diff options
Diffstat (limited to 'srcs/phpmyadmin/export.php')
| -rw-r--r-- | srcs/phpmyadmin/export.php | 643 |
1 files changed, 643 insertions, 0 deletions
diff --git a/srcs/phpmyadmin/export.php b/srcs/phpmyadmin/export.php new file mode 100644 index 0000000..4798045 --- /dev/null +++ b/srcs/phpmyadmin/export.php @@ -0,0 +1,643 @@ +<?php +/* vim: set expandtab sw=4 ts=4 sts=4: */ +/** + * Main export handling code + * + * @package PhpMyAdmin + */ +declare(strict_types=1); + +use PhpMyAdmin\Core; +use PhpMyAdmin\DatabaseInterface; +use PhpMyAdmin\Encoding; +use PhpMyAdmin\Export; +use PhpMyAdmin\Plugins; +use PhpMyAdmin\Plugins\ExportPlugin; +use PhpMyAdmin\Relation; +use PhpMyAdmin\Response; +use PhpMyAdmin\Sanitize; +use PhpMyAdmin\SqlParser\Parser; +use PhpMyAdmin\SqlParser\Statements\SelectStatement; +use PhpMyAdmin\SqlParser\Utils\Misc; +use PhpMyAdmin\Url; +use PhpMyAdmin\Util; + +if (! defined('ROOT_PATH')) { + define('ROOT_PATH', __DIR__ . DIRECTORY_SEPARATOR); +} + +global $db, $sql_query; + +include_once ROOT_PATH . 'libraries/common.inc.php'; + +/** @var Response $response */ +$response = $containerBuilder->get(Response::class); + +/** @var DatabaseInterface $dbi */ +$dbi = $containerBuilder->get(DatabaseInterface::class); + +$header = $response->getHeader(); +$scripts = $header->getScripts(); +$scripts->addFile('export_output.js'); + +/** @var Export $export */ +$export = $containerBuilder->get('export'); + +//check if it's the GET request to check export time out +if (isset($_GET['check_time_out'])) { + if (isset($_SESSION['pma_export_error'])) { + $err = $_SESSION['pma_export_error']; + unset($_SESSION['pma_export_error']); + echo "timeout"; + } else { + echo "success"; + } + exit; +} + +/** + * Sets globals from $_POST + * + * - Please keep the parameters in order of their appearance in the form + * - Some of these parameters are not used, as the code below directly + * verifies from the superglobal $_POST or $_REQUEST + * TODO: this should be removed to avoid passing user input to GLOBALS + * without checking + */ +$post_params = [ + 'db', + 'table', + 'what', + 'single_table', + 'export_type', + 'export_method', + 'quick_or_custom', + 'db_select', + 'table_select', + 'table_structure', + 'table_data', + 'limit_to', + 'limit_from', + 'allrows', + 'lock_tables', + 'output_format', + 'filename_template', + 'maxsize', + 'remember_template', + 'charset', + 'compression', + 'as_separate_files', + 'knjenc', + 'xkana', + 'htmlword_structure_or_data', + 'htmlword_null', + 'htmlword_columns', + 'mediawiki_headers', + 'mediawiki_structure_or_data', + 'mediawiki_caption', + 'pdf_structure_or_data', + 'odt_structure_or_data', + 'odt_relation', + 'odt_comments', + 'odt_mime', + 'odt_columns', + 'odt_null', + 'codegen_structure_or_data', + 'codegen_format', + 'excel_null', + 'excel_removeCRLF', + 'excel_columns', + 'excel_edition', + 'excel_structure_or_data', + 'yaml_structure_or_data', + 'ods_null', + 'ods_structure_or_data', + 'ods_columns', + 'json_structure_or_data', + 'json_pretty_print', + 'json_unicode', + 'xml_structure_or_data', + 'xml_export_events', + 'xml_export_functions', + 'xml_export_procedures', + 'xml_export_tables', + 'xml_export_triggers', + 'xml_export_views', + 'xml_export_contents', + 'texytext_structure_or_data', + 'texytext_columns', + 'texytext_null', + 'phparray_structure_or_data', + 'sql_include_comments', + 'sql_header_comment', + 'sql_dates', + 'sql_relation', + 'sql_mime', + 'sql_use_transaction', + 'sql_disable_fk', + 'sql_compatibility', + 'sql_structure_or_data', + 'sql_create_database', + 'sql_drop_table', + 'sql_procedure_function', + 'sql_create_table', + 'sql_create_view', + 'sql_create_trigger', + 'sql_view_current_user', + 'sql_if_not_exists', + 'sql_or_replace_view', + 'sql_auto_increment', + 'sql_backquotes', + 'sql_truncate', + 'sql_delayed', + 'sql_ignore', + 'sql_type', + 'sql_insert_syntax', + 'sql_max_query_size', + 'sql_hex_for_binary', + 'sql_utc_time', + 'sql_drop_database', + 'sql_views_as_tables', + 'sql_metadata', + 'csv_separator', + 'csv_enclosed', + 'csv_escaped', + 'csv_terminated', + 'csv_null', + 'csv_removeCRLF', + 'csv_columns', + 'csv_structure_or_data', + // csv_replace should have been here but we use it directly from $_POST + 'latex_caption', + 'latex_structure_or_data', + 'latex_structure_caption', + 'latex_structure_continued_caption', + 'latex_structure_label', + 'latex_relation', + 'latex_comments', + 'latex_mime', + 'latex_columns', + 'latex_data_caption', + 'latex_data_continued_caption', + 'latex_data_label', + 'latex_null', + 'aliases', +]; + +foreach ($post_params as $one_post_param) { + if (isset($_POST[$one_post_param])) { + $GLOBALS[$one_post_param] = $_POST[$one_post_param]; + } +} + +$table = $GLOBALS['table']; + +PhpMyAdmin\Util::checkParameters(['what', 'export_type']); + +// sanitize this parameter which will be used below in a file inclusion +$what = Core::securePath($_POST['what']); + +// export class instance, not array of properties, as before +/** @var ExportPlugin $export_plugin */ +$export_plugin = Plugins::getPlugin( + "export", + $what, + 'libraries/classes/Plugins/Export/', + [ + 'export_type' => $export_type, + 'single_table' => isset($single_table), + ] +); + +// Check export type +if (empty($export_plugin)) { + Core::fatalError(__('Bad type!')); +} + +/** + * valid compression methods + */ +$compression_methods = [ + 'zip', + 'gzip', +]; + +/** + * init and variable checking + */ +$compression = ''; +$onserver = false; +$save_on_server = false; +$buffer_needed = false; +$back_button = ''; +$refreshButton = ''; +$save_filename = ''; +$file_handle = ''; +$err_url = ''; +$filename = ''; +$separate_files = ''; + +// Is it a quick or custom export? +if (isset($_POST['quick_or_custom']) + && $_POST['quick_or_custom'] == 'quick' +) { + $quick_export = true; +} else { + $quick_export = false; +} + +if ($_POST['output_format'] == 'astext') { + $asfile = false; +} else { + $asfile = true; + if (isset($_POST['as_separate_files']) + && ! empty($_POST['as_separate_files']) + ) { + if (isset($_POST['compression']) + && ! empty($_POST['compression']) + && $_POST['compression'] == 'zip' + ) { + $separate_files = $_POST['as_separate_files']; + } + } + if (in_array($_POST['compression'], $compression_methods)) { + $compression = $_POST['compression']; + $buffer_needed = true; + } + if (($quick_export && ! empty($_POST['quick_export_onserver'])) + || (! $quick_export && ! empty($_POST['onserver'])) + ) { + if ($quick_export) { + $onserver = $_POST['quick_export_onserver']; + } else { + $onserver = $_POST['onserver']; + } + // Will we save dump on server? + $save_on_server = ! empty($cfg['SaveDir']) && $onserver; + } +} + +/** + * If we are sending the export file (as opposed to just displaying it + * as text), we have to bypass the usual PhpMyAdmin\Response mechanism + */ +if (isset($_POST['output_format']) && $_POST['output_format'] == 'sendit' && ! $save_on_server) { + $response->disable(); + //Disable all active buffers (see: ob_get_status(true) at this point) + do { + $hasBuffer = @ob_end_clean(); + } while ($hasBuffer); +} + +$tables = []; +// Generate error url and check for needed variables +if ($export_type == 'server') { + $err_url = 'server_export.php' . Url::getCommon(); +} elseif ($export_type == 'database' && strlen($db) > 0) { + $err_url = 'db_export.php' . Url::getCommon(['db' => $db]); + // Check if we have something to export + if (isset($table_select)) { + $tables = $table_select; + } else { + $tables = []; + } +} elseif ($export_type == 'table' && strlen($db) > 0 && strlen($table) > 0) { + $err_url = 'tbl_export.php' . Url::getCommon( + [ + 'db' => $db, + 'table' => $table, + ] + ); +} else { + Core::fatalError(__('Bad parameters!')); +} + +// Merge SQL Query aliases with Export aliases from +// export page, Export page aliases are given more +// preference over SQL Query aliases. +$parser = new Parser($sql_query); +$aliases = []; +if (! empty($parser->statements[0]) + && ($parser->statements[0] instanceof SelectStatement) +) { + $aliases = Misc::getAliases($parser->statements[0], $db); +} +if (! empty($_POST['aliases'])) { + $aliases = $export->mergeAliases($aliases, $_POST['aliases']); + $_SESSION['tmpval']['aliases'] = $_POST['aliases']; +} + +/** + * Increase time limit for script execution and initializes some variables + */ +Util::setTimeLimit(); +if (! empty($cfg['MemoryLimit'])) { + ini_set('memory_limit', $cfg['MemoryLimit']); +} +register_shutdown_function([$export, 'shutdown']); +// Start with empty buffer +$dump_buffer = ''; +$dump_buffer_len = 0; + +// Array of dump_buffers - used in separate file exports +$dump_buffer_objects = []; + +// We send fake headers to avoid browser timeout when buffering +$time_start = time(); + +// Defines the default <CR><LF> format. +// For SQL always use \n as MySQL wants this on all platforms. +if ($what == 'sql') { + $crlf = "\n"; +} else { + $crlf = PHP_EOL; +} + +$output_kanji_conversion = Encoding::canConvertKanji(); + +// Do we need to convert charset? +$output_charset_conversion = $asfile + && Encoding::isSupported() + && isset($charset) && $charset != 'utf-8'; + +// Use on the fly compression? +$GLOBALS['onfly_compression'] = $GLOBALS['cfg']['CompressOnFly'] + && $compression == 'gzip'; +if ($GLOBALS['onfly_compression']) { + $GLOBALS['memory_limit'] = $export->getMemoryLimit(); +} + +// Generate filename and mime type if needed +if ($asfile) { + if (empty($remember_template)) { + $remember_template = ''; + } + list($filename, $mime_type) = $export->getFilenameAndMimetype( + $export_type, + $remember_template, + $export_plugin, + $compression, + $filename_template + ); +} else { + $mime_type = ''; +} + +// Open file on server if needed +if ($save_on_server) { + list($save_filename, $message, $file_handle) = $export->openFile( + $filename, + $quick_export + ); + + // problem opening export file on server? + if (! empty($message)) { + $export->showPage($db, $table, $export_type); + } +} else { + /** + * Send headers depending on whether the user chose to download a dump file + * or not + */ + if ($asfile) { + // Download + // (avoid rewriting data containing HTML with anchors and forms; + // this was reported to happen under Plesk) + ini_set('url_rewriter.tags', ''); + $filename = Sanitize::sanitizeFilename($filename); + + Core::downloadHeader($filename, $mime_type); + } else { + // HTML + if ($export_type == 'database') { + $num_tables = count($tables); + if ($num_tables === 0) { + $message = PhpMyAdmin\Message::error( + __('No tables found in database.') + ); + $active_page = 'db_export.php'; + include ROOT_PATH . 'db_export.php'; + exit; + } + } + list($html, $back_button, $refreshButton) = $export->getHtmlForDisplayedExportHeader( + $export_type, + $db, + $table + ); + echo $html; + unset($html); + } // end download +} + +/** @var Relation $relation */ +$relation = $containerBuilder->get('relation'); + +// Fake loop just to allow skip of remain of this code by break, I'd really +// need exceptions here :-) +do { + // Re - initialize + $dump_buffer = ''; + $dump_buffer_len = 0; + + // Add possibly some comments to export + if (! $export_plugin->exportHeader()) { + break; + } + + // Will we need relation & co. setup? + $do_relation = isset($GLOBALS[$what . '_relation']); + $do_comments = isset($GLOBALS[$what . '_include_comments']) + || isset($GLOBALS[$what . '_comments']); + $do_mime = isset($GLOBALS[$what . '_mime']); + if ($do_relation || $do_comments || $do_mime) { + $cfgRelation = $relation->getRelationsParam(); + } + + // Include dates in export? + $do_dates = isset($GLOBALS[$what . '_dates']); + + $whatStrucOrData = $GLOBALS[$what . '_structure_or_data']; + + /** + * Builds the dump + */ + if ($export_type == 'server') { + if (! isset($db_select)) { + $db_select = ''; + } + $export->exportServer( + $db_select, + $whatStrucOrData, + $export_plugin, + $crlf, + $err_url, + $export_type, + $do_relation, + $do_comments, + $do_mime, + $do_dates, + $aliases, + $separate_files + ); + } elseif ($export_type == 'database') { + if (! isset($table_structure) || ! is_array($table_structure)) { + $table_structure = []; + } + if (! isset($table_data) || ! is_array($table_data)) { + $table_data = []; + } + if (! empty($_POST['structure_or_data_forced'])) { + $table_structure = $tables; + $table_data = $tables; + } + if (isset($lock_tables)) { + $export->lockTables($db, $tables, "READ"); + try { + $export->exportDatabase( + $db, + $tables, + $whatStrucOrData, + $table_structure, + $table_data, + $export_plugin, + $crlf, + $err_url, + $export_type, + $do_relation, + $do_comments, + $do_mime, + $do_dates, + $aliases, + $separate_files + ); + } finally { + $export->unlockTables(); + } + } else { + $export->exportDatabase( + $db, + $tables, + $whatStrucOrData, + $table_structure, + $table_data, + $export_plugin, + $crlf, + $err_url, + $export_type, + $do_relation, + $do_comments, + $do_mime, + $do_dates, + $aliases, + $separate_files + ); + } + } else { + // We export just one table + // $allrows comes from the form when "Dump all rows" has been selected + if (! isset($allrows)) { + $allrows = ''; + } + if (! isset($limit_to)) { + $limit_to = '0'; + } + if (! isset($limit_from)) { + $limit_from = '0'; + } + if (isset($lock_tables)) { + try { + $export->lockTables($db, [$table], "READ"); + $export->exportTable( + $db, + $table, + $whatStrucOrData, + $export_plugin, + $crlf, + $err_url, + $export_type, + $do_relation, + $do_comments, + $do_mime, + $do_dates, + $allrows, + $limit_to, + $limit_from, + $sql_query, + $aliases + ); + } finally { + $export->unlockTables(); + } + } else { + $export->exportTable( + $db, + $table, + $whatStrucOrData, + $export_plugin, + $crlf, + $err_url, + $export_type, + $do_relation, + $do_comments, + $do_mime, + $do_dates, + $allrows, + $limit_to, + $limit_from, + $sql_query, + $aliases + ); + } + } + if (! $export_plugin->exportFooter()) { + break; + } +} while (false); +// End of fake loop + +if ($save_on_server && ! empty($message)) { + $export->showPage($db, $table, $export_type); +} + +/** + * Send the dump as a file... + */ +if (empty($asfile)) { + echo $export->getHtmlForDisplayedExportFooter($back_button, $refreshButton); + return; +} // end if + +// Convert the charset if required. +if ($output_charset_conversion) { + $dump_buffer = Encoding::convertString( + 'utf-8', + $GLOBALS['charset'], + $dump_buffer + ); +} + +// Compression needed? +if ($compression) { + if (! empty($separate_files)) { + $dump_buffer = $export->compress( + $dump_buffer_objects, + $compression, + $filename + ); + } else { + $dump_buffer = $export->compress($dump_buffer, $compression, $filename); + } +} + +/* If we saved on server, we have to close file now */ +if ($save_on_server) { + $message = $export->closeFile( + $file_handle, + $dump_buffer, + $save_filename + ); + $export->showPage($db, $table, $export_type); +} else { + echo $dump_buffer; +} |