view_create.php

   1 <?php
   2 /* vim: set expandtab sw=4 ts=4 sts=4: */
   3 /**
   4  * handles creation of VIEWs
   5  *
   6  * @todo js error when view name is empty (strFormEmpty)
   7  * @todo (also validate if js is disabled, after form submission?)
   8  * @package PhpMyAdmin
   9  */
  10 declare(strict_types=1);
  11
  12 use PhpMyAdmin\Core;
  13 use PhpMyAdmin\Message;
  14 use PhpMyAdmin\Response;
  15 use PhpMyAdmin\Template;
  16 use PhpMyAdmin\Util;
  17
  18 require_once './libraries/common.inc.php';
  19
  20 /**
  21  * Runs common work
  22  */
  23 require './libraries/db_common.inc.php';
  24 $url_params['goto'] = 'tbl_structure.php';
  25 $url_params['back'] = 'view_create.php';
  26
  27 $response = Response::getInstance();
  28
  29 $template = new Template();
  30
  31 $view_algorithm_options = [
  32     'UNDEFINED',
  33     'MERGE',
  34     'TEMPTABLE',
  35 ];
  36
  37 $view_with_options = [
  38     'CASCADED',
  39     'LOCAL'
  40 ];
  41
  42 $view_security_options = [
  43     'DEFINER',
  44     'INVOKER'
  45 ];
  46
  47 // View name is a compulsory field
  48 if (isset($_REQUEST['view']['name'])
  49     && empty($_REQUEST['view']['name'])
  50 ) {
  51     $message = Message::error(__('View name can not be empty!'));
  52     $response->addJSON(
  53         'message',
  54         $message
  55     );
  56     $response->setRequestStatus(false);
  57     exit;
  58 }
  59
  60 if (isset($_REQUEST['createview']) || isset($_REQUEST['alterview'])) {
  61     /**
  62      * Creates the view
  63      */
  64     $sep = "\r\n";
  65
  66     if (isset($_REQUEST['createview'])) {
  67         $sql_query = 'CREATE';
  68         if (isset($_REQUEST['view']['or_replace'])) {
  69             $sql_query .= ' OR REPLACE';
  70         }
  71     } else {
  72         $sql_query = 'ALTER';
  73     }
  74
  75     if (Core::isValid($_REQUEST['view']['algorithm'], $view_algorithm_options)) {
  76         $sql_query .= $sep . ' ALGORITHM = ' . $_REQUEST['view']['algorithm'];
  77     }
  78
  79     if (! empty($_REQUEST['view']['definer'])) {
  80         if (strpos($_REQUEST['view']['definer'], '@') === false) {
  81             $sql_query .= $sep . 'DEFINER='
  82                 . Util::backquote($_REQUEST['view']['definer']);
  83         } else {
  84             $arr = explode('@', $_REQUEST['view']['definer']);
  85             $sql_query .= $sep . 'DEFINER=' . Util::backquote($arr[0]);
  86             $sql_query .= '@' . Util::backquote($arr[1]) . ' ';
  87         }
  88     }
  89
  90     if (isset($_REQUEST['view']['sql_security'])) {
  91         if (in_array($_REQUEST['view']['sql_security'], $view_security_options)) {
  92             $sql_query .= $sep . ' SQL SECURITY '
  93                 . $_REQUEST['view']['sql_security'];
  94         }
  95     }
  96
  97     $sql_query .= $sep . ' VIEW '
  98         . Util::backquote($_REQUEST['view']['name']);
  99
 100     if (! empty($_REQUEST['view']['column_names'])) {
 101         $sql_query .= $sep . ' (' . $_REQUEST['view']['column_names'] . ')';
 102     }
 103
 104     $sql_query .= $sep . ' AS ' . $_REQUEST['view']['as'];
 105
 106     if (isset($_REQUEST['view']['with'])) {
 107         if (in_array($_REQUEST['view']['with'], $view_with_options)) {
 108             $sql_query .= $sep . ' WITH ' . $_REQUEST['view']['with']
 109                 . '  CHECK OPTION';
 110         }
 111     }
 112
 113     if (!$GLOBALS['dbi']->tryQuery($sql_query)) {
 114         if (! isset($_REQUEST['ajax_dialog'])) {
 115             $message = Message::rawError($GLOBALS['dbi']->getError());
 116             return;
 117         }
 118
 119         $response->addJSON(
 120             'message',
 121             Message::error(
 122                 "<i>" . htmlspecialchars($sql_query) . "</i><br /><br />"
 123                 . $GLOBALS['dbi']->getError()
 124             )
 125         );
 126         $response->setRequestStatus(false);
 127         exit;
 128     }
 129
 130     // If different column names defined for VIEW
 131     $view_columns = [];
 132     if (isset($_REQUEST['view']['column_names'])) {
 133         $view_columns = explode(',', $_REQUEST['view']['column_names']);
 134     }
 135
 136     $column_map = $GLOBALS['dbi']->getColumnMapFromSql(
 137         $_REQUEST['view']['as'],
 138         $view_columns
 139     );
 140
 141     $systemDb = $GLOBALS['dbi']->getSystemDatabase();
 142     $pma_transformation_data = $systemDb->getExistingTransformationData(
 143         $GLOBALS['db']
 144     );
 145
 146     if ($pma_transformation_data !== false) {
 147         // SQL for store new transformation details of VIEW
 148         $new_transformations_sql = $systemDb->getNewTransformationDataSql(
 149             $pma_transformation_data,
 150             $column_map,
 151             $_REQUEST['view']['name'],
 152             $GLOBALS['db']
 153         );
 154
 155         // Store new transformations
 156         if ($new_transformations_sql != '') {
 157             $GLOBALS['dbi']->tryQuery($new_transformations_sql);
 158         }
 159     }
 160     unset($pma_transformation_data);
 161
 162     if (! isset($_REQUEST['ajax_dialog'])) {
 163         $message = Message::success();
 164         include 'tbl_structure.php';
 165     } else {
 166         $response->addJSON(
 167             'message',
 168             Util::getMessage(
 169                 Message::success(),
 170                 $sql_query
 171             )
 172         );
 173         $response->setRequestStatus(true);
 174     }
 175
 176     exit;
 177 }
 178
 179 $sql_query = ! empty($_GET['sql_query']) ? $_GET['sql_query'] : '';
 180
 181 // prefill values if not already filled from former submission
 182 $view = [
 183     'operation' => 'create',
 184     'or_replace' => '',
 185     'algorithm' => '',
 186     'definer' => '',
 187     'sql_security' => '',
 188     'name' => '',
 189     'column_names' => '',
 190     'as' => $sql_query,
 191     'with' => '',
 192 ];
 193
 194 if (Core::isValid($_REQUEST['view'], 'array')) {
 195     $view = array_merge($view, $_REQUEST['view']);
 196 }
 197
 198 $url_params['db'] = $GLOBALS['db'];
 199 $url_params['reload'] = 1;
 200
 201 echo $template->render('view_create', [
 202     'ajax_dialog' => isset($_REQUEST['ajax_dialog']),
 203     'text_dir' => $text_dir,
 204     'url_params' => $url_params,
 205     'view' => $view,
 206     'view_algorithm_options' => $view_algorithm_options,
 207     'view_with_options' => $view_with_options,
 208     'view_security_options' => $view_security_options,
 209 ]);