SM0 She11

Path: / / usr / local / cwpsrv / var / services / pma / libraries / classes / Controllers

Full Path (server): /usr/local/cwpsrv/var/services/pma/libraries/classes/Controllers

📄 AbstractController.php [E] [D]
📄 BrowseForeignersController.php [E] [D]
📄 ChangeLogController.php [E] [D]
📄 CheckRelationsController.php [E] [D]
📄 ColumnController.php [E] [D]
📄 ConfigController.php [E] [D]
📁 Database Open [D]
📄 DatabaseController.php [E] [D]
📄 ErrorReportController.php [E] [D]
📄 ExportController.php [E] [D]
📄 ExportTemplateController.php [E] [D]
📄 GisDataEditorController.php [E] [D]
📄 HomeController.php [E] [D]
📄 ImportController.php [E] [D]
📄 ImportStatusController.php [E] [D]
📄 JavaScriptMessagesController.php [E] [D]
📄 LicenseController.php [E] [D]
📄 LintController.php [E] [D]
📄 LogoutController.php [E] [D]
📄 NavigationController.php [E] [D]
📄 NormalizationController.php [E] [D]
📄 PhpInfoController.php [E] [D]
📁 Preferences Open [D]
📄 SchemaExportController.php [E] [D]
📁 Server Open [D]
📁 Setup Open [D]
📄 SqlController.php [E] [D]
📁 Table Open [D]
📄 TableController.php [E] [D]
📄 ThemesController.php [E] [D]
📄 TransformationOverviewController.php [E] [D]
📄 TransformationWrapperController.php [E] [D]
📄 UserPasswordController.php [E] [D]
📄 VersionCheckController.php [E] [D]
📄 ViewCreateController.php [E] [D]
📄 ViewOperationsController.php [E] [D]

Editing: ViewCreateController.php

<?php

declare(strict_types=1);

namespace PhpMyAdmin\Controllers;

use PhpMyAdmin\Controllers\Table\StructureController;
use PhpMyAdmin\Core;
use PhpMyAdmin\DatabaseInterface;
use PhpMyAdmin\Html\Generator;
use PhpMyAdmin\Message;
use PhpMyAdmin\Response;
use PhpMyAdmin\SqlParser\Parser;
use PhpMyAdmin\SqlParser\Statements\CreateStatement;
use PhpMyAdmin\SqlParser\TokensList;
use PhpMyAdmin\Template;
use PhpMyAdmin\Url;
use PhpMyAdmin\Util;
use function array_merge;
use function explode;
use function htmlspecialchars;
use function in_array;
use function is_string;
use function sprintf;
use function strpos;
use function substr;

/**
 * Handles creation of VIEWs.
 */
class ViewCreateController extends AbstractController
{
    /** @var DatabaseInterface */
    private $dbi;

/**
     * @param Response          $response
     * @param DatabaseInterface $dbi
     */
    public function __construct($response, Template $template, $dbi)
    {
        parent::__construct($response, $template);
        $this->dbi = $dbi;
    }

public function index(): void
    {
        global $text_dir, $url_params, $view_algorithm_options, $view_with_options, $view_security_options;
        global $message, $sep, $sql_query, $arr, $view_columns, $column_map, $systemDb, $pma_transformation_data;
        global $containerBuilder, $new_transformations_sql, $view, $item, $parts, $db, $cfg, $err_url;

Util::checkParameters(['db']);

$err_url = Util::getScriptNameForOption($cfg['DefaultTabDatabase'], 'database');
        $err_url .= Url::getCommon(['db' => $db], '&');

if (! $this->hasDatabase()) {
            return;
        }

$url_params['goto'] = Url::getFromRoute('/table/structure');
        $url_params['back'] = Url::getFromRoute('/view/create');

$view_algorithm_options = [
            'UNDEFINED',
            'MERGE',
            'TEMPTABLE',
        ];

$view_with_options = [
            'CASCADED',
            'LOCAL',
        ];

$view_security_options = [
            'DEFINER',
            'INVOKER',
        ];

// View name is a compulsory field
        if (isset($_POST['view']['name'])
            && empty($_POST['view']['name'])
        ) {
            $message = Message::error(__('View name can not be empty!'));
            $this->response->addJSON(
                'message',
                $message
            );
            $this->response->setRequestStatus(false);

return;
        }

if (isset($_POST['createview']) || isset($_POST['alterview'])) {
            /**
             * Creates the view
             */
            $sep = "\r\n";

if (isset($_POST['createview'])) {
                $sql_query = 'CREATE';
                if (isset($_POST['view']['or_replace'])) {
                    $sql_query .= ' OR REPLACE';
                }
            } else {
                $sql_query = 'ALTER';
            }

if (Core::isValid($_POST['view']['algorithm'], $view_algorithm_options)) {
                $sql_query .= $sep . ' ALGORITHM = ' . $_POST['view']['algorithm'];
            }

if (! empty($_POST['view']['definer'])) {
                if (strpos($_POST['view']['definer'], '@') === false) {
                    $sql_query .= $sep . 'DEFINER='
                        . Util::backquote($_POST['view']['definer']);
                } else {
                    $arr = explode('@', $_POST['view']['definer']);
                    $sql_query .= $sep . 'DEFINER=' . Util::backquote($arr[0]);
                    $sql_query .= '@' . Util::backquote($arr[1]) . ' ';
                }
            }

if (isset($_POST['view']['sql_security'])
                && in_array($_POST['view']['sql_security'], $view_security_options)
            ) {
                $sql_query .= $sep . ' SQL SECURITY '
                    . $_POST['view']['sql_security'];
            }

$sql_query .= $sep . ' VIEW '
                . Util::backquote($_POST['view']['name']);

if (! empty($_POST['view']['column_names'])) {
                $sql_query .= $sep . ' (' . $_POST['view']['column_names'] . ')';
            }

$sql_query .= $sep . ' AS ' . $_POST['view']['as'];

if (isset($_POST['view']['with'])) {
                if (in_array($_POST['view']['with'], $view_with_options)) {
                    $sql_query .= $sep . ' WITH ' . $_POST['view']['with']
                        . '  CHECK OPTION';
                }
            }

if (! $this->dbi->tryQuery($sql_query)) {
                if (! isset($_POST['ajax_dialog'])) {
                    $message = Message::rawError((string) $this->dbi->getError());

return;
                }

$this->response->addJSON(
                    'message',
                    Message::error(
                        '<i>' . htmlspecialchars($sql_query) . '</i><br><br>'
                        . $this->dbi->getError()
                    )
                );
                $this->response->setRequestStatus(false);

return;
            }

// If different column names defined for VIEW
            $view_columns = [];
            if (isset($_POST['view']['column_names'])) {
                $view_columns = explode(',', $_POST['view']['column_names']);
            }

$column_map = $this->dbi->getColumnMapFromSql(
                $_POST['view']['as'],
                $view_columns
            );

$systemDb = $this->dbi->getSystemDatabase();
            $pma_transformation_data = $systemDb->getExistingTransformationData(
                $db
            );

if ($pma_transformation_data !== false) {
                // SQL for store new transformation details of VIEW
                $new_transformations_sql = $systemDb->getNewTransformationDataSql(
                    $pma_transformation_data,
                    $column_map,
                    $_POST['view']['name'],
                    $db
                );

// Store new transformations
                if ($new_transformations_sql != '') {
                    $this->dbi->tryQuery($new_transformations_sql);
                }
            }
            unset($pma_transformation_data);

if (! isset($_POST['ajax_dialog'])) {
                $message = Message::success();
                /** @var StructureController $controller */
                $controller = $containerBuilder->get(StructureController::class);
                $controller->index();
            } else {
                $this->response->addJSON(
                    'message',
                    Generator::getMessage(
                        Message::success(),
                        $sql_query
                    )
                );
                $this->response->setRequestStatus(true);
            }

return;
        }

$sql_query = ! empty($_POST['sql_query']) ? $_POST['sql_query'] : '';

// prefill values if not already filled from former submission
        $view = [
            'operation' => 'create',
            'or_replace' => '',
            'algorithm' => '',
            'definer' => '',
            'sql_security' => '',
            'name' => '',
            'column_names' => '',
            'as' => $sql_query,
            'with' => '',
        ];

// Used to prefill the fields when editing a view
        if (isset($_GET['db'], $_GET['table'])) {
            $item = $this->dbi->fetchSingleRow(
                sprintf(
                    "SELECT `VIEW_DEFINITION`, `CHECK_OPTION`, `DEFINER`,
            `SECURITY_TYPE`
            FROM `INFORMATION_SCHEMA`.`VIEWS`
            WHERE TABLE_SCHEMA='%s'
            AND TABLE_NAME='%s';",
                    $this->dbi->escapeString($_GET['db']),
                    $this->dbi->escapeString($_GET['table'])
                )
            );
            $createView = $this->dbi->getTable($_GET['db'], $_GET['table'])
                ->showCreate();

// CREATE ALGORITHM=<ALGORITHM> DE...
            $parts = explode(' ', substr($createView, 17));
            $item['ALGORITHM'] = $parts[0];

$view['operation'] = 'alter';
            $view['definer'] = $item['DEFINER'];
            $view['sql_security'] = $item['SECURITY_TYPE'];
            $view['name'] = $_GET['table'];
            $view['as'] = $item['VIEW_DEFINITION'];
            $view['with'] = $item['CHECK_OPTION'];
            $view['algorithm'] = $item['ALGORITHM'];

// MySQL 8.0+ - issue #16194
            if (empty($view['as']) && is_string($createView)) {
                $parser = new Parser($createView);
                /**
                 * @var CreateStatement $stmt
                 */
                $stmt = $parser->statements[0];
                $view['as'] = isset($stmt->body) ? TokensList::build($stmt->body) : $view['as'];
            }
        }

if (Core::isValid($_POST['view'], 'array')) {
            $view = array_merge($view, $_POST['view']);
        }

$url_params['db'] = $db;
        $url_params['reload'] = 1;

echo $this->template->render('view_create', [
            'ajax_dialog' => isset($_POST['ajax_dialog']),
            'text_dir' => $text_dir,
            'url_params' => $url_params,
            'view' => $view,
            'view_algorithm_options' => $view_algorithm_options,
            'view_with_options' => $view_with_options,
            'view_security_options' => $view_security_options,
        ]);
    }
}