|
|
@@ -47,256 +47,257 @@
|
|
|
require_once "sql_query_pdo.php";
|
|
|
}
|
|
|
|
|
|
-//set the variables
|
|
|
- $code = trim($_REQUEST["code"]);
|
|
|
//check the captcha
|
|
|
+ $code = trim($_REQUEST["code"]);
|
|
|
$command_authorized = false;
|
|
|
if (strtolower($_SESSION['captcha']) == strtolower($code)) {
|
|
|
$command_authorized = true;
|
|
|
}
|
|
|
if (!$command_authorized) {
|
|
|
//not authorized
|
|
|
+ echo "not authorized";
|
|
|
exit;
|
|
|
}
|
|
|
|
|
|
-if (is_array($_POST)) {
|
|
|
- $sql_type = trim($_POST["sql_type"]);
|
|
|
- $sql_cmd = trim($_POST["cmd"]);
|
|
|
- $table_name = trim($_POST["table_name"]);
|
|
|
-
|
|
|
- $header = "<html>\n";
|
|
|
- $header .= "<head>\n";
|
|
|
- $header .= "<style type='text/css'>\n";
|
|
|
- $header .= "\n";
|
|
|
- $header .= "body {\n";
|
|
|
- $header .= " font-family: arial;\n";
|
|
|
- $header .= " font-size: 12px;\n";
|
|
|
- $header .= " color: #444;\n";
|
|
|
- $header .= "}\n";
|
|
|
- $header .= "\n";
|
|
|
- $header .= "th {\n";
|
|
|
- $header .= " border-top: 1px solid #444;\n";
|
|
|
- $header .= " border-bottom: 1px solid #444;\n";
|
|
|
- $header .= " color: #fff;\n";
|
|
|
- $header .= " font-size: 12px;\n";
|
|
|
- $header .= " font-family: arial;\n";
|
|
|
- $header .= " font-weight: bold;\n";
|
|
|
- $header .= " background-color: #777;\n";
|
|
|
- $header .= " padding: 4px 7px;\n";
|
|
|
- $header .= " text-align: left;\n";
|
|
|
- $header .= "}\n";
|
|
|
- $header .= "\n";
|
|
|
- $header .= ".row_style0 {\n";
|
|
|
- $header .= " background-color: #eee;\n";
|
|
|
- $header .= " border-bottom: 1px solid #999;\n";
|
|
|
- $header .= " border-left: 1px solid #fff;\n";
|
|
|
- $header .= " font-size: 12px;\n";
|
|
|
- $header .= " color: #444;\n";
|
|
|
- $header .= " text-align: left;\n";
|
|
|
- $header .= " padding: 4px 7px;\n";
|
|
|
- $header .= " text-align: left;\n";
|
|
|
- $header .= " vertical-align: top;\n";
|
|
|
- $header .= "}\n";
|
|
|
- $header .= "\n";
|
|
|
- $header .= ".row_style0 a:link{ color:#444; }\n";
|
|
|
- $header .= ".row_style0 a:visited{ color:#444; }\n";
|
|
|
- $header .= ".row_style0 a:hover{ color:#444; }\n";
|
|
|
- $header .= ".row_style0 a:active{ color:#444; }\n";
|
|
|
- $header .= "\n";
|
|
|
- $header .= ".row_style1 {\n";
|
|
|
- $header .= " border-bottom: 1px solid #999;\n";
|
|
|
- $header .= " border-left: 1px solid #eee;\n";
|
|
|
- $header .= " background-color: #fff;\n";
|
|
|
- $header .= " font-size: 12px;\n";
|
|
|
- $header .= " color: #444;\n";
|
|
|
- $header .= " text-align: left;\n";
|
|
|
- $header .= " padding: 4px 7px;\n";
|
|
|
- $header .= " text-align: left;\n";
|
|
|
- $header .= " vertical-align: top;\n";
|
|
|
- $header .= "}\n";
|
|
|
- $header .= "\n";
|
|
|
- $header .= "</style>";
|
|
|
- $header .= "</head>\n";
|
|
|
- $header .= "<body style='margin: 0; padding: 8;'>\n";
|
|
|
-
|
|
|
- $footer = "<body>\n";
|
|
|
- $footer .= "<html>\n";
|
|
|
-
|
|
|
-
|
|
|
- if ($sql_type == '') {
|
|
|
-
|
|
|
- echo $header;
|
|
|
-
|
|
|
- $c = 0;
|
|
|
- $row_style["0"] = "row_style0";
|
|
|
- $row_style["1"] = "row_style1";
|
|
|
-
|
|
|
- //determine queries to run and show
|
|
|
- if ($sql_cmd != '') { $sql_array = array_filter(explode(";", $sql_cmd)); }
|
|
|
- if ($table_name != '') { $sql_array[] = "select * from ".$table_name; }
|
|
|
- $show_query = (sizeof($sql_array) > 1) ? true : false;
|
|
|
-
|
|
|
- if (is_array($sql_array)) foreach($sql_array as $sql_index => $sql) {
|
|
|
- $sql = trim($sql);
|
|
|
-
|
|
|
- if (sizeof($sql_array) > 1 || $show_query) {
|
|
|
- if ($sql_index > 0) { echo "<br /><br /><br />"; }
|
|
|
- echo "<span style='display: block; padding: 8px; color: green; background-color: #eefff0;'>".escape($sql).";</span><br />";
|
|
|
- }
|
|
|
-
|
|
|
- $db->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
|
|
|
- try {
|
|
|
- $prep_statement = $db->prepare(check_sql($sql));
|
|
|
- $prep_statement->execute();
|
|
|
- $result = $prep_statement->fetchAll(PDO::FETCH_ASSOC);
|
|
|
- echo "<b>".$text['label-records'].": ".count($result)."</b>";
|
|
|
- echo "<br /><br />\n";
|
|
|
- }
|
|
|
- catch(PDOException $e) {
|
|
|
- echo "<b>".$text['label-error']."</b>";
|
|
|
- echo "<br /><br />\n";
|
|
|
- echo $e->getMessage();
|
|
|
- echo "<br /><br />\n";
|
|
|
- exit;
|
|
|
- }
|
|
|
-
|
|
|
- echo "<table width='100%' border='0' cellpadding='0' cellspacing='0'>\n";
|
|
|
- $x = 0;
|
|
|
- if (is_array($result[0])) {
|
|
|
- foreach ($result[0] as $key => $value) {
|
|
|
- echo "<th>".escape($key)."</th>";
|
|
|
- $column_array[$x++] = $key;
|
|
|
+//show the content
|
|
|
+ if (is_array($_POST)) {
|
|
|
+ $sql_type = trim($_POST["sql_type"]);
|
|
|
+ $sql_cmd = trim($_POST["command"]);
|
|
|
+ $table_name = trim($_POST["table_name"]);
|
|
|
+
|
|
|
+ $header = "<html>\n";
|
|
|
+ $header .= "<head>\n";
|
|
|
+ $header .= "<style type='text/css'>\n";
|
|
|
+ $header .= "\n";
|
|
|
+ $header .= "body {\n";
|
|
|
+ $header .= " font-family: arial;\n";
|
|
|
+ $header .= " font-size: 12px;\n";
|
|
|
+ $header .= " color: #444;\n";
|
|
|
+ $header .= "}\n";
|
|
|
+ $header .= "\n";
|
|
|
+ $header .= "th {\n";
|
|
|
+ $header .= " border-top: 1px solid #444;\n";
|
|
|
+ $header .= " border-bottom: 1px solid #444;\n";
|
|
|
+ $header .= " color: #fff;\n";
|
|
|
+ $header .= " font-size: 12px;\n";
|
|
|
+ $header .= " font-family: arial;\n";
|
|
|
+ $header .= " font-weight: bold;\n";
|
|
|
+ $header .= " background-color: #777;\n";
|
|
|
+ $header .= " padding: 4px 7px;\n";
|
|
|
+ $header .= " text-align: left;\n";
|
|
|
+ $header .= "}\n";
|
|
|
+ $header .= "\n";
|
|
|
+ $header .= ".row_style0 {\n";
|
|
|
+ $header .= " background-color: #eee;\n";
|
|
|
+ $header .= " border-bottom: 1px solid #999;\n";
|
|
|
+ $header .= " border-left: 1px solid #fff;\n";
|
|
|
+ $header .= " font-size: 12px;\n";
|
|
|
+ $header .= " color: #444;\n";
|
|
|
+ $header .= " text-align: left;\n";
|
|
|
+ $header .= " padding: 4px 7px;\n";
|
|
|
+ $header .= " text-align: left;\n";
|
|
|
+ $header .= " vertical-align: top;\n";
|
|
|
+ $header .= "}\n";
|
|
|
+ $header .= "\n";
|
|
|
+ $header .= ".row_style0 a:link{ color:#444; }\n";
|
|
|
+ $header .= ".row_style0 a:visited{ color:#444; }\n";
|
|
|
+ $header .= ".row_style0 a:hover{ color:#444; }\n";
|
|
|
+ $header .= ".row_style0 a:active{ color:#444; }\n";
|
|
|
+ $header .= "\n";
|
|
|
+ $header .= ".row_style1 {\n";
|
|
|
+ $header .= " border-bottom: 1px solid #999;\n";
|
|
|
+ $header .= " border-left: 1px solid #eee;\n";
|
|
|
+ $header .= " background-color: #fff;\n";
|
|
|
+ $header .= " font-size: 12px;\n";
|
|
|
+ $header .= " color: #444;\n";
|
|
|
+ $header .= " text-align: left;\n";
|
|
|
+ $header .= " padding: 4px 7px;\n";
|
|
|
+ $header .= " text-align: left;\n";
|
|
|
+ $header .= " vertical-align: top;\n";
|
|
|
+ $header .= "}\n";
|
|
|
+ $header .= "\n";
|
|
|
+ $header .= "</style>";
|
|
|
+ $header .= "</head>\n";
|
|
|
+ $header .= "<body style='margin: 0; padding: 8;'>\n";
|
|
|
+
|
|
|
+ $footer = "<body>\n";
|
|
|
+ $footer .= "<html>\n";
|
|
|
+
|
|
|
+
|
|
|
+ if ($sql_type == '') {
|
|
|
+
|
|
|
+ echo $header;
|
|
|
+
|
|
|
+ $c = 0;
|
|
|
+ $row_style["0"] = "row_style0";
|
|
|
+ $row_style["1"] = "row_style1";
|
|
|
+
|
|
|
+ //determine queries to run and show
|
|
|
+ if ($sql_cmd != '') { $sql_array = array_filter(explode(";", $sql_cmd)); }
|
|
|
+ if ($table_name != '') { $sql_array[] = "select * from ".$table_name; }
|
|
|
+ $show_query = (sizeof($sql_array) > 1) ? true : false;
|
|
|
+
|
|
|
+ if (is_array($sql_array)) foreach($sql_array as $sql_index => $sql) {
|
|
|
+ $sql = trim($sql);
|
|
|
+
|
|
|
+ if (sizeof($sql_array) > 1 || $show_query) {
|
|
|
+ if ($sql_index > 0) { echo "<br /><br /><br />"; }
|
|
|
+ echo "<span style='display: block; padding: 8px; color: green; background-color: #eefff0;'>".escape($sql).";</span><br />";
|
|
|
}
|
|
|
- }
|
|
|
- $x = 1;
|
|
|
- if (is_array($result)) {
|
|
|
- foreach ($result as &$row) {
|
|
|
- if ($x++ > 1000) { break; }
|
|
|
- echo "<tr>\n";
|
|
|
- if (is_array($column_array)) {
|
|
|
- foreach ($column_array as $column_index => $column) {
|
|
|
- echo "<td class='".$row_style[$c]."' ".(($column_index == 0) ? "style='border-left: none;'" : null).">".escape($row[$column])." </td>";
|
|
|
- }
|
|
|
- }
|
|
|
- echo "</tr>\n";
|
|
|
- $c = ($c == 0) ? 1 : 0;
|
|
|
- }
|
|
|
- }
|
|
|
- echo "</table>\n";
|
|
|
- echo "<br>\n";
|
|
|
-
|
|
|
- unset($result, $column_array);
|
|
|
- }
|
|
|
- echo $footer;
|
|
|
- }
|
|
|
-
|
|
|
- if ($sql_type == "inserts") {
|
|
|
- echo $header;
|
|
|
-
|
|
|
- $sql = trim($sql);
|
|
|
-
|
|
|
- //get the table data
|
|
|
- $sql = (strlen($sql_cmd) == 0) ? "select * from ".$table_name : $sql_cmd;
|
|
|
-
|
|
|
- if (strlen($sql) > 0) {
|
|
|
- $prep_statement = $db->prepare(check_sql($sql));
|
|
|
- if ($prep_statement) {
|
|
|
+
|
|
|
+ $db->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
|
|
|
+ try {
|
|
|
+ $prep_statement = $db->prepare(check_sql($sql));
|
|
|
$prep_statement->execute();
|
|
|
$result = $prep_statement->fetchAll(PDO::FETCH_ASSOC);
|
|
|
+ echo "<b>".$text['label-records'].": ".count($result)."</b>";
|
|
|
+ echo "<br /><br />\n";
|
|
|
}
|
|
|
- else {
|
|
|
- echo "<b>".$text['label-error']."</b>\n";
|
|
|
+ catch(PDOException $e) {
|
|
|
+ echo "<b>".$text['label-error']."</b>";
|
|
|
echo "<br /><br />\n";
|
|
|
- echo "<pre>".print_r($db->errorInfo(), true)."</pre>\n";
|
|
|
+ echo $e->getMessage();
|
|
|
echo "<br /><br />\n";
|
|
|
exit;
|
|
|
}
|
|
|
-
|
|
|
+
|
|
|
+ echo "<table width='100%' border='0' cellpadding='0' cellspacing='0'>\n";
|
|
|
$x = 0;
|
|
|
if (is_array($result[0])) {
|
|
|
foreach ($result[0] as $key => $value) {
|
|
|
+ echo "<th>".escape($key)."</th>";
|
|
|
$column_array[$x++] = $key;
|
|
|
}
|
|
|
}
|
|
|
-
|
|
|
- $column_array_count = count($column_array);
|
|
|
- if (is_array($result)) foreach ($result as &$row) {
|
|
|
- echo "insert into ".$table_name." (";
|
|
|
- $x = 1;
|
|
|
- if (is_array($column_array)) {
|
|
|
- foreach ($column_array as $column) {
|
|
|
- if ($column != "menuid" && $column != "menuparentid") {
|
|
|
- $columns[] = $column;
|
|
|
+ $x = 1;
|
|
|
+ if (is_array($result)) {
|
|
|
+ foreach ($result as &$row) {
|
|
|
+ if ($x++ > 1000) { break; }
|
|
|
+ echo "<tr>\n";
|
|
|
+ if (is_array($column_array)) {
|
|
|
+ foreach ($column_array as $column_index => $column) {
|
|
|
+ echo "<td class='".$row_style[$c]."' ".(($column_index == 0) ? "style='border-left: none;'" : null).">".escape($row[$column])." </td>";
|
|
|
}
|
|
|
- $x++;
|
|
|
}
|
|
|
+ echo "</tr>\n";
|
|
|
+ $c = ($c == 0) ? 1 : 0;
|
|
|
}
|
|
|
- if (is_array($columns) && sizeof($columns) > 0) {
|
|
|
- echo implode(', ', $columns);
|
|
|
+ }
|
|
|
+ echo "</table>\n";
|
|
|
+ echo "<br>\n";
|
|
|
+
|
|
|
+ unset($result, $column_array);
|
|
|
+ }
|
|
|
+ echo $footer;
|
|
|
+ }
|
|
|
+
|
|
|
+ if ($sql_type == "inserts") {
|
|
|
+ echo $header;
|
|
|
+
|
|
|
+ $sql = trim($sql);
|
|
|
+
|
|
|
+ //get the table data
|
|
|
+ $sql = (strlen($sql_cmd) == 0) ? "select * from ".$table_name : $sql_cmd;
|
|
|
+
|
|
|
+ if (strlen($sql) > 0) {
|
|
|
+ $prep_statement = $db->prepare(check_sql($sql));
|
|
|
+ if ($prep_statement) {
|
|
|
+ $prep_statement->execute();
|
|
|
+ $result = $prep_statement->fetchAll(PDO::FETCH_ASSOC);
|
|
|
}
|
|
|
- echo ") values (";
|
|
|
- $x = 1;
|
|
|
- if (is_array($column_array)) {
|
|
|
- foreach ($column_array as $column) {
|
|
|
- if ($column != "menuid" && $column != "menuparentid") {
|
|
|
- $values[] = ($row[$column] != '') ? "'".check_str($row[$column])."'" : 'null';
|
|
|
- }
|
|
|
- $x++;
|
|
|
+ else {
|
|
|
+ echo "<b>".$text['label-error']."</b>\n";
|
|
|
+ echo "<br /><br />\n";
|
|
|
+ echo "<pre>".print_r($db->errorInfo(), true)."</pre>\n";
|
|
|
+ echo "<br /><br />\n";
|
|
|
+ exit;
|
|
|
+ }
|
|
|
+
|
|
|
+ $x = 0;
|
|
|
+ if (is_array($result[0])) {
|
|
|
+ foreach ($result[0] as $key => $value) {
|
|
|
+ $column_array[$x++] = $key;
|
|
|
}
|
|
|
}
|
|
|
- if (is_array($values) && sizeof($values) > 0) {
|
|
|
- echo implode(', ', escape($values));
|
|
|
+
|
|
|
+ $column_array_count = count($column_array);
|
|
|
+ if (is_array($result)) foreach ($result as &$row) {
|
|
|
+ echo "insert into ".$table_name." (";
|
|
|
+ $x = 1;
|
|
|
+ if (is_array($column_array)) {
|
|
|
+ foreach ($column_array as $column) {
|
|
|
+ if ($column != "menuid" && $column != "menuparentid") {
|
|
|
+ $columns[] = $column;
|
|
|
+ }
|
|
|
+ $x++;
|
|
|
+ }
|
|
|
+ }
|
|
|
+ if (is_array($columns) && sizeof($columns) > 0) {
|
|
|
+ echo implode(', ', $columns);
|
|
|
+ }
|
|
|
+ echo ") values (";
|
|
|
+ $x = 1;
|
|
|
+ if (is_array($column_array)) {
|
|
|
+ foreach ($column_array as $column) {
|
|
|
+ if ($column != "menuid" && $column != "menuparentid") {
|
|
|
+ $values[] = ($row[$column] != '') ? "'".check_str($row[$column])."'" : 'null';
|
|
|
+ }
|
|
|
+ $x++;
|
|
|
+ }
|
|
|
+ }
|
|
|
+ if (is_array($values) && sizeof($values) > 0) {
|
|
|
+ echo implode(', ', escape($values));
|
|
|
+ }
|
|
|
+ echo ");<br />\n";
|
|
|
+ unset($columns, $values);
|
|
|
}
|
|
|
- echo ");<br />\n";
|
|
|
- unset($columns, $values);
|
|
|
- }
|
|
|
- }
|
|
|
- echo $footer;
|
|
|
- }
|
|
|
-
|
|
|
- if ($sql_type == "csv") {
|
|
|
-
|
|
|
- //set the headers
|
|
|
- header('Content-type: application/octet-binary');
|
|
|
- header('Content-Disposition: attachment; filename='.escape($table_name).'.csv');
|
|
|
-
|
|
|
- //get the table data
|
|
|
- $sql = trim($sql);
|
|
|
- $sql = "select * from ".$table_name;
|
|
|
- if (strlen($sql) > 0) {
|
|
|
- $prep_statement = $db->prepare(check_sql($sql));
|
|
|
- if ($prep_statement) {
|
|
|
- $prep_statement->execute();
|
|
|
- $result = $prep_statement->fetchAll(PDO::FETCH_ASSOC);
|
|
|
- }
|
|
|
- else {
|
|
|
- echo "<b>".$text['label-error']."</b>\n";
|
|
|
- echo "<br /><br />\n";
|
|
|
- echo "<pre>".print_r($db->errorInfo(), true)."</pre>\n";
|
|
|
- echo "<br /><br />\n";
|
|
|
- exit;
|
|
|
}
|
|
|
-
|
|
|
- $x = 0;
|
|
|
- if (is_array($result[0])) {
|
|
|
- foreach ($result[0] as $key => $value) {
|
|
|
- $column_array[$x++] = $key;
|
|
|
+ echo $footer;
|
|
|
+ }
|
|
|
+
|
|
|
+ if ($sql_type == "csv") {
|
|
|
+
|
|
|
+ //set the headers
|
|
|
+ header('Content-type: application/octet-binary');
|
|
|
+ header('Content-Disposition: attachment; filename='.escape($table_name).'.csv');
|
|
|
+
|
|
|
+ //get the table data
|
|
|
+ $sql = trim($sql);
|
|
|
+ $sql = "select * from ".$table_name;
|
|
|
+ if (strlen($sql) > 0) {
|
|
|
+ $prep_statement = $db->prepare(check_sql($sql));
|
|
|
+ if ($prep_statement) {
|
|
|
+ $prep_statement->execute();
|
|
|
+ $result = $prep_statement->fetchAll(PDO::FETCH_ASSOC);
|
|
|
}
|
|
|
- }
|
|
|
- //column names
|
|
|
- echo '"'.implode('","', escape($column_array)).'"'."\r\n";
|
|
|
- //column values
|
|
|
- if (is_array($result)) {
|
|
|
- foreach ($result as &$row) {
|
|
|
- $x = 1;
|
|
|
- foreach ($column_array as $column) {
|
|
|
- echo '"'.escape($row[$column]).'"'.(($x++ < count($column_array)) ? ',' : null);
|
|
|
+ else {
|
|
|
+ echo "<b>".$text['label-error']."</b>\n";
|
|
|
+ echo "<br /><br />\n";
|
|
|
+ echo "<pre>".print_r($db->errorInfo(), true)."</pre>\n";
|
|
|
+ echo "<br /><br />\n";
|
|
|
+ exit;
|
|
|
+ }
|
|
|
+
|
|
|
+ $x = 0;
|
|
|
+ if (is_array($result[0])) {
|
|
|
+ foreach ($result[0] as $key => $value) {
|
|
|
+ $column_array[$x++] = $key;
|
|
|
+ }
|
|
|
+ }
|
|
|
+ //column names
|
|
|
+ echo '"'.implode('","', escape($column_array)).'"'."\r\n";
|
|
|
+ //column values
|
|
|
+ if (is_array($result)) {
|
|
|
+ foreach ($result as &$row) {
|
|
|
+ $x = 1;
|
|
|
+ foreach ($column_array as $column) {
|
|
|
+ echo '"'.escape($row[$column]).'"'.(($x++ < count($column_array)) ? ',' : null);
|
|
|
+ }
|
|
|
+ echo "\n";
|
|
|
}
|
|
|
- echo "\n";
|
|
|
}
|
|
|
}
|
|
|
- }
|
|
|
+ }
|
|
|
}
|
|
|
-}
|
|
|
|
|
|
?>
|
FusionPBX