tbl_change.php

   1 <?php
   2 /* vim: set expandtab sw=4 ts=4 sts=4: */
   3 /**
   4  * Displays form for editing and inserting new table rows
   5  *
   6  * register_globals_save (mark this file save for disabling register globals)
   7  *
   8  * @package PhpMyAdmin
   9  */
  10
  11 /**
  12  * Gets the variables sent or posted to this script and displays the header
  13  */
  14 require_once 'libraries/common.inc.php';
  15
  16 /**
  17  * Ensures db and table are valid, else moves to the "parent" script
  18  */
  19 require_once 'libraries/db_table_exists.lib.php';
  20
  21 /**
  22  * functions implementation for this script
  23  */
  24 require_once 'libraries/insert_edit.lib.php';
  25
  26 /**
  27  * Sets global variables.
  28  * Here it's better to use a if, instead of the '?' operator
  29  * to avoid setting a variable to '' when it's not present in $_REQUEST
  30  */
  31
  32 if (isset($_REQUEST['where_clause'])) {
  33     $where_clause = $_REQUEST['where_clause'];
  34 }
  35 if (isset($_SESSION['edit_next'])) {
  36     $where_clause = $_SESSION['edit_next'];
  37     unset($_SESSION['edit_next']);
  38     $after_insert = 'edit_next';
  39 }
  40 if (isset($_REQUEST['ShowFunctionFields'])) {
  41     $cfg['ShowFunctionFields'] = $_REQUEST['ShowFunctionFields'];
  42 }
  43 if (isset($_REQUEST['ShowFieldTypesInDataEditView'])) {
  44     $cfg['ShowFieldTypesInDataEditView'] = $_REQUEST['ShowFieldTypesInDataEditView'];
  45 }
  46 if (isset($_REQUEST['after_insert'])) {
  47     $after_insert = $_REQUEST['after_insert'];
  48 }
  49 /**
  50  * file listing
  51  */
  52 require_once 'libraries/file_listing.lib.php';
  53
  54
  55 /**
  56  * Defines the url to return to in case of error in a sql statement
  57  * (at this point, $GLOBALS['goto'] will be set but could be empty)
  58  */
  59 if (empty($GLOBALS['goto'])) {
  60     if (strlen($table)) {
  61         // avoid a problem (see bug #2202709)
  62         $GLOBALS['goto'] = 'tbl_sql.php';
  63     } else {
  64         $GLOBALS['goto'] = 'db_sql.php';
  65     }
  66 }
  67 /**
  68  * @todo check if we could replace by "db_|tbl_" - please clarify!?
  69  */
  70 $_url_params = array(
  71     'db' => $db,
  72     'sql_query' => $_REQUEST['sql_query']
  73 );
  74
  75 if (preg_match('@^tbl_@', $GLOBALS['goto'])) {
  76     $_url_params['table'] = $table;
  77 }
  78
  79 $err_url = $GLOBALS['goto'] . PMA_generate_common_url($_url_params);
  80 unset($_url_params);
  81
  82
  83 /**
  84  * Sets parameters for links
  85  * where is this variable used?
  86  * replace by PMA_generate_common_url($url_params);
  87  */
  88 $url_query = PMA_generate_common_url($url_params, 'html', '');
  89
  90 /**
  91  * get table information
  92  * @todo should be done by a Table object
  93  */
  94 require_once 'libraries/tbl_info.inc.php';
  95
  96 /**
  97  * Get comments for table fileds/columns
  98  */
  99 $comments_map = array();
 100
 101 if ($GLOBALS['cfg']['ShowPropertyComments']) {
 102     $comments_map = PMA_getComments($db, $table);
 103 }
 104
 105 /**
 106  * START REGULAR OUTPUT
 107  */
 108
 109 /**
 110  * Load JavaScript files
 111  */
 112 $response = PMA_Response::getInstance();
 113 $header   = $response->getHeader();
 114 $scripts  = $header->getScripts();
 115 $scripts->addFile('functions.js');
 116 $scripts->addFile('tbl_change.js');
 117 $scripts->addFile('jquery/jquery-ui-timepicker-addon.js');
 118 $scripts->addFile('gis_data_editor.js');
 119
 120 /**
 121  * Displays the query submitted and its result
 122  *
 123  * @todo where does $disp_message and $disp_query come from???
 124  */
 125 if (! empty($disp_message)) {
 126     if (! isset($disp_query)) {
 127         $disp_query     = null;
 128     }
 129     $response->addHTML(PMA_Util::getMessage($disp_message, $disp_query));
 130 }
 131
 132 /**
 133  * Get the analysis of SHOW CREATE TABLE for this table
 134  * @todo should be handled by class Table
 135  */
 136 $show_create_table = PMA_DBI_fetchValue(
 137     'SHOW CREATE TABLE ' . PMA_Util::backquote($db) . '.' . PMA_Util::backquote($table),
 138     0, 1
 139 );
 140 $analyzed_sql = PMA_SQP_analyze(PMA_SQP_parse($show_create_table));
 141 unset($show_create_table);
 142
 143 /**
 144  * Get the list of the fields of the current table
 145  */
 146 PMA_DBI_selectDb($db);
 147 $table_fields = array_values(PMA_DBI_getColumns($db, $table));
 148
 149 $paramTableDbArray = array($table, $db);
 150
 151 /**
 152  * Determine what to do, edit or insert?
 153  */
 154 if (isset($where_clause)) {
 155     // we are editing
 156     $insert_mode = false;
 157     $where_clause_array = PMA_getWhereClauseArray($where_clause);
 158     list($where_clauses, $result, $rows, $found_unique_key)
 159         = PMA_analyzeWhereClauses($where_clause_array, $table, $db);
 160 } else {
 161     // we are inserting
 162     $insert_mode = true;
 163     $where_clause = null;
 164     list($result, $rows) = PMA_loadFirstRow($table, $db);
 165     $where_clauses = null;
 166     $where_clause_array = null;
 167     $found_unique_key = false;
 168 }
 169
 170 // Copying a row - fetched data will be inserted as a new row,
 171 // therefore the where clause is needless.
 172 if (isset($_REQUEST['default_action']) && $_REQUEST['default_action'] === 'insert') {
 173     $where_clause = $where_clauses = null;
 174 }
 175
 176 // retrieve keys into foreign fields, if any
 177 $foreigners = PMA_getForeigners($db, $table);
 178
 179 // Retrieve form parameters for insert/edit form
 180 $_form_params = PMA_getFormParametersForInsertForm(
 181     $db, $table, $where_clauses, $where_clause_array, $err_url
 182 );
 183
 184 /**
 185  * Displays the form
 186  */
 187 // autocomplete feature of IE kills the "onchange" event handler and it
 188 //        must be replaced by the "onpropertychange" one in this case
 189 $chg_evt_handler = (PMA_USR_BROWSER_AGENT == 'IE'
 190     && PMA_USR_BROWSER_VER >= 5
 191     && PMA_USR_BROWSER_VER < 7
 192 )
 193      ? 'onpropertychange'
 194      : 'onchange';
 195 // Had to put the URI because when hosted on an https server,
 196 // some browsers send wrongly this form to the http server.
 197
 198 $html_output = '';
 199 // Set if we passed the first timestamp field
 200 $timestamp_seen = false;
 201 $columns_cnt     = count($table_fields);
 202
 203 $tabindex              = 0;
 204 $tabindex_for_function = +3000;
 205 $tabindex_for_null     = +6000;
 206 $tabindex_for_value    = 0;
 207 $o_rows                = 0;
 208 $biggest_max_file_size = 0;
 209
 210 $url_params['db'] = $db;
 211 $url_params['table'] = $table;
 212 $url_params = PMA_urlParamsInEditMode(
 213     $url_params, $where_clause_array, $where_clause
 214 );
 215
 216 //Insert/Edit form
 217 //If table has blob fields we have to disable ajax.
 218 $has_blob_field = false;
 219 foreach ($table_fields as $column) {
 220     if (PMA_isColumnBlob($column)) {
 221         $has_blob_field = true;
 222         break;
 223     }
 224 }
 225 $html_output .='<form id="insertForm" ';
 226 if ($has_blob_field && $is_upload) {
 227     $html_output .='class="disableAjax" ';
 228 }
 229 $html_output .='method="post" action="tbl_replace.php" name="insertForm" ';
 230 if ($is_upload) {
 231     $html_output .= ' enctype="multipart/form-data"';
 232 }
 233 $html_output .= '>';
 234 $html_output .= PMA_generate_common_hidden_inputs($_form_params);
 235
 236 $titles['Browse'] = PMA_Util::getIcon('b_browse.png', __('Browse foreign values'));
 237
 238 // user can toggle the display of Function column and column types
 239 // (currently does not work for multi-edits)
 240 if (! $cfg['ShowFunctionFields'] || ! $cfg['ShowFieldTypesInDataEditView']) {
 241     $html_output .= __('Show');
 242 }
 243
 244 if (! $cfg['ShowFunctionFields']) {
 245     $html_output .= PMA_showFunctionFieldsInEditMode($url_params, false);
 246 }
 247
 248 if (! $cfg['ShowFieldTypesInDataEditView']) {
 249     $html_output .= PMA_showColumnTypesInDataEditView($url_params, false);
 250 }
 251
 252 foreach ($rows as $row_id => $current_row) {
 253     if ($current_row === false) {
 254         unset($current_row);
 255     }
 256
 257     $jsvkey = $row_id;
 258     $rownumber_param = '&amp;rownumber=' . $row_id;
 259     $vkey = '[multi_edit][' . $jsvkey . ']';
 260
 261     $current_result = (isset($result) && is_array($result) && isset($result[$row_id])
 262         ? $result[$row_id]
 263         : $result);
 264     if ($insert_mode && $row_id > 0) {
 265         $html_output .= '<input type="checkbox" checked="checked"'
 266             . ' name="insert_ignore_' . $row_id . '"'
 267             . ' id="insert_ignore_' . $row_id . '" />'
 268             .'<label for="insert_ignore_' . $row_id . '">'
 269             . __('Ignore')
 270             . '</label><br />' . "\n";
 271     }
 272
 273     $html_output .= PMA_getHeadAndFootOfInsertRowTable($url_params)
 274         . '<tbody>';
 275
 276     // Sets a multiplier used for input-field counts
 277     // (as zero cannot be used, advance the counter plus one)
 278     $m_rows = $o_rows + 1;
 279     //store the default value for CharEditing
 280     $default_char_editing  = $cfg['CharEditing'];
 281
 282     $odd_row = true;
 283     for ($i = 0; $i < $columns_cnt; $i++) {
 284         if (! isset($table_fields[$i]['processed'])) {
 285             $column = $table_fields[$i];
 286             $column = PMA_analyzeTableColumnsArray(
 287                 $column, $comments_map, $timestamp_seen
 288             );
 289         }
 290
 291         $extracted_columnspec
 292             = PMA_Util::extractColumnSpec($column['Type']);
 293
 294         if (-1 === $column['len']) {
 295             $column['len'] = PMA_DBI_fieldLen($current_result, $i);
 296             // length is unknown for geometry fields,
 297             // make enough space to edit very simple WKTs
 298             if (-1 === $column['len']) {
 299                 $column['len'] = 30;
 300             }
 301         }
 302         //Call validation when the form submited...
 303         $unnullify_trigger = $chg_evt_handler
 304             . "=\"return verificationsAfterFieldChange('"
 305             . PMA_escapeJsString($column['Field_md5']) . "', '"
 306             . PMA_escapeJsString($jsvkey) . "','".$column['pma_type'] . "')\"";
 307
 308         // Use an MD5 as an array index to avoid having special characters
 309         // in the name atttibute (see bug #1746964 )
 310         $column_name_appendix = $vkey . '[' . $column['Field_md5'] . ']';
 311
 312         if ($column['Type'] == 'datetime'
 313             && ! isset($column['Default'])
 314             && ! is_null($column['Default'])
 315             && ($insert_mode || ! isset($current_row[$column['Field']]))
 316         ) {
 317             // INSERT case or
 318             // UPDATE case with an NULL value
 319             $current_row[$column['Field']] = date('Y-m-d H:i:s', time());
 320         }
 321
 322         $html_output .= '<tr class="noclick ' . ($odd_row ? 'odd' : 'even' ) . '">'
 323             . '<td ' . ($cfg['LongtextDoubleTextarea'] && strstr($column['True_Type'], 'longtext') ? 'rowspan="2"' : '') . 'class="center">'
 324             . $column['Field_title']
 325             . '<input type="hidden" name="fields_name' . $column_name_appendix . '" value="' . $column['Field_html'] . '"/>'
 326             . '</td>';
 327         if ($cfg['ShowFieldTypesInDataEditView']) {
 328              $html_output .= '<td class="center' . $column['wrap'] . '">'
 329                 . '<span class="column_type">' . $column['pma_type'] . '</span>'
 330                 . '</td>';
 331         } //End if
 332
 333         // Get a list of GIS data types.
 334         $gis_data_types = PMA_Util::getGISDatatypes();
 335
 336         // Prepares the field value
 337         $real_null_value = false;
 338         $special_chars_encoded = '';
 339         if (isset($current_row)) {
 340             // (we are editing)
 341             list(
 342                 $real_null_value, $special_chars_encoded, $special_chars,
 343                 $data, $backup_field
 344             )
 345                 = PMA_getSpecialCharsAndBackupFieldForExistingRow(
 346                     $current_row, $column, $extracted_columnspec,
 347                     $real_null_value, $gis_data_types, $column_name_appendix
 348                 );
 349         } else {
 350             // (we are inserting)
 351             // display default values
 352             list($real_null_value, $data, $special_chars, $backup_field, $special_chars_encoded)
 353                 = PMA_getSpecialCharsAndBackupFieldForInsertingMode($column, $real_null_value);
 354         }
 355
 356         $idindex = ($o_rows * $columns_cnt) + $i + 1;
 357         $tabindex = $idindex;
 358
 359         // Get a list of data types that are not yet supported.
 360         $no_support_types = PMA_Util::unsupportedDatatypes();
 361
 362         // The function column
 363         // -------------------
 364         if ($cfg['ShowFunctionFields']) {
 365             $html_output .= PMA_getFunctionColumn(
 366                 $column, $is_upload, $column_name_appendix,
 367                 $unnullify_trigger, $no_support_types, $tabindex_for_function,
 368                 $tabindex, $idindex, $insert_mode
 369             );
 370         }
 371
 372         // The null column
 373         // ---------------
 374         $foreignData = PMA_getForeignData(
 375             $foreigners, $column['Field'], false, '', ''
 376         );
 377         $html_output .= PMA_getNullColumn(
 378             $column, $column_name_appendix, $real_null_value,
 379             $tabindex, $tabindex_for_null, $idindex, $vkey, $foreigners,
 380             $foreignData
 381         );
 382
 383         // The value column (depends on type)
 384         // ----------------
 385         // See bug #1667887 for the reason why we don't use the maxlength
 386         // HTML attribute
 387         $html_output .= '        <td>' . "\n";
 388         // Will be used by js/tbl_change.js to set the default value
 389         // for the "Continue insertion" feature
 390         $html_output .= '<span class="default_value hide">'
 391             . $special_chars . '</span>';
 392
 393         $html_output .= PMA_getValueColumn(
 394             $column, $backup_field, $column_name_appendix, $unnullify_trigger,
 395             $tabindex, $tabindex_for_value, $idindex, $data, $special_chars,
 396             $foreignData, $odd_row, $paramTableDbArray, $rownumber_param, $titles,
 397             $text_dir, $special_chars_encoded, $vkey, $is_upload,
 398             $biggest_max_file_size, $default_char_editing,
 399             $no_support_types, $gis_data_types, $extracted_columnspec
 400         );
 401
 402         $html_output .= '</td>'
 403         . '</tr>';
 404
 405         $odd_row = !$odd_row;
 406     } // end for
 407     $o_rows++;
 408     $html_output .= '  </tbody>'
 409         . '</table><br />';
 410 } // end foreach on multi-edit
 411
 412 $html_output .='<div id="gis_editor"></div>'
 413     . '<div id="popup_background"></div>'
 414     . '<br />';
 415
 416 if (! isset($after_insert)) {
 417     $after_insert = 'back';
 418 }
 419
 420 //action panel
 421 $html_output .= PMA_getActionsPanel(
 422     $where_clause, $after_insert, $tabindex,
 423     $tabindex_for_value, $found_unique_key
 424 );
 425
 426 if ($biggest_max_file_size > 0) {
 427     $html_output .= '        '
 428         . PMA_Util::generateHiddenMaxFileSize(
 429             $biggest_max_file_size
 430         ) . "\n";
 431 }
 432 $html_output .= '</form>';
 433 // end Insert/Edit form
 434
 435 if ($insert_mode) {
 436     //Continue insertion form
 437     $html_output .= PMA_getContinueInsertionForm(
 438         $table, $db, $where_clause_array, $err_url
 439     );
 440 }
 441 $response->addHTML($html_output);
 442
 443 ?>