '';
|
|
}
|
|
|
|
// enable locking if inside query window
|
|
if ($is_querywindow) {
|
|
$locking = ' onkeypress="document.sqlform.elements[\'LockFromUpdate\'].'
|
|
.'checked = true;"';
|
|
$height = $GLOBALS['cfg']['TextareaRows'] * 1.25;
|
|
} else {
|
|
$locking = '';
|
|
$height = $GLOBALS['cfg']['TextareaRows'] * 2;
|
|
}
|
|
|
|
$table = '';
|
|
$db = '';
|
|
$fields_list = array();
|
|
if (! strlen($GLOBALS['db'])) {
|
|
// prepare for server related
|
|
$legend = sprintf(
|
|
__('Run SQL query/queries on server %s'),
|
|
'"' . htmlspecialchars(
|
|
! empty($GLOBALS['cfg']['Servers'][$GLOBALS['server']]['verbose'])
|
|
? $GLOBALS['cfg']['Servers'][$GLOBALS['server']]['verbose']
|
|
: $GLOBALS['cfg']['Servers'][$GLOBALS['server']]['host']
|
|
) . '"'
|
|
);
|
|
} elseif (! strlen($GLOBALS['table'])) {
|
|
// prepare for db related
|
|
$db = $GLOBALS['db'];
|
|
// if you want navigation:
|
|
$tmp_db_link = '<a href="' . $GLOBALS['cfg']['DefaultTabDatabase']
|
|
. '?' . PMA_URL_getCommon($db) . '"';
|
|
if ($is_querywindow) {
|
|
$tmp_db_link .= ' target="_self"'
|
|
. ' onclick="this.target=window.opener.frame_content.name"';
|
|
}
|
|
$tmp_db_link .= '>'
|
|
. htmlspecialchars($db) . '</a>';
|
|
// else use
|
|
// $tmp_db_link = htmlspecialchars($db);
|
|
$legend = sprintf(__('Run SQL query/queries on database %s'), $tmp_db_link);
|
|
if (empty($query)) {
|
|
$query = PMA_Util::expandUserString(
|
|
$GLOBALS['cfg']['DefaultQueryDatabase'], 'backquote'
|
|
);
|
|
}
|
|
} else {
|
|
$table = $GLOBALS['table'];
|
|
$db = $GLOBALS['db'];
|
|
// Get the list and number of fields
|
|
// we do a try_query here, because we could be in the query window,
|
|
// trying to synchonize and the table has not yet been created
|
|
$fields_list = $GLOBALS['dbi']->getColumns(
|
|
$db, $GLOBALS['table'], null, true
|
|
);
|
|
|
|
$tmp_db_link = '<a href="' . $GLOBALS['cfg']['DefaultTabDatabase']
|
|
. '?' . PMA_URL_getCommon($db) . '"';
|
|
if ($is_querywindow) {
|
|
$tmp_db_link .= 'target="_parent" '
|
|
. 'onclick="window.opener.location.href = \''
|
|
. $GLOBALS['cfg']['DefaultTabDatabase']
|
|
. '?' . PMA_URL_getCommon($db).'\';return false;"';
|
|
}
|
|
$tmp_db_link .= '>'
|
|
. htmlspecialchars($db) . '</a>';
|
|
// else use
|
|
// $tmp_db_link = htmlspecialchars($db);
|
|
$legend = sprintf(__('Run SQL query/queries on database %s'), $tmp_db_link);
|
|
if (empty($query)) {
|
|
$query = PMA_Util::expandUserString(
|
|
$GLOBALS['cfg']['DefaultQueryTable'], 'backquote'
|
|
);
|
|
}
|
|
}
|
|
$legend .= ': ' . PMA_Util::showMySQLDocu('SELECT');
|
|
|
|
if (count($fields_list)) {
|
|
$sqlquerycontainer_id = 'sqlquerycontainer';
|
|
} else {
|
|
$sqlquerycontainer_id = 'sqlquerycontainerfull';
|
|
}
|
|
|
|
$html = '<a id="querybox"></a>'
|
|
. '<div id="queryboxcontainer">'
|
|
. '<fieldset id="queryboxf">';
|
|
$html .= '<legend>' . $legend . '</legend>';
|
|
$html .= '<div id="queryfieldscontainer">';
|
|
$html .= '<div id="' . $sqlquerycontainer_id . '">'
|
|
. '<textarea tabindex="100" name="sql_query" id="sqlquery"'
|
|
. ' cols="' . $GLOBALS['cfg']['TextareaCols'] . '"'
|
|
. ' rows="' . $height . '"'
|
|
. ' dir="' . $GLOBALS['text_dir'] . '"'
|
|
. $auto_sel . $locking . '>'
|
|
. htmlspecialchars($query)
|
|
. '</textarea>';
|
|
// Add buttons to generate query easily for
|
|
// select all, single select, insert, update and delete
|
|
if (count($fields_list)) {
|
|
$html .= '<input type="button" value="SELECT *" id="selectall"'
|
|
. ' class="button sqlbutton" />';
|
|
$html .= '<input type="button" value="SELECT" id="select"'
|
|
. ' class="button sqlbutton" />';
|
|
$html .= '<input type="button" value="INSERT" id="insert"'
|
|
. ' class="button sqlbutton" />';
|
|
$html .= '<input type="button" value="UPDATE" id="update"'
|
|
. ' class="button sqlbutton" />';
|
|
$html .= '<input type="button" value="DELETE" id="delete"'
|
|
. ' class="button sqlbutton" />';
|
|
}
|
|
$html .= '<input type="button" value="' . __('Clear') . '" id="clear"'
|
|
. ' class="button sqlbutton" />';
|
|
$html .= '</div>' . "\n";
|
|
|
|
if (count($fields_list)) {
|
|
$html .= '<div id="tablefieldscontainer">'
|
|
. '<label>' . __('Columns') . '</label>'
|
|
. '<select id="tablefields" name="dummy" '
|
|
. 'size="' . ($GLOBALS['cfg']['TextareaRows'] - 2) . '" '
|
|
. 'multiple="multiple" ondblclick="insertValueQuery()">';
|
|
foreach ($fields_list as $field) {
|
|
$html .= '<option value="'
|
|
. PMA_Util::backquote(htmlspecialchars($field['Field'])) . '"';
|
|
if (isset($field['Field'])
|
|
&& strlen($field['Field'])
|
|
&& isset($field['Comment'])
|
|
) {
|
|
$html .= ' title="' . htmlspecialchars($field['Comment']) . '"';
|
|
}
|
|
$html .= '>' . htmlspecialchars($field['Field']) . '</option>' . "\n";
|
|
}
|
|
$html .= '</select>'
|
|
. '<div id="tablefieldinsertbuttoncontainer">';
|
|
if (PMA_Util::showIcons('ActionLinksMode')) {
|
|
$html .= '<input type="button" class="button" name="insert"'
|
|
. ' value="<<" onclick="insertValueQuery()"'
|
|
. ' title="' . __('Insert') . '" />';
|
|
} else {
|
|
$html .= '<input type="button" class="button" name="insert"'
|
|
. ' value="' . __('Insert') . '"'
|
|
. ' onclick="insertValueQuery()" />';
|
|
}
|
|
$html .= '</div>' . "\n"
|
|
.'</div>' . "\n";
|
|
}
|
|
|
|
$html .= '<div class="clearfloat"></div>' . "\n";
|
|
$html .= '</div>' . "\n";
|
|
|
|
if (! empty($GLOBALS['cfg']['Bookmark'])) {
|
|
$html .= '<div id="bookmarkoptions">';
|
|
$html .= '<div class="formelement">';
|
|
$html .= '<label for="bkm_label">'
|
|
. __('Bookmark this SQL query:') . '</label>';
|
|
$html .= '<input type="text" name="bkm_label" id="bkm_label"'
|
|
. ' tabindex="110" value="" />';
|
|
$html .= '</div>';
|
|
$html .= '<div class="formelement">';
|
|
$html .= '<input type="checkbox" name="bkm_all_users" tabindex="111"'
|
|
. ' id="id_bkm_all_users" value="true" />';
|
|
$html .= '<label for="id_bkm_all_users">'
|
|
. __('Let every user access this bookmark') . '</label>';
|
|
$html .= '</div>';
|
|
$html .= '<div class="formelement">';
|
|
$html .= '<input type="checkbox" name="bkm_replace" tabindex="112"'
|
|
. ' id="id_bkm_replace" value="true" />';
|
|
$html .= '<label for="id_bkm_replace">'
|
|
. __('Replace existing bookmark of same name') . '</label>';
|
|
$html .= '</div>';
|
|
$html .= '</div>';
|
|
}
|
|
|
|
$html .= '<div class="clearfloat"></div>' . "\n";
|
|
$html .= '</fieldset>' . "\n"
|
|
.'</div>' . "\n";
|
|
|
|
$html .= '<fieldset id="queryboxfooter" class="tblFooters">' . "\n";
|
|
$html .= '<div class="formelement">' . "\n";
|
|
|
|
if ($is_querywindow) {
|
|
$html .= '<input type="checkbox" '
|
|
. 'name="LockFromUpdate" checked="checked" tabindex="120" '
|
|
. 'id="checkbox_lock" /> <label for="checkbox_lock">'
|
|
. __('Do not overwrite this query from outside the window')
|
|
. '</label>';
|
|
}
|
|
$html .= '</div>' . "\n";
|
|
$html .= '<div class="formelement">' . "\n";
|
|
$html .= '<label for="id_sql_delimiter">[ ' . __('Delimiter')
|
|
.'</label>' . "\n";
|
|
$html .= '<input type="text" name="sql_delimiter" tabindex="131" size="3" '
|
|
. 'value="' . $delimiter . '" '
|
|
. 'id="id_sql_delimiter" /> ]';
|
|
|
|
$html .= '<input type="checkbox" name="show_query" value="1" '
|
|
. 'id="checkbox_show_query" tabindex="132" checked="checked" />'
|
|
. '<label for="checkbox_show_query">' . __('Show this query here again')
|
|
. '</label>';
|
|
|
|
if (! $is_querywindow) {
|
|
$html .= '<input type="checkbox" name="retain_query_box" value="1" '
|
|
. 'id="retain_query_box" tabindex="133" '
|
|
. ($GLOBALS['cfg']['RetainQueryBox'] === false
|
|
? '' : ' checked="checked"')
|
|
. ' />'
|
|
. '<label for="retain_query_box">' . __('Retain query box')
|
|
. '</label>';
|
|
}
|
|
$html .= '</div>' . "\n";
|
|
$html .= '<input type="submit" id="button_submit_query" name="SQL"';
|
|
if ($is_querywindow){
|
|
$html .= 'onclick="var form = this.parentNode.parentNode;'
|
|
. ' window.opener.name = \'sqlParentWindow\';'
|
|
. ' form.target = \'sqlParentWindow\';'
|
|
. ' return checkSqlQuery(form);"';
|
|
}
|
|
$html .= ' tabindex="200" value="' . __('Go') . '" />' . "\n";
|
|
$html .= '<div class="clearfloat"></div>' . "\n";
|
|
$html .= '</fieldset>' . "\n";
|
|
|
|
return $html;
|
|
}
|
|
|
|
/**
|
|
* return HTML for sql Query Form Bookmark
|
|
*
|
|
* @return string|void
|
|
*
|
|
* @usedby PMA_getHtmlForSqlQueryForm()
|
|
*/
|
|
function PMA_getHtmlForSqlQueryFormBookmark()
|
|
{
|
|
$bookmark_list = PMA_Bookmark_getList($GLOBALS['db']);
|
|
if (! $bookmark_list || count($bookmark_list) < 1) {
|
|
return;
|
|
}
|
|
|
|
$html = '<fieldset id="fieldsetBookmarkOptions">';
|
|
$html .= '<legend>';
|
|
$html .= __('Bookmarked SQL query') . '</legend>' . "\n";
|
|
$html .= '<div class="formelement">';
|
|
$html .= '<select name="id_bookmark" id="id_bookmark">' . "\n";
|
|
$html .= '<option value=""> </option>' . "\n";
|
|
foreach ($bookmark_list as $key => $value) {
|
|
$html .= '<option value="' . htmlspecialchars($key) . '">'
|
|
.htmlspecialchars($value) . '</option>' . "\n";
|
|
}
|
|
// is required for correct display with styles/line height
|
|
$html .= '</select> ' . "\n";
|
|
$html .= '</div>' . "\n";
|
|
$html .= '<div class="formelement">' . "\n";
|
|
$html .= __('Variable');
|
|
$html .= PMA_Util::showDocu('faq', 'faqbookmark');
|
|
$html .= '<input type="text" name="bookmark_variable" class="textfield"'
|
|
.' size="10" />' . "\n";
|
|
$html .= '</div>' . "\n";
|
|
$html .= '<div class="formelement">' . "\n";
|
|
$html .= '<input type="radio" name="action_bookmark" value="0"'
|
|
.' id="radio_bookmark_exe" checked="checked" />'
|
|
.'<label for="radio_bookmark_exe">' . __('Submit')
|
|
.'</label>' . "\n";
|
|
$html .= '<input type="radio" name="action_bookmark" value="1"'
|
|
.' id="radio_bookmark_view" />'
|
|
.'<label for="radio_bookmark_view">' . __('View only')
|
|
.'</label>' . "\n";
|
|
$html .= '<input type="radio" name="action_bookmark" value="2"'
|
|
.' id="radio_bookmark_del" />'
|
|
.'<label for="radio_bookmark_del">' . __('Delete')
|
|
.'</label>' . "\n";
|
|
$html .= '</div>' . "\n";
|
|
$html .= '<div class="clearfloat"></div>' . "\n";
|
|
$html .= '</fieldset>' . "\n";
|
|
|
|
$html .= '<fieldset id="fieldsetBookmarkOptionsFooter" class="tblFooters">' . "\n";
|
|
$html .= '<input type="submit" name="SQL" id="button_submit_bookmark" value="'
|
|
. __('Go') . '" />';
|
|
$html .= '<div class="clearfloat"></div>' . "\n";
|
|
$html .= '</fieldset>' . "\n";
|
|
|
|
return $html;
|
|
}
|
|
|
|
/**
|
|
* return HTML for Sql Query Form Upload
|
|
*
|
|
* @return string
|
|
*
|
|
* @usedby PMA_getHtmlForSqlQueryForm()
|
|
*/
|
|
function PMA_getHtmlForSqlQueryFormUpload()
|
|
{
|
|
global $timeout_passed, $local_import_file;
|
|
|
|
$errors = array();
|
|
|
|
// we allow only SQL here
|
|
$matcher = '@\.sql(\.(' . PMA_supportedDecompressions() . '))?$@';
|
|
|
|
if (!empty($GLOBALS['cfg']['UploadDir'])) {
|
|
$files = PMA_getFileSelectOptions(
|
|
PMA_Util::userDir($GLOBALS['cfg']['UploadDir']), $matcher,
|
|
(isset($timeout_passed) && $timeout_passed && isset($local_import_file))
|
|
? $local_import_file
|
|
: ''
|
|
);
|
|
} else {
|
|
$files = '';
|
|
}
|
|
|
|
// start output
|
|
$html = '<fieldset id="">';
|
|
$html .= '<legend>';
|
|
$html .= __('Browse your computer:') . '</legend>';
|
|
$html .= '<div class="formelement">';
|
|
$html .= '<input type="file" name="sql_file" class="textfield" /> ';
|
|
$html .= PMA_Util::getFormattedMaximumUploadSize($GLOBALS['max_upload_size']);
|
|
// some browsers should respect this :)
|
|
$html .= PMA_Util::generateHiddenMaxFileSize($GLOBALS['max_upload_size']) . "\n";
|
|
$html .= '</div>';
|
|
|
|
if ($files === false) {
|
|
$errors[] = PMA_Message::error(
|
|
__('The directory you set for upload work cannot be reached.')
|
|
);
|
|
} elseif (!empty($files)) {
|
|
$html .= '<div class="formelement">';
|
|
$html .= '<strong>' . __('web server upload directory:') .'</strong>' . "\n";
|
|
$html .= '<select size="1" name="sql_localfile">' . "\n";
|
|
$html .= '<option value="" selected="selected"></option>' . "\n";
|
|
$html .= $files;
|
|
$html .= '</select>' . "\n";
|
|
$html .= '</div>';
|
|
}
|
|
|
|
$html .= '<div class="clearfloat"></div>' . "\n";
|
|
$html .= '</fieldset>';
|
|
|
|
|
|
$html .= '<fieldset id="" class="tblFooters">';
|
|
$html .= __('Character set of the file:') . "\n";
|
|
$html .= PMA_generateCharsetDropdownBox(
|
|
PMA_CSDROPDOWN_CHARSET,
|
|
'charset_of_file', null, 'utf8', false
|
|
);
|
|
$html .= '<input type="submit" name="SQL" value="' . __('Go')
|
|
.'" />' . "\n";
|
|
$html .= '<div class="clearfloat"></div>' . "\n";
|
|
$html .= '</fieldset>';
|
|
|
|
foreach ($errors as $error) {
|
|
$html .= $error->getDisplay();
|
|
}
|
|
|
|
return $html;
|
|
}
|
|
?>
|