Update sql_query_result.php

This commit is contained in:
FusionPBX 2019-04-27 08:40:12 -06:00 committed by GitHub
parent f945e7ec60
commit 5d8be271c8
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 222 additions and 221 deletions

View File

@ -47,256 +47,257 @@
require_once "sql_query_pdo.php";
}
//set the variables
$code = trim($_REQUEST["code"]);
//check the captcha
$code = trim($_REQUEST["code"]);
$command_authorized = false;
if (strtolower($_SESSION['captcha']) == strtolower($code)) {
$command_authorized = true;
}
if (!$command_authorized) {
//not authorized
echo "not authorized";
exit;
}
if (is_array($_POST)) {
$sql_type = trim($_POST["sql_type"]);
$sql_cmd = trim($_POST["cmd"]);
$table_name = trim($_POST["table_name"]);
$header = "<html>\n";
$header .= "<head>\n";
$header .= "<style type='text/css'>\n";
$header .= "\n";
$header .= "body {\n";
$header .= " font-family: arial;\n";
$header .= " font-size: 12px;\n";
$header .= " color: #444;\n";
$header .= "}\n";
$header .= "\n";
$header .= "th {\n";
$header .= " border-top: 1px solid #444;\n";
$header .= " border-bottom: 1px solid #444;\n";
$header .= " color: #fff;\n";
$header .= " font-size: 12px;\n";
$header .= " font-family: arial;\n";
$header .= " font-weight: bold;\n";
$header .= " background-color: #777;\n";
$header .= " padding: 4px 7px;\n";
$header .= " text-align: left;\n";
$header .= "}\n";
$header .= "\n";
$header .= ".row_style0 {\n";
$header .= " background-color: #eee;\n";
$header .= " border-bottom: 1px solid #999;\n";
$header .= " border-left: 1px solid #fff;\n";
$header .= " font-size: 12px;\n";
$header .= " color: #444;\n";
$header .= " text-align: left;\n";
$header .= " padding: 4px 7px;\n";
$header .= " text-align: left;\n";
$header .= " vertical-align: top;\n";
$header .= "}\n";
$header .= "\n";
$header .= ".row_style0 a:link{ color:#444; }\n";
$header .= ".row_style0 a:visited{ color:#444; }\n";
$header .= ".row_style0 a:hover{ color:#444; }\n";
$header .= ".row_style0 a:active{ color:#444; }\n";
$header .= "\n";
$header .= ".row_style1 {\n";
$header .= " border-bottom: 1px solid #999;\n";
$header .= " border-left: 1px solid #eee;\n";
$header .= " background-color: #fff;\n";
$header .= " font-size: 12px;\n";
$header .= " color: #444;\n";
$header .= " text-align: left;\n";
$header .= " padding: 4px 7px;\n";
$header .= " text-align: left;\n";
$header .= " vertical-align: top;\n";
$header .= "}\n";
$header .= "\n";
$header .= "</style>";
$header .= "</head>\n";
$header .= "<body style='margin: 0; padding: 8;'>\n";
$footer = "<body>\n";
$footer .= "<html>\n";
if ($sql_type == '') {
echo $header;
$c = 0;
$row_style["0"] = "row_style0";
$row_style["1"] = "row_style1";
//determine queries to run and show
if ($sql_cmd != '') { $sql_array = array_filter(explode(";", $sql_cmd)); }
if ($table_name != '') { $sql_array[] = "select * from ".$table_name; }
$show_query = (sizeof($sql_array) > 1) ? true : false;
if (is_array($sql_array)) foreach($sql_array as $sql_index => $sql) {
$sql = trim($sql);
if (sizeof($sql_array) > 1 || $show_query) {
if ($sql_index > 0) { echo "<br /><br /><br />"; }
echo "<span style='display: block; padding: 8px; color: green; background-color: #eefff0;'>".escape($sql).";</span><br />";
}
$db->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
try {
$prep_statement = $db->prepare(check_sql($sql));
$prep_statement->execute();
$result = $prep_statement->fetchAll(PDO::FETCH_ASSOC);
echo "<b>".$text['label-records'].": ".count($result)."</b>";
echo "<br /><br />\n";
}
catch(PDOException $e) {
echo "<b>".$text['label-error']."</b>";
echo "<br /><br />\n";
echo $e->getMessage();
echo "<br /><br />\n";
exit;
}
echo "<table width='100%' border='0' cellpadding='0' cellspacing='0'>\n";
$x = 0;
if (is_array($result[0])) {
foreach ($result[0] as $key => $value) {
echo "<th>".escape($key)."</th>";
$column_array[$x++] = $key;
//show the content
if (is_array($_POST)) {
$sql_type = trim($_POST["sql_type"]);
$sql_cmd = trim($_POST["command"]);
$table_name = trim($_POST["table_name"]);
$header = "<html>\n";
$header .= "<head>\n";
$header .= "<style type='text/css'>\n";
$header .= "\n";
$header .= "body {\n";
$header .= " font-family: arial;\n";
$header .= " font-size: 12px;\n";
$header .= " color: #444;\n";
$header .= "}\n";
$header .= "\n";
$header .= "th {\n";
$header .= " border-top: 1px solid #444;\n";
$header .= " border-bottom: 1px solid #444;\n";
$header .= " color: #fff;\n";
$header .= " font-size: 12px;\n";
$header .= " font-family: arial;\n";
$header .= " font-weight: bold;\n";
$header .= " background-color: #777;\n";
$header .= " padding: 4px 7px;\n";
$header .= " text-align: left;\n";
$header .= "}\n";
$header .= "\n";
$header .= ".row_style0 {\n";
$header .= " background-color: #eee;\n";
$header .= " border-bottom: 1px solid #999;\n";
$header .= " border-left: 1px solid #fff;\n";
$header .= " font-size: 12px;\n";
$header .= " color: #444;\n";
$header .= " text-align: left;\n";
$header .= " padding: 4px 7px;\n";
$header .= " text-align: left;\n";
$header .= " vertical-align: top;\n";
$header .= "}\n";
$header .= "\n";
$header .= ".row_style0 a:link{ color:#444; }\n";
$header .= ".row_style0 a:visited{ color:#444; }\n";
$header .= ".row_style0 a:hover{ color:#444; }\n";
$header .= ".row_style0 a:active{ color:#444; }\n";
$header .= "\n";
$header .= ".row_style1 {\n";
$header .= " border-bottom: 1px solid #999;\n";
$header .= " border-left: 1px solid #eee;\n";
$header .= " background-color: #fff;\n";
$header .= " font-size: 12px;\n";
$header .= " color: #444;\n";
$header .= " text-align: left;\n";
$header .= " padding: 4px 7px;\n";
$header .= " text-align: left;\n";
$header .= " vertical-align: top;\n";
$header .= "}\n";
$header .= "\n";
$header .= "</style>";
$header .= "</head>\n";
$header .= "<body style='margin: 0; padding: 8;'>\n";
$footer = "<body>\n";
$footer .= "<html>\n";
if ($sql_type == '') {
echo $header;
$c = 0;
$row_style["0"] = "row_style0";
$row_style["1"] = "row_style1";
//determine queries to run and show
if ($sql_cmd != '') { $sql_array = array_filter(explode(";", $sql_cmd)); }
if ($table_name != '') { $sql_array[] = "select * from ".$table_name; }
$show_query = (sizeof($sql_array) > 1) ? true : false;
if (is_array($sql_array)) foreach($sql_array as $sql_index => $sql) {
$sql = trim($sql);
if (sizeof($sql_array) > 1 || $show_query) {
if ($sql_index > 0) { echo "<br /><br /><br />"; }
echo "<span style='display: block; padding: 8px; color: green; background-color: #eefff0;'>".escape($sql).";</span><br />";
}
}
$x = 1;
if (is_array($result)) {
foreach ($result as &$row) {
if ($x++ > 1000) { break; }
echo "<tr>\n";
if (is_array($column_array)) {
foreach ($column_array as $column_index => $column) {
echo "<td class='".$row_style[$c]."' ".(($column_index == 0) ? "style='border-left: none;'" : null).">".escape($row[$column])."&nbsp;</td>";
}
}
echo "</tr>\n";
$c = ($c == 0) ? 1 : 0;
}
}
echo "</table>\n";
echo "<br>\n";
unset($result, $column_array);
}
echo $footer;
}
if ($sql_type == "inserts") {
echo $header;
$sql = trim($sql);
//get the table data
$sql = (strlen($sql_cmd) == 0) ? "select * from ".$table_name : $sql_cmd;
if (strlen($sql) > 0) {
$prep_statement = $db->prepare(check_sql($sql));
if ($prep_statement) {
$db->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
try {
$prep_statement = $db->prepare(check_sql($sql));
$prep_statement->execute();
$result = $prep_statement->fetchAll(PDO::FETCH_ASSOC);
}
else {
echo "<b>".$text['label-error']."</b>\n";
echo "<b>".$text['label-records'].": ".count($result)."</b>";
echo "<br /><br />\n";
echo "<pre>".print_r($db->errorInfo(), true)."</pre>\n";
}
catch(PDOException $e) {
echo "<b>".$text['label-error']."</b>";
echo "<br /><br />\n";
echo $e->getMessage();
echo "<br /><br />\n";
exit;
}
echo "<table width='100%' border='0' cellpadding='0' cellspacing='0'>\n";
$x = 0;
if (is_array($result[0])) {
foreach ($result[0] as $key => $value) {
echo "<th>".escape($key)."</th>";
$column_array[$x++] = $key;
}
}
$column_array_count = count($column_array);
if (is_array($result)) foreach ($result as &$row) {
echo "insert into ".$table_name." (";
$x = 1;
if (is_array($column_array)) {
foreach ($column_array as $column) {
if ($column != "menuid" && $column != "menuparentid") {
$columns[] = $column;
}
$x++;
}
}
if (is_array($columns) && sizeof($columns) > 0) {
echo implode(', ', $columns);
}
echo ") values (";
$x = 1;
if (is_array($column_array)) {
foreach ($column_array as $column) {
if ($column != "menuid" && $column != "menuparentid") {
$values[] = ($row[$column] != '') ? "'".check_str($row[$column])."'" : 'null';
}
$x++;
}
}
if (is_array($values) && sizeof($values) > 0) {
echo implode(', ', escape($values));
}
echo ");<br />\n";
unset($columns, $values);
}
}
echo $footer;
}
if ($sql_type == "csv") {
//set the headers
header('Content-type: application/octet-binary');
header('Content-Disposition: attachment; filename='.escape($table_name).'.csv');
//get the table data
$sql = trim($sql);
$sql = "select * from ".$table_name;
if (strlen($sql) > 0) {
$prep_statement = $db->prepare(check_sql($sql));
if ($prep_statement) {
$prep_statement->execute();
$result = $prep_statement->fetchAll(PDO::FETCH_ASSOC);
}
else {
echo "<b>".$text['label-error']."</b>\n";
echo "<br /><br />\n";
echo "<pre>".print_r($db->errorInfo(), true)."</pre>\n";
echo "<br /><br />\n";
exit;
}
$x = 0;
if (is_array($result[0])) {
foreach ($result[0] as $key => $value) {
$column_array[$x++] = $key;
}
}
//column names
echo '"'.implode('","', escape($column_array)).'"'."\r\n";
//column values
$x = 1;
if (is_array($result)) {
foreach ($result as &$row) {
$x = 1;
foreach ($column_array as $column) {
echo '"'.escape($row[$column]).'"'.(($x++ < count($column_array)) ? ',' : null);
if ($x++ > 1000) { break; }
echo "<tr>\n";
if (is_array($column_array)) {
foreach ($column_array as $column_index => $column) {
echo "<td class='".$row_style[$c]."' ".(($column_index == 0) ? "style='border-left: none;'" : null).">".escape($row[$column])."&nbsp;</td>";
}
}
echo "\n";
echo "</tr>\n";
$c = ($c == 0) ? 1 : 0;
}
}
echo "</table>\n";
echo "<br>\n";
unset($result, $column_array);
}
echo $footer;
}
if ($sql_type == "inserts") {
echo $header;
$sql = trim($sql);
//get the table data
$sql = (strlen($sql_cmd) == 0) ? "select * from ".$table_name : $sql_cmd;
if (strlen($sql) > 0) {
$prep_statement = $db->prepare(check_sql($sql));
if ($prep_statement) {
$prep_statement->execute();
$result = $prep_statement->fetchAll(PDO::FETCH_ASSOC);
}
else {
echo "<b>".$text['label-error']."</b>\n";
echo "<br /><br />\n";
echo "<pre>".print_r($db->errorInfo(), true)."</pre>\n";
echo "<br /><br />\n";
exit;
}
$x = 0;
if (is_array($result[0])) {
foreach ($result[0] as $key => $value) {
$column_array[$x++] = $key;
}
}
$column_array_count = count($column_array);
if (is_array($result)) foreach ($result as &$row) {
echo "insert into ".$table_name." (";
$x = 1;
if (is_array($column_array)) {
foreach ($column_array as $column) {
if ($column != "menuid" && $column != "menuparentid") {
$columns[] = $column;
}
$x++;
}
}
if (is_array($columns) && sizeof($columns) > 0) {
echo implode(', ', $columns);
}
echo ") values (";
$x = 1;
if (is_array($column_array)) {
foreach ($column_array as $column) {
if ($column != "menuid" && $column != "menuparentid") {
$values[] = ($row[$column] != '') ? "'".check_str($row[$column])."'" : 'null';
}
$x++;
}
}
if (is_array($values) && sizeof($values) > 0) {
echo implode(', ', escape($values));
}
echo ");<br />\n";
unset($columns, $values);
}
}
echo $footer;
}
if ($sql_type == "csv") {
//set the headers
header('Content-type: application/octet-binary');
header('Content-Disposition: attachment; filename='.escape($table_name).'.csv');
//get the table data
$sql = trim($sql);
$sql = "select * from ".$table_name;
if (strlen($sql) > 0) {
$prep_statement = $db->prepare(check_sql($sql));
if ($prep_statement) {
$prep_statement->execute();
$result = $prep_statement->fetchAll(PDO::FETCH_ASSOC);
}
else {
echo "<b>".$text['label-error']."</b>\n";
echo "<br /><br />\n";
echo "<pre>".print_r($db->errorInfo(), true)."</pre>\n";
echo "<br /><br />\n";
exit;
}
$x = 0;
if (is_array($result[0])) {
foreach ($result[0] as $key => $value) {
$column_array[$x++] = $key;
}
}
//column names
echo '"'.implode('","', escape($column_array)).'"'."\r\n";
//column values
if (is_array($result)) {
foreach ($result as &$row) {
$x = 1;
foreach ($column_array as $column) {
echo '"'.escape($row[$column]).'"'.(($x++ < count($column_array)) ? ',' : null);
}
echo "\n";
}
}
}
}
}
}
?>