Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Move view create entry point to a controller
Signed-off-by: Maurício Meneghini Fauth <mauricio@fauth.dev>
- Loading branch information
1 parent
12db01b
commit 2bae3aa
Showing
4 changed files
with
255 additions
and
250 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,242 @@ | ||
| <?php | ||
| /** | ||
| * @package PhpMyAdmin\Controllers | ||
| */ | ||
| declare(strict_types=1); | ||
|
|
||
| namespace PhpMyAdmin\Controllers; | ||
|
|
||
| use PhpMyAdmin\Core; | ||
| use PhpMyAdmin\Html\Generator; | ||
| use PhpMyAdmin\Message; | ||
| use PhpMyAdmin\Url; | ||
| use PhpMyAdmin\Util; | ||
|
|
||
| /** | ||
| * Handles creation of VIEWs. | ||
| * @package PhpMyAdmin\Controllers | ||
| */ | ||
| class ViewCreateController extends AbstractController | ||
| { | ||
| /** | ||
| * @return void | ||
| */ | ||
| public function index(): void | ||
| { | ||
| global $text_dir, $url_params, $view_algorithm_options, $view_with_options, $view_security_options; | ||
| global $message, $sep, $sql_query, $arr, $view_columns, $column_map, $systemDb, $pma_transformation_data; | ||
| global $new_transformations_sql, $view, $item, $parts, $db; | ||
|
|
||
| require ROOT_PATH . 'libraries/db_common.inc.php'; | ||
|
|
||
| $url_params['goto'] = Url::getFromRoute('/table/structure'); | ||
| $url_params['back'] = Url::getFromRoute('/view/create'); | ||
|
|
||
| $view_algorithm_options = [ | ||
| 'UNDEFINED', | ||
| 'MERGE', | ||
| 'TEMPTABLE', | ||
| ]; | ||
|
|
||
| $view_with_options = [ | ||
| 'CASCADED', | ||
| 'LOCAL', | ||
| ]; | ||
|
|
||
| $view_security_options = [ | ||
| 'DEFINER', | ||
| 'INVOKER', | ||
| ]; | ||
|
|
||
| // View name is a compulsory field | ||
| if (isset($_POST['view']['name']) | ||
| && empty($_POST['view']['name']) | ||
| ) { | ||
| $message = Message::error(__('View name can not be empty!')); | ||
| $this->response->addJSON( | ||
| 'message', | ||
| $message | ||
| ); | ||
| $this->response->setRequestStatus(false); | ||
| return; | ||
| } | ||
|
|
||
| if (isset($_POST['createview']) || isset($_POST['alterview'])) { | ||
| /** | ||
| * Creates the view | ||
| */ | ||
| $sep = "\r\n"; | ||
|
|
||
| if (isset($_POST['createview'])) { | ||
| $sql_query = 'CREATE'; | ||
| if (isset($_POST['view']['or_replace'])) { | ||
| $sql_query .= ' OR REPLACE'; | ||
| } | ||
| } else { | ||
| $sql_query = 'ALTER'; | ||
| } | ||
|
|
||
| if (Core::isValid($_POST['view']['algorithm'], $view_algorithm_options)) { | ||
| $sql_query .= $sep . ' ALGORITHM = ' . $_POST['view']['algorithm']; | ||
| } | ||
|
|
||
| if (! empty($_POST['view']['definer'])) { | ||
| if (strpos($_POST['view']['definer'], '@') === false) { | ||
| $sql_query .= $sep . 'DEFINER=' | ||
| . Util::backquote($_POST['view']['definer']); | ||
| } else { | ||
| $arr = explode('@', $_POST['view']['definer']); | ||
| $sql_query .= $sep . 'DEFINER=' . Util::backquote($arr[0]); | ||
| $sql_query .= '@' . Util::backquote($arr[1]) . ' '; | ||
| } | ||
| } | ||
|
|
||
| if (isset($_POST['view']['sql_security']) && in_array($_POST['view']['sql_security'], $view_security_options)) { | ||
| $sql_query .= $sep . ' SQL SECURITY ' | ||
| . $_POST['view']['sql_security']; | ||
| } | ||
|
|
||
| $sql_query .= $sep . ' VIEW ' | ||
| . Util::backquote($_POST['view']['name']); | ||
|
|
||
| if (! empty($_POST['view']['column_names'])) { | ||
| $sql_query .= $sep . ' (' . $_POST['view']['column_names'] . ')'; | ||
| } | ||
|
|
||
| $sql_query .= $sep . ' AS ' . $_POST['view']['as']; | ||
|
|
||
| if (isset($_POST['view']['with'])) { | ||
| if (in_array($_POST['view']['with'], $view_with_options)) { | ||
| $sql_query .= $sep . ' WITH ' . $_POST['view']['with'] | ||
| . ' CHECK OPTION'; | ||
| } | ||
| } | ||
|
|
||
| if (! $this->dbi->tryQuery($sql_query)) { | ||
| if (! isset($_POST['ajax_dialog'])) { | ||
| $message = Message::rawError($this->dbi->getError()); | ||
| return; | ||
| } | ||
|
|
||
| $this->response->addJSON( | ||
| 'message', | ||
| Message::error( | ||
| '<i>' . htmlspecialchars($sql_query) . '</i><br><br>' | ||
| . $this->dbi->getError() | ||
| ) | ||
| ); | ||
| $this->response->setRequestStatus(false); | ||
| return; | ||
| } | ||
|
|
||
| // If different column names defined for VIEW | ||
| $view_columns = []; | ||
| if (isset($_POST['view']['column_names'])) { | ||
| $view_columns = explode(',', $_POST['view']['column_names']); | ||
| } | ||
|
|
||
| $column_map = $this->dbi->getColumnMapFromSql( | ||
| $_POST['view']['as'], | ||
| $view_columns | ||
| ); | ||
|
|
||
| $systemDb = $this->dbi->getSystemDatabase(); | ||
| $pma_transformation_data = $systemDb->getExistingTransformationData( | ||
| $db | ||
| ); | ||
|
|
||
| if ($pma_transformation_data !== false) { | ||
| // SQL for store new transformation details of VIEW | ||
| $new_transformations_sql = $systemDb->getNewTransformationDataSql( | ||
| $pma_transformation_data, | ||
| $column_map, | ||
| $_POST['view']['name'], | ||
| $db | ||
| ); | ||
|
|
||
| // Store new transformations | ||
| if ($new_transformations_sql != '') { | ||
| $this->dbi->tryQuery($new_transformations_sql); | ||
| } | ||
| } | ||
| unset($pma_transformation_data); | ||
|
|
||
| if (! isset($_POST['ajax_dialog'])) { | ||
| $message = Message::success(); | ||
| include ROOT_PATH . 'libraries/entry_points/table/structure.php'; | ||
| } else { | ||
| $this->response->addJSON( | ||
| 'message', | ||
| Generator::getMessage( | ||
| Message::success(), | ||
| $sql_query | ||
| ) | ||
| ); | ||
| $this->response->setRequestStatus(true); | ||
| } | ||
|
|
||
| return; | ||
| } | ||
|
|
||
| $sql_query = ! empty($_POST['sql_query']) ? $_POST['sql_query'] : ''; | ||
|
|
||
| // prefill values if not already filled from former submission | ||
| $view = [ | ||
| 'operation' => 'create', | ||
| 'or_replace' => '', | ||
| 'algorithm' => '', | ||
| 'definer' => '', | ||
| 'sql_security' => '', | ||
| 'name' => '', | ||
| 'column_names' => '', | ||
| 'as' => $sql_query, | ||
| 'with' => '', | ||
| ]; | ||
|
|
||
| // Used to prefill the fields when editing a view | ||
| if (isset($_GET['db'], $_GET['table'])) { | ||
| $item = $this->dbi->fetchSingleRow( | ||
| sprintf( | ||
| "SELECT `VIEW_DEFINITION`, `CHECK_OPTION`, `DEFINER`, | ||
| `SECURITY_TYPE` | ||
| FROM `INFORMATION_SCHEMA`.`VIEWS` | ||
| WHERE TABLE_SCHEMA='%s' | ||
| AND TABLE_NAME='%s';", | ||
| $this->dbi->escapeString($_GET['db']), | ||
| $this->dbi->escapeString($_GET['table']) | ||
| ) | ||
| ); | ||
| $createView = $this->dbi->getTable($_GET['db'], $_GET['table']) | ||
| ->showCreate(); | ||
|
|
||
| // CREATE ALGORITHM=<ALGORITHM> DE... | ||
| $parts = explode(' ', substr($createView, 17)); | ||
| $item['ALGORITHM'] = $parts[0]; | ||
|
|
||
| $view['operation'] = 'alter'; | ||
| $view['definer'] = $item['DEFINER']; | ||
| $view['sql_security'] = $item['SECURITY_TYPE']; | ||
| $view['name'] = $_GET['table']; | ||
| $view['as'] = $item['VIEW_DEFINITION']; | ||
| $view['with'] = $item['CHECK_OPTION']; | ||
| $view['algorithm'] = $item['ALGORITHM']; | ||
| } | ||
|
|
||
| if (Core::isValid($_POST['view'], 'array')) { | ||
| $view = array_merge($view, $_POST['view']); | ||
| } | ||
|
|
||
| $url_params['db'] = $db; | ||
| $url_params['reload'] = 1; | ||
|
|
||
| echo $this->template->render('view_create', [ | ||
| 'ajax_dialog' => isset($_POST['ajax_dialog']), | ||
| 'text_dir' => $text_dir, | ||
| 'url_params' => $url_params, | ||
| 'view' => $view, | ||
| 'view_algorithm_options' => $view_algorithm_options, | ||
| 'view_with_options' => $view_with_options, | ||
| 'view_security_options' => $view_security_options, | ||
| ]); | ||
| } | ||
| } |
Oops, something went wrong.