Leitgedanken/msd/inc/sqlbrowser/mysql_search.php
2023-02-11 15:24:36 +01:00

388 lines
15 KiB
PHP

<?php
/* ----------------------------------------------------------------------
MyOOS [Dumper]
http://www.oos-shop.de/
Copyright (c) 2013 - 2022 by the MyOOS Development Team.
----------------------------------------------------------------------
Based on:
MySqlDumper
http://www.mysqldumper.de
Copyright (C)2004-2011 Daniel Schlichtholz (admin@mysqldumper.de)
----------------------------------------------------------------------
Released under the GNU General Public License
---------------------------------------------------------------------- */
if (!defined('MOD_VERSION')) {
exit('No direct access.');
}
// get all tables of the current database and build access array
$sql = 'SHOW TABLES FROM `'.$db.'`';
$tables = [];
$link = mod_mysqli_connect();
$res = mysqli_query($link, $sql);
if (false === !$res) {
while ($row = mysqli_fetch_array($res, MYSQLI_NUM)) {
$tables[] = $row[0];
}
} else {
exit('No Tables in Database!');
}
// get search criteria from session or from POST environment
// this way the search criteria are preserved even if you click somewhere else in between
if (isset($_POST['suchbegriffe'])) {
$_SESSION['mysql_search']['suchbegriffe'] = $_POST['suchbegriffe'];
}
if (!isset($_SESSION['mysql_search']['suchbegriffe'])) {
$_SESSION['mysql_search']['suchbegriffe'] = '';
}
$suchbegriffe = $_SESSION['mysql_search']['suchbegriffe'];
if (isset($_POST['suchart'])) {
$_SESSION['mysql_search']['suchart'] = $_POST['suchart'];
}
if (!isset($_SESSION['mysql_search']['suchart']) || strlen($_SESSION['mysql_search']['suchart']) < 2) {
$_SESSION['mysql_search']['suchart'] = 'AND';
}
$suchart = $_SESSION['mysql_search']['suchart'];
if (isset($_POST['table_selected'])) {
$_SESSION['mysql_search']['table_selected'] = $_POST['table_selected'];
}
if (!isset($_SESSION['mysql_search']['table_selected'])) {
$_SESSION['mysql_search']['table_selected'] = 0;
}
$table_selected = $_SESSION['mysql_search']['table_selected'];
// If tables were deleted in the meantime and the index does not exist anymore, reset it
if ($table_selected > count($tables) - 1) {
$table_selected = 0;
}
$offset = (isset($_POST['offset'])) ? intval($_POST['offset']) : 0;
$tablename = isset($_GET['tablename']) ? urldecode($_GET['tablename']) : '';
// Delete
if (isset($_GET['mode']) && 'kill' == $_GET['mode'] && $rk > '') {
// echo "<br> RK ist: ".$rk."<br><br>";
$sqlk = "DELETE FROM `$tablename` WHERE ".$rk.' LIMIT 1';
// echo $sqlk;
$res = mod_query($sqlk);
// echo "<br>".$res;
$aus .= '<p class="success">'.$lang['L_SQL_RECORDDELETED'].'</p>';
}
function mysqli_search($db, $tabelle, $suchbegriffe, $suchart, $offset = 0, $anzahl_ergebnisse = 20, $auszuschliessende_tabellen = '')
{
global $tables, $config, $lang;
$ret = false;
$link = mod_mysqli_connect();
if (sizeof($tables) > 0) {
$suchbegriffe = trim(str_replace('*', '', $suchbegriffe));
$suchworte = explode(' ', $suchbegriffe);
if (($suchbegriffe > '') && (is_array($suchworte))) {
// Remove empty entries (due to double spaces)
$anzahl_suchworte = sizeof($suchworte);
for ($i = 0; $i < $anzahl_suchworte; ++$i) {
if ('' == trim($suchworte[$i])) {
unset($suchworte[$i]);
}
}
$bedingung = [];
$where = '';
$felder = [];
// Determine fields
$sql = 'SHOW COLUMNS FROM `'.$db.'`.`'.$tables[$tabelle].'`';
$res = mysqli_query($link, $sql);
if (false === !$res) {
// Determine fields of the table
while ($row = mysqli_fetch_object($res)) {
$felder[] = $row->Field;
}
}
$feldbedingung = '';
if ('CONCAT' == $suchart) {
if (count($felder) > 0) {
// Build Concat-String
$concat = implode('`),LOWER(`', $felder);
$concat = 'CONCAT_WS(\'\',LOWER(`'.$concat.'`))';
$where = '';
foreach ($suchworte as $suchbegriff) {
$where .= $concat.' LIKE \'%'.strtolower($suchbegriff).'%\' AND ';
}
$where = substr($where, 0, -4); // Remove last AND
$sql = 'SELECT * FROM `'.$db.'`.`'.$tables[$tabelle].'` WHERE '.$where.' LIMIT '.$offset.','.$anzahl_ergebnisse;
} else {
$_SESSION['mysql_search']['suchbegriffe'] = '';
exit(sprintf($lang['L_ERROR_NO_FIELDS'], $tabelle));
}
} else {
$pattern = '`{FELD}` LIKE \'%{SUCHBEGRIFF}%\'';
if (count($felder) > 0) {
foreach ($felder as $feld) {
unset($feldbedingung);
foreach ($suchworte as $suchbegriff) {
$suchen = [
'{FELD}',
'{SUCHBEGRIFF}',
];
$ersetzen = [
$feld,
$suchbegriff,
];
$feldbedingung[] = str_replace($suchen, $ersetzen, $pattern);
}
$bedingung[] = '('.implode(' '.$suchart.' ', $feldbedingung).') ';
}
} else {
$_SESSION['mysql_search']['suchbegriffe'] = '';
exit(sprintf($lang['L_ERROR_NO_FIELDS'], $tabelle));
}
$where = implode(' OR ', $bedingung);
$sql = 'SELECT * FROM `'.$db.'`.`'.$tables[$tabelle].'` WHERE ('.$where.') LIMIT '.$offset.','.$anzahl_ergebnisse;
}
} else {
$sql = 'SELECT * FROM `'.$db.'`.`'.$tables[$tabelle].'` LIMIT '.$offset.','.$anzahl_ergebnisse;
}
$res = mysqli_query($link, $sql);
if (false === !$res) {
while ($row = mysqli_fetch_array($res, MYSQLI_ASSOC)) {
// Mark hits
foreach ($row as $key => $val) {
foreach ($suchworte as $suchbegriff) {
$row[$key] = markiere_suchtreffer($suchbegriff, $row[$key]);
}
$row[$key] = ersetze_suchtreffer($row[$key]);
}
$ret[] = $row;
}
}
}
return $ret;
}
// Marks the search string with a code (ASCII 01/02)
// - if not found : returns the original string
function markiere_suchtreffer($suchbegriff, $suchstring)
{
$str = strtolower($suchstring);
$suchbegriff = strtolower($suchbegriff);
if ((strlen($str) > 0) && (strlen($suchbegriff) > 0)) {
// Determine hit position
$offset = 0;
$trefferpos = 0;
while (($offset <= strlen($str))) {
// If only the first hit is to be marked, the line must read as follow
// while ( ($offset<=strlen($str)) || ($in_html==false) )
for ($offset = $trefferpos; $offset <= strlen($str); ++$offset) {
$start = strpos($str, $suchbegriff, $offset);
if (false === $start) {
$offset = strlen($str) + 1;
} else {
if ($offset <= strlen($str)) {
//Treffer überprüfen
$in_html = false;
// Steht die Fundstelle zwischen < und > (also im HTML-Tag) ?
for ($position = $start; $position >= 0; --$position) {
if ('>' == substr($str, $position, 1)) {
$in_html = false;
$position = -1; // Schleife verlassen
}
if ('<' == substr($str, $position, 1)) {
$in_html = true;
$position = -1; // Schleife verlassen
}
}
if ($in_html) {
for ($position2 = $start; $position2 < strlen($str); ++$position2) {
if ('<' == substr($str, $position2, 1)) {
$position2 = strlen($str) + 1;
}
if ('>' == substr($str, $position2, 1)) {
$in_html = true;
$position2 = strlen($str) + 1;
$offset = strlen($str) + 1;
}
}
}
if (!$in_html) {
$ersetzen = substr($suchstring, $start, strlen($suchbegriff));
$str = substr($suchstring, 0, $start);
$str .= chr(1).$ersetzen.chr(2);
$str .= substr($suchstring, ($start + strlen($ersetzen)), (strlen($suchstring) - strlen($ersetzen)));
$suchstring = $str;
}
if ($in_html) {
$trefferpos = $start + 1;
$offset = $trefferpos;
}
}
$offset = $start + 1;
}
}
}
}
return $suchstring;
}
// Ersetzt die Codes letztlich durch die Fontangabe
function ersetze_suchtreffer($text)
{
$such = [
chr(1),
chr(2), ];
$ersetzen = [
'<span class="treffer">',
'</span>', ];
return str_replace($such, $ersetzen, htmlspecialchars($text));
}
$suchbegriffe = trim($suchbegriffe); // Leerzeichen vorne und hinten wegschneiden
if (isset($_POST['reset'])) {
$suchbegriffe = '';
$_SESSION['mysql_search']['suchbegriffe'] = '';
$suchart = 'AND';
$_SESSION['mysql_search']['suchart'] = 'AND';
$table_selected = 0;
$_SESSION['mysql_search']['table_selected'] = 0;
}
$showtables = 0; // Anzeige der Tabellendaten im restlichen SQL-Browser ausschalten
// Fix bis zur kompletten Umstellung auf Templates
echo $aus;
$aus = '';
$anzahl_tabellen = sizeof($tables);
$table_options = '';
if ($anzahl_tabellen > 0) {
for ($i = 0; $i < $anzahl_tabellen; ++$i) {
if (isset($tables[$i])) {
$table_options .= '<option value="'.$i.'"';
if (($i == $table_selected) || ($tables[$i] == $tablename)) {
$table_options .= ' selected';
$table_selected = $i;
}
$table_options .= '>'.$tables[$i].'</option>'."\n";
}
}
}
$tpl = new MODTemplate();
$tpl->set_filenames([
'show' => './tpl/sqlbrowser/mysql_search.tpl', ]);
$tpl->assign_vars([
'DB_NAME_URLENCODED' => urlencode($db),
'LANG_SQLSEARCH' => $lang['L_SQL_SEARCH'],
'LANG_SQL_SEARCHWORDS' => $lang['L_SQL_SEARCHWORDS'],
'SUCHBEGRIFFE' => $suchbegriffe,
'LANG_START_SQLSEARCH' => $lang['L_START_SQL_SEARCH'],
'LANG_RESET_SEARCHWORDS' => $lang['L_RESET_SEARCHWORDS'],
'LANG_SEARCH_OPTIONS' => $lang['L_SEARCH_OPTIONS'],
'AND_SEARCH' => 'AND' == $suchart ? ' checked' : '',
'OR_SEARCH' => 'OR' == $suchart ? ' checked' : '',
'CONCAT_SEARCH' => 'CONCAT' == $suchart ? ' checked' : '',
'TABLE_OPTIONS' => $table_options,
'LANG_SEARCH_OPTIONS_AND' => $lang['L_SEARCH_OPTIONS_AND'],
'LANG_SEARCH_OPTIONS_OR' => $lang['L_SEARCH_OPTIONS_OR'],
'LANG_SEARCH_OPTIONS_CONCAT' => $lang['L_SEARCH_OPTIONS_CONCAT'],
'LANG_SEARCH_IN_TABLE' => $lang['L_SEARCH_IN_TABLE'], ]);
$max_treffer = 20;
$treffer = mysqli_search($db, $table_selected, $suchbegriffe, $suchart, $offset, $max_treffer + 1);
if (is_array($treffer) && isset($treffer[0])) {
$search_message = sprintf($lang['L_SEARCH_RESULTS'], $suchbegriffe, $tables[$table_selected]);
$anzahl_treffer = count($treffer);
// Blaettern-Buttons
$tpl->assign_block_vars('HITS', [
'LANG_SEARCH_RESULTS' => $search_message,
'LAST_OFFSET' => $offset - $max_treffer,
'BACK_BUTTON_DISABLED' => $offset > 0 ? '' : ' disabled',
'NEXT_OFFSET' => $offset + $max_treffer,
'NEXT_BUTTON_DISABLED' => ($anzahl_treffer != $max_treffer + 1) ? ' disabled' : '',
'LANG_ACCESS_KEYS' => $lang['L_SEARCH_ACCESS_KEYS'], ]);
// Ausgabe der Treffertabelle
$anzahl_felder = sizeof($treffer[0]);
// Ausgabe der Tabellenueberschrift/ Feldnamen
foreach ($treffer[0] as $key => $val) {
$tpl->assign_block_vars('HITS.TABLEHEAD', [
'KEY' => $key, ]);
}
// Ausgabe der Daten
$zeige_treffer = sizeof($treffer);
if ($zeige_treffer == $max_treffer + 1) {
$zeige_treffer = $max_treffer;
}
// built key - does a primary key exist?
$fieldinfos = getExtendedFieldinfo($db, $tables[$table_selected]);
//v($fieldinfos);
// auf zusammengesetzte Schlüssel untersuchen
$table_keys = isset($fieldinfos['primary_keys']) ? $fieldinfos['primary_keys'] : '';
for ($a = 0; $a < $zeige_treffer; ++$a) {
$tablename = array_keys($treffer[$a]);
if (is_array($table_keys) && sizeof($table_keys) > 0) {
// a primary key exitst
$keystring = '';
foreach ($table_keys as $k) {
// remove hit marker from value
$x = str_replace('<span class="treffer">', '', $treffer[$a][$k]);
$x = str_replace('</span>', '', $x);
$keystring .= '`'.$k.'`="'.addslashes($x).'" AND ';
}
$keystring = substr($keystring, 0, -5);
$rk = build_recordkey($keystring);
} else {
$rk = urlencode(build_where_from_record($treffer[$a])); // no keys
}
$delete_link = 'sql.php?search=1&mode=kill&db='.urlencode($db).'&tablename='.urlencode($tables[$table_selected]).'&rk='.$rk;
$edit_link = 'sql.php?mode=searchedit&db='.urlencode($db).'&tablename='.urlencode($tables[$table_selected]).'&recordkey='.$rk;
$tpl->assign_block_vars('HITS.TABLEROW', [
'CLASS' => ($a % 2) ? 'dbrow' : 'dbrow1',
'NR' => $a + $offset + 1,
'TABLENAME' => $tables[$table_selected],
'LINK_EDIT' => $edit_link,
'ICON_EDIT' => $icon['edit'],
'LINK_DELETE' => $delete_link,
'ICON_DELETE' => $icon['delete'], ]);
foreach ($treffer[$a] as $key => $val) {
if ('' == $val) {
$val = '&nbsp;';
}
$tpl->assign_block_vars('HITS.TABLEROW.TABLEDATA', [
'VAL' => $val, ]);
}
}
} else {
if (!isset($tables[$table_selected])) {
$tables[$table_selected] = '';
}
if ('' == $suchbegriffe) {
$tpl->assign_block_vars('NO_ENTRIES', [
'LANG_NO_ENTRIES' => sprintf($lang['L_NO_ENTRIES'], $tables[$table_selected]), ]);
} else {
$tpl->assign_block_vars('NO_RESULTS', [
'LANG_SEARCH_NO_RESULTS' => sprintf($lang['L_SEARCH_NO_RESULTS'], $suchbegriffe, $tables[$table_selected]), ]);
}
}
$tpl->pparse('show');