0) { $params['db'] = $db; } if (strlen($table) > 0) { $params['table'] = $table; } } if (! empty($GLOBALS['server']) && $GLOBALS['server'] != $GLOBALS['cfg']['ServerDefault'] ) { $params['server'] = $GLOBALS['server']; } if (empty($_COOKIE['pma_lang']) && ! empty($GLOBALS['lang'])) { $params['lang'] = $GLOBALS['lang']; } if (empty($_COOKIE['pma_collation_connection']) && ! empty($GLOBALS['collation_connection']) ) { $params['collation_connection'] = $GLOBALS['collation_connection']; } if (! is_array($skip)) { if (isset($params[$skip])) { unset($params[$skip]); } } else { foreach ($skip as $skipping) { if (isset($params[$skipping])) { unset($params[$skipping]); } } } return URL::getHiddenFields($params); } /** * create hidden form fields from array with name => value * * * $values = array( * 'aaa' => aaa, * 'bbb' => array( * 'bbb_0', * 'bbb_1', * ), * 'ccc' => array( * 'a' => 'ccc_a', * 'b' => 'ccc_b', * ), * ); * echo URL::getHiddenFields($values); * * // produces: * * * * * * * * @param array $values hidden values * @param string $pre prefix * * @return string form fields of type hidden */ public static function getHiddenFields($values, $pre = '') { $fields = ''; /* Always include token in plain forms */ if ($pre === '') { $values['token'] = $_SESSION[' PMA_token ']; } foreach ($values as $name => $value) { if (! empty($pre)) { $name = $pre . '[' . $name . ']'; } if (is_array($value)) { $fields .= URL::getHiddenFields($value, $name); } else { // do not generate an ending "\n" because // URL::getHiddenInputs() is sometimes called // from a JS document.write() $fields .= ''; } } return $fields; } /** * Generates text with URL parameters. * * * $params['myparam'] = 'myvalue'; * $params['db'] = 'mysql'; * $params['table'] = 'rights'; * // note the missing ? * echo 'script.php' . URL::getCommon($params); * // produces with cookies enabled: * // script.php?myparam=myvalue&db=mysql&table=rights * // with cookies disabled: * // script.php?server=1&lang=en&myparam=myvalue&db=mysql * // &table=rights * * // note the missing ? * echo 'script.php' . URL::getCommon(); * // produces with cookies enabled: * // script.php * // with cookies disabled: * // script.php?server=1&lang=en * * * @param mixed $params optional, Contains an associative array with url params * @param string $divider optional character to use instead of '?' * * @return string string with URL parameters * @access public */ public static function getCommon($params = array(), $divider = '?') { return htmlspecialchars( URL::getCommonRaw($params, $divider) ); } /** * Generates text with URL parameters. * * * $params['myparam'] = 'myvalue'; * $params['db'] = 'mysql'; * $params['table'] = 'rights'; * // note the missing ? * echo 'script.php' . URL::getCommon($params); * // produces with cookies enabled: * // script.php?myparam=myvalue&db=mysql&table=rights * // with cookies disabled: * // script.php?server=1&lang=en&myparam=myvalue&db=mysql * // &table=rights * * // note the missing ? * echo 'script.php' . URL::getCommon(); * // produces with cookies enabled: * // script.php * // with cookies disabled: * // script.php?server=1&lang=en * * * @param mixed $params optional, Contains an associative array with url params * @param string $divider optional character to use instead of '?' * * @return string string with URL parameters * @access public */ public static function getCommonRaw($params = array(), $divider = '?') { $separator = URL::getArgSeparator(); // avoid overwriting when creating navi panel links to servers if (isset($GLOBALS['server']) && $GLOBALS['server'] != $GLOBALS['cfg']['ServerDefault'] && ! isset($params['server']) && ! defined('PMA_SETUP') ) { $params['server'] = $GLOBALS['server']; } if (empty($_COOKIE['pma_lang']) && ! empty($GLOBALS['lang'])) { $params['lang'] = $GLOBALS['lang']; } if (empty($_COOKIE['pma_collation_connection']) && ! empty($GLOBALS['collation_connection']) ) { $params['collation_connection'] = $GLOBALS['collation_connection']; } $query = http_build_query($params, null, $separator); if ($divider != '?' || strlen($query) > 0) { return $divider . $query; } return ''; } /** * Returns url separator * * extracted from arg_separator.input as set in php.ini * we do not use arg_separator.output to avoid problems with & and & * * @param string $encode whether to encode separator or not, * currently 'none' or 'html' * * @return string character used for separating url parts usually ; or & * @access public */ public static function getArgSeparator($encode = 'none') { static $separator = null; static $html_separator = null; if (null === $separator) { // use separators defined by php, but prefer ';' // as recommended by W3C // (see https://www.w3.org/TR/1999/REC-html401-19991224/appendix // /notes.html#h-B.2.2) $arg_separator = ini_get('arg_separator.input'); if (mb_strpos($arg_separator, ';') !== false) { $separator = ';'; } elseif (strlen($arg_separator) > 0) { $separator = $arg_separator{0}; } else { $separator = '&'; } $html_separator = htmlentities($separator); } switch ($encode) { case 'html': return $html_separator; case 'text' : case 'none' : default : return $separator; } } }