addJSON( 'console_message_bookmark', PMA\libraries\Console::getBookmarkContent() ); exit; } // If it's a console bookmark add request if (isset($_REQUEST['console_bookmark_add'])) { $response = PMA\libraries\Response::getInstance(); if (isset($_REQUEST['label']) && isset($_REQUEST['db']) && isset($_REQUEST['bookmark_query']) && isset($_REQUEST['shared']) ) { $cfgBookmark = PMA_Bookmark_getParams(); $bookmarkFields = array( 'bkm_database' => $_REQUEST['db'], 'bkm_user' => $cfgBookmark['user'], 'bkm_sql_query' => $_REQUEST['bookmark_query'], 'bkm_label' => $_REQUEST['label'] ); $isShared = ($_REQUEST['shared'] == 'true' ? true : false); if (PMA_Bookmark_save($bookmarkFields, $isShared)) { $response->addJSON('message', __('Succeeded')); $response->addJSON('data', $bookmarkFields); $response->addJSON('isShared', $isShared); } else { $response->addJSON('message', __('Failed')); } die(); } else { $response->addJSON('message', __('Incomplete params')); die(); } } $format = ''; /** * Sets globals from $_POST */ $post_params = array( 'charset_of_file', 'format', 'import_type', 'is_js_confirmed', 'MAX_FILE_SIZE', 'message_to_show', 'noplugin', 'skip_queries', 'local_import_file' ); // TODO: adapt full list of allowed parameters, as in export.php foreach ($post_params as $one_post_param) { if (isset($_POST[$one_post_param])) { $GLOBALS[$one_post_param] = $_POST[$one_post_param]; } } // reset import messages for ajax request $_SESSION['Import_message']['message'] = null; $_SESSION['Import_message']['go_back_url'] = null; // default values $GLOBALS['reload'] = false; // Use to identify current cycle is executing // a multiquery statement or stored routine if (!isset($_SESSION['is_multi_query'])) { $_SESSION['is_multi_query'] = false; } $ajax_reload = array(); // Are we just executing plain query or sql file? // (eg. non import, but query box/window run) if (! empty($sql_query)) { // apply values for parameters if (! empty($_REQUEST['parameterized']) && ! empty($_REQUEST['parameters']) && is_array($_REQUEST['parameters'])) { $parameters = $_REQUEST['parameters']; foreach ($parameters as $parameter => $replacement) { $quoted = preg_quote($parameter, '/'); // making sure that :param does not apply values to :param1 $sql_query = preg_replace( '/' . $quoted . '([^a-zA-Z0-9_])/', PMA\libraries\Util::sqlAddSlashes($replacement) . '${1}', $sql_query ); // for parameters the appear at the end of the string $sql_query = preg_replace( '/' . $quoted . '$/', PMA\libraries\Util::sqlAddSlashes($replacement), $sql_query ); } } // run SQL query $import_text = $sql_query; $import_type = 'query'; $format = 'sql'; $_SESSION['sql_from_query_box'] = true; // If there is a request to ROLLBACK when finished. if (isset($_REQUEST['rollback_query'])) { PMA_handleRollbackRequest($import_text); } // refresh navigation and main panels if (preg_match('/^(DROP)\s+(VIEW|TABLE|DATABASE|SCHEMA)\s+/i', $sql_query)) { $GLOBALS['reload'] = true; $ajax_reload['reload'] = true; } // refresh navigation panel only if (preg_match( '/^(CREATE|ALTER)\s+(VIEW|TABLE|DATABASE|SCHEMA)\s+/i', $sql_query )) { $ajax_reload['reload'] = true; } // do a dynamic reload if table is RENAMED // (by sending the instruction to the AJAX response handler) if (preg_match( '/^RENAME\s+TABLE\s+(.*?)\s+TO\s+(.*?)($|;|\s)/i', $sql_query, $rename_table_names )) { $ajax_reload['reload'] = true; $ajax_reload['table_name'] = PMA\libraries\Util::unQuote( $rename_table_names[2] ); } $sql_query = ''; } elseif (! empty($sql_file)) { // run uploaded SQL file $import_file = $sql_file; $import_type = 'queryfile'; $format = 'sql'; unset($sql_file); } elseif (! empty($_REQUEST['id_bookmark'])) { // run bookmark $import_type = 'query'; $format = 'sql'; } // If we didn't get any parameters, either user called this directly, or // upload limit has been reached, let's assume the second possibility. if ($_POST == array() && $_GET == array()) { $message = PMA\libraries\Message::error( __( 'You probably tried to upload a file that is too large. Please refer ' . 'to %sdocumentation%s for a workaround for this limit.' ) ); $message->addParam('[doc@faq1-16]'); $message->addParam('[/doc]'); // so we can obtain the message $_SESSION['Import_message']['message'] = $message->getDisplay(); $_SESSION['Import_message']['go_back_url'] = $GLOBALS['goto']; $message->display(); exit; // the footer is displayed automatically } // Add console message id to response output if (isset($_POST['console_message_id'])) { $response = PMA\libraries\Response::getInstance(); $response->addJSON('console_message_id', $_POST['console_message_id']); } /** * Sets globals from $_POST patterns, for import plugins * We only need to load the selected plugin */ if (! in_array( $format, array( 'csv', 'ldi', 'mediawiki', 'ods', 'shp', 'sql', 'xml' ) ) ) { // this should not happen for a normal user // but only during an attack PMA_fatalError('Incorrect format parameter'); } $post_patterns = array( '/^force_file_/', '/^' . $format . '_/' ); PMA_setPostAsGlobal($post_patterns); // Check needed parameters PMA\libraries\Util::checkParameters(array('import_type', 'format')); // We don't want anything special in format $format = PMA_securePath($format); // Create error and goto url if ($import_type == 'table') { $err_url = 'tbl_import.php' . PMA_URL_getCommon( array( 'db' => $db, 'table' => $table ) ); $_SESSION['Import_message']['go_back_url'] = $err_url; $goto = 'tbl_import.php'; } elseif ($import_type == 'database') { $err_url = 'db_import.php' . PMA_URL_getCommon(array('db' => $db)); $_SESSION['Import_message']['go_back_url'] = $err_url; $goto = 'db_import.php'; } elseif ($import_type == 'server') { $err_url = 'server_import.php' . PMA_URL_getCommon(); $_SESSION['Import_message']['go_back_url'] = $err_url; $goto = 'server_import.php'; } else { if (empty($goto) || !preg_match('@^(server|db|tbl)(_[a-z]*)*\.php$@i', $goto)) { if (mb_strlen($table) && mb_strlen($db)) { $goto = 'tbl_structure.php'; } elseif (mb_strlen($db)) { $goto = 'db_structure.php'; } else { $goto = 'server_sql.php'; } } if (mb_strlen($table) && mb_strlen($db)) { $common = PMA_URL_getCommon(array('db' => $db, 'table' => $table)); } elseif (mb_strlen($db)) { $common = PMA_URL_getCommon(array('db' => $db)); } else { $common = PMA_URL_getCommon(); } $err_url = $goto . $common . (preg_match('@^tbl_[a-z]*\.php$@', $goto) ? '&table=' . htmlspecialchars($table) : ''); $_SESSION['Import_message']['go_back_url'] = $err_url; } // Avoid setting selflink to 'import.php' // problem similar to bug 4276 if (basename($_SERVER['SCRIPT_NAME']) === 'import.php') { $_SERVER['SCRIPT_NAME'] = $goto; } if (mb_strlen($db)) { $GLOBALS['dbi']->selectDb($db); } @set_time_limit($cfg['ExecTimeLimit']); if (! empty($cfg['MemoryLimit'])) { @ini_set('memory_limit', $cfg['MemoryLimit']); } $timestamp = time(); if (isset($_REQUEST['allow_interrupt'])) { $maximum_time = ini_get('max_execution_time'); } else { $maximum_time = 0; } // set default values $timeout_passed = false; $error = false; $read_multiply = 1; $finished = false; $offset = 0; $max_sql_len = 0; $file_to_unlink = ''; $sql_query = ''; $sql_query_disabled = false; $go_sql = false; $executed_queries = 0; $run_query = true; $charset_conversion = false; $reset_charset = false; $bookmark_created = false; // Bookmark Support: get a query back from bookmark if required if (! empty($_REQUEST['id_bookmark'])) { $id_bookmark = (int)$_REQUEST['id_bookmark']; include_once 'libraries/bookmark.lib.php'; switch ($_REQUEST['action_bookmark']) { case 0: // bookmarked query that have to be run $import_text = PMA_Bookmark_get( $db, $id_bookmark, 'id', isset($_REQUEST['action_bookmark_all']) ); if (! empty($_REQUEST['bookmark_variable'])) { $import_text = PMA_Bookmark_applyVariables( $import_text ); } // refresh navigation and main panels if (preg_match( '/^(DROP)\s+(VIEW|TABLE|DATABASE|SCHEMA)\s+/i', $import_text )) { $GLOBALS['reload'] = true; $ajax_reload['reload'] = true; } // refresh navigation panel only if (preg_match( '/^(CREATE|ALTER)\s+(VIEW|TABLE|DATABASE|SCHEMA)\s+/i', $import_text ) ) { $ajax_reload['reload'] = true; } break; case 1: // bookmarked query that have to be displayed $import_text = PMA_Bookmark_get($db, $id_bookmark); if ($GLOBALS['is_ajax_request'] == true) { $message = PMA\libraries\Message::success(__('Showing bookmark')); $response = PMA\libraries\Response::getInstance(); $response->setRequestStatus($message->isSuccess()); $response->addJSON('message', $message); $response->addJSON('sql_query', $import_text); $response->addJSON('action_bookmark', $_REQUEST['action_bookmark']); exit; } else { $run_query = false; } break; case 2: // bookmarked query that have to be deleted $import_text = PMA_Bookmark_get($db, $id_bookmark); PMA_Bookmark_delete($id_bookmark); if ($GLOBALS['is_ajax_request'] == true) { $message = PMA\libraries\Message::success( __('The bookmark has been deleted.') ); $response = PMA\libraries\Response::getInstance(); $response->setRequestStatus($message->isSuccess()); $response->addJSON('message', $message); $response->addJSON('action_bookmark', $_REQUEST['action_bookmark']); $response->addJSON('id_bookmark', $id_bookmark); exit; } else { $run_query = false; $error = true; // this is kind of hack to skip processing the query } break; } } // end bookmarks reading // Do no run query if we show PHP code if (isset($GLOBALS['show_as_php'])) { $run_query = false; $go_sql = true; } // We can not read all at once, otherwise we can run out of memory $memory_limit = trim(@ini_get('memory_limit')); // 2 MB as default if (empty($memory_limit)) { $memory_limit = 2 * 1024 * 1024; } // In case no memory limit we work on 10MB chunks if ($memory_limit == -1) { $memory_limit = 10 * 1024 * 1024; } // Calculate value of the limit $memoryUnit = mb_strtolower(substr($memory_limit, -1)); if ('m' == $memoryUnit) { $memory_limit = (int)substr($memory_limit, 0, -1) * 1024 * 1024; } elseif ('k' == $memoryUnit) { $memory_limit = (int)substr($memory_limit, 0, -1) * 1024; } elseif ('g' == $memoryUnit) { $memory_limit = (int)substr($memory_limit, 0, -1) * 1024 * 1024 * 1024; } else { $memory_limit = (int)$memory_limit; } // Just to be sure, there might be lot of memory needed for uncompression $read_limit = $memory_limit / 8; // handle filenames if (isset($_FILES['import_file'])) { $import_file = $_FILES['import_file']['tmp_name']; } if (! empty($local_import_file) && ! empty($cfg['UploadDir'])) { // sanitize $local_import_file as it comes from a POST $local_import_file = PMA_securePath($local_import_file); $import_file = PMA\libraries\Util::userDir($cfg['UploadDir']) . $local_import_file; /* * Do not allow symlinks to avoid security issues * (user can create symlink to file he can not access, * but phpMyAdmin can). */ if (@is_link($import_file)) { $import_file = 'none'; } } elseif (empty($import_file) || ! is_uploaded_file($import_file)) { $import_file = 'none'; } // Do we have file to import? if ($import_file != 'none' && ! $error) { // work around open_basedir and other limitations $open_basedir = @ini_get('open_basedir'); // If we are on a server with open_basedir, we must move the file // before opening it. if (! empty($open_basedir)) { $tmp_subdir = ini_get('upload_tmp_dir'); if (empty($tmp_subdir)) { $tmp_subdir = sys_get_temp_dir(); } $tmp_subdir = rtrim($tmp_subdir, DIRECTORY_SEPARATOR); if (@is_writable($tmp_subdir)) { $import_file_new = $tmp_subdir . DIRECTORY_SEPARATOR . basename($import_file) . uniqid(); if (move_uploaded_file($import_file, $import_file_new)) { $import_file = $import_file_new; $file_to_unlink = $import_file_new; } $size = filesize($import_file); } else { // If the php.ini is misconfigured (eg. there is no /tmp access defined // with open_basedir), $tmp_subdir won't be writable and the user gets // a 'File could not be read!' error (at PMA_detectCompression), which // is not too meaningful. Show a meaningful error message to the user // instead. $message = PMA\libraries\Message::error( __( 'Uploaded file cannot be moved, because the server has ' . 'open_basedir enabled without access to the %s directory ' . '(for temporary files).' ) ); $message->addParam($tmp_subdir); PMA_stopImport($message); } } /** * Handle file compression * @todo duplicate code exists in File.php */ $compression = PMA_detectCompression($import_file); if ($compression === false) { $message = PMA\libraries\Message::error(__('File could not be read!')); PMA_stopImport($message); //Contains an 'exit' } switch ($compression) { case 'application/bzip2': if ($cfg['BZipDump'] && @function_exists('bzopen')) { $import_handle = @bzopen($import_file, 'r'); } else { $message = PMA\libraries\Message::error( __( 'You attempted to load file with unsupported compression ' . '(%s). Either support for it is not implemented or disabled ' . 'by your configuration.' ) ); $message->addParam($compression); PMA_stopImport($message); } break; case 'application/gzip': if ($cfg['GZipDump'] && @function_exists('gzopen')) { $import_handle = @gzopen($import_file, 'r'); } else { $message = PMA\libraries\Message::error( __( 'You attempted to load file with unsupported compression ' . '(%s). Either support for it is not implemented or disabled ' . 'by your configuration.' ) ); $message->addParam($compression); PMA_stopImport($message); } break; case 'application/zip': if ($cfg['ZipDump'] && @function_exists('zip_open')) { /** * Load interface for zip extension. */ include_once 'libraries/zip_extension.lib.php'; $zipResult = PMA_getZipContents($import_file); if (! empty($zipResult['error'])) { $message = PMA\libraries\Message::rawError($zipResult['error']); PMA_stopImport($message); } else { $import_text = $zipResult['data']; } } else { $message = PMA\libraries\Message::error( __( 'You attempted to load file with unsupported compression ' . '(%s). Either support for it is not implemented or disabled ' . 'by your configuration.' ) ); $message->addParam($compression); PMA_stopImport($message); } break; case 'none': $import_handle = @fopen($import_file, 'r'); break; default: $message = PMA\libraries\Message::error( __( 'You attempted to load file with unsupported compression (%s). ' . 'Either support for it is not implemented or disabled by your ' . 'configuration.' ) ); $message->addParam($compression); PMA_stopImport($message); // the previous function exits } // use isset() because zip compression type does not use a handle if (! $error && isset($import_handle) && $import_handle === false) { $message = PMA\libraries\Message::error(__('File could not be read!')); PMA_stopImport($message); } } elseif (! $error) { if (! isset($import_text) || empty($import_text)) { $message = PMA\libraries\Message::error( __( 'No data was received to import. Either no file name was ' . 'submitted, or the file size exceeded the maximum size permitted ' . 'by your PHP configuration. See [doc@faq1-16]FAQ 1.16[/doc].' ) ); PMA_stopImport($message); } } // so we can obtain the message //$_SESSION['Import_message'] = $message->getDisplay(); // Convert the file's charset if necessary if ($GLOBALS['PMA_recoding_engine'] != PMA_CHARSET_NONE && isset($charset_of_file)) { if ($charset_of_file != 'utf-8') { $charset_conversion = true; } } elseif (isset($charset_of_file) && $charset_of_file != 'utf-8') { $GLOBALS['dbi']->query('SET NAMES \'' . $charset_of_file . '\''); // We can not show query in this case, it is in different charset $sql_query_disabled = true; $reset_charset = true; } // Something to skip? (because timeout has passed) if (! $error && isset($_POST['skip'])) { $original_skip = $skip = $_POST['skip']; while ($skip > 0) { PMA_importGetNextChunk($skip < $read_limit ? $skip : $read_limit); // Disable read progressivity, otherwise we eat all memory! $read_multiply = 1; $skip -= $read_limit; } unset($skip); } // This array contain the data like numberof valid sql queries in the statement // and complete valid sql statement (which affected for rows) $sql_data = array('valid_sql' => array(), 'valid_queries' => 0); if (! $error) { // Check for file existence include_once "libraries/plugin_interface.lib.php"; /* @var $import_plugin ImportPlugin */ $import_plugin = PMA_getPlugin( "import", $format, 'libraries/plugins/import/', $import_type ); if ($import_plugin == null) { $message = PMA\libraries\Message::error( __('Could not load import plugins, please check your installation!') ); PMA_stopImport($message); } else { // Do the real import try { $default_fk_check = PMA\libraries\Util::handleDisableFKCheckInit(); $import_plugin->doImport($sql_data); PMA\libraries\Util::handleDisableFKCheckCleanup($default_fk_check); } catch (Exception $e) { PMA\libraries\Util::handleDisableFKCheckCleanup($default_fk_check); throw $e; } } } if (! empty($import_handle)) { fclose($import_handle); } // Cleanup temporary file if ($file_to_unlink != '') { unlink($file_to_unlink); } // Reset charset back, if we did some changes if ($reset_charset) { $GLOBALS['dbi']->query('SET CHARACTER SET utf8'); $GLOBALS['dbi']->query( 'SET SESSION collation_connection =\'' . $collation_connection . '\'' ); } // Show correct message if (! empty($id_bookmark) && $_REQUEST['action_bookmark'] == 2) { $message = PMA\libraries\Message::success(__('The bookmark has been deleted.')); $display_query = $import_text; $error = false; // unset error marker, it was used just to skip processing } elseif (! empty($id_bookmark) && $_REQUEST['action_bookmark'] == 1) { $message = PMA\libraries\Message::notice(__('Showing bookmark')); } elseif ($bookmark_created) { $special_message = '[br]' . sprintf( __('Bookmark %s has been created.'), htmlspecialchars($_POST['bkm_label']) ); } elseif ($finished && ! $error) { // Do not display the query with message, we do it separately $display_query = ';'; if ($import_type != 'query') { $message = PMA\libraries\Message::success( '' . _ngettext( 'Import has been successfully finished, %d query executed.', 'Import has been successfully finished, %d queries executed.', $executed_queries ) . '' ); $message->addParam($executed_queries); if ($import_notice) { $message->addString($import_notice); } if (! empty($local_import_file)) { $message->addString('(' . htmlspecialchars($local_import_file) . ')'); } else { $message->addString( '(' . htmlspecialchars($_FILES['import_file']['name']) . ')' ); } } } // Did we hit timeout? Tell it user. if ($timeout_passed) { $importUrl = $err_url .= '&timeout_passed=1&offset=' . urlencode( $GLOBALS['offset'] ); if (isset($local_import_file)) { $importUrl .= '&local_import_file=' . urlencode($local_import_file); } $message = PMA\libraries\Message::error( __( 'Script timeout passed, if you want to finish import,' . ' please %sresubmit the same file%s and import will resume.' ) ); $message->addParam('', false); $message->addParam('', false); if ($offset == 0 || (isset($original_skip) && $original_skip == $offset)) { $message->addString( __( 'However on last run no data has been parsed,' . ' this usually means phpMyAdmin won\'t be able to' . ' finish this import unless you increase php time limits.' ) ); } } // if there is any message, copy it into $_SESSION as well, // so we can obtain it by AJAX call if (isset($message)) { $_SESSION['Import_message']['message'] = $message->getDisplay(); } // Parse and analyze the query, for correct db and table name // in case of a query typed in the query window // (but if the query is too large, in case of an imported file, the parser // can choke on it so avoid parsing) $sqlLength = mb_strlen($sql_query); if ($sqlLength <= $GLOBALS['cfg']['MaxCharactersInDisplayedSQL']) { include_once 'libraries/parse_analyze.lib.php'; list( $analyzed_sql_results, $db, $table_from_sql ) = PMA_parseAnalyze($sql_query, $db); // @todo: possibly refactor extract($analyzed_sql_results); if ($table != $table_from_sql && !empty($table_from_sql)) { $table = $table_from_sql; } } // There was an error? if (isset($my_die)) { foreach ($my_die as $key => $die) { PMA\libraries\Util::mysqlDie( $die['error'], $die['sql'], false, $err_url, $error ); } } if ($go_sql) { if (! empty($sql_data) && ($sql_data['valid_queries'] > 1)) { $_SESSION['is_multi_query'] = true; $sql_queries = $sql_data['valid_sql']; } else { $sql_queries = array($sql_query); } $html_output = ''; foreach ($sql_queries as $sql_query) { // parse sql query include_once 'libraries/parse_analyze.lib.php'; list( $analyzed_sql_results, $db, $table_from_sql ) = PMA_parseAnalyze($sql_query, $db); // @todo: possibly refactor extract($analyzed_sql_results); if ($table != $table_from_sql && !empty($table_from_sql)) { $table = $table_from_sql; } $html_output .= PMA_executeQueryAndGetQueryResponse( $analyzed_sql_results, // analyzed_sql_results false, // is_gotofile $db, // db $table, // table null, // find_real_end $_REQUEST['sql_query'], // sql_query_for_bookmark null, // extra_data null, // message_to_show null, // message null, // sql_data $goto, // goto $pmaThemeImage, // pmaThemeImage null, // disp_query null, // disp_message null, // query_type $sql_query, // sql_query null, // selectedTables null // complete_query ); } $response = PMA\libraries\Response::getInstance(); $response->addJSON('ajax_reload', $ajax_reload); $response->addHTML($html_output); exit(); } else if ($result) { // Save a Bookmark with more than one queries (if Bookmark label given). if (! empty($_POST['bkm_label']) && ! empty($import_text)) { $cfgBookmark = PMA_Bookmark_getParams(); PMA_storeTheQueryAsBookmark( $db, $cfgBookmark['user'], $_REQUEST['sql_query'], $_POST['bkm_label'], isset($_POST['bkm_replace']) ? $_POST['bkm_replace'] : null ); } $response = PMA\libraries\Response::getInstance(); $response->setRequestStatus(true); $response->addJSON('message', PMA\libraries\Message::success($msg)); $response->addJSON( 'sql_query', PMA\libraries\Util::getMessage($msg, $sql_query, 'success') ); } else if ($result == false) { $response = PMA\libraries\Response::getInstance(); $response->setRequestStatus(false); $response->addJSON('message', PMA\libraries\Message::error($msg)); } else { $active_page = $goto; include '' . $goto; } // If there is request for ROLLBACK in the end. if (isset($_REQUEST['rollback_query'])) { $GLOBALS['dbi']->query('ROLLBACK'); }