dbi = $dbi; } public function getRelationParameters(): RelationParameters { $server = $GLOBALS['server']; if (! isset($_SESSION['relation']) || ! is_array($_SESSION['relation'])) { $_SESSION['relation'] = []; } if ( isset($_SESSION['relation'][$server]) && is_array($_SESSION['relation'][$server]) && isset($_SESSION['relation'][$server]['version']) && $_SESSION['relation'][$server]['version'] === Version::VERSION ) { return RelationParameters::fromArray($_SESSION['relation'][$server]); } $relationParameters = RelationParameters::fromArray($this->checkRelationsParam()); $_SESSION['relation'][$server] = $relationParameters->toArray(); return $relationParameters; } /** * @param array $relationParams * * @return array */ private function checkTableAccess(array $relationParams): array { if (isset($relationParams['relation'], $relationParams['table_info'])) { if ($this->canAccessStorageTable((string) $relationParams['table_info'])) { $relationParams['displaywork'] = true; } } if (isset($relationParams['table_coords'], $relationParams['pdf_pages'])) { if ($this->canAccessStorageTable((string) $relationParams['table_coords'])) { if ($this->canAccessStorageTable((string) $relationParams['pdf_pages'])) { $relationParams['pdfwork'] = true; } } } if (isset($relationParams['column_info'])) { if ($this->canAccessStorageTable((string) $relationParams['column_info'])) { $relationParams['commwork'] = true; // phpMyAdmin 4.3+ // Check for input transformations upgrade. $relationParams['mimework'] = $this->tryUpgradeTransformations(); } } if (isset($relationParams['users'], $relationParams['usergroups'])) { if ($this->canAccessStorageTable((string) $relationParams['users'])) { if ($this->canAccessStorageTable((string) $relationParams['usergroups'])) { $relationParams['menuswork'] = true; } } } $settings = [ 'export_templates' => 'exporttemplateswork', 'designer_settings' => 'designersettingswork', 'central_columns' => 'centralcolumnswork', 'savedsearches' => 'savedsearcheswork', 'navigationhiding' => 'navwork', 'bookmark' => 'bookmarkwork', 'userconfig' => 'userconfigwork', 'tracking' => 'trackingwork', 'table_uiprefs' => 'uiprefswork', 'favorite' => 'favoritework', 'recent' => 'recentwork', 'history' => 'historywork', 'relation' => 'relwork', ]; foreach ($settings as $setingName => $worksKey) { if (! isset($relationParams[$setingName])) { continue; } if (! $this->canAccessStorageTable((string) $relationParams[$setingName])) { continue; } $relationParams[$worksKey] = true; } return $relationParams; } /** * @param array $relationParams * * @return array|null */ private function fillRelationParamsWithTableNames(array $relationParams): ?array { $tabQuery = 'SHOW TABLES FROM ' . Util::backquote($GLOBALS['cfg']['Server']['pmadb']); $tableRes = $this->dbi->tryQueryAsControlUser($tabQuery); if ($tableRes === false) { return null; } while ($currTable = $tableRes->fetchRow()) { if ($currTable[0] == $GLOBALS['cfg']['Server']['bookmarktable']) { $relationParams['bookmark'] = (string) $currTable[0]; } elseif ($currTable[0] == $GLOBALS['cfg']['Server']['relation']) { $relationParams['relation'] = (string) $currTable[0]; } elseif ($currTable[0] == $GLOBALS['cfg']['Server']['table_info']) { $relationParams['table_info'] = (string) $currTable[0]; } elseif ($currTable[0] == $GLOBALS['cfg']['Server']['table_coords']) { $relationParams['table_coords'] = (string) $currTable[0]; } elseif ($currTable[0] == $GLOBALS['cfg']['Server']['column_info']) { $relationParams['column_info'] = (string) $currTable[0]; } elseif ($currTable[0] == $GLOBALS['cfg']['Server']['pdf_pages']) { $relationParams['pdf_pages'] = (string) $currTable[0]; } elseif ($currTable[0] == $GLOBALS['cfg']['Server']['history']) { $relationParams['history'] = (string) $currTable[0]; } elseif ($currTable[0] == $GLOBALS['cfg']['Server']['recent']) { $relationParams['recent'] = (string) $currTable[0]; } elseif ($currTable[0] == $GLOBALS['cfg']['Server']['favorite']) { $relationParams['favorite'] = (string) $currTable[0]; } elseif ($currTable[0] == $GLOBALS['cfg']['Server']['table_uiprefs']) { $relationParams['table_uiprefs'] = (string) $currTable[0]; } elseif ($currTable[0] == $GLOBALS['cfg']['Server']['tracking']) { $relationParams['tracking'] = (string) $currTable[0]; } elseif ($currTable[0] == $GLOBALS['cfg']['Server']['userconfig']) { $relationParams['userconfig'] = (string) $currTable[0]; } elseif ($currTable[0] == $GLOBALS['cfg']['Server']['users']) { $relationParams['users'] = (string) $currTable[0]; } elseif ($currTable[0] == $GLOBALS['cfg']['Server']['usergroups']) { $relationParams['usergroups'] = (string) $currTable[0]; } elseif ($currTable[0] == $GLOBALS['cfg']['Server']['navigationhiding']) { $relationParams['navigationhiding'] = (string) $currTable[0]; } elseif ($currTable[0] == $GLOBALS['cfg']['Server']['savedsearches']) { $relationParams['savedsearches'] = (string) $currTable[0]; } elseif ($currTable[0] == $GLOBALS['cfg']['Server']['central_columns']) { $relationParams['central_columns'] = (string) $currTable[0]; } elseif ($currTable[0] == $GLOBALS['cfg']['Server']['designer_settings']) { $relationParams['designer_settings'] = (string) $currTable[0]; } elseif ($currTable[0] == $GLOBALS['cfg']['Server']['export_templates']) { $relationParams['export_templates'] = (string) $currTable[0]; } } return $relationParams; } /** * Defines the relation parameters for the current user * just a copy of the functions used for relations ;-) * but added some stuff to check what will work * * @return array the relation parameters for the current user */ private function checkRelationsParam(): array { $relationParams = []; $relationParams['version'] = Version::VERSION; $workToTable = [ 'relwork' => 'relation', 'displaywork' => [ 'relation', 'table_info', ], 'bookmarkwork' => 'bookmarktable', 'pdfwork' => [ 'table_coords', 'pdf_pages', ], 'commwork' => 'column_info', 'mimework' => 'column_info', 'historywork' => 'history', 'recentwork' => 'recent', 'favoritework' => 'favorite', 'uiprefswork' => 'table_uiprefs', 'trackingwork' => 'tracking', 'userconfigwork' => 'userconfig', 'menuswork' => [ 'users', 'usergroups', ], 'navwork' => 'navigationhiding', 'savedsearcheswork' => 'savedsearches', 'centralcolumnswork' => 'central_columns', 'designersettingswork' => 'designer_settings', 'exporttemplateswork' => 'export_templates', ]; foreach (array_keys($workToTable) as $work) { $relationParams[$work] = false; } $relationParams['allworks'] = false; $relationParams['user'] = null; $relationParams['db'] = null; if ( $GLOBALS['server'] == 0 || empty($GLOBALS['cfg']['Server']['pmadb']) || ! $this->dbi->selectDb($GLOBALS['cfg']['Server']['pmadb'], DatabaseInterface::CONNECT_CONTROL) ) { // No server selected -> no bookmark table // we return the array with the falses in it, // to avoid some 'Uninitialized string offset' errors later $GLOBALS['cfg']['Server']['pmadb'] = false; return $relationParams; } $relationParams['user'] = $GLOBALS['cfg']['Server']['user']; $relationParams['db'] = $GLOBALS['cfg']['Server']['pmadb']; // Now I just check if all tables that i need are present so I can for // example enable relations but not pdf... // I was thinking of checking if they have all required columns but I // fear it might be too slow $relationParamsFilled = $this->fillRelationParamsWithTableNames($relationParams); if ($relationParamsFilled === null) { // query failed ... ? //$GLOBALS['cfg']['Server']['pmadb'] = false; return $relationParams; } // Filling did success $relationParams = $relationParamsFilled; $relationParams = $this->checkTableAccess($relationParams); $allWorks = true; foreach ($workToTable as $work => $table) { if ($relationParams[$work]) { continue; } if (is_string($table)) { if (isset($GLOBALS['cfg']['Server'][$table]) && $GLOBALS['cfg']['Server'][$table] !== false) { $allWorks = false; break; } } else { $oneNull = false; foreach ($table as $t) { if (isset($GLOBALS['cfg']['Server'][$t]) && $GLOBALS['cfg']['Server'][$t] === false) { $oneNull = true; break; } } if (! $oneNull) { $allWorks = false; break; } } } $relationParams['allworks'] = $allWorks; return $relationParams; } /** * Check if the table is accessible * * @param string $tableDbName The table or table.db */ public function canAccessStorageTable(string $tableDbName): bool { $result = $this->dbi->tryQueryAsControlUser('SELECT NULL FROM ' . Util::backquote($tableDbName) . ' LIMIT 0'); return $result !== false; } /** * Check whether column_info table input transformation * upgrade is required and try to upgrade silently */ public function tryUpgradeTransformations(): bool { // From 4.3, new input oriented transformation feature was introduced. // Check whether column_info table has input transformation columns $new_cols = [ 'input_transformation', 'input_transformation_options', ]; $query = 'SHOW COLUMNS FROM ' . Util::backquote($GLOBALS['cfg']['Server']['pmadb']) . '.' . Util::backquote($GLOBALS['cfg']['Server']['column_info']) . ' WHERE Field IN (\'' . implode('\', \'', $new_cols) . '\')'; $result = $this->dbi->tryQueryAsControlUser($query); if ($result) { $rows = $result->numRows(); unset($result); // input transformations are present // no need to upgrade if ($rows === 2) { return true; // try silent upgrade without disturbing the user } // read upgrade query file $query = @file_get_contents(SQL_DIR . 'upgrade_column_info_4_3_0+.sql'); // replace database name from query to with set in config.inc.php // replace pma__column_info table name from query // to with set in config.inc.php $query = str_replace( [ '`phpmyadmin`', '`pma__column_info`', ], [ Util::backquote($GLOBALS['cfg']['Server']['pmadb']), Util::backquote($GLOBALS['cfg']['Server']['column_info']), ], (string) $query ); $this->dbi->tryMultiQuery($query, DatabaseInterface::CONNECT_CONTROL); // skips result sets of query as we are not interested in it do { $hasResult = ( $this->dbi->moreResults(DatabaseInterface::CONNECT_CONTROL) && $this->dbi->nextResult(DatabaseInterface::CONNECT_CONTROL) ); } while ($hasResult); $error = $this->dbi->getError(DatabaseInterface::CONNECT_CONTROL); // return true if no error exists otherwise false return empty($error); } // some failure, either in upgrading or something else // make some noise, time to wake up user. return false; } /** * Gets all Relations to foreign tables for a given table or * optionally a given column in a table * * @param string $db the name of the db to check for * @param string $table the name of the table to check for * @param string $column the name of the column to check for * @param string $source the source for foreign key information * * @return array db,table,column */ public function getForeigners($db, $table, $column = '', $source = 'both') { $relationFeature = $this->getRelationParameters()->relationFeature; $foreign = []; if ($relationFeature !== null && ($source === 'both' || $source === 'internal')) { $rel_query = 'SELECT `master_field`, `foreign_db`, ' . '`foreign_table`, `foreign_field`' . ' FROM ' . Util::backquote($relationFeature->database) . '.' . Util::backquote($relationFeature->relation) . ' WHERE `master_db` = \'' . $this->dbi->escapeString($db) . '\'' . ' AND `master_table` = \'' . $this->dbi->escapeString($table) . '\''; if (strlen($column) > 0) { $rel_query .= ' AND `master_field` = ' . '\'' . $this->dbi->escapeString($column) . '\''; } $foreign = $this->dbi->fetchResult($rel_query, 'master_field', null, DatabaseInterface::CONNECT_CONTROL); } if (($source === 'both' || $source === 'foreign') && strlen($table) > 0) { $tableObj = new Table($table, $db); $show_create_table = $tableObj->showCreate(); if ($show_create_table) { $parser = new Parser($show_create_table); $stmt = $parser->statements[0]; $foreign['foreign_keys_data'] = []; if ($stmt instanceof CreateStatement) { $foreign['foreign_keys_data'] = TableUtils::getForeignKeys($stmt); } } } /** * Emulating relations for some information_schema tables */ $isInformationSchema = mb_strtolower($db) === 'information_schema'; $isMysql = mb_strtolower($db) === 'mysql'; if (($isInformationSchema || $isMysql) && ($source === 'internal' || $source === 'both')) { if ($isInformationSchema) { $internalRelations = InternalRelations::getInformationSchema(); } else { $internalRelations = InternalRelations::getMySql(); } if (isset($internalRelations[$table])) { foreach ($internalRelations[$table] as $field => $relations) { if ( (strlen($column) !== 0 && $column != $field) || (isset($foreign[$field]) && strlen($foreign[$field]) !== 0) ) { continue; } $foreign[$field] = $relations; } } } return $foreign; } /** * Gets the display field of a table * * @param string $db the name of the db to check for * @param string $table the name of the table to check for * * @return string|false field name or false */ public function getDisplayField($db, $table) { $displayFeature = $this->getRelationParameters()->displayFeature; /** * Try to fetch the display field from DB. */ if ($displayFeature !== null) { $disp_query = 'SELECT `display_field`' . ' FROM ' . Util::backquote($displayFeature->database) . '.' . Util::backquote($displayFeature->tableInfo) . ' WHERE `db_name` = \'' . $this->dbi->escapeString((string) $db) . '\'' . ' AND `table_name` = \'' . $this->dbi->escapeString((string) $table) . '\''; $row = $this->dbi->fetchSingleRow( $disp_query, DatabaseInterface::FETCH_ASSOC, DatabaseInterface::CONNECT_CONTROL ); if (isset($row['display_field'])) { return $row['display_field']; } } /** * Emulating the display field for some information_schema tables. */ if ($db === 'information_schema') { switch ($table) { case 'CHARACTER_SETS': return 'DESCRIPTION'; case 'TABLES': return 'TABLE_COMMENT'; } } /** * Pick first char field */ $columns = $this->dbi->getColumnsFull($db, $table); foreach ($columns as $column) { if ($this->dbi->types->getTypeClass($column['DATA_TYPE']) === 'CHAR') { return $column['COLUMN_NAME']; } } return false; } /** * Gets the comments for all columns of a table or the db itself * * @param string $db the name of the db to check for * @param string $table the name of the table to check for * * @return array [column_name] = comment */ public function getComments($db, $table = ''): array { if ($table === '') { return [$this->getDbComment($db)]; } $comments = []; // MySQL native column comments $columns = $this->dbi->getColumns($db, $table, true); foreach ($columns as $column) { if (empty($column['Comment'])) { continue; } $comments[$column['Field']] = $column['Comment']; } return $comments; } /** * Gets the comment for a db * * @param string $db the name of the db to check for */ public function getDbComment(string $db): string { $columnCommentsFeature = $this->getRelationParameters()->columnCommentsFeature; if ($columnCommentsFeature !== null) { // pmadb internal db comment $com_qry = 'SELECT `comment`' . ' FROM ' . Util::backquote($columnCommentsFeature->database) . '.' . Util::backquote($columnCommentsFeature->columnInfo) . ' WHERE db_name = \'' . $this->dbi->escapeString($db) . '\'' . ' AND table_name = \'\'' . ' AND column_name = \'(db_comment)\''; $com_rs = $this->dbi->tryQueryAsControlUser($com_qry); if ($com_rs && $com_rs->numRows() > 0) { $row = $com_rs->fetchAssoc(); return (string) $row['comment']; } } return ''; } /** * Gets the comment for a db * * @return array comments */ public function getDbComments() { $columnCommentsFeature = $this->getRelationParameters()->columnCommentsFeature; if ($columnCommentsFeature !== null) { // pmadb internal db comment $com_qry = 'SELECT `db_name`, `comment`' . ' FROM ' . Util::backquote($columnCommentsFeature->database) . '.' . Util::backquote($columnCommentsFeature->columnInfo) . ' WHERE `column_name` = \'(db_comment)\''; $com_rs = $this->dbi->tryQueryAsControlUser($com_qry); if ($com_rs && $com_rs->numRows() > 0) { return $com_rs->fetchAllKeyPair(); } } return []; } /** * Set a database comment to a certain value. * * @param string $db the name of the db * @param string $comment the value of the column */ public function setDbComment($db, $comment = ''): bool { $columnCommentsFeature = $this->getRelationParameters()->columnCommentsFeature; if ($columnCommentsFeature === null) { return false; } if (strlen($comment) > 0) { $upd_query = 'INSERT INTO ' . Util::backquote($columnCommentsFeature->database) . '.' . Util::backquote($columnCommentsFeature->columnInfo) . ' (`db_name`, `table_name`, `column_name`, `comment`)' . ' VALUES (\'' . $this->dbi->escapeString($db) . "', '', '(db_comment)', '" . $this->dbi->escapeString($comment) . "') " . ' ON DUPLICATE KEY UPDATE ' . "`comment` = '" . $this->dbi->escapeString($comment) . "'"; } else { $upd_query = 'DELETE FROM ' . Util::backquote($columnCommentsFeature->database) . '.' . Util::backquote($columnCommentsFeature->columnInfo) . ' WHERE `db_name` = \'' . $this->dbi->escapeString($db) . '\' AND `table_name` = \'\' AND `column_name` = \'(db_comment)\''; } return (bool) $this->dbi->queryAsControlUser($upd_query); } /** * Set a SQL history entry * * @param string $db the name of the db * @param string $table the name of the table * @param string $username the username * @param string $sqlquery the sql query */ public function setHistory($db, $table, $username, $sqlquery): void { $maxCharactersInDisplayedSQL = $GLOBALS['cfg']['MaxCharactersInDisplayedSQL']; // Prevent to run this automatically on Footer class destroying in testsuite if (mb_strlen($sqlquery) > $maxCharactersInDisplayedSQL) { return; } $sqlHistoryFeature = $this->getRelationParameters()->sqlHistoryFeature; if (! isset($_SESSION['sql_history'])) { $_SESSION['sql_history'] = []; } $_SESSION['sql_history'][] = [ 'db' => $db, 'table' => $table, 'sqlquery' => $sqlquery, ]; if (count($_SESSION['sql_history']) > $GLOBALS['cfg']['QueryHistoryMax']) { // history should not exceed a maximum count array_shift($_SESSION['sql_history']); } if ($sqlHistoryFeature === null || ! $GLOBALS['cfg']['QueryHistoryDB']) { return; } $this->dbi->queryAsControlUser( 'INSERT INTO ' . Util::backquote($sqlHistoryFeature->database) . '.' . Util::backquote($sqlHistoryFeature->history) . ' (`username`, `db`, `table`, `timevalue`, `sqlquery`) VALUES (\'' . $this->dbi->escapeString($username) . '\', \'' . $this->dbi->escapeString($db) . '\', \'' . $this->dbi->escapeString($table) . '\', NOW(), \'' . $this->dbi->escapeString($sqlquery) . '\')' ); $this->purgeHistory($username); } /** * Gets a SQL history entry * * @param string $username the username * * @return array|bool list of history items */ public function getHistory($username) { $sqlHistoryFeature = $this->getRelationParameters()->sqlHistoryFeature; if ($sqlHistoryFeature === null) { return false; } /** * if db-based history is disabled but there exists a session-based * history, use it */ if (! $GLOBALS['cfg']['QueryHistoryDB']) { if (isset($_SESSION['sql_history'])) { return array_reverse($_SESSION['sql_history']); } return false; } $hist_query = ' SELECT `db`, `table`, `sqlquery`, `timevalue` FROM ' . Util::backquote($sqlHistoryFeature->database) . '.' . Util::backquote($sqlHistoryFeature->history) . ' WHERE `username` = \'' . $this->dbi->escapeString($username) . '\' ORDER BY `id` DESC'; return $this->dbi->fetchResult($hist_query, null, null, DatabaseInterface::CONNECT_CONTROL); } /** * purges SQL history * * deletes entries that exceeds $cfg['QueryHistoryMax'], oldest first, for the * given user * * @param string $username the username */ public function purgeHistory($username): void { $sqlHistoryFeature = $this->getRelationParameters()->sqlHistoryFeature; if (! $GLOBALS['cfg']['QueryHistoryDB'] || $sqlHistoryFeature === null) { return; } $search_query = ' SELECT `timevalue` FROM ' . Util::backquote($sqlHistoryFeature->database) . '.' . Util::backquote($sqlHistoryFeature->history) . ' WHERE `username` = \'' . $this->dbi->escapeString($username) . '\' ORDER BY `timevalue` DESC LIMIT ' . $GLOBALS['cfg']['QueryHistoryMax'] . ', 1'; $max_time = $this->dbi->fetchValue($search_query, 0, DatabaseInterface::CONNECT_CONTROL); if (! $max_time) { return; } $this->dbi->queryAsControlUser( 'DELETE FROM ' . Util::backquote($sqlHistoryFeature->database) . '.' . Util::backquote($sqlHistoryFeature->history) . ' WHERE `username` = \'' . $this->dbi->escapeString($username) . '\' AND `timevalue` <= \'' . $max_time . '\'' ); } /** * Prepares the dropdown for one mode * * @param array $foreign the keys and values for foreigns * @param string $data the current data of the dropdown * @param string $mode the needed mode * * @return string[] the '; } elseif ($mode === 'id-content') { $reloptions[] = $reloption . '>' . $key . ' - ' . $value . ''; } elseif ($mode === 'id-only') { $reloptions[] = $reloption . '>' . $key . ''; } } return $reloptions; } /** * Outputs dropdown with values of foreign fields * * @param array[] $disp_row array of the displayed row * @param string $foreign_field the foreign field * @param string $foreign_display the foreign field to display * @param string $data the current data of the dropdown (field in row) * @param int|null $max maximum number of items in the dropdown * * @return string the '; $top_count = count($top); if ($max == -1 || $top_count < $max) { $ret .= implode('', $top); if ($foreign_display && $top_count > 0) { // this empty option is to visually mark the beginning of the // second series of values (bottom) $ret .= ''; } } if ($foreign_display) { $ret .= implode('', $bottom); } return $ret; } /** * Gets foreign keys in preparation for a drop-down selector * * @param array|bool $foreigners array of the foreign keys * @param string $field the foreign field name * @param bool $override_total whether to override the total * @param string $foreign_filter a possible filter * @param string $foreign_limit a possible LIMIT clause * @param bool $get_total optional, whether to get total num of rows * in $foreignData['the_total;] * (has an effect of performance) * * @return array data about the foreign keys * @psalm-return array{ * foreign_link: bool, * the_total: mixed, * foreign_display: string, * disp_row: list|null, * foreign_field: mixed * } */ public function getForeignData( $foreigners, $field, $override_total, string $foreign_filter, $foreign_limit, $get_total = false ): array { // we always show the foreign field in the drop-down; if a display // field is defined, we show it besides the foreign field $foreign_link = false; $disp_row = $foreign_display = $the_total = $foreign_field = null; do { if (! $foreigners) { break; } $foreigner = $this->searchColumnInForeigners($foreigners, $field); if ($foreigner == false) { break; } $foreign_db = $foreigner['foreign_db']; $foreign_table = $foreigner['foreign_table']; $foreign_field = $foreigner['foreign_field']; // Count number of rows in the foreign table. Currently we do // not use a drop-down if more than ForeignKeyMaxLimit rows in the // foreign table, // for speed reasons and because we need a better interface for this. // // We could also do the SELECT anyway, with a LIMIT, and ensure that // the current value of the field is one of the choices. // Check if table has more rows than specified by // $GLOBALS['cfg']['ForeignKeyMaxLimit'] $moreThanLimit = $this->dbi->getTable($foreign_db, $foreign_table) ->checkIfMinRecordsExist($GLOBALS['cfg']['ForeignKeyMaxLimit']); if ($override_total === true || ! $moreThanLimit) { // foreign_display can be false if no display field defined: $foreign_display = $this->getDisplayField($foreign_db, $foreign_table); $f_query_main = 'SELECT ' . Util::backquote($foreign_field) . ( $foreign_display === false ? '' : ', ' . Util::backquote($foreign_display) ); $f_query_from = ' FROM ' . Util::backquote($foreign_db) . '.' . Util::backquote($foreign_table); $f_query_filter = $foreign_filter === '' ? '' : ' WHERE ' . Util::backquote($foreign_field) . ' LIKE "%' . $this->dbi->escapeString($foreign_filter) . '%"' . ( $foreign_display === false ? '' : ' OR ' . Util::backquote($foreign_display) . ' LIKE "%' . $this->dbi->escapeString($foreign_filter) . '%"' ); $f_query_order = $foreign_display === false ? '' : ' ORDER BY ' . Util::backquote($foreign_table) . '.' . Util::backquote($foreign_display); $f_query_limit = $foreign_limit ?: ''; if ($foreign_filter !== '') { $the_total = $this->dbi->fetchValue('SELECT COUNT(*)' . $f_query_from . $f_query_filter); if ($the_total === false) { $the_total = 0; } } $disp = $this->dbi->tryQuery( $f_query_main . $f_query_from . $f_query_filter . $f_query_order . $f_query_limit ); if ($disp && $disp->numRows() > 0) { // If a resultset has been created, pre-cache it in the $disp_row // array. This helps us from not needing to use mysql_data_seek by // accessing a pre-cached PHP array. Usually those resultsets are // not that big, so a performance hit should not be expected. $disp_row = $disp->fetchAllAssoc(); } else { // Either no data in the foreign table or // user does not have select permission to foreign table/field // Show an input field with a 'Browse foreign values' link $disp_row = null; $foreign_link = true; } } else { $disp_row = null; $foreign_link = true; } } while (false); if ($get_total && isset($foreign_db, $foreign_table)) { $the_total = $this->dbi->getTable($foreign_db, $foreign_table) ->countRecords(true); } return [ 'foreign_link' => $foreign_link, 'the_total' => $the_total, 'foreign_display' => $foreign_display ?: '', 'disp_row' => $disp_row, 'foreign_field' => $foreign_field, ]; } /** * Rename a field in relation tables * * usually called after a column in a table was renamed * * @param string $db database name * @param string $table table name * @param string $field old field name * @param string $new_name new field name */ public function renameField($db, $table, $field, $new_name): void { $relationParameters = $this->getRelationParameters(); if ($relationParameters->displayFeature !== null) { $table_query = 'UPDATE ' . Util::backquote($relationParameters->displayFeature->database) . '.' . Util::backquote($relationParameters->displayFeature->tableInfo) . ' SET display_field = \'' . $this->dbi->escapeString($new_name) . '\'' . ' WHERE db_name = \'' . $this->dbi->escapeString($db) . '\'' . ' AND table_name = \'' . $this->dbi->escapeString($table) . '\'' . ' AND display_field = \'' . $this->dbi->escapeString($field) . '\''; $this->dbi->queryAsControlUser($table_query); } if ($relationParameters->relationFeature === null) { return; } $table_query = 'UPDATE ' . Util::backquote($relationParameters->relationFeature->database) . '.' . Util::backquote($relationParameters->relationFeature->relation) . ' SET master_field = \'' . $this->dbi->escapeString($new_name) . '\'' . ' WHERE master_db = \'' . $this->dbi->escapeString($db) . '\'' . ' AND master_table = \'' . $this->dbi->escapeString($table) . '\'' . ' AND master_field = \'' . $this->dbi->escapeString($field) . '\''; $this->dbi->queryAsControlUser($table_query); $table_query = 'UPDATE ' . Util::backquote($relationParameters->relationFeature->database) . '.' . Util::backquote($relationParameters->relationFeature->relation) . ' SET foreign_field = \'' . $this->dbi->escapeString($new_name) . '\'' . ' WHERE foreign_db = \'' . $this->dbi->escapeString($db) . '\'' . ' AND foreign_table = \'' . $this->dbi->escapeString($table) . '\'' . ' AND foreign_field = \'' . $this->dbi->escapeString($field) . '\''; $this->dbi->queryAsControlUser($table_query); } /** * Performs SQL query used for renaming table. * * @param string $source_db Source database name * @param string $target_db Target database name * @param string $source_table Source table name * @param string $target_table Target table name * @param string $db_field Name of database field * @param string $table_field Name of table field */ public function renameSingleTable( DatabaseName $configStorageDatabase, TableName $configStorageTable, string $source_db, string $target_db, string $source_table, string $target_table, string $db_field, string $table_field ): void { $query = 'UPDATE ' . Util::backquote($configStorageDatabase) . '.' . Util::backquote($configStorageTable) . ' SET ' . $db_field . ' = \'' . $this->dbi->escapeString($target_db) . '\', ' . $table_field . ' = \'' . $this->dbi->escapeString($target_table) . '\'' . ' WHERE ' . $db_field . ' = \'' . $this->dbi->escapeString($source_db) . '\'' . ' AND ' . $table_field . ' = \'' . $this->dbi->escapeString($source_table) . '\''; $this->dbi->queryAsControlUser($query); } /** * Rename a table in relation tables * * usually called after table has been moved * * @param string $source_db Source database name * @param string $target_db Target database name * @param string $source_table Source table name * @param string $target_table Target table name */ public function renameTable($source_db, $target_db, $source_table, $target_table): void { $relationParameters = $this->getRelationParameters(); // Move old entries from PMA-DBs to new table if ($relationParameters->columnCommentsFeature !== null) { $this->renameSingleTable( $relationParameters->columnCommentsFeature->database, $relationParameters->columnCommentsFeature->columnInfo, $source_db, $target_db, $source_table, $target_table, 'db_name', 'table_name' ); } // updating bookmarks is not possible since only a single table is // moved, and not the whole DB. if ($relationParameters->displayFeature !== null) { $this->renameSingleTable( $relationParameters->displayFeature->database, $relationParameters->displayFeature->tableInfo, $source_db, $target_db, $source_table, $target_table, 'db_name', 'table_name' ); } if ($relationParameters->relationFeature !== null) { $this->renameSingleTable( $relationParameters->relationFeature->database, $relationParameters->relationFeature->relation, $source_db, $target_db, $source_table, $target_table, 'foreign_db', 'foreign_table' ); $this->renameSingleTable( $relationParameters->relationFeature->database, $relationParameters->relationFeature->relation, $source_db, $target_db, $source_table, $target_table, 'master_db', 'master_table' ); } if ($relationParameters->pdfFeature !== null) { if ($source_db == $target_db) { // rename within the database can be handled $this->renameSingleTable( $relationParameters->pdfFeature->database, $relationParameters->pdfFeature->tableCoords, $source_db, $target_db, $source_table, $target_table, 'db_name', 'table_name' ); } else { // if the table is moved out of the database we can no longer keep the // record for table coordinate $remove_query = 'DELETE FROM ' . Util::backquote($relationParameters->pdfFeature->database) . '.' . Util::backquote($relationParameters->pdfFeature->tableCoords) . " WHERE db_name = '" . $this->dbi->escapeString($source_db) . "'" . " AND table_name = '" . $this->dbi->escapeString($source_table) . "'"; $this->dbi->queryAsControlUser($remove_query); } } if ($relationParameters->uiPreferencesFeature !== null) { $this->renameSingleTable( $relationParameters->uiPreferencesFeature->database, $relationParameters->uiPreferencesFeature->tableUiPrefs, $source_db, $target_db, $source_table, $target_table, 'db_name', 'table_name' ); } if ($relationParameters->navigationItemsHidingFeature === null) { return; } // update hidden items inside table $this->renameSingleTable( $relationParameters->navigationItemsHidingFeature->database, $relationParameters->navigationItemsHidingFeature->navigationHiding, $source_db, $target_db, $source_table, $target_table, 'db_name', 'table_name' ); // update data for hidden table $query = 'UPDATE ' . Util::backquote($relationParameters->navigationItemsHidingFeature->database) . '.' . Util::backquote($relationParameters->navigationItemsHidingFeature->navigationHiding) . " SET db_name = '" . $this->dbi->escapeString($target_db) . "'," . " item_name = '" . $this->dbi->escapeString($target_table) . "'" . " WHERE db_name = '" . $this->dbi->escapeString($source_db) . "'" . " AND item_name = '" . $this->dbi->escapeString($source_table) . "'" . " AND item_type = 'table'"; $this->dbi->queryAsControlUser($query); } /** * Create a PDF page * * @param string|null $newpage name of the new PDF page * @param string $db database name */ public function createPage(?string $newpage, PdfFeature $pdfFeature, $db): int { $ins_query = 'INSERT INTO ' . Util::backquote($pdfFeature->database) . '.' . Util::backquote($pdfFeature->pdfPages) . ' (db_name, page_descr)' . ' VALUES (\'' . $this->dbi->escapeString($db) . '\', \'' . $this->dbi->escapeString($newpage ?: __('no description')) . '\')'; $this->dbi->tryQueryAsControlUser($ins_query); return $this->dbi->insertId(DatabaseInterface::CONNECT_CONTROL); } /** * Get child table references for a table column. * This works only if 'DisableIS' is false. An empty array is returned otherwise. * * @param string $db name of master table db. * @param string $table name of master table. * @param string $column name of master table column. */ public function getChildReferences($db, $table, $column = ''): array { if (! $GLOBALS['cfg']['Server']['DisableIS']) { $rel_query = 'SELECT `column_name`, `table_name`,' . ' `table_schema`, `referenced_column_name`' . ' FROM `information_schema`.`key_column_usage`' . " WHERE `referenced_table_name` = '" . $this->dbi->escapeString($table) . "'" . " AND `referenced_table_schema` = '" . $this->dbi->escapeString($db) . "'"; if ($column) { $rel_query .= " AND `referenced_column_name` = '" . $this->dbi->escapeString($column) . "'"; } return $this->dbi->fetchResult( $rel_query, [ 'referenced_column_name', null, ] ); } return []; } /** * Check child table references and foreign key for a table column. * * @param string $db name of master table db. * @param string $table name of master table. * @param string $column name of master table column. * @param array|null $foreigners_full foreigners array for the whole table. * @param array|null $child_references_full child references for the whole table. * * @return array telling about references if foreign key. * @psalm-return array{isEditable: bool, isForeignKey: bool, isReferenced: bool, references: string[]} */ public function checkChildForeignReferences( $db, $table, $column, $foreigners_full = null, $child_references_full = null ): array { $column_status = [ 'isEditable' => true, 'isReferenced' => false, 'isForeignKey' => false, 'references' => [], ]; $foreigners = []; if ($foreigners_full !== null) { if (isset($foreigners_full[$column])) { $foreigners[$column] = $foreigners_full[$column]; } if (isset($foreigners_full['foreign_keys_data'])) { $foreigners['foreign_keys_data'] = $foreigners_full['foreign_keys_data']; } } else { $foreigners = $this->getForeigners($db, $table, $column, 'foreign'); } $foreigner = $this->searchColumnInForeigners($foreigners, $column); $child_references = []; if ($child_references_full !== null) { if (isset($child_references_full[$column])) { $child_references = $child_references_full[$column]; } } else { $child_references = $this->getChildReferences($db, $table, $column); } if (count($child_references) > 0 || $foreigner) { $column_status['isEditable'] = false; if (count($child_references) > 0) { $column_status['isReferenced'] = true; foreach ($child_references as $columns) { $column_status['references'][] = Util::backquote($columns['table_schema']) . '.' . Util::backquote($columns['table_name']); } } if ($foreigner) { $column_status['isForeignKey'] = true; } } return $column_status; } /** * Search a table column in foreign data. * * @param array $foreigners Table Foreign data * @param string $column Column name * * @return array|false */ public function searchColumnInForeigners(array $foreigners, $column) { if (isset($foreigners[$column])) { return $foreigners[$column]; } if (! isset($foreigners['foreign_keys_data'])) { return false; } $foreigner = []; foreach ($foreigners['foreign_keys_data'] as $one_key) { $column_index = array_search($column, $one_key['index_list']); if ($column_index !== false) { $foreigner['foreign_field'] = $one_key['ref_index_list'][$column_index]; $foreigner['foreign_db'] = $one_key['ref_db_name'] ?? $GLOBALS['db']; $foreigner['foreign_table'] = $one_key['ref_table_name']; $foreigner['constraint'] = $one_key['constraint']; $foreigner['on_update'] = $one_key['on_update'] ?? 'RESTRICT'; $foreigner['on_delete'] = $one_key['on_delete'] ?? 'RESTRICT'; return $foreigner; } } return false; } /** * Returns default PMA table names and their create queries. * * @return array table name, create query */ public function getDefaultPmaTableNames(array $tableNameReplacements): array { $pma_tables = []; $create_tables_file = (string) file_get_contents(SQL_DIR . 'create_tables.sql'); $queries = explode(';', $create_tables_file); foreach ($queries as $query) { if (! preg_match('/CREATE TABLE IF NOT EXISTS `(.*)` \(/', $query, $table)) { continue; } // The following redundant cast is needed for PHPStan $tableName = (string) $table[1]; // Replace the table name with another one if (isset($tableNameReplacements[$tableName])) { $query = str_replace($tableName, $tableNameReplacements[$tableName], $query); } $pma_tables[$tableName] = $query . ';'; } return $pma_tables; } /** * Create a database to be used as configuration storage */ public function createPmaDatabase(string $configurationStorageDbName): bool { $this->dbi->tryQuery( 'CREATE DATABASE IF NOT EXISTS ' . Util::backquote($configurationStorageDbName), DatabaseInterface::CONNECT_CONTROL ); $error = $this->dbi->getError(DatabaseInterface::CONNECT_CONTROL); if (! $error) { // Re-build the cache to show the list of tables created or not // This is the case when the DB could be created but no tables just after // So just purge the cache and show the new configuration storage state unset($_SESSION['relation'][$GLOBALS['server']]); $this->getRelationParameters(); return true; } $GLOBALS['message'] = $error; if ($GLOBALS['errno'] === 1044) { $GLOBALS['message'] = sprintf( __( 'You do not have necessary privileges to create a database named' . ' \'%s\'. You may go to \'Operations\' tab of any' . ' database to set up the phpMyAdmin configuration storage there.' ), $configurationStorageDbName ); } return false; } /** * Creates PMA tables in the given db, updates if already exists. * * @param string $db database * @param bool $create whether to create tables if they don't exist. */ public function fixPmaTables($db, $create = true): void { $tablesToFeatures = [ 'pma__bookmark' => 'bookmarktable', 'pma__relation' => 'relation', 'pma__table_info' => 'table_info', 'pma__table_coords' => 'table_coords', 'pma__pdf_pages' => 'pdf_pages', 'pma__column_info' => 'column_info', 'pma__history' => 'history', 'pma__recent' => 'recent', 'pma__favorite' => 'favorite', 'pma__table_uiprefs' => 'table_uiprefs', 'pma__tracking' => 'tracking', 'pma__userconfig' => 'userconfig', 'pma__users' => 'users', 'pma__usergroups' => 'usergroups', 'pma__navigationhiding' => 'navigationhiding', 'pma__savedsearches' => 'savedsearches', 'pma__central_columns' => 'central_columns', 'pma__designer_settings' => 'designer_settings', 'pma__export_templates' => 'export_templates', ]; $existingTables = $this->dbi->getTables($db, DatabaseInterface::CONNECT_CONTROL); /** @var array $tableNameReplacements */ $tableNameReplacements = []; // Build a map of replacements between default table names and name built by the user foreach ($tablesToFeatures as $table => $feature) { // Empty, we can not do anything about it if (empty($GLOBALS['cfg']['Server'][$feature])) { continue; } // Default table name, nothing to do if ($GLOBALS['cfg']['Server'][$feature] === $table) { continue; } // Set the replacement to transform the default table name into a custom name $tableNameReplacements[$table] = $GLOBALS['cfg']['Server'][$feature]; } $createQueries = null; $foundOne = false; foreach ($tablesToFeatures as $table => $feature) { // Check if the table already exists // use the possible replaced name first and fallback on the table name // if no replacement exists if (! in_array($tableNameReplacements[$table] ?? $table, $existingTables)) { if ($create) { if ($createQueries == null) { // first create $createQueries = $this->getDefaultPmaTableNames($tableNameReplacements); if (! $this->dbi->selectDb($db, DatabaseInterface::CONNECT_CONTROL)) { $GLOBALS['message'] = $this->dbi->getError(DatabaseInterface::CONNECT_CONTROL); return; } } $this->dbi->tryQuery($createQueries[$table], DatabaseInterface::CONNECT_CONTROL); $error = $this->dbi->getError(DatabaseInterface::CONNECT_CONTROL); if ($error) { $GLOBALS['message'] = $error; return; } $foundOne = true; if (empty($GLOBALS['cfg']['Server'][$feature])) { // Do not override a user defined value, only fill if empty $GLOBALS['cfg']['Server'][$feature] = $table; } } } else { $foundOne = true; if (empty($GLOBALS['cfg']['Server'][$feature])) { // Do not override a user defined value, only fill if empty $GLOBALS['cfg']['Server'][$feature] = $table; } } } if (! $foundOne) { return; } $GLOBALS['cfg']['Server']['pmadb'] = $db; unset($_SESSION['relation'][$GLOBALS['server']]); $relationParameters = $this->getRelationParameters(); if ( $relationParameters->recentlyUsedTablesFeature === null && $relationParameters->favoriteTablesFeature === null ) { return; } // Since configuration storage is updated, we need to // re-initialize the favorite and recent tables stored in the // session from the current configuration storage. if ($relationParameters->favoriteTablesFeature !== null) { $fav_tables = RecentFavoriteTable::getInstance('favorite'); $_SESSION['tmpval']['favoriteTables'][$GLOBALS['server']] = $fav_tables->getFromDb(); } if ($relationParameters->recentlyUsedTablesFeature !== null) { $recent_tables = RecentFavoriteTable::getInstance('recent'); $_SESSION['tmpval']['recentTables'][$GLOBALS['server']] = $recent_tables->getFromDb(); } // Reload navi panel to update the recent/favorite lists. $GLOBALS['reload'] = true; } /** * Gets the relations info and status, depending on the condition * * @param bool $condition whether to look for foreigners or not * @param string $db database name * @param string $table table name * * @return array ($res_rel, $have_rel) * @psalm-return array{array, bool} */ public function getRelationsAndStatus(bool $condition, $db, $table) { $have_rel = false; $res_rel = []; if ($condition) { // Find which tables are related with the current one and write it in // an array $res_rel = $this->getForeigners($db, $table); $have_rel = count($res_rel) > 0; } return [ $res_rel, $have_rel, ]; } /** * Verifies if all the pmadb tables are defined */ public function arePmadbTablesDefined(): bool { return ! (empty($GLOBALS['cfg']['Server']['bookmarktable']) || empty($GLOBALS['cfg']['Server']['relation']) || empty($GLOBALS['cfg']['Server']['table_info']) || empty($GLOBALS['cfg']['Server']['table_coords']) || empty($GLOBALS['cfg']['Server']['column_info']) || empty($GLOBALS['cfg']['Server']['pdf_pages']) || empty($GLOBALS['cfg']['Server']['history']) || empty($GLOBALS['cfg']['Server']['recent']) || empty($GLOBALS['cfg']['Server']['favorite']) || empty($GLOBALS['cfg']['Server']['table_uiprefs']) || empty($GLOBALS['cfg']['Server']['tracking']) || empty($GLOBALS['cfg']['Server']['userconfig']) || empty($GLOBALS['cfg']['Server']['users']) || empty($GLOBALS['cfg']['Server']['usergroups']) || empty($GLOBALS['cfg']['Server']['navigationhiding']) || empty($GLOBALS['cfg']['Server']['savedsearches']) || empty($GLOBALS['cfg']['Server']['central_columns']) || empty($GLOBALS['cfg']['Server']['designer_settings']) || empty($GLOBALS['cfg']['Server']['export_templates'])); } /** * Get tables for foreign key constraint * * @param string $foreignDb Database name * @param string $tblStorageEngine Table storage engine * * @return array Table names */ public function getTables($foreignDb, $tblStorageEngine) { $tables = []; $tablesRows = $this->dbi->query('SHOW TABLE STATUS FROM ' . Util::backquote($foreignDb)); while ($row = $tablesRows->fetchRow()) { if (! isset($row[1]) || mb_strtoupper($row[1]) != $tblStorageEngine) { continue; } $tables[] = $row[0]; } if ($GLOBALS['cfg']['NaturalOrder']) { usort($tables, 'strnatcasecmp'); } return $tables; } public function getConfigurationStorageDbName(): string { global $cfg; $cfgStorageDbName = $cfg['Server']['pmadb'] ?? ''; // Use "phpmyadmin" as a default database name to check to keep the behavior consistent return empty($cfgStorageDbName) ? 'phpmyadmin' : $cfgStorageDbName; } /** * This function checks and initializes the phpMyAdmin configuration * storage state before it is used into session cache. */ public function initRelationParamsCache(): void { $storageDbName = $GLOBALS['cfg']['Server']['pmadb'] ?? ''; // Use "phpmyadmin" as a default database name to check to keep the behavior consistent $storageDbName = is_string($storageDbName) && $storageDbName !== '' ? $storageDbName : 'phpmyadmin'; // This will make users not having explicitly listed databases // have config values filled by the default phpMyAdmin storage table name values $this->fixPmaTables($storageDbName, false); // This global will be changed if fixPmaTables did find one valid table $storageDbName = $GLOBALS['cfg']['Server']['pmadb'] ?? ''; // Empty means that until now no pmadb was found eligible if (! empty($storageDbName)) { return; } $this->fixPmaTables($GLOBALS['db'], false); } }