libraries/Tracker.class.php

   1 <?php
   2 /* vim: set expandtab sw=4 ts=4 sts=4: */
   3 /**
   4  *
   5  * @package phpMyAdmin
   6  */
   7
   8 /**
   9  * This class tracks changes on databases, tables and views.
  10  * For more information please see phpMyAdmin/Documentation.html
  11  *
  12  * @package phpMyAdmin
  13  *
  14  * @todo use stristr instead of strstr
  15  */
  16 class PMA_Tracker
  17 {
  18     /**
  19      * Whether tracking is ready.
  20      */
  21     static protected $enabled = false;
  22
  23     /**
  24      * Defines the internal PMA table which contains tracking data.
  25      *
  26      * @access  protected
  27      * @var string
  28      */
  29     static protected $pma_table;
  30
  31     /**
  32      * Defines the usage of DROP TABLE statment in SQL dumps.
  33      *
  34      * @access protected
  35      * @var boolean
  36      */
  37     static protected $add_drop_table;
  38
  39     /**
  40      * Defines the usage of DROP VIEW statment in SQL dumps.
  41      *
  42      * @access protected
  43      * @var boolean
  44      */
  45     static protected $add_drop_view;
  46
  47     /**
  48      * Defines the usage of DROP DATABASE statment in SQL dumps.
  49      *
  50      * @access protected
  51      * @var boolean
  52      */
  53     static protected $add_drop_database;
  54
  55     /**
  56      * Defines auto-creation of tracking versions.
  57      *
  58      * @var boolean
  59      */
  60     static protected $version_auto_create;
  61
  62     /**
  63      * Defines the default set of tracked statements.
  64      *
  65      * @var string
  66      */
  67     static protected $default_tracking_set;
  68
  69     /**
  70      * Initializes settings. See phpMyAdmin/Documentation.html.
  71      *
  72      * @static
  73      *
  74      */
  75     static public function init()
  76     {
  77         self::$pma_table = PMA_backquote($GLOBALS['cfg']['Server']['pmadb']) .".".
  78                            PMA_backquote($GLOBALS['cfg']['Server']['tracking']);
  79
  80         self::$add_drop_table = $GLOBALS['cfg']['Server']['tracking_add_drop_table'];
  81
  82         self::$add_drop_view = $GLOBALS['cfg']['Server']['tracking_add_drop_view'];
  83
  84         self::$add_drop_database = $GLOBALS['cfg']['Server']['tracking_add_drop_database'];
  85
  86         self::$default_tracking_set = $GLOBALS['cfg']['Server']['tracking_default_statements'];
  87
  88         self::$version_auto_create = $GLOBALS['cfg']['Server']['tracking_version_auto_create'];
  89
  90     }
  91
  92     /**
  93      * Actually enables tracking. This needs to be done after all
  94      * underlaying code is initialized.
  95      *
  96      * @static
  97      *
  98      */
  99     static public function enable()
 100     {
 101         self::$enabled = true;
 102     }
 103
 104     /**
 105      * Gets the on/off value of the Tracker module, starts initialization.
 106      *
 107      * @static
 108      *
 109      * @return boolean (true=on|false=off)
 110      */
 111     static public function isActive()
 112     {
 113         if (! self::$enabled) {
 114             return false;
 115         }
 116         /* We need to avoid attempt to track any queries from PMA_getRelationsParam */
 117         self::$enabled = false;
 118         $cfgRelation = PMA_getRelationsParam();
 119         /* Restore original state */
 120         self::$enabled = true;
 121         if (! $cfgRelation['trackingwork']) {
 122             return false;
 123         }
 124         self::init();
 125
 126         if (isset(self::$pma_table)) {
 127             return true;
 128         } else {
 129             return false;
 130         }
 131     }
 132
 133     /**
 134      * Returns a simple DROP TABLE statement.
 135      *
 136      * @param string $tablename
 137      * @return string
 138      */
 139     static public function getStatementDropTable($tablename)
 140     {
 141         return 'DROP TABLE IF EXISTS ' . $tablename;
 142     }
 143
 144     /**
 145      * Returns a simple DROP VIEW statement.
 146      *
 147      * @param string $viewname
 148      * @return string
 149      */
 150     static public function getStatementDropView($viewname)
 151     {
 152         return 'DROP VIEW IF EXISTS ' . $viewname;
 153     }
 154
 155     /**
 156      * Returns a simple DROP DATABASE statement.
 157      *
 158      * @param string $dbname
 159      * @return string
 160      */
 161     static public function getStatementDropDatabase($dbname)
 162     {
 163         return 'DROP DATABASE IF EXISTS ' . $dbname;
 164     }
 165
 166     /**
 167      * Parses the name of a table from a SQL statement substring.
 168      *
 169      * @static
 170      *
 171      * @param  string $string      part of SQL statement
 172      *
 173      * @return string the name of table
 174      */
 175     static protected function getTableName($string)
 176     {
 177         if (strstr($string, '.')) {
 178             $temp = explode('.', $string);
 179             $tablename = $temp[1];
 180         }
 181         else {
 182             $tablename = $string;
 183         }
 184
 185         $str = explode("\n", $tablename);
 186         $tablename = $str[0];
 187
 188         $tablename = str_replace(';', '', $tablename);
 189         $tablename = str_replace('`', '', $tablename);
 190         $tablename = trim($tablename);
 191
 192         return $tablename;
 193     }
 194
 195
 196     /**
 197      * Gets the tracking status of a table, is it active or deactive ?
 198      *
 199      * @static
 200      *
 201      * @param  string $dbname      name of database
 202      * @param  string $tablename   name of table
 203      *
 204      * @return boolean true or false
 205      */
 206     static public function isTracked($dbname, $tablename)
 207     {
 208         if (! self::$enabled) {
 209             return false;
 210         }
 211         /* We need to avoid attempt to track any queries from PMA_getRelationsParam */
 212         self::$enabled = false;
 213         $cfgRelation = PMA_getRelationsParam();
 214         /* Restore original state */
 215         self::$enabled = true;
 216         if (! $cfgRelation['trackingwork']) {
 217             return false;
 218         }
 219
 220         $sql_query =
 221         " SELECT tracking_active FROM " . self::$pma_table .
 222         " WHERE " . PMA_backquote('db_name') . " = '" . PMA_sqlAddSlashes($dbname) . "' " .
 223         " AND " . PMA_backquote('table_name') . " = '" . PMA_sqlAddSlashes($tablename) . "' " .
 224         " ORDER BY version DESC";
 225
 226         $row = PMA_DBI_fetch_array(PMA_query_as_controluser($sql_query));
 227
 228         if (isset($row['tracking_active']) && $row['tracking_active'] == 1) {
 229             return true;
 230         } else {
 231             return false;
 232         }
 233     }
 234
 235     /**
 236      * Returns the comment line for the log.
 237      *
 238      * @return string Comment, contains date and username
 239      */
 240     static public function getLogComment()
 241     {
 242         $date = date('Y-m-d H:i:s');
 243
 244         return "# log " . $date . " " . $GLOBALS['cfg']['Server']['user'] . "\n";
 245     }
 246
 247     /**
 248      * Creates tracking version of a table / view
 249      * (in other words: create a job to track future changes on the table).
 250      *
 251      * @static
 252      *
 253      * @param  string $dbname       name of database
 254      * @param  string $tablename    name of table
 255      * @param  string $version      version
 256      * @param  string $tracking_set set of tracking statements
 257      * @param  string $is_view      if table is a view
 258      *
 259      * @return int result of version insertion
 260      */
 261     static public function createVersion($dbname, $tablename, $version, $tracking_set = '', $is_view = false)
 262     {
 263         global $sql_backquotes;
 264
 265         if ($tracking_set == '') {
 266             $tracking_set = self::$default_tracking_set;
 267         }
 268
 269         require_once './libraries/export/sql.php';
 270
 271         $sql_backquotes = true;
 272
 273         $date = date('Y-m-d H:i:s');
 274
 275         // Get data definition snapshot of table
 276         $sql_query = '
 277         SHOW FULL COLUMNS FROM ' . PMA_backquote($dbname) . '.' . PMA_backquote($tablename);
 278
 279         $sql_result = PMA_DBI_query($sql_query);
 280
 281         while ($row = PMA_DBI_fetch_array($sql_result)) {
 282             $columns[] = $row;
 283         }
 284
 285         $sql_query = PMA_DBI_get_table_indexes_sql($dbname, $tablename);
 286
 287         $sql_result = PMA_DBI_query($sql_query);
 288
 289         $indexes = array();
 290
 291         while($row = PMA_DBI_fetch_array($sql_result)) {
 292             $indexes[] = $row;
 293         }
 294
 295         $snapshot = array('COLUMNS' => $columns, 'INDEXES' => $indexes);
 296         $snapshot = serialize($snapshot);
 297
 298         // Get DROP TABLE / DROP VIEW and CREATE TABLE SQL statements
 299         $sql_backquotes = true;
 300
 301         $create_sql  = "";
 302
 303         if (self::$add_drop_table == true && $is_view == false) {
 304             $create_sql .= self::getLogComment() .
 305                            self::getStatementDropTable(PMA_backquote($tablename)) . ";\n";
 306
 307         }
 308
 309         if (self::$add_drop_view == true && $is_view == true) {
 310             $create_sql .= self::getLogComment() .
 311                            self::getStatementDropView(PMA_backquote($tablename)) . ";\n";
 312         }
 313
 314         $create_sql .= self::getLogComment() .
 315                        PMA_getTableDef($dbname, $tablename, "\n", "");
 316
 317         // Save version
 318
 319         $sql_query =
 320         "/*NOTRACK*/\n" .
 321         "INSERT INTO" . self::$pma_table . " (" .
 322         "db_name, " .
 323         "table_name, " .
 324         "version, " .
 325         "date_created, " .
 326         "date_updated, " .
 327         "schema_snapshot, " .
 328         "schema_sql, " .
 329         "data_sql, " .
 330         "tracking " .
 331         ") " .
 332         "values (
 333         '" . PMA_sqlAddSlashes($dbname) . "',
 334         '" . PMA_sqlAddSlashes($tablename) . "',
 335         '" . PMA_sqlAddSlashes($version) . "',
 336         '" . PMA_sqlAddSlashes($date) . "',
 337         '" . PMA_sqlAddSlashes($date) . "',
 338         '" . PMA_sqlAddSlashes($snapshot) . "',
 339         '" . PMA_sqlAddSlashes($create_sql) . "',
 340         '" . PMA_sqlAddSlashes("\n") . "',
 341         '" . PMA_sqlAddSlashes($tracking_set) . "' )";
 342
 343         $result = PMA_query_as_controluser($sql_query);
 344
 345         if ($result) {
 346             // Deactivate previous version
 347             self::deactivateTracking($dbname, $tablename, ($version - 1));
 348         }
 349
 350         return $result;
 351     }
 352
 353
 354     /**
 355      * Removes all tracking data for a table
 356      *
 357      * @static
 358      *
 359      * @param  string $dbname       name of database
 360      * @param  string $tablename    name of table
 361      *
 362      * @return int result of version insertion
 363      */
 364     static public function deleteTracking($dbname, $tablename)
 365     {
 366         $sql_query =
 367         "/*NOTRACK*/\n" .
 368         "DELETE FROM " . self::$pma_table . " WHERE `db_name` = '" . PMA_sqlAddSlashes($dbname) . "' AND `table_name` = '" . PMA_sqlAddSlashes($tablename) . "'";
 369         $result = PMA_query_as_controluser($sql_query);
 370
 371         return $result;
 372     }
 373
 374     /**
 375      * Creates tracking version of a database
 376      * (in other words: create a job to track future changes on the database).
 377      *
 378      * @static
 379      *
 380      * @param  string $dbname       name of database
 381      * @param  string $version      version
 382      * @param  string $query        query
 383      * @param  string $tracking_set set of tracking statements
 384      *
 385      * @return int result of version insertion
 386      */
 387     static public function createDatabaseVersion($dbname, $version, $query, $tracking_set = 'CREATE DATABASE,ALTER DATABASE,DROP DATABASE')
 388     {
 389         global $sql_backquotes;
 390
 391         $date = date('Y-m-d H:i:s');
 392
 393         if ($tracking_set == '') {
 394             $tracking_set = self::$default_tracking_set;
 395         }
 396
 397         require_once './libraries/export/sql.php';
 398
 399         $create_sql  = "";
 400
 401         if (self::$add_drop_database == true) {
 402             $create_sql .= self::getLogComment() .
 403                            self::getStatementDropDatabase(PMA_backquote($dbname)) . ";\n";
 404         }
 405
 406         $create_sql .= self::getLogComment() . $query;
 407
 408         // Save version
 409         $sql_query =
 410         "/*NOTRACK*/\n" .
 411         "INSERT INTO" . self::$pma_table . " (" .
 412         "db_name, " .
 413         "table_name, " .
 414         "version, " .
 415         "date_created, " .
 416         "date_updated, " .
 417         "schema_snapshot, " .
 418         "schema_sql, " .
 419         "data_sql, " .
 420         "tracking " .
 421         ") " .
 422         "values (
 423         '" . PMA_sqlAddSlashes($dbname) . "',
 424         '" . PMA_sqlAddSlashes('') . "',
 425         '" . PMA_sqlAddSlashes($version) . "',
 426         '" . PMA_sqlAddSlashes($date) . "',
 427         '" . PMA_sqlAddSlashes($date) . "',
 428         '" . PMA_sqlAddSlashes('') . "',
 429         '" . PMA_sqlAddSlashes($create_sql) . "',
 430         '" . PMA_sqlAddSlashes("\n") . "',
 431         '" . PMA_sqlAddSlashes($tracking_set) . "' )";
 432
 433         $result = PMA_query_as_controluser($sql_query);
 434
 435         return $result;
 436     }
 437
 438
 439
 440     /**
 441      * Changes tracking of a table.
 442      *
 443      * @static
 444      *
 445      * @param  string $dbname       name of database
 446      * @param  string $tablename    name of table
 447      * @param  string $version      version
 448      * @param  integer $new_state   the new state of tracking
 449      *
 450      * @return int result of SQL query
 451      */
 452     static private function changeTracking($dbname, $tablename, $version, $new_state)
 453     {
 454         $sql_query =
 455         " UPDATE " . self::$pma_table .
 456         " SET `tracking_active` = '" . $new_state . "' " .
 457         " WHERE `db_name` = '" . PMA_sqlAddSlashes($dbname) . "' " .
 458         " AND `table_name` = '" . PMA_sqlAddSlashes($tablename) . "' " .
 459         " AND `version` = '" . PMA_sqlAddSlashes($version) . "' ";
 460
 461         $result = PMA_query_as_controluser($sql_query);
 462
 463         return $result;
 464     }
 465
 466     /**
 467      * Changes tracking data of a table.
 468      *
 469      * @static
 470      *
 471      * @param  string $dbname       name of database
 472      * @param  string $tablename    name of table
 473      * @param  string $version      version
 474      * @param  string $type             type of data(DDL || DML)
 475      * @param  string || array $new_data   the new tracking data
 476      *
 477      * @return bool result of change
 478      */
 479     static public function changeTrackingData($dbname, $tablename, $version, $type, $new_data)
 480     {
 481         if ($type == 'DDL')
 482             $save_to = 'schema_sql';
 483         elseif ($type == 'DML')
 484             $save_to = 'data_sql';
 485         else
 486             return false;
 487
 488         $date  = date('Y-m-d H:i:s');
 489
 490         $new_data_processed = '';
 491         if (is_array($new_data)) {
 492             foreach ($new_data as $data) {
 493                 $new_data_processed .= '# log ' . $date . ' ' . $data['username'] . PMA_sqlAddSlashes($data['statement']) . "\n";
 494             }
 495         } else {
 496             $new_data_processed = $new_data;
 497         }
 498
 499         $sql_query =
 500         " UPDATE " . self::$pma_table .
 501         " SET `" . $save_to . "` = '" . $new_data_processed . "' " .
 502         " WHERE `db_name` = '" . PMA_sqlAddSlashes($dbname) . "' " .
 503         " AND `table_name` = '" . PMA_sqlAddSlashes($tablename) . "' " .
 504         " AND `version` = '" . PMA_sqlAddSlashes($version) . "' ";
 505
 506         $result = PMA_query_as_controluser($sql_query);
 507
 508         return $result;
 509     }
 510
 511     /**
 512      * Activates tracking of a table.
 513      *
 514      * @static
 515      *
 516      * @param  string $dbname       name of database
 517      * @param  string $tablename    name of table
 518      * @param  string $version      version
 519      *
 520      * @return int result of SQL query
 521      */
 522     static public function activateTracking($dbname, $tablename, $version)
 523     {
 524         return self::changeTracking($dbname, $tablename, $version, 1);
 525     }
 526
 527
 528     /**
 529      * Deactivates tracking of a table.
 530      *
 531      * @static
 532      *
 533      * @param  string $dbname       name of database
 534      * @param  string $tablename    name of table
 535      * @param  string $version      version
 536      *
 537      * @return int result of SQL query
 538      */
 539     static public function deactivateTracking($dbname, $tablename, $version)
 540     {
 541         return self::changeTracking($dbname, $tablename, $version, 0);
 542     }
 543
 544
 545     /**
 546      * Gets the newest version of a tracking job
 547      * (in other words: gets the HEAD version).
 548      *
 549      * @static
 550      *
 551      * @param  string $dbname      name of database
 552      * @param  string $tablename   name of table
 553      * @param  string $statement   tracked statement
 554      *
 555      * @return int (-1 if no version exists | >  0 if a version exists)
 556      */
 557     static public function getVersion($dbname, $tablename, $statement = null)
 558     {
 559         $sql_query =
 560         " SELECT MAX(version) FROM " . self::$pma_table .
 561         " WHERE `db_name` = '" . PMA_sqlAddSlashes($dbname) . "' " .
 562         " AND `table_name` = '" . PMA_sqlAddSlashes($tablename) . "' ";
 563
 564         if ($statement != "") {
 565             $sql_query .= " AND FIND_IN_SET('" . $statement . "',tracking) > 0" ;
 566         }
 567         $row = PMA_DBI_fetch_array(PMA_query_as_controluser($sql_query));
 568         if (isset($row[0])) {
 569             $version = $row[0];
 570         }
 571         if (! isset($version)) {
 572             $version = -1;
 573         }
 574         return $version;
 575     }
 576
 577
 578     /**
 579      * Gets the record of a tracking job.
 580      *
 581      * @static
 582      *
 583      * @param  string $dbname      name of database
 584      * @param  string $tablename   name of table
 585      * @param  string $version     version number
 586      *
 587      * @return mixed record DDM log, DDL log, structure snapshot, tracked statements.
 588      */
 589     static public function getTrackedData($dbname, $tablename, $version)
 590     {
 591         if (! isset(self::$pma_table)) {
 592             self::init();
 593         }
 594         $sql_query = " SELECT * FROM " . self::$pma_table .
 595             " WHERE `db_name` = '" . PMA_sqlAddSlashes($dbname) . "' ";
 596         if (! empty($tablename)) {
 597             $sql_query .= " AND `table_name` = '" . PMA_sqlAddSlashes($tablename) ."' ";
 598         }
 599         $sql_query .= " AND `version` = '" . PMA_sqlAddSlashes($version) ."' ".
 600                      " ORDER BY `version` DESC ";
 601
 602         $mixed = PMA_DBI_fetch_array(PMA_query_as_controluser($sql_query));
 603
 604         // Parse log
 605         $log_schema_entries = explode('# log ',  $mixed['schema_sql']);
 606         $log_data_entries   = explode('# log ',  $mixed['data_sql']);
 607
 608         $ddl_date_from = $date = date('Y-m-d H:i:s');
 609
 610         $ddlog = array();
 611         $i = 0;
 612
 613         // Iterate tracked data definition statements
 614         // For each log entry we want to get date, username and statement
 615         foreach ($log_schema_entries as $log_entry) {
 616             if (trim($log_entry) != '') {
 617                 $date      = substr($log_entry, 0, 19);
 618                 $username  = substr($log_entry, 20, strpos($log_entry, "\n") - 20);
 619                 if ($i == 0) {
 620                     $ddl_date_from = $date;
 621                 }
 622                 $statement = rtrim(strstr($log_entry, "\n"));
 623
 624                 $ddlog[] = array( 'date' => $date,
 625                                   'username'=> $username,
 626                                   'statement' => $statement );
 627                 $i++;
 628             }
 629         }
 630
 631         $date_from = $ddl_date_from;
 632         $date_to   = $ddl_date_to = $date;
 633
 634         $dml_date_from = $date_from;
 635
 636         $dmlog = array();
 637         $i = 0;
 638
 639         // Iterate tracked data manipulation statements
 640         // For each log entry we want to get date, username and statement
 641         foreach ($log_data_entries as $log_entry) {
 642             if (trim($log_entry) != '') {
 643                 $date      = substr($log_entry, 0, 19);
 644                 $username  = substr($log_entry, 20, strpos($log_entry, "\n") - 20);
 645                 if ($i == 0) {
 646                     $dml_date_from = $date;
 647                 }
 648                 $statement = rtrim(strstr($log_entry, "\n"));
 649
 650                 $dmlog[] = array( 'date' => $date,
 651                                   'username' => $username,
 652                                   'statement' => $statement );
 653                 $i++;
 654             }
 655         }
 656
 657         $dml_date_to = $date;
 658
 659         // Define begin and end of date range for both logs
 660         if (strtotime($ddl_date_from) <= strtotime($dml_date_from)) {
 661             $data['date_from'] = $ddl_date_from;
 662         } else {
 663             $data['date_from'] = $dml_date_from;
 664         }
 665         if (strtotime($ddl_date_to) >= strtotime($dml_date_to)) {
 666             $data['date_to'] = $ddl_date_to;
 667         } else {
 668             $data['date_to'] = $dml_date_to;
 669         }
 670         $data['ddlog']           = $ddlog;
 671         $data['dmlog']           = $dmlog;
 672         $data['tracking']        = $mixed['tracking'];
 673         $data['schema_snapshot'] = $mixed['schema_snapshot'];
 674
 675         return $data;
 676     }
 677
 678
 679     /**
 680      * Parses a query. Gets
 681      *  - statement identifier (UPDATE, ALTER TABLE, ...)
 682      *  - type of statement, is it part of DDL or DML ?
 683      *  - tablename
 684      *
 685      * @static
 686      * @todo: using PMA SQL Parser when possible
 687      * @todo: support multi-table/view drops
 688      *
 689      * @param string $query
 690      *
 691      * @return mixed Array containing identifier, type and tablename.
 692      *
 693      */
 694     static public function parseQuery($query)
 695     {
 696
 697         // Usage of PMA_SQP does not work here
 698         //
 699         // require_once("libraries/sqlparser.lib.php");
 700         // $parsed_sql = PMA_SQP_parse($query);
 701         // $sql_info = PMA_SQP_analyze($parsed_sql);
 702
 703         $query = str_replace("\n", " ", $query);
 704         $query = str_replace("\r", " ", $query);
 705
 706         $query = trim($query);
 707         $query = trim($query, ' -');
 708
 709         $tokens = explode(" ", $query);
 710         $tokens = array_map('strtoupper', $tokens);
 711
 712         // Parse USE statement, need it for SQL dump imports
 713         if (substr($query, 0, 4) == 'USE ') {
 714             $prefix = explode('USE ', $query);
 715             $GLOBALS['db'] = self::getTableName($prefix[1]);
 716         }
 717
 718         /*
 719          * DDL statements
 720          */
 721
 722         $result['type']         = 'DDL';
 723
 724         // Parse CREATE VIEW statement
 725         if (in_array('CREATE', $tokens) == true &&
 726            in_array('VIEW', $tokens) == true &&
 727            in_array('AS', $tokens) == true) {
 728             $result['identifier'] = 'CREATE VIEW';
 729
 730             $index = array_search('VIEW', $tokens);
 731
 732             $result['tablename'] = strtolower(self::getTableName($tokens[$index + 1]));
 733         }
 734
 735         // Parse ALTER VIEW statement
 736         if (in_array('ALTER', $tokens) == true &&
 737            in_array('VIEW', $tokens) == true &&
 738            in_array('AS', $tokens) == true &&
 739            ! isset($result['identifier'])) {
 740             $result['identifier'] = 'ALTER VIEW';
 741
 742             $index = array_search('VIEW', $tokens);
 743
 744             $result['tablename'] = strtolower(self::getTableName($tokens[$index + 1]));
 745         }
 746
 747         // Parse DROP VIEW statement
 748         if (! isset($result['identifier']) && substr($query, 0, 10) == 'DROP VIEW ') {
 749             $result['identifier'] = 'DROP VIEW';
 750
 751             $prefix  = explode('DROP VIEW ', $query);
 752             $str = strstr($prefix[1], 'IF EXISTS');
 753
 754             if ($str == false ) {
 755                 $str = $prefix[1];
 756             }
 757             $result['tablename'] = self::getTableName($str);
 758         }
 759
 760         // Parse CREATE DATABASE statement
 761         if (! isset($result['identifier']) && substr($query, 0, 15) == 'CREATE DATABASE') {
 762             $result['identifier'] = 'CREATE DATABASE';
 763             $str = str_replace('CREATE DATABASE', '', $query);
 764             $str = str_replace('IF NOT EXISTS', '', $str);
 765
 766             $prefix = explode('DEFAULT ', $str);
 767
 768             $result['tablename'] = '';
 769             $GLOBALS['db'] = self::getTableName($prefix[0]);
 770         }
 771
 772         // Parse ALTER DATABASE statement
 773         if (! isset($result['identifier']) && substr($query, 0, 14) == 'ALTER DATABASE') {
 774             $result['identifier'] = 'ALTER DATABASE';
 775             $result['tablename'] = '';
 776         }
 777
 778         // Parse DROP DATABASE statement
 779         if (! isset($result['identifier']) && substr($query, 0, 13) == 'DROP DATABASE') {
 780             $result['identifier'] = 'DROP DATABASE';
 781             $str = str_replace('DROP DATABASE', '', $query);
 782             $str = str_replace('IF EXISTS', '', $str);
 783             $GLOBALS['db'] = self::getTableName($str);
 784             $result['tablename'] = '';
 785         }
 786
 787         // Parse CREATE TABLE statement
 788         if (! isset($result['identifier']) && substr($query, 0, 12) == 'CREATE TABLE' ) {
 789             $result['identifier'] = 'CREATE TABLE';
 790             $query   = str_replace('IF NOT EXISTS', '', $query);
 791             $prefix  = explode('CREATE TABLE ', $query);
 792             $suffix  = explode('(', $prefix[1]);
 793             $result['tablename'] = self::getTableName($suffix[0]);
 794         }
 795
 796         // Parse ALTER TABLE statement
 797         if (! isset($result['identifier']) && substr($query, 0, 12) == 'ALTER TABLE ') {
 798             $result['identifier'] = 'ALTER TABLE';
 799
 800             $prefix  = explode('ALTER TABLE ', $query);
 801             $suffix  = explode(' ', $prefix[1]);
 802             $result['tablename']  = self::getTableName($suffix[0]);
 803         }
 804
 805         // Parse DROP TABLE statement
 806         if (! isset($result['identifier']) && substr($query, 0, 11) == 'DROP TABLE ') {
 807             $result['identifier'] = 'DROP TABLE';
 808
 809             $prefix  = explode('DROP TABLE ', $query);
 810             $str = strstr($prefix[1], 'IF EXISTS');
 811
 812             if ($str == false ) {
 813                 $str = $prefix[1];
 814             }
 815             $result['tablename'] = self::getTableName($str);
 816         }
 817
 818         // Parse CREATE INDEX statement
 819         if (! isset($result['identifier']) &&
 820             (   substr($query, 0, 12) == 'CREATE INDEX' ||
 821                 substr($query, 0, 19) == 'CREATE UNIQUE INDEX' ||
 822                 substr($query, 0, 20) == 'CREATE SPATIAL INDEX'
 823             )
 824         ) {
 825              $result['identifier'] = 'CREATE INDEX';
 826              $prefix = explode('ON ', $query);
 827              $suffix = explode('(', $prefix[1]);
 828              $result['tablename'] = self::getTableName($suffix[0]);
 829         }
 830
 831         // Parse DROP INDEX statement
 832         if (! isset($result['identifier']) && substr($query, 0, 10) == 'DROP INDEX') {
 833              $result['identifier'] = 'DROP INDEX';
 834              $prefix = explode('ON ', $query);
 835              $result['tablename'] = self::getTableName($prefix[1]);
 836         }
 837
 838         // Parse RENAME TABLE statement
 839         if (! isset($result['identifier']) && substr($query, 0, 13) == 'RENAME TABLE ') {
 840             $result['identifier'] = 'RENAME TABLE';
 841             $prefix = explode('RENAME TABLE ', $query);
 842             $names  = explode(' TO ', $prefix[1]);
 843             $result['tablename']      = self::getTableName($names[0]);
 844             $result["tablename_after_rename"]  = self::getTableName($names[1]);
 845         }
 846
 847         /*
 848          * DML statements
 849          */
 850
 851         if (! isset($result['identifier'])) {
 852             $result["type"]       = 'DML';
 853         }
 854         // Parse UPDATE statement
 855         if (! isset($result['identifier']) && substr($query, 0, 6) == 'UPDATE') {
 856             $result['identifier'] = 'UPDATE';
 857             $prefix  = explode('UPDATE ', $query);
 858             $suffix  = explode(' ', $prefix[1]);
 859             $result['tablename'] = self::getTableName($suffix[0]);
 860         }
 861
 862         // Parse INSERT INTO statement
 863         if (! isset($result['identifier']) && substr($query, 0, 11 ) == 'INSERT INTO') {
 864             $result['identifier'] = 'INSERT';
 865             $prefix  = explode('INSERT INTO', $query);
 866             $suffix  = explode('(', $prefix[1]);
 867             $result['tablename'] = self::getTableName($suffix[0]);
 868         }
 869
 870         // Parse DELETE statement
 871         if (! isset($result['identifier']) && substr($query, 0, 6 ) == 'DELETE') {
 872             $result['identifier'] = 'DELETE';
 873             $prefix  = explode('FROM ', $query);
 874             $suffix  = explode(' ', $prefix[1]);
 875             $result['tablename'] = self::getTableName($suffix[0]);
 876         }
 877
 878         // Parse TRUNCATE statement
 879         if (! isset($result['identifier']) && substr($query, 0, 8 ) == 'TRUNCATE') {
 880             $result['identifier'] = 'TRUNCATE';
 881             $prefix  = explode('TRUNCATE', $query);
 882             $result['tablename'] = self::getTableName($prefix[1]);
 883         }
 884
 885         return $result;
 886     }
 887
 888
 889     /**
 890      * Analyzes a given SQL statement and saves tracking data.
 891      *
 892      *
 893      * @static
 894      * @param   string $query a SQL query
 895      */
 896     static public function handleQuery($query)
 897     {
 898         // If query is marked as untouchable, leave
 899         if (strstr($query, "/*NOTRACK*/")) {
 900             return false;
 901         }
 902
 903         if (! (substr($query, -1) == ';')) {
 904             $query = $query . ";\n";
 905         }
 906         // Get some information about query
 907         $result = self::parseQuery($query);
 908
 909         // Get database name
 910         $dbname = trim($GLOBALS['db'], '`');
 911         // $dbname can be empty, for example when coming from Synchronize
 912         // and this is a query for the remote server
 913         if (empty($dbname)) {
 914             return false;
 915         }
 916
 917         // If we found a valid statement
 918         if (isset($result['identifier'])) {
 919             $version = self::getVersion($dbname, $result['tablename'], $result['identifier']);
 920
 921             // If version not exists and auto-creation is enabled
 922             if (self::$version_auto_create == true
 923                 && self::isTracked($dbname, $result['tablename']) == false
 924                 && $version == -1) {
 925                 // Create the version
 926
 927                 switch ($result['identifier']) {
 928                 case 'CREATE TABLE':
 929                     self::createVersion($dbname, $result['tablename'], '1');
 930                     break;
 931                 case 'CREATE VIEW':
 932                     self::createVersion($dbname, $result['tablename'], '1', '', true);
 933                     break;
 934                 case 'CREATE DATABASE':
 935                     self::createDatabaseVersion($dbname, '1', $query);
 936                     break;
 937                 } // end switch
 938             }
 939
 940             // If version exists
 941             if (self::isTracked($dbname, $result['tablename']) && $version != -1) {
 942                 if ($result['type'] == 'DDL') {
 943                     $save_to = 'schema_sql';
 944                 } elseif ($result['type'] == 'DML') {
 945                     $save_to = 'data_sql';
 946                 } else {
 947                     $save_to = '';
 948                 }
 949                 $date  = date('Y-m-d H:i:s');
 950
 951                 // Cut off `dbname`. from query
 952                 $query = preg_replace('/`' . $dbname . '`\s?\./', '', $query);
 953
 954                 // Add log information
 955                 $query = self::getLogComment() . $query ;
 956
 957                 // Mark it as untouchable
 958                 $sql_query =
 959                 " /*NOTRACK*/\n" .
 960                 " UPDATE " . self::$pma_table .
 961                 " SET " . PMA_backquote($save_to) ." = CONCAT( " . PMA_backquote($save_to) . ",'\n" . PMA_sqlAddSlashes($query) . "') ," .
 962                 " `date_updated` = '" . $date . "' ";
 963
 964                 // If table was renamed we have to change the tablename attribute in pma_tracking too
 965                 if ($result['identifier'] == 'RENAME TABLE') {
 966                     $sql_query .= ', `table_name` = \'' . PMA_sqlAddSlashes($result['tablename_after_rename']) . '\' ';
 967                 }
 968
 969                 // Save the tracking information only for
 970                 //     1. the database
 971                 //     2. the table / view
 972                 //     3. the statements
 973                 // we want to track
 974                 $sql_query .=
 975                 " WHERE FIND_IN_SET('" . $result['identifier'] . "',tracking) > 0" .
 976                 " AND `db_name` = '" . PMA_sqlAddSlashes($dbname) . "' " .
 977                 " AND `table_name` = '" . PMA_sqlAddSlashes($result['tablename']) . "' " .
 978                 " AND `version` = '" . PMA_sqlAddSlashes($version) . "' ";
 979
 980                 $result = PMA_query_as_controluser($sql_query);
 981             }
 982         }
 983     }
 984 }
 985 ?>