phpmyadmin working

1 files changed, 485 insertions, 0 deletions

diff --git a/srcs/phpmyadmin/libraries/classes/Transformations.php b/srcs/phpmyadmin/libraries/classes/Transformations.php
new file mode 100644
index 0000000..adc2265
--- /dev/null
+++ b/srcs/phpmyadmin/libraries/classes/Transformations.php
@@ -0,0 +1,485 @@
+<?php
+/* vim: set expandtab sw=4 ts=4 sts=4: */
+/**
+ * Set of functions used with the relation and pdf feature
+ *
+ * This file also provides basic functions to use in other plugins!
+ * These are declared in the 'GLOBAL Plugin functions' section
+ *
+ * Please use short and expressive names.
+ * For now, special characters which aren't allowed in
+ * filenames or functions should not be used.
+ *
+ * Please provide a comment for your function,
+ * what it does and what parameters are available.
+ *
+ * @package PhpMyAdmin
+ */
+declare(strict_types=1);
+
+namespace PhpMyAdmin;
+
+use PhpMyAdmin\DatabaseInterface;
+use PhpMyAdmin\Plugins\TransformationsInterface;
+use PhpMyAdmin\Relation;
+use PhpMyAdmin\Util;
+
+/**
+ * Transformations class
+ *
+ * @package PhpMyAdmin
+ */
+class Transformations
+{
+    /**
+     * Returns array of options from string with options separated by comma,
+     * removes quotes
+     *
+     * <code>
+     * getOptions("'option ,, quoted',abd,'2,3',");
+     * // array {
+     * //     'option ,, quoted',
+     * //     'abc',
+     * //     '2,3',
+     * //     '',
+     * // }
+     * </code>
+     *
+     * @param string $option_string comma separated options
+     *
+     * @return array options
+     */
+    public function getOptions($option_string)
+    {
+        $result = [];
+
+        if (strlen($option_string) === 0
+            || ! $transform_options = explode(",", $option_string)
+        ) {
+            return $result;
+        }
+
+        while (($option = array_shift($transform_options)) !== null) {
+            $trimmed = trim($option);
+            if (strlen($trimmed) > 1
+                && $trimmed[0] == "'"
+                && $trimmed[strlen($trimmed) - 1] == "'"
+            ) {
+                // '...'
+                $option = mb_substr($trimmed, 1, -1);
+            } elseif (isset($trimmed[0]) && $trimmed[0] == "'") {
+                // '...,
+                $trimmed = ltrim($option);
+                $rtrimmed = null;
+                while (($option = array_shift($transform_options)) !== null) {
+                    // ...,
+                    $trimmed .= ',' . $option;
+                    $rtrimmed = rtrim($trimmed);
+                    if ($rtrimmed[strlen($rtrimmed) - 1] == "'") {
+                        // ,...'
+                        break;
+                    }
+                }
+                $option = mb_substr($rtrimmed, 1, -1);
+            }
+            $result[] = stripslashes($option);
+        }
+
+        return $result;
+    }
+
+    /**
+     * Gets all available MIME-types
+     *
+     * @access  public
+     * @staticvar   array   mimetypes
+     * @return array    array[mimetype], array[transformation]
+     */
+    public function getAvailableMimeTypes()
+    {
+        static $stack = null;
+
+        if (null !== $stack) {
+            return $stack;
+        }
+
+        $stack = [];
+        $sub_dirs = [
+            'Input/' => 'input_',
+            'Output/' => '',
+            '' => '',
+        ];
+
+        foreach ($sub_dirs as $sd => $prefix) {
+            $handle = opendir('libraries/classes/Plugins/Transformations/' . $sd);
+
+            if (! $handle) {
+                $stack[$prefix . 'transformation'] = [];
+                $stack[$prefix . 'transformation_file'] = [];
+                continue;
+            }
+
+            $filestack = [];
+            while ($file = readdir($handle)) {
+                // Ignore hidden files
+                if ($file[0] == '.') {
+                    continue;
+                }
+                // Ignore old plugins (.class in filename)
+                if (strpos($file, '.class') !== false) {
+                    continue;
+                }
+                $filestack[] = $file;
+            }
+
+            closedir($handle);
+            sort($filestack);
+
+            foreach ($filestack as $file) {
+                if (preg_match('|^[^.].*_.*_.*\.php$|', $file)) {
+                    // File contains transformation functions.
+                    $parts = explode('_', str_replace('.php', '', $file));
+                    $mimetype = $parts[0] . "/" . $parts[1];
+                    $stack['mimetype'][$mimetype] = $mimetype;
+
+                    $stack[$prefix . 'transformation'][] = $mimetype . ': ' . $parts[2];
+                    $stack[$prefix . 'transformation_file'][] = $sd . $file;
+                    if ($sd === '') {
+                        $stack['input_transformation'][] = $mimetype . ': ' . $parts[2];
+                        $stack['input_transformation_file'][] = $sd . $file;
+                    }
+                } elseif (preg_match('|^[^.].*\.php$|', $file)) {
+                    // File is a plain mimetype, no functions.
+                    $base = str_replace('.php', '', $file);
+
+                    if ($base != 'global') {
+                        $mimetype = str_replace('_', '/', $base);
+                        $stack['mimetype'][$mimetype] = $mimetype;
+                        $stack['empty_mimetype'][$mimetype] = $mimetype;
+                    }
+                }
+            }
+        }
+        return $stack;
+    }
+
+    /**
+     * Returns the class name of the transformation
+     *
+     * @param string $filename transformation file name
+     *
+     * @return string the class name of transformation
+     */
+    public function getClassName($filename)
+    {
+        // get the transformation class name
+        $class_name = explode(".php", $filename);
+        $class_name = 'PhpMyAdmin\\' . str_replace('/', '\\', mb_substr($class_name[0], 18));
+
+        return $class_name;
+    }
+
+    /**
+     * Returns the description of the transformation
+     *
+     * @param string $file transformation file
+     *
+     * @return string the description of the transformation
+     */
+    public function getDescription($file)
+    {
+        $include_file = 'libraries/classes/Plugins/Transformations/' . $file;
+        /** @var TransformationsInterface $class_name */
+        $class_name = $this->getClassName($include_file);
+        if (class_exists($class_name)) {
+            return $class_name::getInfo();
+        }
+        return '';
+    }
+
+    /**
+     * Returns the name of the transformation
+     *
+     * @param string $file transformation file
+     *
+     * @return string the name of the transformation
+     */
+    public function getName($file)
+    {
+        $include_file = 'libraries/classes/Plugins/Transformations/' . $file;
+        /** @var TransformationsInterface $class_name */
+        $class_name = $this->getClassName($include_file);
+        if (class_exists($class_name)) {
+            return $class_name::getName();
+        }
+        return '';
+    }
+
+    /**
+     * Fixups old MIME or transformation name to new one
+     *
+     * - applies some hardcoded fixups
+     * - adds spaces after _ and numbers
+     * - capitalizes words
+     * - removes back spaces
+     *
+     * @param string $value Value to fixup
+     *
+     * @return string
+     */
+    public function fixUpMime($value)
+    {
+        $value = str_replace(
+            [
+                "jpeg",
+                "png",
+            ],
+            [
+                "JPEG",
+                "PNG",
+            ],
+            $value
+        );
+        return str_replace(
+            ' ',
+            '',
+            ucwords(
+                preg_replace('/([0-9_]+)/', '$1 ', $value)
+            )
+        );
+    }
+
+    /**
+     * Gets the mimetypes for all columns of a table
+     *
+     * @param string  $db       the name of the db to check for
+     * @param string  $table    the name of the table to check for
+     * @param boolean $strict   whether to include only results having a mimetype set
+     * @param boolean $fullName whether to use full column names as the key
+     *
+     * @access public
+     *
+     * @return array|bool [field_name][field_key] = field_value
+     */
+    public function getMime($db, $table, $strict = false, $fullName = false)
+    {
+        $relation = new Relation($GLOBALS['dbi']);
+        $cfgRelation = $relation->getRelationsParam();
+
+        if (! $cfgRelation['mimework']) {
+            return false;
+        }
+
+        $com_qry = '';
+        if ($fullName) {
+            $com_qry .= "SELECT CONCAT("
+                . "`db_name`, '.', `table_name`, '.', `column_name`"
+                . ") AS column_name, ";
+        } else {
+            $com_qry  = "SELECT `column_name`, ";
+        }
+        $com_qry .= '`mimetype`,
+                    `transformation`,
+                    `transformation_options`,
+                    `input_transformation`,
+                    `input_transformation_options`
+             FROM ' . Util::backquote($cfgRelation['db']) . '.'
+            . Util::backquote($cfgRelation['column_info']) . '
+             WHERE `db_name`    = \'' . $GLOBALS['dbi']->escapeString($db) . '\'
+               AND `table_name` = \'' . $GLOBALS['dbi']->escapeString($table) . '\'
+               AND ( `mimetype` != \'\'' . (! $strict ? '
+                  OR `transformation` != \'\'
+                  OR `transformation_options` != \'\'
+                  OR `input_transformation` != \'\'
+                  OR `input_transformation_options` != \'\'' : '') . ')';
+        $result = $GLOBALS['dbi']->fetchResult(
+            $com_qry,
+            'column_name',
+            null,
+            DatabaseInterface::CONNECT_CONTROL
+        );
+
+        foreach ($result as $column => $values) {
+            // convert mimetype to new format (f.e. Text_Plain, etc)
+            $values['mimetype'] = $this->fixUpMime($values['mimetype']);
+
+            // For transformation of form
+            // output/image_jpeg__inline.inc.php
+            // extract dir part.
+            $dir = explode('/', $values['transformation']);
+            $subdir = '';
+            if (count($dir) === 2) {
+                $subdir = ucfirst($dir[0]) . '/';
+                $values['transformation'] = $dir[1];
+            }
+
+            $values['transformation'] = $this->fixUpMime($values['transformation']);
+            $values['transformation'] = $subdir . $values['transformation'];
+            $result[$column] = $values;
+        }
+
+        return $result;
+    }
+
+    /**
+     * Set a single mimetype to a certain value.
+     *
+     * @param string  $db                 the name of the db
+     * @param string  $table              the name of the table
+     * @param string  $key                the name of the column
+     * @param string  $mimetype           the mimetype of the column
+     * @param string  $transformation     the transformation of the column
+     * @param string  $transformationOpts the transformation options of the column
+     * @param string  $inputTransform     the input transformation of the column
+     * @param string  $inputTransformOpts the input transformation options of the column
+     * @param boolean $forcedelete        force delete, will erase any existing
+     *                                    comments for this column
+     *
+     * @access  public
+     *
+     * @return boolean  true, if comment-query was made.
+     */
+    public function setMime(
+        $db,
+        $table,
+        $key,
+        $mimetype,
+        $transformation,
+        $transformationOpts,
+        $inputTransform,
+        $inputTransformOpts,
+        $forcedelete = false
+    ) {
+        $relation = new Relation($GLOBALS['dbi']);
+        $cfgRelation = $relation->getRelationsParam();
+
+        if (! $cfgRelation['mimework']) {
+            return false;
+        }
+
+        // lowercase mimetype & transformation
+        $mimetype = mb_strtolower($mimetype);
+        $transformation = mb_strtolower($transformation);
+
+        // Do we have any parameter to set?
+        $has_value = (
+            strlen($mimetype) > 0 ||
+            strlen($transformation) > 0 ||
+            strlen($transformationOpts) > 0 ||
+            strlen($inputTransform) > 0 ||
+            strlen($inputTransformOpts) > 0
+        );
+
+        $test_qry = '
+             SELECT `mimetype`,
+                    `comment`
+               FROM ' . Util::backquote($cfgRelation['db']) . '.'
+            . Util::backquote($cfgRelation['column_info']) . '
+              WHERE `db_name`     = \'' . $GLOBALS['dbi']->escapeString($db) . '\'
+                AND `table_name`  = \'' . $GLOBALS['dbi']->escapeString($table) . '\'
+                AND `column_name` = \'' . $GLOBALS['dbi']->escapeString($key) . '\'';
+
+        $test_rs = $relation->queryAsControlUser(
+            $test_qry,
+            true,
+            DatabaseInterface::QUERY_STORE
+        );
+
+        if ($test_rs && $GLOBALS['dbi']->numRows($test_rs) > 0) {
+            $row = @$GLOBALS['dbi']->fetchAssoc($test_rs);
+            $GLOBALS['dbi']->freeResult($test_rs);
+
+            if (! $forcedelete && ($has_value || strlen($row['comment']) > 0)) {
+                $upd_query = 'UPDATE '
+                    . Util::backquote($cfgRelation['db']) . '.'
+                    . Util::backquote($cfgRelation['column_info'])
+                    . ' SET '
+                    . '`mimetype` = \''
+                    . $GLOBALS['dbi']->escapeString($mimetype) . '\', '
+                    . '`transformation` = \''
+                    . $GLOBALS['dbi']->escapeString($transformation) . '\', '
+                    . '`transformation_options` = \''
+                    . $GLOBALS['dbi']->escapeString($transformationOpts) . '\', '
+                    . '`input_transformation` = \''
+                    . $GLOBALS['dbi']->escapeString($inputTransform) . '\', '
+                    . '`input_transformation_options` = \''
+                    . $GLOBALS['dbi']->escapeString($inputTransformOpts) . '\'';
+            } else {
+                $upd_query = 'DELETE FROM '
+                    . Util::backquote($cfgRelation['db'])
+                    . '.' . Util::backquote($cfgRelation['column_info']);
+            }
+            $upd_query .= '
+                WHERE `db_name`     = \'' . $GLOBALS['dbi']->escapeString($db) . '\'
+                  AND `table_name`  = \'' . $GLOBALS['dbi']->escapeString($table)
+                    . '\'
+                  AND `column_name` = \'' . $GLOBALS['dbi']->escapeString($key)
+                    . '\'';
+        } elseif ($has_value) {
+            $upd_query = 'INSERT INTO '
+                . Util::backquote($cfgRelation['db'])
+                . '.' . Util::backquote($cfgRelation['column_info'])
+                . ' (db_name, table_name, column_name, mimetype, '
+                . 'transformation, transformation_options, '
+                . 'input_transformation, input_transformation_options) '
+                . ' VALUES('
+                . '\'' . $GLOBALS['dbi']->escapeString($db) . '\','
+                . '\'' . $GLOBALS['dbi']->escapeString($table) . '\','
+                . '\'' . $GLOBALS['dbi']->escapeString($key) . '\','
+                . '\'' . $GLOBALS['dbi']->escapeString($mimetype) . '\','
+                . '\'' . $GLOBALS['dbi']->escapeString($transformation) . '\','
+                . '\'' . $GLOBALS['dbi']->escapeString($transformationOpts) . '\','
+                . '\'' . $GLOBALS['dbi']->escapeString($inputTransform) . '\','
+                . '\'' . $GLOBALS['dbi']->escapeString($inputTransformOpts) . '\')';
+        }
+
+        if (isset($upd_query)) {
+            return $relation->queryAsControlUser($upd_query);
+        }
+
+        return false;
+    }
+
+
+    /**
+     * GLOBAL Plugin functions
+     */
+
+    /**
+     * Delete related transformation details
+     * after deleting database. table or column
+     *
+     * @param string $db     Database name
+     * @param string $table  Table name
+     * @param string $column Column name
+     *
+     * @return boolean State of the query execution
+     */
+    public function clear($db, $table = '', $column = '')
+    {
+        $relation = new Relation($GLOBALS['dbi']);
+        $cfgRelation = $relation->getRelationsParam();
+
+        if (! isset($cfgRelation['column_info'])) {
+            return false;
+        }
+
+        $delete_sql = 'DELETE FROM '
+            . Util::backquote($cfgRelation['db']) . '.'
+            . Util::backquote($cfgRelation['column_info'])
+            . ' WHERE ';
+
+        if (($column != '') && ($table != '')) {
+            $delete_sql .= '`db_name` = \'' . $db . '\' AND '
+                . '`table_name` = \'' . $table . '\' AND '
+                . '`column_name` = \'' . $column . '\' ';
+        } elseif ($table != '') {
+            $delete_sql .= '`db_name` = \'' . $db . '\' AND '
+                . '`table_name` = \'' . $table . '\' ';
+        } else {
+            $delete_sql .= '`db_name` = \'' . $db . '\' ';
+        }
+
+        return $GLOBALS['dbi']->tryQuery($delete_sql);
+    }
+}