0byt3m1n1

Path: /data/applications/aps/tikiwiki/3.2.0-5/standard/htdocs/lib/ [ Home ]
File: tikidblib-adodb.php
<?php
//
// $Id: /cvsroot/tikiwiki/tiki/lib/tikidblib.php,v 1.41.2.2 2007-12-01 19:52:53 nyloth Exp $
//

//this script may only be included - so its better to die if called directly.
if (strpos($_SERVER["SCRIPT_NAME"],basename(__FILE__)) !== false) {
	header("location: index.php");
	exit;
}

class TikiDB {
// Database access functions

var $db;   // The ADODB db object used to access the database
var $_sql; // Internal variable to store the query string
var $driver; // name of the driver used to access the DB

function TikiDB($db)
{
  if (!$db) {
    die ("Invalid db object passed to TikiDB constructor");
  }

  $this->db=$db;
  $this->driver = $db->databaseType;
}

function startTimer() {
  list($micro, $sec) = explode(' ', microtime());
  return $micro + $sec;
}

function stopTimer($starttime) {
  global $elapsed_in_db;
  list($micro, $sec) = explode(' ', microtime());
  $now=$micro + $sec;
  $elapsed_in_db+=$now - $starttime;
}

// Use ADOdb->qstr() for 1.8
function qstr($str) {
    if (function_exists('mysql_real_escape_string')) {
        return "'" . mysql_real_escape_string($str). "'";
    } else {
        return "'" . mysql_escape_string($str). "'";
    }
}

// Queries the database, *returning* an error if one occurs, rather
// than exiting while printing the error.
// -rlpowell
function queryError( $query, &$error, $values = null, $numrows = -1,
        $offset = -1 )
{
    $numrows = intval($numrows);
    $offset = intval($offset);
    $this->convert_query($query);
    $this->convert_query_table_prefixes($query);
    
    $starttime=$this->startTimer();
    if ($numrows == -1 && $offset == -1)
        $result = $this->db->Execute($query, $values);
    else
        $result = $this->db->SelectLimit($query, $numrows, $offset, $values);

    $this->stopTimer($starttime);

    if (!$result ) {
        $error = $this->db->ErrorMsg();
        $result=false;
    }

    //count the number of queries made
    global $num_queries;
    $num_queries++;
    //$this->debugger_log($query, $values);
    return $result;
}

// Queries the database reporting an error if detected
// 
function query($query = null, $values = null, $numrows = -1,
		$offset = -1, $reporterrors = true )
{
	if ( $query == null ) {
		$query = $this->_sql;
	}
	$numrows = intval($numrows);
	$offset = intval($offset);
	$this->convert_query($query);
	$this->convert_query_table_prefixes($query);

	$starttime=$this->startTimer();
	if ($numrows == -1 && $offset == -1)
		$result = $this->db->Execute($query, $values);
	else
		$result = $this->db->SelectLimit($query, $numrows, $offset, $values);

	$this->stopTimer($starttime);

	if (!$result ) {
		if ($reporterrors) {
			$this->sql_error($query, $values, $result);
		}
	}

	//count the number of queries made
	global $num_queries;
	$num_queries++;
	//$this->debugger_log($query, $values);
	$this->_sql = null;
	return $result;
}

/**
 * Sets the SQL query string for later execution.
 *
 * @param string The SQL query
 * @param string The common table prefix
 */
function setQuery( $sql ) {
    $this->_sql = $sql;
}

// Gets one column for the database.
function getOne($query, $values = null, $reporterrors = true, $offset = 0) {
	$this->convert_query($query);
	$this->convert_query_table_prefixes($query);

	$starttime=$this->startTimer();
	$result = $this->db->SelectLimit($query, 1, $offset, $values);

	if (!$result) {
		if ($reporterrors) {
			$this->sql_error($query, $values, $result);
			$res = false;
		}
	} else {
		$res = $result->fetchRow();
	}

	$this->stopTimer($starttime);

	//count the number of queries made
	global $num_queries;
	$num_queries++;
	//$this->debugger_log($query, $values);

	if ($res == false)
		return (NULL); //simulate pears behaviour

	list($key, $value) = each($res);
	return $value;
}


// Reports SQL error from PEAR::db object.
function sql_error($query, $values, $result) {
    global $ADODB_LASTDB, $smarty, $prefs, $ajaxlib;

    trigger_error($ADODB_LASTDB . " error:  " . htmlspecialchars($this->db->ErrorMsg()). " in query:<br /><pre>\n" . htmlspecialchars($query) . "\n</pre><br />", E_USER_WARNING);
    // only for debugging.
    //trigger_error($ADODB_LASTDB . " error:  " . $this->db->ErrorMsg(). " in query:<br />" . $query . "<br />", E_USER_WARNING);
    $outp = "<div class='simplebox'><b>".htmlspecialchars(tra("An error occured in a database query!"))."</b></div>";

	include_once ('installer/installlib.php');
	$installer = new Installer;
	if( $installer->requiresUpdate() ) {
		$outp.= '<div class="simplebox highlight">' . tra('Your database requires an update to match the current TikiWiki version. Please proceed to <a href="tiki-install.php">the installer</a>. Using Tiki with an incorrect database version usually provoke errors.') . '</div>';
	}

    $outp.= "<br /><table class='form'>";
    $outp.= "<tr class='heading'><td colspan='2'>Context:</td></tr>";
    $outp.= "<tr class='formcolor'><td>File</td><td>".htmlspecialchars(basename($_SERVER['SCRIPT_NAME']))."</td></tr>";
    $outp.= "<tr class='formcolor'><td>Url</td><td>".htmlspecialchars(basename($_SERVER['REQUEST_URI']))."</td></tr>";
    $outp.= "<tr class='heading'><td colspan='2'>Query:</td></tr>";
    $outp.= "<tr class='formcolor'><td colspan='2'><tt>".htmlspecialchars($query)."</tt></td></tr>";
    $outp.= "<tr class='heading'><td colspan='2'>Values:</td></tr>";
    foreach ($values as $k=>$v) {
		$value_size = strlen($v);
		if (is_null($v)) {
			$v='<i>NULL</i>';
		} else if ($value_size > 1024) {
			$v = "<i>string data of length $value_size</i>";
		} else {
			$v=htmlspecialchars($v);
		}
		$outp.= "<tr class='formcolor'><td>".htmlspecialchars($k)."</td><td>$v</td></tr>";
    }
    $outp.= "<tr class='heading'><td colspan='2'>Message:</td></tr><tr class='formcolor'><td colspan='2'>".htmlspecialchars($this->db->ErrorMsg())."</td></tr>\n";
	
    $q=$query;
    foreach($values as $v) {
		$value_size = strlen($v);
		if (is_null($v)) {
			$v='NULL';
		} else if ($value_size > 1024) {
			$v="[string data of length $value_size]";
		} else {
			$v="'".addslashes($v)."'";
		}
		$pos=strpos($q, '?');
		if ($pos !== FALSE)
			$q=substr($q, 0, $pos)."$v".substr($q, $pos+1);
    }
	
    $outp.= "<tr class='heading'><td colspan='2'>Built query was probably:</td></tr><tr class='formcolor'><td colspan='2'>".htmlspecialchars($q)."</td></tr>\n";

    if (function_exists('xdebug_get_function_stack')) {
	function mydumpstack($stack) {
	    $o='';
	    foreach($stack as $line) {
		$o.='* '.$line['file']." : ".$line['line']." -> ".$line['function']."(".var_export($line['params'], true).")<br />";
	    }
	    return $o;
	}
	$outp.= "<tr class='heading'><th>Stack Trace</th><td>".mydumpstack(xdebug_get_function_stack())."</td></tr>";
    }

    $outp.= "</table>";
    //if($result===false) echo "<br>\$result is false";
    //if($result===null) echo "<br>\$result is null";
    //if(empty($result)) echo "<br>\$result is empty";
	
    $showviaajax=false;
    if ($prefs['feature_ajax'] == 'y') {
		global $ajaxlib;
		include_once('lib/ajax/xajax/xajax_core/ajaxAIO.inc.php');
		if ($ajaxlib && $ajaxlib->canProcessRequest()) {
			// this was a xajax request -> return a xajax answer
			$objResponse = new xajaxResponse();
			$page ="<html><head>";
			$page.=" <title>Tiki SQL Error (xajax)</title>";
			$page.=" <link rel='stylesheet' href='styles/thenews.css' type='text/css' />";
			$page.="</head><body>$outp</body></html>";
			$page=addslashes(str_replace(array("\n", "\r"), array(' ', ' '), $page));
			$objResponse->script("bugwin=window.open('', 'tikierror', 'width=760,height=500,scrollbars=1,resizable=1');".
									"bugwin.document.write('$page');");
			echo $objResponse->getOutput();
			die();
		}
    }

    if ( ! isset($_SESSION['fatal_error']) ) {
	// Do not show the error if an error has already occured during the same script execution (error.tpl already called),
	//   because tiki should have died before another error.
	// This happens when error.tpl is called by tiki.sql... and tiki.sql is also called again in error.tpl, entering in an infinite loop.
	require_once('tiki-setup.php');
	if ( $smarty ) {
		$smarty->assign('msg', $outp);
		$_SESSION['fatal_error'] = 'y';
		$smarty->display('error.tpl');
		unset($_SESSION['fatal_error']);
	} else {
		echo $outp;
	}
	die;
    }
}

function ifNull($narg1,$narg2) {
  return $this->db->ifNull($narg1,$narg2);
}

// functions to support DB abstraction
function convert_query(&$query) {
    global $ADODB_LASTDB;

    switch ($ADODB_LASTDB) {
        case "oci8":
            $query = preg_replace("/`/", "\"", $query);

            // convert bind variables - adodb does not do that
            $qe = explode("?", $query);
            $query = '';

            $temp_max = sizeof($qe) - 1;
            for ($i = 0; $i < $temp_max; $i++) {
                $query .= $qe[$i] . ":" . $i;
            }

            $query .= $qe[$i];
        break;

        case "postgres7":
        case "postgres8":
        case "sybase":
            $query = preg_replace("/`/", "\"", $query);
        break;

        case "mssql":
            $query = preg_replace("/`/","",$query);
            $query = preg_replace("/\?/","'?'",$query);
        break;

        case "sqlite":
            $query = preg_replace("/`/", "", $query);
        break;
    }
}

function convert_query_table_prefixes(&$query) {

    $db_table_prefix = isset($GLOBALS["db_table_prefix"])?$GLOBALS["db_table_prefix"]:'' ;
    $common_tiki_users = isset($GLOBALS["common_tiki_users"])?$GLOBALS["common_tiki_users"]:'';
    $common_users_table_prefix = isset($GLOBALS["common_users_table_prefix"])?$GLOBALS["common_users_table_prefix"]:'';

    if ( isset($db_table_prefix) && !is_null($db_table_prefix) && !empty($db_table_prefix) ) {

        //printf("convert_query_table_prefixes():\$db_table_prefix = %s<br />\n", $db_table_prefix );

        if( isset($common_users_table_prefix) && !is_null($common_users_table_prefix) && !empty($common_users_table_prefix) ) {
            $query = str_replace("`users_", "`".$common_users_table_prefix."users_", $query);
        } else {
            $query = str_replace("`users_", "`".$db_table_prefix."users_", $query);
        }

        $query = str_replace("`tiki_", "`".$db_table_prefix."tiki_", $query);
        $query = str_replace("`messu_", "`".$db_table_prefix."messu_", $query);
        $query = str_replace("`sessions", "`".$db_table_prefix."sessions", $query);
        $query = str_replace("`galaxia_", "`".$db_table_prefix."galaxia_", $query);

        //printf("convert_query_table_prefixes():\$query = %s<br />\n", $query );
    }
}

function blob_encode(&$blob) {
    switch($this->db->blobEncodeType) {
        case 'I':
            $blob=$this->db->BlobEncode($blob);
            break;
        case 'C':
            $blob=$this->db->qstr($this->db->BlobEncode($blob));
            break;
        case 'false':
        default:
    }
}

function convert_sortmode($sort_mode) {
    global $ADODB_LASTDB;

    if ( !$sort_mode ) {
        return '';
    }
    // parse $sort_mode for evil stuff
    $sort_mode = str_replace('pref:','',$sort_mode);
    $sort_mode = preg_replace('/[^A-Za-z_,.]/', '', $sort_mode);

    if ($sort_mode == 'random') {
	$map = array("postgres7" => "RANDOM()",
		     "postgres8" => "RANDOM()",
		     "mysql3" => "RAND()",
		     "mysql" => "RAND()",
		     "mysqli" => "RAND()",
		     "mssql" => "NEWID()",
		     "firebird" => "1", // does this exist in tiki?

		     // below is still needed, return 1 just for not breaking query
		     "oci8" => "1",
		     "sqlite" => "1",
		     "sybase" => "1");

	return $map[$ADODB_LASTDB];
    }

    $sorts=explode(',', $sort_mode);
    foreach($sorts as $k => $sort) {

	// force ending to either _asc or _desc unless it's "random"
	$sep = strrpos($sort, '_');
	$dir = substr($sort, $sep);
	if (($dir !== '_asc') && ($dir !== '_desc')) {
		if ( $sep != (strlen($sort) - 1) ) {
			$sort .= '_';
		}
		$sort .= 'asc';
	}
	
	switch ($ADODB_LASTDB) {
        case "postgres7":
        case "postgres8":
        case "oci8":
        case "sybase":
        case "mssql":
	    $sort = preg_replace('/_asc$/', '" asc', $sort);
	    $sort = preg_replace('/_desc$/', '" desc', $sort);
	    $sort = '"' . $sort;
	    break;

        case "sqlite":
            $sort = preg_replace('/_asc$/', ' asc', $sort);
            $sort = preg_replace('/_desc$/', ' desc', $sort);
            break;

        case "mysql3":
        case "mysql": case "mysqli":
        default:
	    $sort = preg_replace('/_asc$/', '` asc', $sort);
	    $sort = preg_replace('/_desc$/', '` desc', $sort);
	    $sort = '`' . $sort;
	    $sort = str_replace('.', '`.`', $sort);
	    break;
	}
	$sorts[$k]=$sort;
    }

    $sort_mode=implode(',', $sorts);
    return $sort_mode;
}

function convert_binary() {
    global $ADODB_LASTDB;

    switch ($ADODB_LASTDB) {
        case "oci8":
        case "postgres7":
        case "postgres8":
        case "sqlite":
            return;
        break;

        case "mysql3":
        case "mysql":
	case "mysqli":
            return "binary";
        break;
    }
}

function sql_cast($var,$type) {
    global $ADODB_LASTDB;
    switch ($ADODB_LASTDB) {
    case "sybase":
        switch ($type) {
                case "int":
                        return " CONVERT(numeric(14,0),$var) ";
                        break;
                case "string":
                        return " CONVERT(varchar(255),$var) ";
                        break;
                case "float":
                        return " CONVERT(numeric(10,5),$var) ";
                        break;
                }
        break;

    default:
        return($var);
        break;
    }

}

function concat() {
	$args = func_get_args();
	return call_user_func_array( array( $this->db, 'concat' ), $args );
}

function debugger_log($query, $values)
{
    // Will spam only if debug parameter present in URL
    // \todo DON'T FORGET TO REMOVE THIS BEFORE 1.8 RELEASE
    if (!isset($_REQUEST["debug"])) return;
    // spam to debugger log
    include_once ('lib/debug/debugger.php');
    global $debugger;
    if (is_array($values) && strpos($query, '?'))
        foreach ($values as $v)
        {
            $q = strpos($query, '?');
            if ($q)
            {
                $tmp = substr($query, 0, $q)."'".$v."'".substr($query, $q + 1);
                $query = $tmp;
            }
        }

        $debugger->msg($this->num_queries.': '.$query);
    }
}

?>