update
[phpmyadmin/crack.git] / querywindow.php3
blob792b57e12aba2d3a409c8e6fbf827d7bbc30812a
1 <?php
2 /* $Id$ */
3 // vim: expandtab sw=4 ts=4 sts=4:
6 /**
7 * Gets the variables sent to this script, retains the db name that may have
8 * been defined as startup option and include a core library
9 */
10 require('./libraries/grab_globals.lib.php3');
11 if (!empty($db)) {
12 $db_start = $db;
16 /**
17 * Gets a core script and starts output buffering work
19 require('./libraries/common.lib.php3');
20 require('./libraries/ob.lib.php3');
21 if ($cfg['OBGzip']) {
22 $ob_mode = PMA_outBufferModeGet();
23 if ($ob_mode) {
24 PMA_outBufferPre($ob_mode);
28 require('./libraries/relation.lib.php3');
29 $cfgRelation = PMA_getRelationsParam();
31 /**
32 * Get the list and number of available databases.
33 * Skipped if no server selected: in this case no database should be displayed
34 * before the user choose among available ones at the welcome screen.
36 if ($server > 0) {
37 PMA_availableDatabases(); // this function is defined in "common.lib.php3"
38 } else {
39 $num_dbs = 0;
42 // garvin: For re-usability, moved http-headers and stylesheets
43 // to a seperate file. It can now be included by header.inc.php3,
44 // queryframe.php3, querywindow.php3.
46 include('./libraries/header_http.inc.php3');
47 include('./libraries/header_meta_style.inc.php3');
50 <script type="text/javascript" language="javascript">
51 <?php
52 if ($cfg['QueryFrame'] && $cfg['QueryFrameJS'] && $cfg['QueryFrameDebug']) {
53 $js_db = (isset($db) ? $db : 'FALSE');
54 $js_table = (isset($table) ? $table : 'FALSE');
55 $js_server = (isset($server) ? $server : 'FALSE');
57 $js_true_db = '\' + document.querywindow.db.value + \'';
58 $js_true_table = '\' + document.querywindow.table.value + \'';
59 $js_true_server = '\' + document.querywindow.server.value + \'';
61 $js_parent = '\' + opener.location.href + \'';
62 $js_frame = '\' + opener.parent.location.href + \'';
64 function debug() {
65 alert('<?php echo sprintf($strQueryFrameDebugBox, $js_db, $js_table, $js_server, $js_true_db, $js_true_table, $js_true_server, $js_parent, $js_frame); ?>');
66 return false;
68 <?php
71 function query_auto_commit() {
72 document.sqlform.submit();
75 function query_tab_commit(tab) {
76 document.querywindow.querydisplay_tab.value = tab;
77 document.querywindow.submit();
78 return false;
81 // js form validation stuff
82 var errorMsg0 = '<?php echo str_replace('\'', '\\\'', $GLOBALS['strFormEmpty']); ?>';
83 var errorMsg1 = '<?php echo str_replace('\'', '\\\'', $GLOBALS['strNotNumber']); ?>';
84 var errorMsg2 = '<?php echo str_replace('\'', '\\\'', $GLOBALS['strNotValidNumber']); ?>';
85 var noDropDbMsg = '<?php echo((!$GLOBALS['cfg']['AllowUserDropDatabase']) ? str_replace('\'', '\\\'', $GLOBALS['strNoDropDatabases']) : ''); ?>';
86 var confirmMsg = '<?php echo(($GLOBALS['cfg']['Confirm']) ? str_replace('\'', '\\\'', $GLOBALS['strDoYouReally']) : ''); ?>';
87 //-->
88 </script>
89 <script src="libraries/functions.js" type="text/javascript" language="javascript"></script>
90 </head>
92 <body bgcolor="<?php echo ($cfg['QueryFrameJS'] ? $cfg['LeftBgColor'] : $cfg['RightBgColor']); ?>">
94 <?php
95 $querydisplay_tab = (isset($querydisplay_tab) ? $querydisplay_tab : $cfg['QueryWindowDefTab']);
97 if ($cfg['LightTabs']) {
98 echo '&nbsp;';
99 } else {
100 echo '<table border="0" cellspacing="0" cellpadding="3" width="100%" class="tabs">
101 <tr>
102 <td width="8">&nbsp;</td>';
104 echo "\n";
105 echo PMA_printTab($strSQL, '#', '', 'onClick="javascript:query_tab_commit(\'sql\');return false;"', '', (isset($querydisplay_tab) && $querydisplay_tab == 'sql' ? TRUE : FALSE));
106 echo PMA_printTab($strImportFiles, '#', '', 'onClick="javascript:query_tab_commit(\'files\');return false;"', '', (isset($querydisplay_tab) && $querydisplay_tab == 'files' ? TRUE : FALSE));
107 echo PMA_printTab($strQuerySQLHistory, '#', '', 'onClick="javascript:query_tab_commit(\'history\');return false;"', '', (isset($querydisplay_tab) && $querydisplay_tab == 'history' ? TRUE : FALSE));
108 if ($cfg['QueryWindowDefTab'] == 'full') {
109 echo PMA_printTab($strAll, '#', '', 'onClick="javascript:query_tab_commit(\'full\');return false;"', '', (isset($querydisplay_tab) && $querydisplay_tab == 'full' ? TRUE : FALSE));
112 if (!$cfg['LightTabs']) {
113 echo '</tr></table>';
114 } else {
115 echo '<br />';
119 <br />
121 <?php
122 // Hidden forms and query frame interaction stuff
123 if ($cfg['QueryFrame'] && $cfg['QueryFrameJS']) {
125 $input_query_history = array();
126 $sql_history = array();
127 $dup_sql = array();
129 if (isset($query_history_latest) && isset($query_history_latest_db) && $query_history_latest != '' && $query_history_latest_db != '') {
130 if ($cfg['QueryHistoryDB'] && $cfgRelation['historywork']) {
131 PMA_setHistory((isset($query_history_latest_db) ? $query_history_latest_db : ''), (isset($query_history_latest_table) ? $query_history_latest_table : ''), $cfg['Server']['user'], $query_history_latest);
134 $input_query_history[] = '<input type="hidden" name="query_history[]" value="' . $query_history_latest . '" />';
135 $input_query_history[] = '<input type="hidden" name="query_history_db[]" value="' . htmlspecialchars($query_history_latest_db) . '" />';
136 $input_query_history[] = '<input type="hidden" name="query_history_table[]" value="' . (isset($query_history_latest_table) ? htmlspecialchars($query_history_latest_table) : '') . '" />';
138 $sql_history[] = '<li><a href="#" onClick="document.querywindow.querydisplay_tab.value = \'' . (isset($querydisplay_tab) && $querydisplay_tab != 'full' ? 'sql' : 'full') . '\'; document.querywindow.query_history_latest.value = \'' . htmlspecialchars($query_history_latest) . '\'; document.querywindow.auto_commit.value = \'true\'; document.querywindow.db.value = \'' . htmlspecialchars($query_history_latest_db) . '\'; document.querywindow.query_history_latest_db.value = \'' . htmlspecialchars($query_history_latest_db) . '\'; document.querywindow.table.value = \'' . (isset($query_history_latest_table) ? htmlspecialchars($query_history_latest_table) : '') . '\'; document.querywindow.query_history_latest_table.value = \'' . (isset($query_history_latest_table) ? htmlspecialchars($query_history_latest_table) : '') . '\'; document.querywindow.submit(); return false;">[' . htmlspecialchars($query_history_latest_db) . '] ' . urldecode($query_history_latest) . '</a></li>' . "\n";
140 $sql_query = urldecode($query_history_latest);
141 $db = $query_history_latest_db;
142 $table = $query_history_latest_table;
143 $dup_sql[$query_history_latest] = true;
146 if (isset($sql_query)) {
147 $show_query = 1;
150 if ($cfg['QueryHistoryDB'] && $cfgRelation['historywork']) {
152 $temp_history = PMA_getHistory($cfg['Server']['user']);
153 if (is_array($temp_history) && count($temp_history) > 0) {
154 @reset($temp_history);
155 while(@list($history_nr, $history_array) = @each($temp_history)) {
156 if (!isset($dup_sql[$history_array['sqlquery']])) {
157 $sql_history[] = '<li><a href="#" onClick="document.querywindow.querydisplay_tab.value = \'' . (isset($querydisplay_tab) && $querydisplay_tab != 'full' ? 'sql' : 'full') . '\'; document.querywindow.query_history_latest.value = \'' . htmlspecialchars($history_array['sqlquery']) . '\'; document.querywindow.auto_commit.value = \'true\'; document.querywindow.db.value = \'' . htmlspecialchars($history_array['db']) . '\'; document.querywindow.query_history_latest_db.value = \'' . htmlspecialchars($history_array['db']) . '\'; document.querywindow.table.value = \'' . (isset($history_array['table']) ? htmlspecialchars($history_array['table']) : '') . '\'; document.querywindow.query_history_latest_table.value = \'' . (isset($history_array['table']) ? htmlspecialchars($history_array['table']) : '') . '\'; document.querywindow.submit(); return false;">[' . htmlspecialchars($history_array['db']) . '] ' . urldecode($history_array['sqlquery']) . '</a></li>' . "\n";
158 $dup_sql[$history_array['sqlquery']] = true;
163 } else {
165 if (isset($query_history) && is_array($query_history)) {
166 $current_index = count($query_history);
167 @reset($query_history);
168 while(list($query_no, $query_sql) = each($query_history)) {
169 if (!isset($dup_sql[$query_sql])) {
171 $input_query_history[] = '<input type="hidden" name="query_history[]" value="' . $query_sql . '" />';
172 $input_query_history[] = '<input type="hidden" name="query_history_db[]" value="' . htmlspecialchars($query_history_db[$query_no]) . '" />';
173 $input_query_history[] = '<input type="hidden" name="query_history_table[]" value="' . (isset($query_history_table[$query_no]) ? htmlspecialchars($query_history_table[$query_no]) : '') . '" />';
175 $sql_history[] = '<li><a href="#" onClick="document.querywindow.querydisplay_tab.value = \'' . (isset($querydisplay_tab) && $querydisplay_tab != 'full' ? 'sql' : 'full') . '\'; document.querywindow.query_history_latest.value = \'' . htmlspecialchars($query_sql) . '\'; document.querywindow.auto_commit.value = \'true\'; document.querywindow.db.value = \'' . htmlspecialchars($query_history_db[$query_no]) . '\'; document.querywindow.query_history_latest_db.value = \'' . htmlspecialchars($query_history_db[$query_no]) . '\'; document.querywindow.table.value = \'' . (isset($query_history_table[$query_no]) ? htmlspecialchars($query_history_table[$query_no]) : '') . '\'; document.querywindow.query_history_latest_table.value = \'' . (isset($query_history_table[$query_no]) ? htmlspecialchars($query_history_table[$query_no]) : '') . '\'; document.querywindow.submit(); return false;">[' . htmlspecialchars($query_history_db[$query_no]) . '] ' . urldecode($query_sql) . '</a></li>' . "\n";
176 $dup_sql[$query_sql] = true;
177 } // end if check if this item exists
178 } // end while print history
179 } // end if history exists
181 } // end if DB-based history
184 $url_query = PMA_generate_common_url(isset($db) ? $db : '', isset($table) ? $table : '');
185 if (!isset($goto)) {
186 $goto = '';
189 require './libraries/bookmark.lib.php3';
190 $is_inside_querywindow = TRUE;
191 require './tbl_query_box.php3';
193 // Hidden forms and query frame interaction stuff
194 if ($cfg['QueryFrame'] && $cfg['QueryFrameJS']) {
195 if (isset($auto_commit) && $auto_commit == 'true') {
197 <script type="text/javascript" language="javascript">
198 query_auto_commit();
199 </script>
200 <?php
203 if (isset($sql_history) && isset($querydisplay_tab) && ($querydisplay_tab == 'history' || $querydisplay_tab == 'full') && is_array($sql_history) && count($sql_history) > 0) {
205 <li>
206 <div style="margin-bottom: 10px"><?php echo $strQuerySQLHistory . ':<br><ul>' . implode('', $sql_history) . '</ul>'; ?></div>
207 </li>
208 <?php
211 <form action="querywindow.php3" method="post" name="querywindow">
212 <?php
213 echo PMA_generate_common_hidden_inputs('', '');
214 if (count($input_query_history) > 0) {
215 echo implode("\n", $input_query_history);
218 <input type="hidden" name="db" value="<?php echo (empty($db) ? '' : htmlspecialchars($db)); ?>" />
219 <input type="hidden" name="table" value="<?php echo (empty($table) ? '' : htmlspecialchars($table)); ?>" />
221 <input type="hidden" name="query_history_latest" value="" />
222 <input type="hidden" name="query_history_latest_db" value="" />
223 <input type="hidden" name="query_history_latest_table" value="" />
225 <input type="hidden" name="previous_db" value="<?php echo htmlspecialchars($db); ?>" />
227 <input type="hidden" name="auto_commit" value="false" />
228 <input type="hidden" name="querydisplay_tab" value="<?php echo $querydisplay_tab; ?>" />
229 </form>
230 <?php
233 /* REMOVE ME */
234 if ($cfg['QueryFrame'] && $cfg['QueryFrameJS'] && $cfg['QueryFrameDebug']) {
236 <br>
237 <center>
238 <a href='#' onClick='return debug();'><?php echo $strQueryFrameDebug; ?></a>
239 </center>
240 <?php
242 /* REMOVE ME */
245 </body>
246 </html>
248 <?php
250 * Close MySql connections
252 if (isset($dbh) && $dbh) {
253 @mysql_close($dbh);
255 if (isset($userlink) && $userlink) {
256 @mysql_close($userlink);
261 * Sends bufferized data
263 if (isset($cfg['OBGzip']) && $cfg['OBGzip']
264 && isset($ob_mode) && $ob_mode) {
265 PMA_outBufferPost($ob_mode);