main.php

   1 <?php
   2 /* vim: set expandtab sw=4 ts=4 sts=4: */
   3 /**
   4  *
   5  * @package phpMyAdmin
   6  */
   7
   8 /**
   9  * Gets some core libraries and displays a top message if required
  10  */
  11 require_once './libraries/common.inc.php';
  12
  13 $GLOBALS['js_include'][] = 'jquery/jquery-ui-1.8.custom.js';
  14 $GLOBALS['js_include'][] = 'jquery/jquery.sprintf.js';
  15
  16 // Handles some variables that may have been sent by the calling script
  17 $GLOBALS['db'] = '';
  18 $GLOBALS['table'] = '';
  19 $show_query = '1';
  20 require_once './libraries/header.inc.php';
  21
  22 // Any message to display?
  23 if (! empty($message)) {
  24     PMA_showMessage($message);
  25     unset($message);
  26 }
  27
  28 $common_url_query =  PMA_generate_common_url('', '');
  29
  30 // when $server > 0, a server has been chosen so we can display
  31 // all MySQL-related information
  32 if ($server > 0) {
  33     require './libraries/server_common.inc.php';
  34     require './libraries/StorageEngine.class.php';
  35     require './libraries/server_links.inc.php';
  36
  37     // Use the verbose name of the server instead of the hostname
  38     // if a value is set
  39     $server_info = '';
  40     if (! empty($cfg['Server']['verbose'])) {
  41         $server_info .= htmlspecialchars($cfg['Server']['verbose']);
  42         if ($GLOBALS['cfg']['ShowServerInfo']) {
  43             $server_info .= ' (';
  44         }
  45     }
  46     if ($GLOBALS['cfg']['ShowServerInfo'] || empty($cfg['Server']['verbose'])) {
  47         $server_info .= PMA_DBI_get_host_info();
  48     }
  49     if (! empty($cfg['Server']['verbose']) && $GLOBALS['cfg']['ShowServerInfo']) {
  50     $server_info .= ')';
  51     }
  52     $mysql_cur_user_and_host = PMA_DBI_fetch_value('SELECT USER();');
  53
  54     // should we add the port info here?
  55     $short_server_info = (!empty($GLOBALS['cfg']['Server']['verbose'])
  56                 ? $GLOBALS['cfg']['Server']['verbose']
  57                 : $GLOBALS['cfg']['Server']['host']);
  58 }
  59
  60 echo '<div id="maincontainer">' . "\n";
  61 echo '<div id="main_pane_left">';
  62 if ($server > 0
  63  || (! $cfg['LeftDisplayServers'] && count($cfg['Servers']) > 1)) {
  64     echo '<div class="group">';
  65     echo '<h2>' . __('General Settings') . '</h2>';
  66     echo '<ul>';
  67
  68     /**
  69      * Displays the MySQL servers choice form
  70      */
  71     if (! $cfg['LeftDisplayServers']
  72      && (count($cfg['Servers']) > 1 || $server == 0 && count($cfg['Servers']) == 1)) {
  73         echo '<li id="li_select_server">';
  74         require_once './libraries/select_server.lib.php';
  75         PMA_select_server(true, true);
  76         echo '</li>';
  77     }
  78
  79     /**
  80      * Displays the mysql server related links
  81      */
  82     if ($server > 0 && !PMA_DRIZZLE) {
  83         require_once './libraries/check_user_privileges.lib.php';
  84
  85         // Logout for advanced authentication
  86         if ($cfg['Server']['auth_type'] != 'config') {
  87             if ($cfg['ShowChgPassword']) {
  88                 if ($GLOBALS['cfg']['AjaxEnable']) {
  89                     $conditional_class = 'ajax';
  90                 } else {
  91                     $conditional_class = null;
  92                 }
  93                 PMA_printListItem(__('Change password'), 'li_change_password',
  94                     './user_password.php?' . $common_url_query, null, null, 'change_password_anchor', null, $conditional_class);
  95             }
  96         } // end if
  97         echo '    <li id="li_select_mysql_collation">';
  98         echo '        <form method="post" action="index.php" target="_parent">' . "\n"
  99            . PMA_generate_common_hidden_inputs(null, null, 4, 'collation_connection')
 100            . '            <label for="select_collation_connection">' . "\n"
 101            . '                ' . __('Server connection collation') . "\n"
 102            // put the doc link in the form so that it appears on the same line
 103            . PMA_showMySQLDocu('MySQL_Database_Administration', 'Charset-connection') . ': ' .  "\n"
 104            . '            </label>' . "\n"
 105
 106            . PMA_generateCharsetDropdownBox(PMA_CSDROPDOWN_COLLATION, 'collation_connection', 'select_collation_connection', $collation_connection, true, 4, true)
 107            . '            <noscript><input type="submit" value="' . __('Go') . '" /></noscript>' . "\n"
 108            . '        </form>' . "\n"
 109            . '    </li>' . "\n";
 110     } // end of if ($server > 0 && !PMA_DRIZZLE)
 111     echo '</ul>';
 112     echo '</div>';
 113 }
 114
 115 echo '<div class="group">';
 116 echo '<h2>' . __('Appearance Settings') . '</h2>';
 117 echo '  <ul>';
 118
 119 // Displays language selection combo
 120 if (empty($cfg['Lang'])) {
 121     echo '<li id="li_select_lang">';
 122     require_once './libraries/display_select_lang.lib.php';
 123     PMA_select_language();
 124     echo '</li>';
 125 }
 126
 127 // ThemeManager if available
 128
 129 if ($GLOBALS['cfg']['ThemeManager']) {
 130     echo '<li id="li_select_theme">';
 131     echo $_SESSION['PMA_Theme_Manager']->getHtmlSelectBox();
 132     echo '</li>';
 133 }
 134 echo '<li id="li_select_fontsize">';
 135 echo PMA_Config::getFontsizeForm();
 136 echo '</li>';
 137
 138 echo '</ul>';
 139
 140 // User preferences
 141
 142 echo '<ul>';
 143 echo PMA_printListItem(__('More settings'), 'li_user_preferences',
 144                     './prefs_manage.php?' . $common_url_query);
 145 echo '</ul>';
 146
 147 echo '</div>';
 148
 149
 150 echo '</div>';
 151 echo '<div id="main_pane_right">';
 152
 153
 154 if ($server > 0 && $GLOBALS['cfg']['ShowServerInfo']) {
 155     echo '<div class="group">';
 156     echo '<h2>' . __('Database server') . '</h2>';
 157     echo '<ul>' . "\n";
 158     PMA_printListItem(__('Server') . ': ' . $server_info, 'li_server_info');
 159     PMA_printListItem(__('Server type') . ': ' . PMA_getServerType(), 'li_server_type');
 160     PMA_printListItem(__('Server version') . ': ' . PMA_MYSQL_STR_VERSION, 'li_server_version');
 161     PMA_printListItem(__('Protocol version') . ': ' . PMA_DBI_get_proto_info(),
 162         'li_mysql_proto');
 163     PMA_printListItem(__('User') . ': ' . htmlspecialchars($mysql_cur_user_and_host),
 164         'li_user_info');
 165
 166     echo '    <li id="li_select_mysql_charset">';
 167     echo '        ' . __('Server charset') . ': '
 168        . '        <span xml:lang="en" dir="ltr">'
 169        . '           ' . $mysql_charsets_descriptions[$mysql_charset_map['utf-8']] . "\n"
 170        . '           (' . $mysql_charset_map['utf-8'] . ')' . "\n"
 171        . '        </span>' . "\n"
 172        . '    </li>' . "\n";
 173     echo '  </ul>';
 174     echo ' </div>';
 175 }
 176
 177 if ($GLOBALS['cfg']['ShowServerInfo'] || $GLOBALS['cfg']['ShowPhpInfo']) {
 178     echo '<div class="group">';
 179     echo '<h2>' . __('Web server') . '</h2>';
 180     echo '<ul>';
 181     if ($GLOBALS['cfg']['ShowServerInfo']) {
 182         PMA_printListItem($_SERVER['SERVER_SOFTWARE'], 'li_web_server_software');
 183
 184         if ($server > 0) {
 185             PMA_printListItem(__('MySQL client version') . ': ' . PMA_DBI_get_client_info(),
 186                 'li_mysql_client_version');
 187             PMA_printListItem(__('PHP extension') . ': ' . $GLOBALS['cfg']['Server']['extension'] . ' ' . PMA_showPHPDocu('book.' . $GLOBALS['cfg']['Server']['extension'] . '.php'),
 188                 'li_used_php_extension');
 189         }
 190     }
 191
 192     if ($cfg['ShowPhpInfo']) {
 193         PMA_printListItem(__('Show PHP information'), 'li_phpinfo', './phpinfo.php?' . $common_url_query);
 194     }
 195     echo '  </ul>';
 196     echo ' </div>';
 197 }
 198
 199 echo '<div class="group pmagroup">';
 200 echo '<h2>phpMyAdmin</h2>';
 201 echo '<ul>';
 202 $class = null;
 203 // workaround for bug 3302733; some browsers don't like the situation
 204 // where phpMyAdmin is called on a secure page but a part of the page
 205 // (the version check) refers to a non-secure page
 206 if ($GLOBALS['cfg']['VersionCheck'] && ! $GLOBALS['PMA_Config']->get('is_https')) {
 207     $class = 'jsversioncheck';
 208 }
 209 PMA_printListItem(__('Version information') . ': ' . PMA_VERSION, 'li_pma_version', null, null, null, null, $class);
 210 PMA_printListItem(__('Documentation'), 'li_pma_docs', 'Documentation.html', null, '_blank');
 211 PMA_printListItem(__('Wiki'), 'li_pma_wiki', PMA_linkURL('http://wiki.phpmyadmin.net/'), null, '_blank');
 212
 213 // does not work if no target specified, don't know why
 214 PMA_printListItem(__('Official Homepage'), 'li_pma_homepage', PMA_linkURL('http://www.phpMyAdmin.net/'), null, '_blank');
 215 PMA_printListItem(__('Contribute'), 'li_pma_contribute', PMA_linkURL('http://www.phpmyadmin.net/home_page/improve.php'), null, '_blank');
 216 PMA_printListItem(__('Get support'), 'li_pma_support', PMA_linkURL('http://www.phpmyadmin.net/home_page/support.php'), null, '_blank');
 217 PMA_printListItem(__('List of changes'), 'li_pma_changes', PMA_linkURL('changelog.php'), null, '_blank');
 218 ?>
 219     </ul>
 220  </div>
 221
 222 </div>
 223
 224 <?php
 225 /**
 226  * BUG: MSIE needs two <br /> here, otherwise it will not extend the outer div to the
 227  * full height of the inner divs
 228  */
 229 ?>
 230 <br class="clearfloat" />
 231 <br class="clearfloat" />
 232 </div>
 233
 234 <?php
 235 /**
 236  * Warning if using the default MySQL privileged account
 237  */
 238 if ($server != 0
 239  && $cfg['Server']['user'] == 'root'
 240  && $cfg['Server']['password'] == '') {
 241     trigger_error(__('Your configuration file contains settings (root with no password) that correspond to the default MySQL privileged account. Your MySQL server is running with this default, is open to intrusion, and you really should fix this security hole by setting a password for user \'root\'.'), E_USER_WARNING);
 242 }
 243
 244 /**
 245  * Nijel: As we try to handle charsets by ourself, mbstring overloads just
 246  * break it, see bug 1063821.
 247  */
 248 if (@extension_loaded('mbstring') && @ini_get('mbstring.func_overload') > 1) {
 249     trigger_error(__('You have enabled mbstring.func_overload in your PHP configuration. This option is incompatible with phpMyAdmin and might cause some data to be corrupted!'), E_USER_WARNING);
 250 }
 251
 252 /**
 253  * Nijel: mbstring is used for handling multibyte inside parser, so it is good
 254  * to tell user something might be broken without it, see bug #1063149.
 255  */
 256 if (! @extension_loaded('mbstring')) {
 257     trigger_error(__('The mbstring PHP extension was not found and you seem to be using a multibyte charset. Without the mbstring extension phpMyAdmin is unable to split strings correctly and it may result in unexpected results.'), E_USER_WARNING);
 258 }
 259
 260 /**
 261  * Check whether session.gc_maxlifetime limits session validity.
 262  */
 263 $gc_time = (int)@ini_get('session.gc_maxlifetime');
 264 if ($gc_time < $GLOBALS['cfg']['LoginCookieValidity'] ) {
 265     trigger_error(PMA_Message::decodeBB(__('Your PHP parameter [a@http://php.net/manual/en/session.configuration.php#ini.session.gc-maxlifetime@]session.gc_maxlifetime[/a] is lower that cookie validity configured in phpMyAdmin, because of this, your login will expire sooner than configured in phpMyAdmin.')), E_USER_WARNING);
 266 }
 267
 268 /**
 269  * Check whether LoginCookieValidity is limited by LoginCookieStore.
 270  */
 271 if ($GLOBALS['cfg']['LoginCookieStore'] != 0 && $GLOBALS['cfg']['LoginCookieStore'] < $GLOBALS['cfg']['LoginCookieValidity']) {
 272     trigger_error(PMA_Message::decodeBB(__('Login cookie store is lower than cookie validity configured in phpMyAdmin, because of this, your login will expire sooner than configured in phpMyAdmin.')), E_USER_WARNING);
 273 }
 274
 275 /**
 276  * Check if user does not have defined blowfish secret and it is being used.
 277  */
 278 if (!empty($_SESSION['auto_blowfish_secret']) &&
 279         empty($GLOBALS['cfg']['blowfish_secret'])) {
 280     trigger_error(__('The configuration file now needs a secret passphrase (blowfish_secret).'), E_USER_WARNING);
 281 }
 282
 283 /**
 284  * Check for existence of config directory which should not exist in
 285  * production environment.
 286  */
 287 if (file_exists('./config')) {
 288     trigger_error(__('Directory [code]config[/code], which is used by the setup script, still exists in your phpMyAdmin directory. You should remove it once phpMyAdmin has been configured.'), E_USER_WARNING);
 289 }
 290
 291 if ($server > 0) {
 292     $cfgRelation = PMA_getRelationsParam();
 293     if (! $cfgRelation['allworks'] && $cfg['PmaNoRelation_DisableWarning'] == false) {
 294         $message = PMA_Message::notice(__('The phpMyAdmin configuration storage is not completely configured, some extended features have been deactivated. To find out why click %shere%s.'));
 295         $message->addParam('<a href="' . $cfg['PmaAbsoluteUri'] . 'chk_rel.php?' . $common_url_query . '">', false);
 296         $message->addParam('</a>', false);
 297         /* Show error if user has configured something, notice elsewhere */
 298         if (!empty($cfg['Servers'][$server]['pmadb'])) {
 299             $message->isError(true);
 300         }
 301         $message->display();
 302     } // end if
 303 }
 304
 305 /**
 306  * Show notice when javascript support is missing.
 307  */
 308 echo '<noscript>';
 309 $message = PMA_Message::notice(__('Javascript support is missing or disabled in your browser, some phpMyAdmin functionality will be missing. For example navigation frame will not refresh automatically.'));
 310 $message->isError(true);
 311 $message->display();
 312 echo '</noscript>';
 313
 314 /**
 315  * Warning about different MySQL library and server version
 316  * (a difference on the third digit does not count).
 317  * If someday there is a constant that we can check about mysqlnd, we can use it instead
 318  * of strpos().
 319  * If no default server is set, PMA_DBI_get_client_info() is not defined yet.
 320  * Drizzle can speak MySQL protocol, so don't warn about version mismatch for Drizzle servers.
 321  */
 322 if (function_exists('PMA_DBI_get_client_info') && !PMA_DRIZZLE) {
 323     $_client_info = PMA_DBI_get_client_info();
 324     if ($server > 0 && strpos($_client_info, 'mysqlnd') === false && substr(PMA_MYSQL_CLIENT_API, 0, 3) != substr(PMA_MYSQL_INT_VERSION, 0, 3)) {
 325         trigger_error(PMA_sanitize(sprintf(__('Your PHP MySQL library version %s differs from your MySQL server version %s. This may cause unpredictable behavior.'),
 326                 $_client_info,
 327                 substr(PMA_MYSQL_STR_VERSION, 0, strpos(PMA_MYSQL_STR_VERSION . '-', '-')))),
 328             E_USER_NOTICE);
 329     }
 330     unset($_client_info);
 331 }
 332
 333 /**
 334  * Warning about Suhosin
 335  */
 336 if ($cfg['SuhosinDisableWarning'] == false && @ini_get('suhosin.request.max_value_length')) {
 337     trigger_error(PMA_sanitize(sprintf(__('Server running with Suhosin. Please refer to %sdocumentation%s for possible issues.'), '[a@./Documentation.html#faq1_38@_blank]', '[/a]')), E_USER_WARNING);
 338     }
 339
 340 /**
 341  * Warning about mcrypt.
 342  */
 343 if (!function_exists('mcrypt_encrypt') && !$GLOBALS['cfg']['McryptDisableWarning']) {
 344     PMA_warnMissingExtension('mcrypt');
 345 }
 346
 347 /**
 348  * Warning about incomplete translations.
 349  *
 350  * The data file is created while creating release by ./scripts/remove-incomplete-mo
 351  */
 352 if (file_exists('./libraries/language_stats.inc.php')) {
 353     include('./libraries/language_stats.inc.php');
 354     /*
 355      * This message is intentionally not translated, because we're
 356      * handling incomplete translations here and focus on english
 357      * speaking users.
 358      */
 359     if (isset($GLOBALS['language_stats'][$lang]) && $GLOBALS['language_stats'][$lang] < $cfg['TranslationWarningThreshold']) {
 360         trigger_error('You are using an incomplete translation, please help to make it better by <a href="http://www.phpmyadmin.net/home_page/improve.php#translate" target="_blank">contributing</a>.', E_USER_NOTICE);
 361     }
 362 }
 363
 364 /**
 365  * prints list item for main page
 366  *
 367  * @param string  $name   displayed text
 368  * @param string  $id     id, used for css styles
 369  * @param string  $url    make item as link with $url as target
 370  * @param string  $mysql_help_page  display a link to MySQL's manual
 371  * @param string  $target special target for $url
 372  * @param string  $a_id   id for the anchor, used for jQuery to hook in functions
 373  * @param string  $class  class for the li element
 374  * @param string  $a_class  class for the anchor element
 375  */
 376 function PMA_printListItem($name, $id = null, $url = null, $mysql_help_page = null, $target = null, $a_id = null, $class = null, $a_class = null)
 377 {
 378     echo '<li id="' . $id . '"';
 379     if (null !== $class) {
 380         echo ' class="' . $class . '"';
 381     }
 382     echo '>';
 383     if (null !== $url) {
 384         echo '<a href="' . $url . '"';
 385         if (null !== $target) {
 386            echo ' target="' . $target . '"';
 387         }
 388         if (null != $a_id) {
 389             echo ' id="' . $a_id .'"';
 390         }
 391         if (null != $a_class) {
 392             echo ' class="' . $a_class .'"';
 393         }
 394         echo '>';
 395     }
 396
 397     echo $name;
 398
 399     if (null !== $url) {
 400         echo '</a>' . "\n";
 401     }
 402     if (null !== $mysql_help_page) {
 403         echo PMA_showMySQLDocu('', $mysql_help_page);
 404     }
 405     echo '</li>';
 406 }
 407
 408 /**
 409  * Displays the footer
 410  */
 411 require './libraries/footer.inc.php';
 412 ?>