transformation_wrapper.php

   1 <?php
   2 /* vim: set expandtab sw=4 ts=4 sts=4: */
   3 /**
   4  * Wrapper script for rendering transformations
   5  *
   6  * @package PhpMyAdmin
   7  */
   8 declare(strict_types=1);
   9
  10 use PhpMyAdmin\Core;
  11 use PhpMyAdmin\DatabaseInterface;
  12 use PhpMyAdmin\Di\Container;
  13 use PhpMyAdmin\Relation;
  14 use PhpMyAdmin\Response;
  15 use PhpMyAdmin\Transformations;
  16
  17 if (! defined('ROOT_PATH')) {
  18     define('ROOT_PATH', __DIR__ . DIRECTORY_SEPARATOR);
  19 }
  20
  21 define('IS_TRANSFORMATION_WRAPPER', true);
  22
  23 require_once ROOT_PATH . 'libraries/common.inc.php';
  24
  25 $container = Container::getDefaultContainer();
  26 $container->set(Response::class, Response::getInstance());
  27
  28 /** @var Response $response */
  29 $response = $container->get(Response::class);
  30
  31 /** @var DatabaseInterface $dbi */
  32 $dbi = $container->get(DatabaseInterface::class);
  33
  34 $transformations = new Transformations();
  35 $relation = new Relation($dbi);
  36 $cfgRelation = $relation->getRelationsParam();
  37
  38 /**
  39  * Ensures db and table are valid, else moves to the "parent" script
  40  */
  41 require_once ROOT_PATH . 'libraries/db_table_exists.inc.php';
  42
  43
  44 /**
  45  * Sets globals from $_REQUEST
  46  */
  47 $request_params = [
  48     'cn',
  49     'ct',
  50     'sql_query',
  51     'transform_key',
  52     'where_clause',
  53 ];
  54 $size_params = [
  55     'newHeight',
  56     'newWidth',
  57 ];
  58 foreach ($request_params as $one_request_param) {
  59     if (isset($_REQUEST[$one_request_param])) {
  60         if (in_array($one_request_param, $size_params)) {
  61             $GLOBALS[$one_request_param] = intval($_REQUEST[$one_request_param]);
  62             if ($GLOBALS[$one_request_param] > 2000) {
  63                 $GLOBALS[$one_request_param] = 2000;
  64             }
  65         } else {
  66             $GLOBALS[$one_request_param] = $_REQUEST[$one_request_param];
  67         }
  68     }
  69 }
  70
  71
  72 /**
  73  * Get the list of the fields of the current table
  74  */
  75 $dbi->selectDb($db);
  76 if (isset($where_clause)) {
  77     $result = $dbi->query(
  78         'SELECT * FROM ' . PhpMyAdmin\Util::backquote($table)
  79         . ' WHERE ' . $where_clause . ';',
  80         PhpMyAdmin\DatabaseInterface::CONNECT_USER,
  81         PhpMyAdmin\DatabaseInterface::QUERY_STORE
  82     );
  83     $row = $dbi->fetchAssoc($result);
  84 } else {
  85     $result = $dbi->query(
  86         'SELECT * FROM ' . PhpMyAdmin\Util::backquote($table) . ' LIMIT 1;',
  87         PhpMyAdmin\DatabaseInterface::CONNECT_USER,
  88         PhpMyAdmin\DatabaseInterface::QUERY_STORE
  89     );
  90     $row = $dbi->fetchAssoc($result);
  91 }
  92
  93 // No row returned
  94 if (! $row) {
  95     exit;
  96 } // end if (no record returned)
  97
  98 $default_ct = 'application/octet-stream';
  99
 100 if ($cfgRelation['commwork'] && $cfgRelation['mimework']) {
 101     $mime_map = $transformations->getMime($db, $table);
 102     $mime_options = $transformations->getOptions(
 103         isset($mime_map[$transform_key]['transformation_options'])
 104         ? $mime_map[$transform_key]['transformation_options'] : ''
 105     );
 106
 107     foreach ($mime_options as $key => $option) {
 108         if (substr($option, 0, 10) == '; charset=') {
 109             $mime_options['charset'] = $option;
 110         }
 111     }
 112 }
 113
 114 $response->getHeader()->sendHttpHeaders();
 115
 116 // [MIME]
 117 if (isset($ct) && ! empty($ct)) {
 118     $mime_type = $ct;
 119 } else {
 120     $mime_type = (! empty($mime_map[$transform_key]['mimetype'])
 121         ? str_replace('_', '/', $mime_map[$transform_key]['mimetype'])
 122         : $default_ct)
 123     . (isset($mime_options['charset']) ? $mime_options['charset'] : '');
 124 }
 125
 126 Core::downloadHeader($cn, $mime_type);
 127
 128 if (! isset($_REQUEST['resize'])) {
 129     if (stripos($mime_type, 'html') === false) {
 130         echo $row[$transform_key];
 131     } else {
 132         echo htmlspecialchars($row[$transform_key]);
 133     }
 134 } else {
 135     // if image_*__inline.inc.php finds that we can resize,
 136     // it sets the resize parameter to jpeg or png
 137
 138     $srcImage = imagecreatefromstring($row[$transform_key]);
 139     $srcWidth = imagesx($srcImage);
 140     $srcHeight = imagesy($srcImage);
 141
 142     // Check to see if the width > height or if width < height
 143     // if so adjust accordingly to make sure the image
 144     // stays smaller than the new width and new height
 145
 146     $ratioWidth = $srcWidth / $_REQUEST['newWidth'];
 147     $ratioHeight = $srcHeight / $_REQUEST['newHeight'];
 148
 149     if ($ratioWidth < $ratioHeight) {
 150         $destWidth = $srcWidth / $ratioHeight;
 151         $destHeight = $_REQUEST['newHeight'];
 152     } else {
 153         $destWidth = $_REQUEST['newWidth'];
 154         $destHeight = $srcHeight / $ratioWidth;
 155     }
 156
 157     if ($_REQUEST['resize']) {
 158         $destImage = imagecreatetruecolor($destWidth, $destHeight);
 159
 160         // ImageCopyResized($destImage, $srcImage, 0, 0, 0, 0,
 161         // $destWidth, $destHeight, $srcWidth, $srcHeight);
 162         // better quality but slower:
 163         imagecopyresampled(
 164             $destImage,
 165             $srcImage,
 166             0,
 167             0,
 168             0,
 169             0,
 170             $destWidth,
 171             $destHeight,
 172             $srcWidth,
 173             $srcHeight
 174         );
 175         if ($_REQUEST['resize'] == 'jpeg') {
 176             imagejpeg($destImage, null, 75);
 177         }
 178         if ($_REQUEST['resize'] == 'png') {
 179             imagepng($destImage);
 180         }
 181         imagedestroy($destImage);
 182     }
 183     imagedestroy($srcImage);
 184 }