Translation update done using Pootle.
[phpmyadmin/crack.git] / libraries / core.lib.php
blob76d2c861260b9b9ff15e5d90703af8a3294e641d
1 <?php
2 /* vim: set expandtab sw=4 ts=4 sts=4: */
3 /**
4 * Core functions used all over the scripts.
5 * This script is distinct from libraries/common.inc.php because this
6 * script is called from /test.
8 * @package phpMyAdmin
9 */
11 /**
12 * checks given $var and returns it if valid, or $default of not valid
13 * given $var is also checked for type being 'similar' as $default
14 * or against any other type if $type is provided
16 * <code>
17 * // $_REQUEST['db'] not set
18 * echo PMA_ifSetOr($_REQUEST['db'], ''); // ''
19 * // $_REQUEST['sql_query'] not set
20 * echo PMA_ifSetOr($_REQUEST['sql_query']); // null
21 * // $cfg['ForceSSL'] not set
22 * echo PMA_ifSetOr($cfg['ForceSSL'], false, 'boolean'); // false
23 * echo PMA_ifSetOr($cfg['ForceSSL']); // null
24 * // $cfg['ForceSSL'] set to 1
25 * echo PMA_ifSetOr($cfg['ForceSSL'], false, 'boolean'); // false
26 * echo PMA_ifSetOr($cfg['ForceSSL'], false, 'similar'); // 1
27 * echo PMA_ifSetOr($cfg['ForceSSL'], false); // 1
28 * // $cfg['ForceSSL'] set to true
29 * echo PMA_ifSetOr($cfg['ForceSSL'], false, 'boolean'); // true
30 * </code>
32 * @uses PMA_isValid()
33 * @see PMA_isValid()
34 * @param mixed $var param to check
35 * @param mixed $default default value
36 * @param mixed $type var type or array of values to check against $var
37 * @return mixed $var or $default
39 function PMA_ifSetOr(&$var, $default = null, $type = 'similar')
41 if (! PMA_isValid($var, $type, $default)) {
42 return $default;
45 return $var;
48 /**
49 * checks given $var against $type or $compare
51 * $type can be:
52 * - false : no type checking
53 * - 'scalar' : whether type of $var is integer, float, string or boolean
54 * - 'numeric' : whether type of $var is any number repesentation
55 * - 'length' : whether type of $var is scalar with a string length > 0
56 * - 'similar' : whether type of $var is similar to type of $compare
57 * - 'equal' : whether type of $var is identical to type of $compare
58 * - 'identical' : whether $var is identical to $compare, not only the type!
59 * - or any other valid PHP variable type
61 * <code>
62 * // $_REQUEST['doit'] = true;
63 * PMA_isValid($_REQUEST['doit'], 'identical', 'true'); // false
64 * // $_REQUEST['doit'] = 'true';
65 * PMA_isValid($_REQUEST['doit'], 'identical', 'true'); // true
66 * </code>
68 * NOTE: call-by-reference is used to not get NOTICE on undefined vars,
69 * but the var is not altered inside this function, also after checking a var
70 * this var exists nut is not set, example:
71 * <code>
72 * // $var is not set
73 * isset($var); // false
74 * functionCallByReference($var); // false
75 * isset($var); // true
76 * functionCallByReference($var); // true
77 * </code>
79 * to avoid this we set this var to null if not isset
81 * @todo create some testsuites
82 * @todo add some more var types like hex, bin, ...?
83 * @uses is_scalar()
84 * @uses is_numeric()
85 * @uses is_array()
86 * @uses in_array()
87 * @uses gettype()
88 * @uses strtolower()
89 * @see http://php.net/gettype
90 * @param mixed $var variable to check
91 * @param mixed $type var type or array of valid values to check against $var
92 * @param mixed $compare var to compare with $var
93 * @return boolean whether valid or not
95 function PMA_isValid(&$var, $type = 'length', $compare = null)
97 if (! isset($var)) {
98 // var is not even set
99 return false;
102 if ($type === false) {
103 // no vartype requested
104 return true;
107 if (is_array($type)) {
108 return in_array($var, $type);
111 // allow some aliaes of var types
112 $type = strtolower($type);
113 switch ($type) {
114 case 'identic' :
115 $type = 'identical';
116 break;
117 case 'len' :
118 $type = 'length';
119 break;
120 case 'bool' :
121 $type = 'boolean';
122 break;
123 case 'float' :
124 $type = 'double';
125 break;
126 case 'int' :
127 $type = 'integer';
128 break;
129 case 'null' :
130 $type = 'NULL';
131 break;
134 if ($type === 'identical') {
135 return $var === $compare;
138 // whether we should check against given $compare
139 if ($type === 'similar') {
140 switch (gettype($compare)) {
141 case 'string':
142 case 'boolean':
143 $type = 'scalar';
144 break;
145 case 'integer':
146 case 'double':
147 $type = 'numeric';
148 break;
149 default:
150 $type = gettype($compare);
152 } elseif ($type === 'equal') {
153 $type = gettype($compare);
156 // do the check
157 if ($type === 'length' || $type === 'scalar') {
158 $is_scalar = is_scalar($var);
159 if ($is_scalar && $type === 'length') {
160 return (bool) strlen($var);
162 return $is_scalar;
165 if ($type === 'numeric') {
166 return is_numeric($var);
169 if (gettype($var) === $type) {
170 return true;
173 return false;
177 * Removes insecure parts in a path; used before include() or
178 * require() when a part of the path comes from an insecure source
179 * like a cookie or form.
181 * @param string The path to check
183 * @return string The secured path
185 * @access public
187 function PMA_securePath($path)
189 // change .. to .
190 $path = preg_replace('@\.\.*@', '.', $path);
192 return $path;
193 } // end function
196 * displays the given error message on phpMyAdmin error page in foreign language,
197 * ends script execution and closes session
199 * loads language file if not loaded already
201 * @todo use detected argument separator (PMA_Config)
202 * @uses $GLOBALS['session_name']
203 * @uses $GLOBALS['text_dir']
204 * @uses $GLOBALS['available_languages']
205 * @uses $GLOBALS['lang']
206 * @uses $GLOBALS['PMA_Config']->removeCookie()
207 * @uses select_lang.lib.php
208 * @uses $_COOKIE
209 * @uses substr()
210 * @uses header()
211 * @uses http_build_query()
212 * @uses is_string()
213 * @uses sprintf()
214 * @uses vsprintf()
215 * @uses strtr()
216 * @uses defined()
217 * @param string $error_message the error message or named error message
218 * @param string|array $message_args arguments applied to $error_message
219 * @return exit
221 function PMA_fatalError($error_message, $message_args = null)
223 /* Use format string if applicable */
224 if (is_string($message_args)) {
225 $error_message = sprintf($error_message, $message_args);
226 } elseif (is_array($message_args)) {
227 $error_message = vsprintf($error_message, $message_args);
229 $error_message = strtr($error_message, array('<br />' => '[br]'));
231 if (function_exists('__')) {
232 $error_header = __('Error');
233 } else {
234 $error_header = 'Error';
237 // Displays the error message
238 $lang = $GLOBALS['available_languages'][$GLOBALS['lang']][1];
239 $dir = $GLOBALS['text_dir'];
240 $type = $error_header;
241 $error = $error_message;
243 // on fatal errors it cannot hurt to always delete the current session
244 if (isset($GLOBALS['session_name']) && isset($_COOKIE[$GLOBALS['session_name']])) {
245 $GLOBALS['PMA_Config']->removeCookie($GLOBALS['session_name']);
248 require('./libraries/error.inc.php');
250 exit;
254 * Returns a link to the PHP documentation
256 * @param string anchor in documentation
258 * @return string the URL
260 * @access public
262 function PMA_getPHPDocLink($target) {
263 /* l10n: Language to use for PHP documentation, please use only languages which do exist in official documentation. */
264 $lang = _pgettext('PHP documentation language', 'en');
266 return 'http://php.net/manual/' . $lang . '/' . $target;
270 * Warn or fail on missing extension.
272 * @param string $extension Extension name
273 * @param bool $fatal Whether the error is fatal.
274 / @param string $extra Extra string to append to messsage.
276 function PMA_warnMissingExtension($extension, $fatal = false, $extra = '')
278 $message = sprintf(__('The %s extension is missing. Please check your PHP configuration.'),
279 '[a@' . PMA_getPHPDocLink('book.' . $extension . '.php') . '@Documentation][em]' . $extension . '[/em][/a]');
280 if ($extra != '') {
281 $message .= ' ' . $extra;
283 if ($fatal) {
284 PMA_fatalError($message);
285 } else {
286 trigger_error($message, E_USER_WARNING);
291 * returns count of tables in given db
293 * @uses PMA_DBI_try_query()
294 * @uses PMA_backquote()
295 * @uses PMA_DBI_QUERY_STORE()
296 * @uses PMA_DBI_num_rows()
297 * @uses PMA_DBI_free_result()
298 * @param string $db database to count tables for
299 * @return integer count of tables in $db
301 function PMA_getTableCount($db)
303 $tables = PMA_DBI_try_query(
304 'SHOW TABLES FROM ' . PMA_backquote($db) . ';',
305 null, PMA_DBI_QUERY_STORE);
306 if ($tables) {
307 $num_tables = PMA_DBI_num_rows($tables);
309 // do not count hidden blobstreaming tables
310 while ((($num_tables > 0)) && $data = PMA_DBI_fetch_assoc($tables)) {
311 if (PMA_BS_IsHiddenTable($data['Tables_in_' . $db])) {
312 $num_tables--;
316 PMA_DBI_free_result($tables);
317 } else {
318 $num_tables = 0;
321 return $num_tables;
325 * Converts numbers like 10M into bytes
326 * Used with permission from Moodle (http://moodle.org) by Martin Dougiamas
327 * (renamed with PMA prefix to avoid double definition when embedded
328 * in Moodle)
330 * @uses each()
331 * @uses strlen()
332 * @uses substr()
333 * @param string $size
334 * @return integer $size
336 function PMA_get_real_size($size = 0)
338 if (! $size) {
339 return 0;
342 $scan['gb'] = 1073741824; //1024 * 1024 * 1024;
343 $scan['g'] = 1073741824; //1024 * 1024 * 1024;
344 $scan['mb'] = 1048576;
345 $scan['m'] = 1048576;
346 $scan['kb'] = 1024;
347 $scan['k'] = 1024;
348 $scan['b'] = 1;
350 foreach ($scan as $unit => $factor) {
351 if (strlen($size) > strlen($unit)
352 && strtolower(substr($size, strlen($size) - strlen($unit))) == $unit) {
353 return substr($size, 0, strlen($size) - strlen($unit)) * $factor;
357 return $size;
358 } // end function PMA_get_real_size()
361 * merges array recursive like array_merge_recursive() but keyed-values are
362 * always overwritten.
364 * array PMA_array_merge_recursive(array $array1[, array $array2[, array ...]])
366 * @see http://php.net/array_merge
367 * @see http://php.net/array_merge_recursive
368 * @uses func_num_args()
369 * @uses func_get_arg()
370 * @uses is_array()
371 * @uses call_user_func_array()
372 * @param array array to merge
373 * @param array array to merge
374 * @param array ...
375 * @return array merged array
377 function PMA_array_merge_recursive()
379 switch(func_num_args()) {
380 case 0 :
381 return false;
382 break;
383 case 1 :
384 // when does that happen?
385 return func_get_arg(0);
386 break;
387 case 2 :
388 $args = func_get_args();
389 if (!is_array($args[0]) || !is_array($args[1])) {
390 return $args[1];
392 foreach ($args[1] as $key2 => $value2) {
393 if (isset($args[0][$key2]) && !is_int($key2)) {
394 $args[0][$key2] = PMA_array_merge_recursive($args[0][$key2],
395 $value2);
396 } else {
397 // we erase the parent array, otherwise we cannot override a directive that
398 // contains array elements, like this:
399 // (in config.default.php) $cfg['ForeignKeyDropdownOrder'] = array('id-content','content-id');
400 // (in config.inc.php) $cfg['ForeignKeyDropdownOrder'] = array('content-id');
401 if (is_int($key2) && $key2 == 0) {
402 unset($args[0]);
404 $args[0][$key2] = $value2;
407 return $args[0];
408 break;
409 default :
410 $args = func_get_args();
411 $args[1] = PMA_array_merge_recursive($args[0], $args[1]);
412 array_shift($args);
413 return call_user_func_array('PMA_array_merge_recursive', $args);
414 break;
419 * calls $function vor every element in $array recursively
421 * this function is protected against deep recursion attack CVE-2006-1549,
422 * 1000 seems to be more than enough
424 * @see http://www.php-security.org/MOPB/MOPB-02-2007.html
425 * @see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1549
427 * @uses PMA_arrayWalkRecursive()
428 * @uses is_array()
429 * @uses is_string()
430 * @param array $array array to walk
431 * @param string $function function to call for every array element
433 function PMA_arrayWalkRecursive(&$array, $function, $apply_to_keys_also = false)
435 static $recursive_counter = 0;
436 if (++$recursive_counter > 1000) {
437 die('possible deep recursion attack');
439 foreach ($array as $key => $value) {
440 if (is_array($value)) {
441 PMA_arrayWalkRecursive($array[$key], $function, $apply_to_keys_also);
442 } else {
443 $array[$key] = $function($value);
446 if ($apply_to_keys_also && is_string($key)) {
447 $new_key = $function($key);
448 if ($new_key != $key) {
449 $array[$new_key] = $array[$key];
450 unset($array[$key]);
454 $recursive_counter--;
458 * boolean phpMyAdmin.PMA_checkPageValidity(string &$page, array $whitelist)
460 * checks given given $page against given $whitelist and returns true if valid
461 * it ignores optionaly query paramters in $page (script.php?ignored)
463 * @uses in_array()
464 * @uses urldecode()
465 * @uses substr()
466 * @uses strpos()
467 * @param string &$page page to check
468 * @param array $whitelist whitelist to check page against
469 * @return boolean whether $page is valid or not (in $whitelist or not)
471 function PMA_checkPageValidity(&$page, $whitelist)
473 if (! isset($page) || !is_string($page)) {
474 return false;
477 if (in_array($page, $whitelist)) {
478 return true;
479 } elseif (in_array(substr($page, 0, strpos($page . '?', '?')), $whitelist)) {
480 return true;
481 } else {
482 $_page = urldecode($page);
483 if (in_array(substr($_page, 0, strpos($_page . '?', '?')), $whitelist)) {
484 return true;
487 return false;
491 * trys to find the value for the given environment vriable name
493 * searchs in $_SERVER, $_ENV than trys getenv() and apache_getenv()
494 * in this order
496 * @uses $_SERVER
497 * @uses $_ENV
498 * @uses getenv()
499 * @uses function_exists()
500 * @uses apache_getenv()
501 * @param string $var_name variable name
502 * @return string value of $var or empty string
504 function PMA_getenv($var_name) {
505 if (isset($_SERVER[$var_name])) {
506 return $_SERVER[$var_name];
507 } elseif (isset($_ENV[$var_name])) {
508 return $_ENV[$var_name];
509 } elseif (getenv($var_name)) {
510 return getenv($var_name);
511 } elseif (function_exists('apache_getenv')
512 && apache_getenv($var_name, true)) {
513 return apache_getenv($var_name, true);
516 return '';
520 * Send HTTP header, taking IIS limits into account (600 seems ok)
522 * @uses PMA_IS_IIS
523 * @uses PMA_COMING_FROM_COOKIE_LOGIN
524 * @uses PMA_get_arg_separator()
525 * @uses SID
526 * @uses strlen()
527 * @uses strpos()
528 * @uses header()
529 * @uses session_write_close()
530 * @uses headers_sent()
531 * @uses function_exists()
532 * @uses debug_print_backtrace()
533 * @uses trigger_error()
534 * @uses defined()
535 * @param string $uri the header to send
536 * @return boolean always true
538 function PMA_sendHeaderLocation($uri)
540 if (PMA_IS_IIS && strlen($uri) > 600) {
541 require_once './libraries/js_escape.lib.php';
543 echo '<html><head><title>- - -</title>' . "\n";
544 echo '<meta http-equiv="expires" content="0">' . "\n";
545 echo '<meta http-equiv="Pragma" content="no-cache">' . "\n";
546 echo '<meta http-equiv="Cache-Control" content="no-cache">' . "\n";
547 echo '<meta http-equiv="Refresh" content="0;url=' . htmlspecialchars($uri) . '">' . "\n";
548 echo '<script type="text/javascript">' . "\n";
549 echo '//<![CDATA[' . "\n";
550 echo 'setTimeout("window.location = unescape(\'"' . PMA_escapeJsString($uri) . '"\')", 2000);' . "\n";
551 echo '//]]>' . "\n";
552 echo '</script>' . "\n";
553 echo '</head>' . "\n";
554 echo '<body>' . "\n";
555 echo '<script type="text/javascript">' . "\n";
556 echo '//<![CDATA[' . "\n";
557 echo 'document.write(\'<p><a href="' . htmlspecialchars($uri) . '">' . __('Go') . '</a></p>\');' . "\n";
558 echo '//]]>' . "\n";
559 echo '</script></body></html>' . "\n";
561 } else {
562 if (SID) {
563 if (strpos($uri, '?') === false) {
564 header('Location: ' . $uri . '?' . SID);
565 } else {
566 $separator = PMA_get_arg_separator();
567 header('Location: ' . $uri . $separator . SID);
569 } else {
570 session_write_close();
571 if (headers_sent()) {
572 if (function_exists('debug_print_backtrace')) {
573 echo '<pre>';
574 debug_print_backtrace();
575 echo '</pre>';
577 trigger_error('PMA_sendHeaderLocation called when headers are already sent!', E_USER_ERROR);
579 // bug #1523784: IE6 does not like 'Refresh: 0', it
580 // results in a blank page
581 // but we need it when coming from the cookie login panel)
582 if (PMA_IS_IIS && defined('PMA_COMING_FROM_COOKIE_LOGIN')) {
583 header('Refresh: 0; ' . $uri);
584 } else {
585 header('Location: ' . $uri);
592 * Returns value of an element in $array given by $path.
593 * $path is a string describing position of an element in an associative array,
594 * eg. Servers/1/host refers to $array[Servers][1][host]
596 * @param string $path
597 * @param array $array
598 * @param mixed $default
599 * @return mixed array element or $default
601 function PMA_array_read($path, $array, $default = null)
603 $keys = explode('/', $path);
604 $value =& $array;
605 foreach ($keys as $key) {
606 if (!isset($value[$key])) {
607 return $default;
609 $value =& $value[$key];
611 return $value;
615 * Stores value in an array
617 * @param string $path
618 * @param array &$array
619 * @param mixed $value
621 function PMA_array_write($path, &$array, $value)
623 $keys = explode('/', $path);
624 $last_key = array_pop($keys);
625 $a =& $array;
626 foreach ($keys as $key) {
627 if (!isset($a[$key])) {
628 $a[$key] = array();
630 $a =& $a[$key];
632 $a[$last_key] = $value;
636 * Removes value from an array
638 * @param string $path
639 * @param array &$array
640 * @param mixed $value
642 function PMA_array_remove($path, &$array)
644 $keys = explode('/', $path);
645 $keys_last = array_pop($keys);
646 $path = array();
647 $depth = 0;
649 $path[0] =& $array;
650 $found = true;
651 // go as deep as required or possible
652 foreach ($keys as $key) {
653 if (!isset($path[$depth][$key])) {
654 $found = false;
655 break;
657 $depth++;
658 $path[$depth] =& $path[$depth-1][$key];
660 // if element found, remove it
661 if ($found) {
662 unset($path[$depth][$keys_last]);
663 $depth--;
666 // remove empty nested arrays
667 for (; $depth >= 0; $depth--) {
668 if (!isset($path[$depth+1]) || count($path[$depth+1]) == 0) {
669 unset($path[$depth][$keys[$depth]]);
670 } else {
671 break;
677 * Returns link to (possibly) external site using defined redirector.
679 * @param string $url URL where to go.
681 * @return string URL for a link.
683 function PMA_linkURL($url) {
684 if (!preg_match('#^https?://#', $url)) {
685 return $url;
686 } elseif (defined('PMA_SETUP')) {
687 return '../url.php?url=' . $url;
688 } else {
689 return './url.php?url=' . $url;
694 * Returns HTML code to include javascript file.
696 * @param string $url Location of javascript, relative to js/ folder.
698 * @return string HTML code for javascript inclusion.
700 function PMA_includeJS($url) {
701 if (strpos($url, '?') === FALSE) {
702 return '<script src="./js/' . $url . '?ts=' . filemtime('./js/' . $url) . '" type="text/javascript"></script>' . "\n";
703 } else {
704 return '<script src="./js/' . $url . '" type="text/javascript"></script>' . "\n";