view_create.php

   1 <?php
   2 /* vim: set expandtab sw=4 ts=4 sts=4: */
   3 /**
   4  * handles creation of VIEWs
   5  *
   6  * @todo js error when view name is empty (strFormEmpty)
   7  * @todo (also validate if js is disabled, after form submission?)
   8  * @package PhpMyAdmin
   9  */
  10
  11 use PhpMyAdmin\Core;
  12 use PhpMyAdmin\Url;
  13 use PhpMyAdmin\Response;
  14 use PhpMyAdmin\Template;
  15
  16 require_once './libraries/common.inc.php';
  17
  18 /**
  19  * Runs common work
  20  */
  21 require './libraries/db_common.inc.php';
  22 $url_params['goto'] = 'tbl_structure.php';
  23 $url_params['back'] = 'view_create.php';
  24
  25 $response = Response::getInstance();
  26
  27 $view_algorithm_options = array(
  28     'UNDEFINED',
  29     'MERGE',
  30     'TEMPTABLE',
  31 );
  32
  33 $view_with_options = array(
  34     'CASCADED',
  35     'LOCAL'
  36 );
  37
  38 $view_security_options = array(
  39     'DEFINER',
  40     'INVOKER'
  41 );
  42
  43 // View name is a compulsory field
  44 if (isset($_REQUEST['view']['name'])
  45     && empty($_REQUEST['view']['name'])
  46 ) {
  47     $message = PhpMyAdmin\Message::error(__('View name can not be empty!'));
  48     $response->addJSON(
  49         'message',
  50         $message
  51     );
  52     $response->setRequestStatus(false);
  53     exit;
  54 }
  55
  56 if (isset($_REQUEST['createview']) || isset($_REQUEST['alterview'])) {
  57     /**
  58      * Creates the view
  59      */
  60     $sep = "\r\n";
  61
  62     if (isset($_REQUEST['createview'])) {
  63         $sql_query = 'CREATE';
  64         if (isset($_REQUEST['view']['or_replace'])) {
  65             $sql_query .= ' OR REPLACE';
  66         }
  67     } else {
  68         $sql_query = 'ALTER';
  69     }
  70
  71     if (Core::isValid($_REQUEST['view']['algorithm'], $view_algorithm_options)) {
  72         $sql_query .= $sep . ' ALGORITHM = ' . $_REQUEST['view']['algorithm'];
  73     }
  74
  75     if (! empty($_REQUEST['view']['definer'])) {
  76         if (strpos($_REQUEST['view']['definer'], '@') === false) {
  77             $sql_query .= $sep . 'DEFINER='
  78                 . PhpMyAdmin\Util::backquote($_REQUEST['view']['definer']);
  79         } else {
  80             $arr = explode('@', $_REQUEST['view']['definer']);
  81             $sql_query .= $sep . 'DEFINER=' . PhpMyAdmin\Util::backquote($arr[0]);
  82             $sql_query .= '@' . PhpMyAdmin\Util::backquote($arr[1]) . ' ';
  83         }
  84     }
  85
  86     if (isset($_REQUEST['view']['sql_security'])) {
  87         if (in_array($_REQUEST['view']['sql_security'], $view_security_options)) {
  88             $sql_query .= $sep . ' SQL SECURITY '
  89                 . $_REQUEST['view']['sql_security'];
  90         }
  91     }
  92
  93     $sql_query .= $sep . ' VIEW '
  94         . PhpMyAdmin\Util::backquote($_REQUEST['view']['name']);
  95
  96     if (! empty($_REQUEST['view']['column_names'])) {
  97         $sql_query .= $sep . ' (' . $_REQUEST['view']['column_names'] . ')';
  98     }
  99
 100     $sql_query .= $sep . ' AS ' . $_REQUEST['view']['as'];
 101
 102     if (isset($_REQUEST['view']['with'])) {
 103         if (in_array($_REQUEST['view']['with'], $view_with_options)) {
 104             $sql_query .= $sep . ' WITH ' . $_REQUEST['view']['with']
 105                 . '  CHECK OPTION';
 106         }
 107     }
 108
 109     if (!$GLOBALS['dbi']->tryQuery($sql_query)) {
 110         if (! isset($_REQUEST['ajax_dialog'])) {
 111             $message = PhpMyAdmin\Message::rawError($GLOBALS['dbi']->getError());
 112             return;
 113         }
 114
 115         $response->addJSON(
 116             'message',
 117             PhpMyAdmin\Message::error(
 118                 "<i>" . htmlspecialchars($sql_query) . "</i><br /><br />"
 119                 . $GLOBALS['dbi']->getError()
 120             )
 121         );
 122         $response->setRequestStatus(false);
 123         exit;
 124     }
 125
 126     // If different column names defined for VIEW
 127     $view_columns = array();
 128     if (isset($_REQUEST['view']['column_names'])) {
 129         $view_columns = explode(',', $_REQUEST['view']['column_names']);
 130     }
 131
 132     $column_map = $GLOBALS['dbi']->getColumnMapFromSql(
 133         $_REQUEST['view']['as'], $view_columns
 134     );
 135
 136     $systemDb = $GLOBALS['dbi']->getSystemDatabase();
 137     $pma_transformation_data = $systemDb->getExistingTransformationData(
 138         $GLOBALS['db']
 139     );
 140
 141     if ($pma_transformation_data !== false) {
 142
 143         // SQL for store new transformation details of VIEW
 144         $new_transformations_sql = $systemDb->getNewTransformationDataSql(
 145             $pma_transformation_data, $column_map,
 146             $_REQUEST['view']['name'], $GLOBALS['db']
 147         );
 148
 149         // Store new transformations
 150         if ($new_transformations_sql != '') {
 151             $GLOBALS['dbi']->tryQuery($new_transformations_sql);
 152         }
 153
 154     }
 155     unset($pma_transformation_data);
 156
 157     if (! isset($_REQUEST['ajax_dialog'])) {
 158         $message = PhpMyAdmin\Message::success();
 159         include 'tbl_structure.php';
 160     } else {
 161         $response->addJSON(
 162             'message',
 163             PhpMyAdmin\Util::getMessage(
 164                 PhpMyAdmin\Message::success(),
 165                 $sql_query
 166             )
 167         );
 168         $response->setRequestStatus(true);
 169     }
 170
 171     exit;
 172 }
 173
 174 $sql_query = ! empty($_GET['sql_query']) ? $_GET['sql_query'] : '';
 175
 176 // prefill values if not already filled from former submission
 177 $view = array(
 178     'operation' => 'create',
 179     'or_replace' => '',
 180     'algorithm' => '',
 181     'definer' => '',
 182     'sql_security' => '',
 183     'name' => '',
 184     'column_names' => '',
 185     'as' => $sql_query,
 186     'with' => '',
 187 );
 188
 189 if (Core::isValid($_REQUEST['view'], 'array')) {
 190     $view = array_merge($view, $_REQUEST['view']);
 191 }
 192
 193 $url_params['db'] = $GLOBALS['db'];
 194 $url_params['reload'] = 1;
 195
 196 echo Template::get('view_create')->render([
 197     'ajax_dialog' => isset($_REQUEST['ajax_dialog']),
 198     'text_dir' => $text_dir,
 199     'url_params' => $url_params,
 200     'view' => $view,
 201     'view_algorithm_options' => $view_algorithm_options,
 202     'view_with_options' => $view_with_options,
 203     'view_security_options' => $view_security_options,
 204 ]);