fusionpbx-app-sql_query/sql_query_pdo.php

<?php
/*
 FusionPBX
 Version: MPL 1.1

 The contents of this file are subject to the Mozilla Public License Version
 1.1 (the "License"); you may not use this file except in compliance with
 the License. You may obtain a copy of the License at
 http://www.mozilla.org/MPL/

 Software distributed under the License is distributed on an "AS IS" basis,
 WITHOUT WARRANTY OF ANY KIND, either express or implied. See the License
 for the specific language governing rights and limitations under the
 License.

 The Original Code is FusionPBX

 The Initial Developer of the Original Code is
 Mark J Crane <[email protected]>
 Portions created by the Initial Developer are Copyright (C) 2008-2025
 the Initial Developer. All Rights Reserved.

 Contributor(s):
 Mark J Crane <[email protected]>
 */

//includes files
	require_once dirname(__DIR__, 2) . "/resources/require.php";
	require_once "resources/check_auth.php";

//check permissions
	if (!permission_exists('sql_query')) {
		echo "access denied";
		exit;
	}

//connect to the database
	$database = database::new();

 //set the default values
	if (isset($db_file_path) > 0) {
		$db_path = $db_file_path;
		$db_name = $dbfilename;
	}

//get the db connection information
	if (!empty($_REQUEST['id']) && is_uuid($_REQUEST['id'])) {
		$sql = "select * from v_databases ";
		$sql .= "where database_uuid = :database_uuid ";
		$parameters['database_uuid'] = $_REQUEST['id'];
		$row = $database->select($sql, $parameters, 'row');
		if (is_array($row) && @sizeof($row) != 0) {
			$db_type = $row["database_type"];
			$db_host = $row["database_host"];
			$db_port = $row["database_port"];
			$db_name = $row["database_name"];
			$db_username = $row["database_username"];
			$db_password = $row["database_password"];
			$db_path = $row["database_path"];
		}
		unset($sql, $parameters, $row);
	}

//unset the database connection
	unset($db);

if (!function_exists('get_db_field_names')) {
	function get_db_field_names($db, $table, $db_name='fusionpbx') {
		$query = sprintf('SELECT * FROM %s LIMIT 1', $table);
		foreach ($db->query($query, PDO::FETCH_ASSOC) as $row) {
			return array_keys($row);
		}

		// if we're still here, we need to try something else
		$fields = array();
		$driver = $db->getAttribute(PDO::ATTR_DRIVER_NAME);
		if ($driver == 'sqlite') {
			$query = sprintf("Pragma table_info(%s);", $table);
			$stmt = $db->prepare($query);
			$result = $stmt->execute();
			$rows = $stmt->fetchAll(PDO::FETCH_NAMED);
			//printf('<pre>%s</pre>', print_r($rows, true));
			$row_count = count($rows);
			//printf('<pre>%s</pre>', print_r($rows, true));
			for ($i = 0; $i < $row_count; $i++) {
				array_push($fields, $rows[$i]['name']);
			}
			return $fields;
		}
		else {
			$query = sprintf("SELECT * FROM information_schema.columns WHERE table_schema='%s' AND table_name='%s';", $db_name, $table);
			$stmt = $db->prepare($query);
			$result	= $stmt->execute();
			$rows = $stmt->fetchAll(PDO::FETCH_NAMED);
			$row_count= count($rows);
			//printf('<pre>%s</pre>', print_r($rows, true));
			for ($i = 0; $i < $row_count; $i++) {
				array_push($fields, $rows[$i]['COLUMN_NAME']);
			}
			return $fields;
		}
	}
}

if ($db_type == "sqlite") {
	if (!function_exists('phpmd5')) {
		function phpmd5($string) {
			return md5($string);
		}
	}

	if (!function_exists('php_unix_timestamp')) {
		function php_unix_timestamp($string) {
			return strtotime($string);
		}
	}

	if (!function_exists('phpnow')) {
		function phpnow() {
			return date("Y-m-d H:i:s");
		}
	}

	if (!function_exists('php_left')) {
		function php_left($string, $num) {
			return substr($string, 0, $num);
		}
	}

	if (!function_exists('php_right')) {
		function php_right($string, $num) {
			return substr($string, (strlen($string)-$num), strlen($string));
		}
	}

	if (!function_exists('php_sqlite_data_type')) {
		function php_sqlite_data_type($string, $field) {

			//get the string between the start and end characters
			$start = '(';
			$end = ')';
			$ini = stripos($string,$start);
			if ($ini == 0) return "";
			$ini += strlen($start);
			$len = stripos($string,$end,$ini) - $ini;
			$string = substr($string,$ini,$len);

			$str_data_type = '';
			$string_array = explode(',', $string);
			foreach($string_array as $value) {
				$field_list_array = explode (" ", $value);
				unset($fieldarray, $string, $field);
			}

			return $str_data_type;
		}
	} //end function

	//database connection
	try {
		//$db = new PDO('sqlite2:example.db'); //sqlite 2
		//$db = new PDO('sqlite::memory:'); //sqlite 3
		$db = new PDO('sqlite:'.realpath($db_path).'/'.$db_name); //sqlite 3

		//add additional functions to SQLite so that they are accessible inside SQL
		//bool PDO::sqliteCreateFunction ( string function_name, callback callback [, int num_args] )
		$db->sqliteCreateFunction('md5', 'phpmd5', 1);
		$db->sqliteCreateFunction('unix_timestamp', 'php_unix_timestamp', 1);
		$db->sqliteCreateFunction('now', 'phpnow', 0);
		$db->sqliteCreateFunction('sqlitedatatype', 'php_sqlite_data_type', 2);
		$db->sqliteCreateFunction('strleft', 'php_left', 2);
		$db->sqliteCreateFunction('strright', 'php_right', 2);
	}
	catch (PDOException $error) {
		print "error: " . $error->getMessage() . "<br/>";
		die();
	}
} //end if db_type sqlite

if ($db_type == "mysql") {
	//database connection
	try {
		//mysql pdo connection
			if (strlen($db_host) == 0 && strlen($db_port) == 0) {
				//if both host and port are empty use the unix socket
				$db = new PDO("mysql:host=$db_host;unix_socket=/var/run/mysqld/mysqld.sock;dbname=$db_name", $db_username, $db_password);
			}
			else {
				if (strlen($db_port) == 0) {
					//leave out port if it is empty
					$db = new PDO("mysql:host=$db_host;dbname=$db_name;", $db_username, $db_password, array(
					PDO::ATTR_ERRMODE,
					PDO::ERRMODE_EXCEPTION
					));
				}
				else {
					$db = new PDO("mysql:host=$db_host;port=$db_port;dbname=$db_name;", $db_username, $db_password, array(
					PDO::ATTR_ERRMODE,
					PDO::ERRMODE_EXCEPTION
					));
				}
			}
	}
	catch (PDOException $error) {
		print "error: " . $error->getMessage() . "<br/>";
		die();
	}
} //end if db_type mysql

if ($db_type == "pgsql") {
	//database connection
	try {
		if (strlen($db_host) > 0) {
			if (strlen($db_port) == 0) { $db_port = "5432"; }
			$db = new PDO("pgsql:host=$db_host port=$db_port dbname=$db_name user=$db_username password=$db_password");
		}
		else {
			$db = new PDO("pgsql:dbname=$db_name user=$db_username password=$db_password");
		}
	}
	catch (PDOException $error) {
		print "error: " . $error->getMessage() . "<br/>";
		die();
	}
} //end if db_type pgsql

if ($db_type == "odbc") {
	//database connection
		try {
			unset($db);
			$db = new PDO("odbc:$db_name", "$db_username", "$db_password");
		}
		catch (PDOException $e) {
		   echo 'Connection failed: ' . $e->getMessage();
		}
} //end if db_type odbc