mirror of
https://github.com/cytopia/devilbox.git
synced 2024-12-25 23:41:04 +00:00
656 lines
19 KiB
PHP
656 lines
19 KiB
PHP
<?php
|
|
/* vim: set expandtab sw=4 ts=4 sts=4: */
|
|
/**
|
|
* Main loader script
|
|
*
|
|
* @package PhpMyAdmin
|
|
*/
|
|
use PMA\libraries\Response;
|
|
use PMA\libraries\RecentFavoriteTable;
|
|
use PMA\libraries\URL;
|
|
use PMA\libraries\Sanitize;
|
|
use PMA\libraries\Charsets;
|
|
use PMA\libraries\ThemeManager;
|
|
use PMA\libraries\LanguageManager;
|
|
|
|
/**
|
|
* Gets some core libraries and displays a top message if required
|
|
*/
|
|
require_once 'libraries/common.inc.php';
|
|
|
|
/**
|
|
* display Git revision if requested
|
|
*/
|
|
require_once 'libraries/display_git_revision.lib.php';
|
|
|
|
/**
|
|
* pass variables to child pages
|
|
*/
|
|
$drops = array(
|
|
'lang',
|
|
'server',
|
|
'collation_connection',
|
|
'db',
|
|
'table'
|
|
);
|
|
foreach ($drops as $each_drop) {
|
|
if (array_key_exists($each_drop, $_GET)) {
|
|
unset($_GET[$each_drop]);
|
|
}
|
|
}
|
|
unset($drops, $each_drop);
|
|
|
|
/*
|
|
* Black list of all scripts to which front-end must submit data.
|
|
* Such scripts must not be loaded on home page.
|
|
*
|
|
*/
|
|
$target_blacklist = array (
|
|
'import.php', 'export.php'
|
|
);
|
|
|
|
// If we have a valid target, let's load that script instead
|
|
if (! empty($_REQUEST['target'])
|
|
&& is_string($_REQUEST['target'])
|
|
&& ! preg_match('/^index/', $_REQUEST['target'])
|
|
&& ! in_array($_REQUEST['target'], $target_blacklist)
|
|
&& in_array($_REQUEST['target'], $goto_whitelist)
|
|
) {
|
|
include $_REQUEST['target'];
|
|
exit;
|
|
}
|
|
|
|
if (isset($_REQUEST['ajax_request']) && ! empty($_REQUEST['access_time'])) {
|
|
exit;
|
|
}
|
|
|
|
// See FAQ 1.34
|
|
if (! empty($_REQUEST['db'])) {
|
|
$page = null;
|
|
if (! empty($_REQUEST['table'])) {
|
|
$page = PMA\libraries\Util::getScriptNameForOption(
|
|
$GLOBALS['cfg']['DefaultTabTable'], 'table'
|
|
);
|
|
} else {
|
|
$page = PMA\libraries\Util::getScriptNameForOption(
|
|
$GLOBALS['cfg']['DefaultTabDatabase'], 'database'
|
|
);
|
|
}
|
|
include $page;
|
|
exit;
|
|
}
|
|
|
|
$response = Response::getInstance();
|
|
/**
|
|
* Check if it is an ajax request to reload the recent tables list.
|
|
*/
|
|
if ($response->isAjax() && ! empty($_REQUEST['recent_table'])) {
|
|
$response->addJSON(
|
|
'list',
|
|
RecentFavoriteTable::getInstance('recent')->getHtmlList()
|
|
);
|
|
exit;
|
|
}
|
|
|
|
if ($GLOBALS['PMA_Config']->isGitRevision()) {
|
|
if (isset($_REQUEST['git_revision']) && $response->isAjax()) {
|
|
PMA_printGitRevision();
|
|
exit;
|
|
}
|
|
echo '<div id="is_git_revision"></div>';
|
|
}
|
|
|
|
// Handles some variables that may have been sent by the calling script
|
|
$GLOBALS['db'] = '';
|
|
$GLOBALS['table'] = '';
|
|
$show_query = '1';
|
|
|
|
// Any message to display?
|
|
if (! empty($message)) {
|
|
echo PMA\libraries\Util::getMessage($message);
|
|
unset($message);
|
|
}
|
|
|
|
$common_url_query = URL::getCommon();
|
|
$mysql_cur_user_and_host = '';
|
|
|
|
// when $server > 0, a server has been chosen so we can display
|
|
// all MySQL-related information
|
|
if ($server > 0) {
|
|
include 'libraries/server_common.inc.php';
|
|
|
|
// Use the verbose name of the server instead of the hostname
|
|
// if a value is set
|
|
$server_info = '';
|
|
if (! empty($cfg['Server']['verbose'])) {
|
|
$server_info .= htmlspecialchars($cfg['Server']['verbose']);
|
|
if ($GLOBALS['cfg']['ShowServerInfo']) {
|
|
$server_info .= ' (';
|
|
}
|
|
}
|
|
if ($GLOBALS['cfg']['ShowServerInfo'] || empty($cfg['Server']['verbose'])) {
|
|
$server_info .= $GLOBALS['dbi']->getHostInfo();
|
|
}
|
|
if (! empty($cfg['Server']['verbose']) && $GLOBALS['cfg']['ShowServerInfo']) {
|
|
$server_info .= ')';
|
|
}
|
|
$mysql_cur_user_and_host = $GLOBALS['dbi']->fetchValue('SELECT USER();');
|
|
|
|
// should we add the port info here?
|
|
$short_server_info = (!empty($GLOBALS['cfg']['Server']['verbose'])
|
|
? $GLOBALS['cfg']['Server']['verbose']
|
|
: $GLOBALS['cfg']['Server']['host']);
|
|
}
|
|
|
|
echo '<div id="maincontainer">' , "\n";
|
|
// Anchor for favorite tables synchronization.
|
|
echo RecentFavoriteTable::getInstance('favorite')->getHtmlSyncFavoriteTables();
|
|
echo '<div id="main_pane_left">';
|
|
if ($server > 0 || count($cfg['Servers']) > 1
|
|
) {
|
|
if ($cfg['DBG']['demo']) {
|
|
echo '<div class="group">';
|
|
echo '<h2>' , __('phpMyAdmin Demo Server') , '</h2>';
|
|
echo '<p style="margin: 0.5em 1em 0.5em 1em">';
|
|
printf(
|
|
__(
|
|
'You are using the demo server. You can do anything here, but '
|
|
. 'please do not change root, debian-sys-maint and pma users. '
|
|
. 'More information is available at %s.'
|
|
),
|
|
'<a href="url.php?url=https://demo.phpmyadmin.net/" target="_blank" rel="noopener noreferrer">demo.phpmyadmin.net</a>'
|
|
);
|
|
echo '</p>';
|
|
echo '</div>';
|
|
}
|
|
echo '<div class="group">';
|
|
echo '<h2>' , __('General settings') , '</h2>';
|
|
echo '<ul>';
|
|
|
|
/**
|
|
* Displays the MySQL servers choice form
|
|
*/
|
|
if ($cfg['ServerDefault'] == 0
|
|
|| (! $cfg['NavigationDisplayServers']
|
|
&& (count($cfg['Servers']) > 1
|
|
|| ($server == 0 && count($cfg['Servers']) == 1)))
|
|
) {
|
|
echo '<li id="li_select_server" class="no_bullets" >';
|
|
include_once 'libraries/select_server.lib.php';
|
|
echo PMA\libraries\Util::getImage('s_host.png') , " "
|
|
, PMA_selectServer(true, true);
|
|
echo '</li>';
|
|
}
|
|
|
|
/**
|
|
* Displays the mysql server related links
|
|
*/
|
|
if ($server > 0) {
|
|
include_once 'libraries/check_user_privileges.lib.php';
|
|
|
|
// Logout for advanced authentication
|
|
if ($cfg['Server']['auth_type'] != 'config') {
|
|
if ($cfg['ShowChgPassword']) {
|
|
$conditional_class = 'ajax';
|
|
PMA_printListItem(
|
|
PMA\libraries\Util::getImage('s_passwd.png') . " " . __(
|
|
'Change password'
|
|
),
|
|
'li_change_password',
|
|
'user_password.php' . $common_url_query,
|
|
null,
|
|
null,
|
|
'change_password_anchor',
|
|
"no_bullets",
|
|
$conditional_class
|
|
);
|
|
}
|
|
} // end if
|
|
echo ' <li id="li_select_mysql_collation" class="no_bullets" >';
|
|
echo ' <form method="post" action="index.php">' , "\n"
|
|
. URL::getHiddenInputs(null, null, 4, 'collation_connection')
|
|
. ' <label for="select_collation_connection">' . "\n"
|
|
. ' ' . PMA\libraries\Util::getImage('s_asci.png')
|
|
. " " . __('Server connection collation') . "\n"
|
|
// put the doc link in the form so that it appears on the same line
|
|
. PMA\libraries\Util::showMySQLDocu('Charset-connection')
|
|
. ': ' . "\n"
|
|
. ' </label>' . "\n"
|
|
|
|
. Charsets::getCollationDropdownBox(
|
|
'collation_connection',
|
|
'select_collation_connection',
|
|
$collation_connection,
|
|
true,
|
|
true
|
|
)
|
|
. ' </form>' . "\n"
|
|
. ' </li>' . "\n";
|
|
} // end of if ($server > 0)
|
|
echo '</ul>';
|
|
echo '</div>';
|
|
}
|
|
|
|
echo '<div class="group">';
|
|
echo '<h2>' , __('Appearance settings') , '</h2>';
|
|
echo ' <ul>';
|
|
|
|
// Displays language selection combo
|
|
$language_manager = LanguageManager::getInstance();
|
|
if (empty($cfg['Lang']) && $language_manager->hasChoice()) {
|
|
echo '<li id="li_select_lang" class="no_bullets">';
|
|
|
|
echo PMA\libraries\Util::getImage('s_lang.png') , " "
|
|
, $language_manager->getSelectorDisplay();
|
|
echo '</li>';
|
|
}
|
|
|
|
// ThemeManager if available
|
|
|
|
if ($GLOBALS['cfg']['ThemeManager']) {
|
|
echo '<li id="li_select_theme" class="no_bullets">';
|
|
echo PMA\libraries\Util::getImage('s_theme.png') , " "
|
|
, ThemeManager::getInstance()->getHtmlSelectBox();
|
|
echo '</li>';
|
|
}
|
|
echo '<li id="li_select_fontsize">';
|
|
echo PMA\libraries\Config::getFontsizeForm();
|
|
echo '</li>';
|
|
|
|
echo '</ul>';
|
|
|
|
// User preferences
|
|
|
|
if ($server > 0) {
|
|
echo '<ul>';
|
|
PMA_printListItem(
|
|
PMA\libraries\Util::getImage('b_tblops.png') . " " . __(
|
|
'More settings'
|
|
),
|
|
'li_user_preferences',
|
|
'prefs_manage.php' . $common_url_query,
|
|
null,
|
|
null,
|
|
null,
|
|
"no_bullets"
|
|
);
|
|
echo '</ul>';
|
|
}
|
|
|
|
echo '</div>';
|
|
|
|
|
|
echo '</div>';
|
|
echo '<div id="main_pane_right">';
|
|
|
|
|
|
if ($server > 0 && $GLOBALS['cfg']['ShowServerInfo']) {
|
|
|
|
echo '<div class="group">';
|
|
echo '<h2>' , __('Database server') , '</h2>';
|
|
echo '<ul>' , "\n";
|
|
PMA_printListItem(
|
|
__('Server:') . ' ' . $server_info,
|
|
'li_server_info'
|
|
);
|
|
PMA_printListItem(
|
|
__('Server type:') . ' ' . PMA\libraries\Util::getServerType(),
|
|
'li_server_type'
|
|
);
|
|
PMA_printListItem(
|
|
__('Server version:')
|
|
. ' '
|
|
. PMA_MYSQL_STR_VERSION . ' - ' . PMA_MYSQL_VERSION_COMMENT,
|
|
'li_server_version'
|
|
);
|
|
PMA_printListItem(
|
|
__('Protocol version:') . ' ' . $GLOBALS['dbi']->getProtoInfo(),
|
|
'li_mysql_proto'
|
|
);
|
|
PMA_printListItem(
|
|
__('User:') . ' ' . htmlspecialchars($mysql_cur_user_and_host),
|
|
'li_user_info'
|
|
);
|
|
|
|
echo ' <li id="li_select_mysql_charset">';
|
|
echo ' ' , __('Server charset:') , ' '
|
|
. ' <span lang="en" dir="ltr">';
|
|
$unicode = Charsets::$mysql_charset_map['utf-8'];
|
|
$charsets = Charsets::getMySQLCharsetsDescriptions();
|
|
echo ' ' , $charsets[$unicode], ' (' . $unicode, ')';
|
|
echo ' </span>'
|
|
. ' </li>'
|
|
. ' </ul>'
|
|
. ' </div>';
|
|
}
|
|
|
|
if ($GLOBALS['cfg']['ShowServerInfo'] || $GLOBALS['cfg']['ShowPhpInfo']) {
|
|
echo '<div class="group">';
|
|
echo '<h2>' , __('Web server') , '</h2>';
|
|
echo '<ul>';
|
|
if ($GLOBALS['cfg']['ShowServerInfo']) {
|
|
PMA_printListItem($_SERVER['SERVER_SOFTWARE'], 'li_web_server_software');
|
|
|
|
if ($server > 0) {
|
|
$client_version_str = $GLOBALS['dbi']->getClientInfo();
|
|
if (preg_match('#\d+\.\d+\.\d+#', $client_version_str)) {
|
|
$client_version_str = 'libmysql - ' . $client_version_str;
|
|
}
|
|
PMA_printListItem(
|
|
__('Database client version:') . ' ' . $client_version_str,
|
|
'li_mysql_client_version'
|
|
);
|
|
|
|
$php_ext_string = __('PHP extension:') . ' ';
|
|
|
|
$extensions = PMA\libraries\Util::listPHPExtensions();
|
|
|
|
foreach ($extensions as $extension) {
|
|
$php_ext_string .= ' ' . $extension
|
|
. PMA\libraries\Util::showPHPDocu('book.' . $extension . '.php');
|
|
}
|
|
|
|
PMA_printListItem(
|
|
$php_ext_string,
|
|
'li_used_php_extension'
|
|
);
|
|
|
|
$php_version_string = __('PHP version:') . ' ' . phpversion();
|
|
|
|
PMA_printListItem(
|
|
$php_version_string,
|
|
'li_used_php_version'
|
|
);
|
|
}
|
|
}
|
|
|
|
if ($cfg['ShowPhpInfo']) {
|
|
PMA_printListItem(
|
|
__('Show PHP information'),
|
|
'li_phpinfo',
|
|
'phpinfo.php' . $common_url_query,
|
|
null,
|
|
'_blank'
|
|
);
|
|
}
|
|
echo ' </ul>';
|
|
echo ' </div>';
|
|
}
|
|
|
|
echo '<div class="group pmagroup">';
|
|
echo '<h2>phpMyAdmin</h2>';
|
|
echo '<ul>';
|
|
$class = null;
|
|
if ($GLOBALS['cfg']['VersionCheck']) {
|
|
$class = 'jsversioncheck';
|
|
}
|
|
PMA_printListItem(
|
|
__('Version information:') . ' <span class="version">' . PMA_VERSION . '</span>',
|
|
'li_pma_version',
|
|
null,
|
|
null,
|
|
null,
|
|
null,
|
|
$class
|
|
);
|
|
PMA_printListItem(
|
|
__('Documentation'),
|
|
'li_pma_docs',
|
|
PMA\libraries\Util::getDocuLink('index'),
|
|
null,
|
|
'_blank'
|
|
);
|
|
|
|
// does not work if no target specified, don't know why
|
|
PMA_printListItem(
|
|
__('Official Homepage'),
|
|
'li_pma_homepage',
|
|
PMA_linkURL('https://www.phpmyadmin.net/'),
|
|
null,
|
|
'_blank'
|
|
);
|
|
PMA_printListItem(
|
|
__('Contribute'),
|
|
'li_pma_contribute',
|
|
PMA_linkURL('https://www.phpmyadmin.net/contribute/'),
|
|
null,
|
|
'_blank'
|
|
);
|
|
PMA_printListItem(
|
|
__('Get support'),
|
|
'li_pma_support',
|
|
PMA_linkURL('https://www.phpmyadmin.net/support/'),
|
|
null,
|
|
'_blank'
|
|
);
|
|
PMA_printListItem(
|
|
__('List of changes'),
|
|
'li_pma_changes',
|
|
'changelog.php' . URL::getCommon(),
|
|
null,
|
|
'_blank'
|
|
);
|
|
PMA_printListItem(
|
|
__('License'),
|
|
'li_pma_license',
|
|
'license.php' . URL::getCommon(),
|
|
null,
|
|
'_blank'
|
|
);
|
|
echo ' </ul>';
|
|
echo ' </div>';
|
|
|
|
echo '</div>';
|
|
|
|
echo '</div>';
|
|
|
|
/**
|
|
* mbstring is used for handling multibytes inside parser, so it is good
|
|
* to tell user something might be broken without it, see bug #1063149.
|
|
*/
|
|
if (! @extension_loaded('mbstring')) {
|
|
trigger_error(
|
|
__(
|
|
'The mbstring PHP extension was not found and you seem to be using'
|
|
. ' a multibyte charset. Without the mbstring extension phpMyAdmin'
|
|
. ' is unable to split strings correctly and it may result in'
|
|
. ' unexpected results.'
|
|
),
|
|
E_USER_WARNING
|
|
);
|
|
}
|
|
|
|
/**
|
|
* Missing functionality
|
|
*/
|
|
if (! extension_loaded('curl') && ! ini_get('allow_url_fopen')) {
|
|
trigger_error(
|
|
__(
|
|
'The curl extension was not found and allow_url_fopen is '
|
|
. 'disabled. Due to this some features such as error reporting '
|
|
. 'or version check are disabled.'
|
|
)
|
|
);
|
|
}
|
|
|
|
if ($cfg['LoginCookieValidityDisableWarning'] == false) {
|
|
/**
|
|
* Check whether session.gc_maxlifetime limits session validity.
|
|
*/
|
|
$gc_time = (int)@ini_get('session.gc_maxlifetime');
|
|
if ($gc_time < $GLOBALS['cfg']['LoginCookieValidity'] ) {
|
|
trigger_error(
|
|
__(
|
|
'Your PHP parameter [a@https://secure.php.net/manual/en/session.' .
|
|
'configuration.php#ini.session.gc-maxlifetime@_blank]session.' .
|
|
'gc_maxlifetime[/a] is lower than cookie validity configured ' .
|
|
'in phpMyAdmin, because of this, your login might expire sooner ' .
|
|
'than configured in phpMyAdmin.'
|
|
),
|
|
E_USER_WARNING
|
|
);
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Check whether LoginCookieValidity is limited by LoginCookieStore.
|
|
*/
|
|
if ($GLOBALS['cfg']['LoginCookieStore'] != 0
|
|
&& $GLOBALS['cfg']['LoginCookieStore'] < $GLOBALS['cfg']['LoginCookieValidity']
|
|
) {
|
|
trigger_error(
|
|
__(
|
|
'Login cookie store is lower than cookie validity configured in ' .
|
|
'phpMyAdmin, because of this, your login will expire sooner than ' .
|
|
'configured in phpMyAdmin.'
|
|
),
|
|
E_USER_WARNING
|
|
);
|
|
}
|
|
|
|
/**
|
|
* Check if user does not have defined blowfish secret and it is being used.
|
|
*/
|
|
if (! empty($_SESSION['encryption_key'])) {
|
|
if (empty($GLOBALS['cfg']['blowfish_secret'])) {
|
|
trigger_error(
|
|
__(
|
|
'The configuration file now needs a secret passphrase (blowfish_secret).'
|
|
),
|
|
E_USER_WARNING
|
|
);
|
|
} elseif (strlen($GLOBALS['cfg']['blowfish_secret']) < 32) {
|
|
trigger_error(
|
|
__(
|
|
'The secret passphrase in configuration (blowfish_secret) is too short.'
|
|
),
|
|
E_USER_WARNING
|
|
);
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Check for existence of config directory which should not exist in
|
|
* production environment.
|
|
*/
|
|
if (@file_exists('config')) {
|
|
trigger_error(
|
|
__(
|
|
'Directory [code]config[/code], which is used by the setup script, ' .
|
|
'still exists in your phpMyAdmin directory. It is strongly ' .
|
|
'recommended to remove it once phpMyAdmin has been configured. ' .
|
|
'Otherwise the security of your server may be compromised by ' .
|
|
'unauthorized people downloading your configuration.'
|
|
),
|
|
E_USER_WARNING
|
|
);
|
|
}
|
|
|
|
if ($server > 0) {
|
|
$cfgRelation = PMA_getRelationsParam();
|
|
if (! $cfgRelation['allworks']
|
|
&& $cfg['PmaNoRelation_DisableWarning'] == false
|
|
) {
|
|
$msg_text = __(
|
|
'The phpMyAdmin configuration storage is not completely '
|
|
. 'configured, some extended features have been deactivated. '
|
|
. '%sFind out why%s. '
|
|
);
|
|
if ($cfg['ZeroConf'] == true) {
|
|
$msg_text .= '<br>' .
|
|
__(
|
|
'Or alternately go to \'Operations\' tab of any database '
|
|
. 'to set it up there.'
|
|
);
|
|
}
|
|
$msg = PMA\libraries\Message::notice($msg_text);
|
|
$msg->addParamHtml('<a href="./chk_rel.php' . $common_url_query . '">');
|
|
$msg->addParamHtml('</a>');
|
|
/* Show error if user has configured something, notice elsewhere */
|
|
if (!empty($cfg['Servers'][$server]['pmadb'])) {
|
|
$msg->isError(true);
|
|
}
|
|
$msg->display();
|
|
} // end if
|
|
}
|
|
|
|
/**
|
|
* Warning about Suhosin only if its simulation mode is not enabled
|
|
*/
|
|
if ($cfg['SuhosinDisableWarning'] == false
|
|
&& @ini_get('suhosin.request.max_value_length')
|
|
&& @ini_get('suhosin.simulation') == '0'
|
|
) {
|
|
trigger_error(
|
|
sprintf(
|
|
__(
|
|
'Server running with Suhosin. Please refer to %sdocumentation%s ' .
|
|
'for possible issues.'
|
|
),
|
|
'[doc@faq1-38]',
|
|
'[/doc]'
|
|
),
|
|
E_USER_WARNING
|
|
);
|
|
}
|
|
|
|
/**
|
|
* Warning about incomplete translations.
|
|
*
|
|
* The data file is created while creating release by ./scripts/remove-incomplete-mo
|
|
*/
|
|
if (@file_exists('libraries/language_stats.inc.php')) {
|
|
include 'libraries/language_stats.inc.php';
|
|
/*
|
|
* This message is intentionally not translated, because we're
|
|
* handling incomplete translations here and focus on english
|
|
* speaking users.
|
|
*/
|
|
if (isset($GLOBALS['language_stats'][$lang])
|
|
&& $GLOBALS['language_stats'][$lang] < $cfg['TranslationWarningThreshold']
|
|
) {
|
|
trigger_error(
|
|
'You are using an incomplete translation, please help to make it '
|
|
. 'better by [a@https://www.phpmyadmin.net/translate/'
|
|
. '@_blank]contributing[/a].',
|
|
E_USER_NOTICE
|
|
);
|
|
}
|
|
}
|
|
|
|
/**
|
|
* prints list item for main page
|
|
*
|
|
* @param string $name displayed text
|
|
* @param string $listId id, used for css styles
|
|
* @param string $url make item as link with $url as target
|
|
* @param string $mysql_help_page display a link to MySQL's manual
|
|
* @param string $target special target for $url
|
|
* @param string $a_id id for the anchor,
|
|
* used for jQuery to hook in functions
|
|
* @param string $class class for the li element
|
|
* @param string $a_class class for the anchor element
|
|
*
|
|
* @return void
|
|
*/
|
|
function PMA_printListItem($name, $listId = null, $url = null,
|
|
$mysql_help_page = null, $target = null, $a_id = null, $class = null,
|
|
$a_class = null
|
|
) {
|
|
echo PMA\libraries\Template::get('list/item')
|
|
->render(
|
|
array(
|
|
'content' => $name,
|
|
'id' => $listId,
|
|
'class' => $class,
|
|
'url' => array(
|
|
'href' => $url,
|
|
'target' => $target,
|
|
'id' => $a_id,
|
|
'class' => $a_class,
|
|
),
|
|
'mysql_help_page' => $mysql_help_page,
|
|
)
|
|
);
|
|
}
|