| 123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267 |
- <?php
- /*
- FusionPBX
- Version: MPL 1.1
- The contents of this file are subject to the Mozilla Public License Version
- 1.1 (the "License"); you may not use this file except in compliance with
- the License. You may obtain a copy of the License at
- http://www.mozilla.org/MPL/
- Software distributed under the License is distributed on an "AS IS" basis,
- WITHOUT WARRANTY OF ANY KIND, either express or implied. See the License
- for the specific language governing rights and limitations under the
- License.
- The Original Code is FusionPBX
- The Initial Developer of the Original Code is
- Mark J Crane <[email protected]>
- Portions created by the Initial Developer are Copyright (C) 2008-2012
- the Initial Developer. All Rights Reserved.
- Contributor(s):
- Mark J Crane <[email protected]>
- */
- include "root.php";
- require_once "resources/require.php";
- require_once "resources/check_auth.php";
- if (permission_exists('exec_sql')) {
- //access granted
- }
- else {
- echo "access denied";
- exit;
- }
- //add multi-lingual support
- $language = new text;
- $text = $language->get();
- //pdo database connection
- if (strlen($_REQUEST['id']) > 0) {
- require_once "sql_query_pdo.php";
- }
- if (count($_POST)>0) {
- $sql_type = trim($_POST["sql_type"]);
- $sql_cmd = trim($_POST["cmd"]);
- $table_name = trim($_POST["table_name"]);
- $header = "<html>\n";
- $header .= "<head>\n";
- $header .= "<style type='text/css'>\n";
- $header .= "\n";
- $header .= "body {\n";
- $header .= " font-family: arial;\n";
- $header .= " font-size: 12px;\n";
- $header .= " color: #444;\n";
- $header .= "}\n";
- $header .= "\n";
- $header .= "th {\n";
- $header .= " border-top: 1px solid #444;\n";
- $header .= " border-bottom: 1px solid #444;\n";
- $header .= " color: #fff;\n";
- $header .= " font-size: 12px;\n";
- $header .= " font-family: arial;\n";
- $header .= " font-weight: bold;\n";
- $header .= " background-color: #777;\n";
- $header .= " padding: 4px 7px;\n";
- $header .= " text-align: left;\n";
- $header .= "}\n";
- $header .= "\n";
- $header .= ".row_style0 {\n";
- $header .= " background-color: #eee;\n";
- $header .= " border-bottom: 1px solid #999;\n";
- $header .= " border-left: 1px solid #fff;\n";
- $header .= " font-size: 12px;\n";
- $header .= " color: #444;\n";
- $header .= " text-align: left;\n";
- $header .= " padding: 4px 7px;\n";
- $header .= " text-align: left;\n";
- $header .= " vertical-align: top;\n";
- $header .= "}\n";
- $header .= "\n";
- $header .= ".row_style0 a:link{ color:#444; }\n";
- $header .= ".row_style0 a:visited{ color:#444; }\n";
- $header .= ".row_style0 a:hover{ color:#444; }\n";
- $header .= ".row_style0 a:active{ color:#444; }\n";
- $header .= "\n";
- $header .= ".row_style1 {\n";
- $header .= " border-bottom: 1px solid #999;\n";
- $header .= " border-left: 1px solid #eee;\n";
- $header .= " background-color: #fff;\n";
- $header .= " font-size: 12px;\n";
- $header .= " color: #444;\n";
- $header .= " text-align: left;\n";
- $header .= " padding: 4px 7px;\n";
- $header .= " text-align: left;\n";
- $header .= " vertical-align: top;\n";
- $header .= "}\n";
- $header .= "\n";
- $header .= "</style>";
- $header .= "</head>\n";
- $header .= "<body style='margin: 0; padding: 8;'>\n";
- $footer = "<body>\n";
- $footer .= "<html>\n";
- if ($sql_type == '') {
- echo $header;
- $c = 0;
- $row_style["0"] = "row_style0";
- $row_style["1"] = "row_style1";
- //determine queries to run and show
- if ($sql_cmd != '') { $sql_array = array_filter(explode(";", $sql_cmd)); }
- if ($table_name != '') { $sql_array[] = "select * from ".$table_name; }
- $show_query = (sizeof($sql_array) > 1) ? true : false;
- reset($sql_array);
- foreach($sql_array as $sql_index => $sql) {
- $sql = trim($sql);
- if (sizeof($sql_array) > 1 || $show_query) {
- if ($sql_index > 0) { echo "<br /><br /><br />"; }
- echo "<span style='display: block; padding: 8px; color: green; background-color: #eefff0;'>".$sql.";</span><br />";
- }
- $db->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
- try {
- $prep_statement = $db->prepare(check_sql($sql));
- $prep_statement->execute();
- $result = $prep_statement->fetchAll(PDO::FETCH_ASSOC);
- echo "<b>".$text['label-records'].": ".count($result)."</b>";
- echo "<br /><br />\n";
- }
- catch(PDOException $e) {
- echo "<b>".$text['label-error']."</b>";
- echo "<br /><br />\n";
- echo $e->getMessage();
- echo "<br /><br />\n";
- exit;
- }
- echo "<table width='100%' border='0' cellpadding='0' cellspacing='0'>\n";
- $x = 0;
- foreach ($result[0] as $key => $value) {
- echo "<th>".$key."</th>";
- $column_array[$x++] = $key;
- }
- $x = 1;
- foreach ($result as &$row) {
- if ($x++ > 1000) { break; }
- echo "<tr>\n";
- foreach ($column_array as $column_index => $column) {
- echo "<td class='".$row_style[$c]."' ".(($column_index == 0) ? "style='border-left: none;'" : null).">".$row[$column]." </td>";
- }
- echo "</tr>\n";
- $c = ($c == 0) ? 1 : 0;
- }
- echo "</table>\n";
- echo "<br>\n";
- unset($result, $column_array);
- }
- echo $footer;
- }
- if ($sql_type == "inserts") {
- echo $header;
- $sql = trim($sql);
- //get the table data
- $sql = (strlen($sql_cmd) == 0) ? "select * from ".$table_name : $sql_cmd;
- if (strlen($sql) > 0) {
- $prep_statement = $db->prepare(check_sql($sql));
- if ($prep_statement) {
- $prep_statement->execute();
- $result = $prep_statement->fetchAll(PDO::FETCH_ASSOC);
- }
- else {
- echo "<b>".$text['label-error']."</b>\n";
- echo "<br /><br />\n";
- echo "<pre>".print_r($db->errorInfo(), true)."</pre>\n";
- echo "<br /><br />\n";
- exit;
- }
- $x = 0;
- foreach ($result[0] as $key => $value) {
- $column_array[$x++] = $key;
- }
- $column_array_count = count($column_array);
- foreach ($result as &$row) {
- echo "insert into ".$table_name." (";
- $x = 1;
- foreach ($column_array as $column) {
- if ($column != "menuid" && $column != "menuparentid") {
- echo $column.(($x < $column_array_count) ? "," : null);
- }
- $x++;
- }
- echo ") ";
- echo "values ( ";
- $x = 1;
- foreach ($column_array as $column) {
- if ($column != "menuid" && $column != "menuparentid") {
- echo (!is_null($row[$column])) ? "\"".check_str($row[$column])."\"".(($x < $column_array_count) ? ',' : null) : 'null';
- }
- $x++;
- }
- echo ");<br />\n";
- }
- }
- echo $footer;
- }
- if ($sql_type == "csv") {
- //set the headers
- header('Content-type: application/octet-binary');
- header('Content-Disposition: attachment; filename='.$table_name.'.csv');
- //get the table data
- $sql = trim($sql);
- $sql = "select * from ".$table_name;
- if (strlen($sql) > 0) {
- $prep_statement = $db->prepare(check_sql($sql));
- if ($prep_statement) {
- $prep_statement->execute();
- $result = $prep_statement->fetchAll(PDO::FETCH_ASSOC);
- }
- else {
- echo "<b>".$text['label-error']."</b>\n";
- echo "<br /><br />\n";
- echo "<pre>".print_r($db->errorInfo(), true)."</pre>\n";
- echo "<br /><br />\n";
- exit;
- }
- $x = 0;
- foreach ($result[0] as $key => $value) {
- $column_array[$x++] = $key;
- }
- //column names
- echo '"'.implode('","', $column_array).'"'."\r\n";
- //column values
- foreach ($result as &$row) {
- $x = 1;
- foreach ($column_array as $column) {
- echo '"'.check_str($row[$column]).'"'.(($x++ < count($column_array)) ? ',' : null);
- }
- echo "\n";
- }
- }
- }
- }
- ?>
|