Translation update done using Pootle.
[phpmyadmin-themes.git] / libraries / common.inc.php
blobda66fda1f748bd12997b7bd486b3bd199566a8b4
1 <?php
2 /* vim: set expandtab sw=4 ts=4 sts=4: */
3 /**
4 * Misc stuff and REQUIRED by ALL the scripts.
5 * MUST be included by every script
7 * Among other things, it contains the advanced authentication work.
9 * Order of sections for common.inc.php:
11 * the authentication libraries must be before the connection to db
13 * ... so the required order is:
15 * LABEL_variables_init
16 * - initialize some variables always needed
17 * LABEL_parsing_config_file
18 * - parsing of the configuration file
19 * LABEL_loading_language_file
20 * - loading language file
21 * LABEL_setup_servers
22 * - check and setup configured servers
23 * LABEL_theme_setup
24 * - setting up themes
26 * - load of MySQL extension (if necessary)
27 * - loading of an authentication library
28 * - db connection
29 * - authentication work
31 * @package phpMyAdmin
34 /**
35 * Minimum PHP version; can't call PMA_fatalError() which uses a
36 * PHP 5 function, so cannot easily localize this message.
38 if (version_compare(PHP_VERSION, '5.2.0', 'lt')) {
39 die('PHP 5.2+ is required');
42 /**
43 * Backward compatibility for PHP 5.2
45 if (!defined('E_DEPRECATED')) {
46 define('E_DEPRECATED', 8192);
49 /**
50 * the error handler
52 require './libraries/Error_Handler.class.php';
54 /**
55 * initialize the error handler
57 $GLOBALS['error_handler'] = new PMA_Error_Handler();
58 $cfg['Error_Handler']['display'] = TRUE;
61 * This setting was removed in PHP 5.3. But at this point PMA_PHP_INT_VERSION
62 * is not yet defined so we use another way to find out the PHP version.
64 if (version_compare(phpversion(), '5.3', 'lt')) {
65 /**
66 * Avoid object cloning errors
68 @ini_set('zend.ze1_compatibility_mode', false);
71 /**
72 * Avoid problems with magic_quotes_runtime
73 * (in the future, this setting will be removed but it's not yet
74 * known in which PHP version)
76 @ini_set('magic_quotes_runtime', false);
78 /**
79 * for verification in all procedural scripts under libraries
81 define('PHPMYADMIN', true);
83 /**
84 * core functions
86 require './libraries/core.lib.php';
88 /**
89 * Input sanitizing
91 require './libraries/sanitizing.lib.php';
93 /**
94 * the PMA_Theme class
96 require './libraries/Theme.class.php';
98 /**
99 * the PMA_Theme_Manager class
101 require './libraries/Theme_Manager.class.php';
104 * the PMA_Config class
106 require './libraries/Config.class.php';
109 * the relation lib, tracker needs it
111 require './libraries/relation.lib.php';
114 * the PMA_Tracker class
116 require './libraries/Tracker.class.php';
119 * the PMA_Table class
121 require './libraries/Table.class.php';
123 if (!defined('PMA_MINIMUM_COMMON')) {
125 * common functions
127 require_once './libraries/common.lib.php';
130 * Java script escaping.
132 require_once './libraries/js_escape.lib.php';
135 * Include URL/hidden inputs generating.
137 require_once './libraries/url_generating.lib.php';
140 /******************************************************************************/
141 /* start procedural code label_start_procedural */
144 * protect against possible exploits - there is no need to have so much variables
146 if (count($_REQUEST) > 1000) {
147 die('possible exploit');
151 * Check for numeric keys
152 * (if register_globals is on, numeric key can be found in $GLOBALS)
154 foreach ($GLOBALS as $key => $dummy) {
155 if (is_numeric($key)) {
156 die('numeric key detected');
159 unset($dummy);
162 * PATH_INFO could be compromised if set, so remove it from PHP_SELF
163 * and provide a clean PHP_SELF here
165 $PMA_PHP_SELF = PMA_getenv('PHP_SELF');
166 $_PATH_INFO = PMA_getenv('PATH_INFO');
167 if (! empty($_PATH_INFO) && ! empty($PMA_PHP_SELF)) {
168 $path_info_pos = strrpos($PMA_PHP_SELF, $_PATH_INFO);
169 if ($path_info_pos + strlen($_PATH_INFO) === strlen($PMA_PHP_SELF)) {
170 $PMA_PHP_SELF = substr($PMA_PHP_SELF, 0, $path_info_pos);
173 $PMA_PHP_SELF = htmlspecialchars($PMA_PHP_SELF);
177 * just to be sure there was no import (registering) before here
178 * we empty the global space (but avoid unsetting $variables_list
179 * and $key in the foreach(), we still need them!)
181 $variables_whitelist = array (
182 'GLOBALS',
183 '_SERVER',
184 '_GET',
185 '_POST',
186 '_REQUEST',
187 '_FILES',
188 '_ENV',
189 '_COOKIE',
190 '_SESSION',
191 'error_handler',
192 'PMA_PHP_SELF',
193 'variables_whitelist',
194 'key'
197 foreach (get_defined_vars() as $key => $value) {
198 if (! in_array($key, $variables_whitelist)) {
199 unset($$key);
202 unset($key, $value, $variables_whitelist);
206 * Subforms - some functions need to be called by form, cause of the limited URL
207 * length, but if this functions inside another form you cannot just open a new
208 * form - so phpMyAdmin uses 'arrays' inside this form
210 * <code>
211 * <form ...>
212 * ... main form elments ...
213 * <input type="hidden" name="subform[action1][id]" value="1" />
214 * ... other subform data ...
215 * <input type="submit" name="usesubform[action1]" value="do action1" />
216 * ... other subforms ...
217 * <input type="hidden" name="subform[actionX][id]" value="X" />
218 * ... other subform data ...
219 * <input type="submit" name="usesubform[actionX]" value="do actionX" />
220 * ... main form elments ...
221 * <input type="submit" name="main_action" value="submit form" />
222 * </form>
223 * </code>
225 * so we now check if a subform is submitted
227 $__redirect = null;
228 if (isset($_POST['usesubform'])) {
229 // if a subform is present and should be used
230 // the rest of the form is deprecated
231 $subform_id = key($_POST['usesubform']);
232 $subform = $_POST['subform'][$subform_id];
233 $_POST = $subform;
234 $_REQUEST = $subform;
236 * some subforms need another page than the main form, so we will just
237 * include this page at the end of this script - we use $__redirect to
238 * track this
240 if (isset($_POST['redirect'])
241 && $_POST['redirect'] != basename($PMA_PHP_SELF)) {
242 $__redirect = $_POST['redirect'];
243 unset($_POST['redirect']);
245 unset($subform_id, $subform);
246 } else {
247 // Note: here we overwrite $_REQUEST so that it does not contain cookies,
248 // because another application for the same domain could have set
249 // a cookie (with a compatible path) that overrides a variable
250 // we expect from GET or POST.
251 // We'll refer to cookies explicitly with the $_COOKIE syntax.
252 $_REQUEST = array_merge($_GET, $_POST);
254 // end check if a subform is submitted
256 // remove quotes added by php
257 if (function_exists('get_magic_quotes_gpc') && get_magic_quotes_gpc()) {
258 PMA_arrayWalkRecursive($_GET, 'stripslashes', true);
259 PMA_arrayWalkRecursive($_POST, 'stripslashes', true);
260 PMA_arrayWalkRecursive($_COOKIE, 'stripslashes', true);
261 PMA_arrayWalkRecursive($_REQUEST, 'stripslashes', true);
265 * include deprecated grab_globals only if required
267 if (empty($__redirect) && !defined('PMA_NO_VARIABLES_IMPORT')) {
268 require './libraries/grab_globals.lib.php';
272 * check timezone setting
273 * this could produce an E_STRICT - but only once,
274 * if not done here it will produce E_STRICT on every date/time function
276 * @todo need to decide how we should handle this (without @)
278 date_default_timezone_set(@date_default_timezone_get());
280 /******************************************************************************/
281 /* parsing configuration file LABEL_parsing_config_file */
284 * We really need this one!
286 if (! function_exists('preg_replace')) {
287 PMA_warnMissingExtension('pcre', true);
291 * @global PMA_Config $GLOBALS['PMA_Config']
292 * force reading of config file, because we removed sensitive values
293 * in the previous iteration
295 $GLOBALS['PMA_Config'] = new PMA_Config(CONFIG_FILE);
297 if (!defined('PMA_MINIMUM_COMMON')) {
298 $GLOBALS['PMA_Config']->checkPmaAbsoluteUri();
302 * BC - enable backward compatibility
303 * exports all configuration settings into $GLOBALS ($GLOBALS['cfg'])
305 $GLOBALS['PMA_Config']->enableBc();
308 * clean cookies on upgrade
309 * when changing something related to PMA cookies, increment the cookie version
311 $pma_cookie_version = 4;
312 if (isset($_COOKIE)
313 && (isset($_COOKIE['pmaCookieVer'])
314 && $_COOKIE['pmaCookieVer'] < $pma_cookie_version)) {
315 // delete all cookies
316 foreach($_COOKIE as $cookie_name => $tmp) {
317 $GLOBALS['PMA_Config']->removeCookie($cookie_name);
319 $_COOKIE = array();
320 $GLOBALS['PMA_Config']->setCookie('pmaCookieVer', $pma_cookie_version);
325 * check HTTPS connection
327 if ($GLOBALS['PMA_Config']->get('ForceSSL')
328 && !$GLOBALS['PMA_Config']->get('is_https')) {
329 PMA_sendHeaderLocation(
330 preg_replace('/^http/', 'https',
331 $GLOBALS['PMA_Config']->get('PmaAbsoluteUri'))
332 . PMA_generate_common_url($_GET, 'text'));
333 // delete the current session, otherwise we get problems (see bug #2397877)
334 $GLOBALS['PMA_Config']->removeCookie($GLOBALS['session_name']);
335 exit;
340 * include session handling after the globals, to prevent overwriting
342 require './libraries/session.inc.php';
345 * init some variables LABEL_variables_init
349 * holds parameters to be passed to next page
350 * @global array $GLOBALS['url_params']
352 $GLOBALS['url_params'] = array();
355 * the whitelist for $GLOBALS['goto']
356 * @global array $goto_whitelist
358 $goto_whitelist = array(
359 //'browse_foreigners.php',
360 //'calendar.php',
361 //'changelog.php',
362 //'chk_rel.php',
363 'db_create.php',
364 'db_datadict.php',
365 'db_sql.php',
366 'db_export.php',
367 'db_importdocsql.php',
368 'db_qbe.php',
369 'db_structure.php',
370 'db_import.php',
371 'db_operations.php',
372 'db_printview.php',
373 'db_search.php',
374 //'Documentation.html',
375 'export.php',
376 'import.php',
377 //'index.php',
378 //'navigation.php',
379 //'license.php',
380 'main.php',
381 'pdf_pages.php',
382 'pdf_schema.php',
383 //'phpinfo.php',
384 'querywindow.php',
385 //'readme.php',
386 'server_binlog.php',
387 'server_collations.php',
388 'server_databases.php',
389 'server_engines.php',
390 'server_export.php',
391 'server_import.php',
392 'server_privileges.php',
393 'server_processlist.php',
394 'server_sql.php',
395 'server_status.php',
396 'server_variables.php',
397 'sql.php',
398 'tbl_addfield.php',
399 'tbl_alter.php',
400 'tbl_change.php',
401 'tbl_create.php',
402 'tbl_import.php',
403 'tbl_indexes.php',
404 'tbl_move_copy.php',
405 'tbl_printview.php',
406 'tbl_sql.php',
407 'tbl_export.php',
408 'tbl_operations.php',
409 'tbl_structure.php',
410 'tbl_relation.php',
411 'tbl_replace.php',
412 'tbl_row_action.php',
413 'tbl_select.php',
414 //'themes.php',
415 'transformation_overview.php',
416 'transformation_wrapper.php',
417 'user_password.php',
421 * check $__redirect against whitelist
423 if (! PMA_checkPageValidity($__redirect, $goto_whitelist)) {
424 $__redirect = null;
428 * holds page that should be displayed
429 * @global string $GLOBALS['goto']
431 $GLOBALS['goto'] = '';
432 // Security fix: disallow accessing serious server files via "?goto="
433 if (PMA_checkPageValidity($_REQUEST['goto'], $goto_whitelist)) {
434 $GLOBALS['goto'] = $_REQUEST['goto'];
435 $GLOBALS['url_params']['goto'] = $_REQUEST['goto'];
436 } else {
437 unset($_REQUEST['goto'], $_GET['goto'], $_POST['goto'], $_COOKIE['goto']);
441 * returning page
442 * @global string $GLOBALS['back']
444 if (PMA_checkPageValidity($_REQUEST['back'], $goto_whitelist)) {
445 $GLOBALS['back'] = $_REQUEST['back'];
446 } else {
447 unset($_REQUEST['back'], $_GET['back'], $_POST['back'], $_COOKIE['back']);
451 * Check whether user supplied token is valid, if not remove any possibly
452 * dangerous stuff from request.
454 * remember that some objects in the session with session_start and __wakeup()
455 * could access this variables before we reach this point
456 * f.e. PMA_Config: fontsize
458 * @todo variables should be handled by their respective owners (objects)
459 * f.e. lang, server, collation_connection in PMA_Config
461 if (! PMA_isValid($_REQUEST['token']) || $_SESSION[' PMA_token '] != $_REQUEST['token']) {
463 * List of parameters which are allowed from unsafe source
465 $allow_list = array(
466 /* needed for direct access, see FAQ 1.34
467 * also, server needed for cookie login screen (multi-server)
469 'server', 'db', 'table', 'target',
470 /* Session ID */
471 'phpMyAdmin',
472 /* Cookie preferences */
473 'pma_lang', 'pma_collation_connection',
474 /* Possible login form */
475 'pma_servername', 'pma_username', 'pma_password',
476 /* for playing blobstreamable media */
477 'media_type', 'custom_type', 'bs_reference',
478 /* for changing BLOB repository file MIME type */
479 'bs_db', 'bs_table', 'bs_ref', 'bs_new_mime_type',
480 /* URL redirector */
481 'url'
484 * Require cleanup functions
486 require './libraries/cleanup.lib.php';
488 * Do actual cleanup
490 PMA_remove_request_vars($allow_list);
496 * current selected database
497 * @global string $GLOBALS['db']
499 $GLOBALS['db'] = '';
500 if (PMA_isValid($_REQUEST['db'])) {
501 // can we strip tags from this?
502 // only \ and / is not allowed in db names for MySQL
503 $GLOBALS['db'] = $_REQUEST['db'];
504 $GLOBALS['url_params']['db'] = $GLOBALS['db'];
508 * current selected table
509 * @global string $GLOBALS['table']
511 $GLOBALS['table'] = '';
512 if (PMA_isValid($_REQUEST['table'])) {
513 // can we strip tags from this?
514 // only \ and / is not allowed in table names for MySQL
515 $GLOBALS['table'] = $_REQUEST['table'];
516 $GLOBALS['url_params']['table'] = $GLOBALS['table'];
520 * SQL query to be executed
521 * @global string $GLOBALS['sql_query']
523 $GLOBALS['sql_query'] = '';
524 if (PMA_isValid($_REQUEST['sql_query'])) {
525 $GLOBALS['sql_query'] = $_REQUEST['sql_query'];
529 * avoid problems in phpmyadmin.css.php in some cases
530 * @global string $js_frame
532 $_REQUEST['js_frame'] = PMA_ifSetOr($_REQUEST['js_frame'], '');
534 //$_REQUEST['set_theme'] // checked later in this file LABEL_theme_setup
535 //$_REQUEST['server']; // checked later in this file
536 //$_REQUEST['lang']; // checked by LABEL_loading_language_file
540 * holds name of JavaScript files to be included in HTML header
541 * @global array $js_include
543 $GLOBALS['js_include'] = array();
544 $GLOBALS['js_include'][] = 'jquery/jquery-1.4.4.js';
545 $GLOBALS['js_include'][] = 'update-location.js';
548 * Add common jQuery functions script here if necessary.
552 * JavaScript events that will be registered
553 * @global array $js_events
555 $GLOBALS['js_events'] = array();
558 * footnotes to be displayed ot the page bottom
559 * @global array $footnotes
561 $GLOBALS['footnotes'] = array();
563 /******************************************************************************/
564 /* loading language file LABEL_loading_language_file */
567 * lang detection is done here
569 require './libraries/select_lang.lib.php';
572 * check for errors occurred while loading configuration
573 * this check is done here after loading language files to present errors in locale
575 if ($GLOBALS['PMA_Config']->error_config_file) {
576 $error = __('phpMyAdmin was unable to read your configuration file!<br />This might happen if PHP finds a parse error in it or PHP cannot find the file.<br />Please call the configuration file directly using the link below and read the PHP error message(s) that you receive. In most cases a quote or a semicolon is missing somewhere.<br />If you receive a blank page, everything is fine.')
577 . '<br /><br />'
578 . ($GLOBALS['PMA_Config']->getSource() == CONFIG_FILE ?
579 '<a href="show_config_errors.php"'
580 .' target="_blank">' . $GLOBALS['PMA_Config']->getSource() . '</a>'
582 '<a href="' . $GLOBALS['PMA_Config']->getSource() . '"'
583 .' target="_blank">' . $GLOBALS['PMA_Config']->getSource() . '</a>');
584 trigger_error($error, E_USER_ERROR);
586 if ($GLOBALS['PMA_Config']->error_config_default_file) {
587 $error = sprintf(__('Could not load default configuration from: %1$s'),
588 $GLOBALS['PMA_Config']->default_source);
589 trigger_error($error, E_USER_ERROR);
591 if ($GLOBALS['PMA_Config']->error_pma_uri) {
592 trigger_error(__('The <tt>$cfg[\'PmaAbsoluteUri\']</tt> directive MUST be set in your configuration file!'), E_USER_ERROR);
596 /******************************************************************************/
597 /* setup servers LABEL_setup_servers */
600 * current server
601 * @global integer $GLOBALS['server']
603 $GLOBALS['server'] = 0;
606 * Servers array fixups.
607 * $default_server comes from PMA_Config::enableBc()
608 * @todo merge into PMA_Config
610 // Do we have some server?
611 if (!isset($cfg['Servers']) || count($cfg['Servers']) == 0) {
612 // No server => create one with defaults
613 $cfg['Servers'] = array(1 => $default_server);
614 } else {
615 // We have server(s) => apply default configuration
616 $new_servers = array();
618 foreach ($cfg['Servers'] as $server_index => $each_server) {
620 // Detect wrong configuration
621 if (!is_int($server_index) || $server_index < 1) {
622 trigger_error(sprintf(__('Invalid server index: %s'), $server_index), E_USER_ERROR);
625 $each_server = array_merge($default_server, $each_server);
627 // Don't use servers with no hostname
628 if ($each_server['connect_type'] == 'tcp' && empty($each_server['host'])) {
629 trigger_error(sprintf(__('Invalid hostname for server %1$s. Please review your configuration.'), $server_index), E_USER_ERROR);
632 // Final solution to bug #582890
633 // If we are using a socket connection
634 // and there is nothing in the verbose server name
635 // or the host field, then generate a name for the server
636 // in the form of "Server 2", localized of course!
637 if ($each_server['connect_type'] == 'socket' && empty($each_server['host']) && empty($each_server['verbose'])) {
638 $each_server['verbose'] = __('Server') . $server_index;
641 $new_servers[$server_index] = $each_server;
643 $cfg['Servers'] = $new_servers;
644 unset($new_servers, $server_index, $each_server);
647 // Cleanup
648 unset($default_server);
651 /******************************************************************************/
652 /* setup themes LABEL_theme_setup */
654 if (isset($_REQUEST['custom_color_reset'])) {
655 unset($_SESSION['tmp_user_values']['custom_color']);
656 } elseif (isset($_REQUEST['custom_color'])) {
657 $_SESSION['tmp_user_values']['custom_color'] = $_REQUEST['custom_color'];
660 * @global PMA_Theme_Manager $_SESSION['PMA_Theme_Manager']
662 if (! isset($_SESSION['PMA_Theme_Manager'])) {
663 $_SESSION['PMA_Theme_Manager'] = new PMA_Theme_Manager;
664 } else {
666 * @todo move all __wakeup() functionality into session.inc.php
668 $_SESSION['PMA_Theme_Manager']->checkConfig();
671 // for the theme per server feature
672 if (isset($_REQUEST['server']) && !isset($_REQUEST['set_theme'])) {
673 $GLOBALS['server'] = $_REQUEST['server'];
674 $tmp = $_SESSION['PMA_Theme_Manager']->getThemeCookie();
675 if (empty($tmp)) {
676 $tmp = $_SESSION['PMA_Theme_Manager']->theme_default;
678 $_SESSION['PMA_Theme_Manager']->setActiveTheme($tmp);
679 unset($tmp);
682 * @todo move into PMA_Theme_Manager::__wakeup()
684 if (isset($_REQUEST['set_theme'])) {
685 // if user selected a theme
686 $_SESSION['PMA_Theme_Manager']->setActiveTheme($_REQUEST['set_theme']);
690 * the theme object
691 * @global PMA_Theme $_SESSION['PMA_Theme']
693 $_SESSION['PMA_Theme'] = $_SESSION['PMA_Theme_Manager']->theme;
695 // BC
697 * the active theme
698 * @global string $GLOBALS['theme']
700 $GLOBALS['theme'] = $_SESSION['PMA_Theme']->getName();
702 * the theme path
703 * @global string $GLOBALS['pmaThemePath']
705 $GLOBALS['pmaThemePath'] = $_SESSION['PMA_Theme']->getPath();
707 * the theme image path
708 * @global string $GLOBALS['pmaThemeImage']
710 $GLOBALS['pmaThemeImage'] = $_SESSION['PMA_Theme']->getImgPath();
713 * load layout file if exists
715 if (@file_exists($_SESSION['PMA_Theme']->getLayoutFile())) {
716 include $_SESSION['PMA_Theme']->getLayoutFile();
718 * @todo remove if all themes are update use Navi instead of Left as frame name
720 if (! isset($GLOBALS['cfg']['NaviWidth'])
721 && isset($GLOBALS['cfg']['LeftWidth'])) {
722 $GLOBALS['cfg']['NaviWidth'] = $GLOBALS['cfg']['LeftWidth'];
726 if (! defined('PMA_MINIMUM_COMMON')) {
728 * Character set conversion.
730 require_once './libraries/charset_conversion.lib.php';
733 * String handling
735 require_once './libraries/string.lib.php';
738 * Lookup server by name
739 * (see FAQ 4.8)
741 if (! empty($_REQUEST['server']) && is_string($_REQUEST['server'])
742 && ! is_numeric($_REQUEST['server'])) {
743 foreach ($cfg['Servers'] as $i => $server) {
744 if ($server['host'] == $_REQUEST['server']) {
745 $_REQUEST['server'] = $i;
746 break;
749 if (is_string($_REQUEST['server'])) {
750 unset($_REQUEST['server']);
752 unset($i);
756 * If no server is selected, make sure that $cfg['Server'] is empty (so
757 * that nothing will work), and skip server authentication.
758 * We do NOT exit here, but continue on without logging into any server.
759 * This way, the welcome page will still come up (with no server info) and
760 * present a choice of servers in the case that there are multiple servers
761 * and '$cfg['ServerDefault'] = 0' is set.
764 if (isset($_REQUEST['server']) && (is_string($_REQUEST['server']) || is_numeric($_REQUEST['server'])) && ! empty($_REQUEST['server']) && ! empty($cfg['Servers'][$_REQUEST['server']])) {
765 $GLOBALS['server'] = $_REQUEST['server'];
766 $cfg['Server'] = $cfg['Servers'][$GLOBALS['server']];
767 } else {
768 if (!empty($cfg['Servers'][$cfg['ServerDefault']])) {
769 $GLOBALS['server'] = $cfg['ServerDefault'];
770 $cfg['Server'] = $cfg['Servers'][$GLOBALS['server']];
771 } else {
772 $GLOBALS['server'] = 0;
773 $cfg['Server'] = array();
776 $GLOBALS['url_params']['server'] = $GLOBALS['server'];
779 * Kanji encoding convert feature appended by Y.Kawada (2002/2/20)
781 if (function_exists('mb_convert_encoding')
782 && $lang == 'ja') {
783 require_once './libraries/kanji-encoding.lib.php';
785 * enable multibyte string support
787 define('PMA_MULTIBYTE_ENCODING', 1);
788 } // end if
791 * save some settings in cookies
792 * @todo should be done in PMA_Config
794 $GLOBALS['PMA_Config']->setCookie('pma_lang', $GLOBALS['lang']);
795 $GLOBALS['PMA_Config']->setCookie('pma_collation_connection', $GLOBALS['collation_connection']);
797 $_SESSION['PMA_Theme_Manager']->setThemeCookie();
799 if (! empty($cfg['Server'])) {
802 * Loads the proper database interface for this server
804 require_once './libraries/database_interface.lib.php';
806 require_once './libraries/logging.lib.php';
808 // get LoginCookieValidity from preferences cache
809 // no generic solution for loading preferences from cache as some settings need to be kept
810 // for processing in PMA_Config::loadUserPreferences()
811 $cache_key = 'server_' . $GLOBALS['server'];
812 if (isset($_SESSION['cache'][$cache_key]['userprefs']['LoginCookieValidity'])) {
813 $value = $_SESSION['cache'][$cache_key]['userprefs']['LoginCookieValidity'];
814 $GLOBALS['PMA_Config']->set('LoginCookieValidity', $value);
815 $GLOBALS['cfg']['LoginCookieValidity'] = $value;
816 unset($value);
818 unset($cache_key);
820 // Gets the authentication library that fits the $cfg['Server'] settings
821 // and run authentication
823 // to allow HTTP or http
824 $cfg['Server']['auth_type'] = strtolower($cfg['Server']['auth_type']);
825 if (! file_exists('./libraries/auth/' . $cfg['Server']['auth_type'] . '.auth.lib.php')) {
826 PMA_fatalError(__('Invalid authentication method set in configuration:') . ' ' . $cfg['Server']['auth_type']);
829 * the required auth type plugin
831 require_once './libraries/auth/' . $cfg['Server']['auth_type'] . '.auth.lib.php';
832 if (!PMA_auth_check()) {
833 /* Force generating of new session on login */
834 PMA_secureSession();
835 PMA_auth();
836 } else {
837 PMA_auth_set_user();
840 // Check IP-based Allow/Deny rules as soon as possible to reject the
841 // user
842 // Based on mod_access in Apache:
843 // http://cvs.apache.org/viewcvs.cgi/httpd-2.0/modules/aaa/mod_access.c?rev=1.37&content-type=text/vnd.viewcvs-markup
844 // Look at: "static int check_dir_access(request_rec *r)"
845 if (isset($cfg['Server']['AllowDeny'])
846 && isset($cfg['Server']['AllowDeny']['order'])) {
849 * ip based access library
851 require_once './libraries/ip_allow_deny.lib.php';
853 $allowDeny_forbidden = false; // default
854 if ($cfg['Server']['AllowDeny']['order'] == 'allow,deny') {
855 $allowDeny_forbidden = true;
856 if (PMA_allowDeny('allow')) {
857 $allowDeny_forbidden = false;
859 if (PMA_allowDeny('deny')) {
860 $allowDeny_forbidden = true;
862 } elseif ($cfg['Server']['AllowDeny']['order'] == 'deny,allow') {
863 if (PMA_allowDeny('deny')) {
864 $allowDeny_forbidden = true;
866 if (PMA_allowDeny('allow')) {
867 $allowDeny_forbidden = false;
869 } elseif ($cfg['Server']['AllowDeny']['order'] == 'explicit') {
870 if (PMA_allowDeny('allow')
871 && !PMA_allowDeny('deny')) {
872 $allowDeny_forbidden = false;
873 } else {
874 $allowDeny_forbidden = true;
876 } // end if ... elseif ... elseif
878 // Ejects the user if banished
879 if ($allowDeny_forbidden) {
880 PMA_log_user($cfg['Server']['user'], 'allow-denied');
881 PMA_auth_fails();
883 unset($allowDeny_forbidden); //Clean up after you!
884 } // end if
886 // is root allowed?
887 if (!$cfg['Server']['AllowRoot'] && $cfg['Server']['user'] == 'root') {
888 $allowDeny_forbidden = true;
889 PMA_log_user($cfg['Server']['user'], 'root-denied');
890 PMA_auth_fails();
891 unset($allowDeny_forbidden); //Clean up after you!
894 // is a login without password allowed?
895 if (!$cfg['Server']['AllowNoPassword'] && $cfg['Server']['password'] == '') {
896 $login_without_password_is_forbidden = true;
897 PMA_log_user($cfg['Server']['user'], 'empty-denied');
898 PMA_auth_fails();
899 unset($login_without_password_is_forbidden); //Clean up after you!
902 // Try to connect MySQL with the control user profile (will be used to
903 // get the privileges list for the current user but the true user link
904 // must be open after this one so it would be default one for all the
905 // scripts)
906 $controllink = false;
907 if ($cfg['Server']['controluser'] != '') {
908 $controllink = PMA_DBI_connect($cfg['Server']['controluser'],
909 $cfg['Server']['controlpass'], true);
912 // Connects to the server (validates user's login)
913 $userlink = PMA_DBI_connect($cfg['Server']['user'],
914 $cfg['Server']['password'], false);
916 if (! $controllink) {
917 $controllink = $userlink;
920 /* Log success */
921 PMA_log_user($cfg['Server']['user']);
924 * with phpMyAdmin 3 we support MySQL >=5
925 * but only production releases:
926 * - > 5.0.15
928 if (PMA_MYSQL_INT_VERSION < 50015) {
929 PMA_fatalError(__('You should upgrade to %s %s or later.'), array('MySQL', '5.0.15'));
933 * SQL Parser code
935 require_once './libraries/sqlparser.lib.php';
938 * SQL Validator interface code
940 require_once './libraries/sqlvalidator.lib.php';
943 * the PMA_List_Database class
945 require_once './libraries/PMA.php';
946 $pma = new PMA;
947 $pma->userlink = $userlink;
948 $pma->controllink = $controllink;
951 * some resetting has to be done when switching servers
953 if (isset($_SESSION['tmp_user_values']['previous_server']) && $_SESSION['tmp_user_values']['previous_server'] != $GLOBALS['server']) {
954 unset($_SESSION['tmp_user_values']['navi_limit_offset']);
956 $_SESSION['tmp_user_values']['previous_server'] = $GLOBALS['server'];
958 } // end server connecting
961 * check if profiling was requested and remember it
962 * (note: when $cfg['ServerDefault'] = 0, constant is not defined)
964 if (isset($_REQUEST['profiling']) && PMA_profilingSupported()) {
965 $_SESSION['profiling'] = true;
966 } elseif (isset($_REQUEST['profiling_form'])) {
967 // the checkbox was unchecked
968 unset($_SESSION['profiling']);
971 // library file for blobstreaming
972 require_once './libraries/blobstreaming.lib.php';
974 // checks for blobstreaming plugins and databases that support
975 // blobstreaming (by having the necessary tables for blobstreaming)
976 checkBLOBStreamingPlugins();
978 } // end if !defined('PMA_MINIMUM_COMMON')
980 // load user preferences
981 $GLOBALS['PMA_Config']->loadUserPreferences();
983 // remove sensitive values from session
984 $GLOBALS['PMA_Config']->set('blowfish_secret', '');
985 $GLOBALS['PMA_Config']->set('Servers', '');
986 $GLOBALS['PMA_Config']->set('default_server', '');
988 /* Tell tracker that it can actually work */
989 PMA_Tracker::enable();
992 * @global boolean $GLOBALS['is_ajax_request']
993 * @todo should this be moved to the variables init section above?
995 * Check if the current request is an AJAX request, and set is_ajax_request
996 * accordingly. Suppress headers, footers and unnecessary output if set to
997 * true
999 if (isset($_REQUEST['ajax_request']) && $_REQUEST['ajax_request'] == true) {
1000 $GLOBALS['is_ajax_request'] = true;
1001 } else {
1002 $GLOBALS['is_ajax_request'] = false;
1006 * @global boolean $GLOBALS['inline_edit']
1008 * Set to true if this is a request made during an inline edit process. This
1009 * request is made to retrieve the non-truncated/transformed values.
1011 if(isset($_REQUEST['inline_edit']) && $_REQUEST['inline_edit'] == true) {
1012 $GLOBALS['inline_edit'] = true;
1014 else {
1015 $GLOBALS['inline_edit'] = false;
1018 if (!empty($__redirect) && in_array($__redirect, $goto_whitelist)) {
1020 * include subform target page
1022 require $__redirect;
1023 exit();