/libraries/Util.class.php

Large files files are truncated, but you can click here to view the full file

<?php
/* vim: set expandtab sw=4 ts=4 sts=4: */
/**
 * Hold the PMA_Util class
 *
 * @package PhpMyAdmin
 */
if (! defined('PHPMYADMIN')) {
    exit;
}

/**
 * Misc functions used all over the scripts.
 *
 * @package PhpMyAdmin
 */
class PMA_Util
{

    /**
     * Detects which function to use for pow.
     *
     * @return string Function name.
     */
    public static function detectPow()
    {
        if (function_exists('bcpow')) {
            // BCMath Arbitrary Precision Mathematics Function
            return 'bcpow';
        } elseif (function_exists('gmp_pow')) {
            // GMP Function
            return 'gmp_pow';
        } else {
            // PHP function
            return 'pow';
        }
    }

    /**
     * Exponential expression / raise number into power
     *
     * @param string $base         base to raise
     * @param string $exp          exponent to use
     * @param mixed  $use_function pow function to use, or false for auto-detect
     *
     * @return mixed string or float
     */
    public static function pow($base, $exp, $use_function = false)
    {
        static $pow_function = null;

        if ($pow_function == null) {
            $pow_function = self::detectPow();
        }

        if (! $use_function) {
            if ($exp < 0) {
                $use_function = 'pow';
            } else {
                $use_function = $pow_function;
            }
        }

        if (($exp < 0) && ($use_function != 'pow')) {
            return false;
        }

        switch ($use_function) {
        case 'bcpow' :
            // bcscale() needed for testing pow() with base values < 1
            bcscale(10);
            $pow = bcpow($base, $exp);
            break;
        case 'gmp_pow' :
             $pow = gmp_strval(gmp_pow($base, $exp));
            break;
        case 'pow' :
            $base = (float) $base;
            $exp = (int) $exp;
            $pow = pow($base, $exp);
            break;
        default:
            $pow = $use_function($base, $exp);
        }

        return $pow;
    }

    /**
     * Returns an HTML IMG tag for a particular icon from a theme,
     * which may be an actual file or an icon from a sprite.
     * This function takes into account the ActionLinksMode 
     * configuration setting and wraps the image tag in a span tag.
     *
     * @param string  $icon          name of icon file
     * @param string  $alternate     alternate text
     * @param boolean $force_text    whether to force alternate text to be displayed
     * @param boolean $menu_icon     whether this icon is for the menu bar or not
     * @param string  $control_param which directive controls the display
     *
     * @return string an html snippet
     */
    public static function getIcon(
        $icon, $alternate = '', $force_text = false,
        $menu_icon = false, $control_param = 'ActionLinksMode'
    ) {
        $include_icon = $include_text = false;
        if (in_array(
                $GLOBALS['cfg'][$control_param], 
                array('icons', 'both')
            )
        ) { 
            $include_icon = true;
        } 
        if ($force_text
            || in_array(
                $GLOBALS['cfg'][$control_param], 
                array('text', 'both')
            )
        ) {
            $include_text = true; 
        }
        // Sometimes use a span (we rely on this in js/sql.js). But for menu bar
        // we don't need a span
        $button = $menu_icon ? '' : '<span class="nowrap">';
        if ($include_icon) {
            $button .= self::getImage($icon, $alternate);
        }
        if ($include_icon && $include_text) {
            $button .= ' ';
        }
        if ($include_text) {
            $button .= $alternate;
        }
        $button .= $menu_icon ? '' : '</span>';

        return $button;
    }

    /**
     * Returns an HTML IMG tag for a particular image from a theme,
     * which may be an actual file or an icon from a sprite
     *
     * @param string $image      The name of the file to get
     * @param string $alternate  Used to set 'alt' and 'title' attributes
     *                           of the image
     * @param array  $attributes An associative array of other attributes
     *
     * @return string an html IMG tag
     */
    public static function getImage($image, $alternate = '', $attributes = array())
    {
        static $sprites; // cached list of available sprites (if any)
        if (defined('TESTSUITE')) {
            // prevent caching in testsuite
            unset($sprites);
        }

        $url       = '';
        $is_sprite = false;
        $alternate = htmlspecialchars($alternate);

        // If it's the first time this function is called
        if (! isset($sprites)) {
            // Try to load the list of sprites
            if (is_readable($_SESSION['PMA_Theme']->getPath() . '/sprites.lib.php')) {
                include_once $_SESSION['PMA_Theme']->getPath() . '/sprites.lib.php';
                $sprites = PMA_sprites();
            } else {
                // No sprites are available for this theme
                $sprites = array();
            }
        }

        // Check if we have the requested image as a sprite
        //  and set $url accordingly
        $class = str_replace(array('.gif','.png'), '', $image);
        if (array_key_exists($class, $sprites)) {
            $is_sprite = true;
            $url = (defined('PMA_TEST_THEME') ? '../' : '') . 'themes/dot.gif';
        } else {
            $url = $GLOBALS['pmaThemeImage'] . $image;
        }

        // set class attribute
        if ($is_sprite) {
            if (isset($attributes['class'])) {
                $attributes['class'] = "icon ic_$class " . $attributes['class'];
            } else {
                $attributes['class'] = "icon ic_$class";
            }
        }

        // set all other attributes
        $attr_str = '';
        foreach ($attributes as $key => $value) {
            if (! in_array($key, array('alt', 'title'))) {
                $attr_str .= " $key=\"$value\"";
            }
        }

        // override the alt attribute
        if (isset($attributes['alt'])) {
            $alt = $attributes['alt'];
        } else {
            $alt = $alternate;
        }

        // override the title attribute
        if (isset($attributes['title'])) {
            $title = $attributes['title'];
        } else {
            $title = $alternate;
        }

        // generate the IMG tag
        $template = '<img src="%s" title="%s" alt="%s"%s />';
        $retval = sprintf($template, $url, $title, $alt, $attr_str);

        return $retval;
    }

    /**
     * Returns the formatted maximum size for an upload
     *
     * @param integer $max_upload_size the size
     *
     * @return string the message
     *
     * @access  public
     */
    public static function getFormattedMaximumUploadSize($max_upload_size)
    {
        // I have to reduce the second parameter (sensitiveness) from 6 to 4
        // to avoid weird results like 512 kKib
        list($max_size, $max_unit) = self::formatByteDown($max_upload_size, 4);
        return '(' . sprintf(__('Max: %s%s'), $max_size, $max_unit) . ')';
    }

    /**
     * Generates a hidden field which should indicate to the browser
     * the maximum size for upload
     *
     * @param integer $max_size the size
     *
     * @return string the INPUT field
     *
     * @access  public
     */
    public static function generateHiddenMaxFileSize($max_size)
    {
        return '<input type="hidden" name="MAX_FILE_SIZE" value="'
            . $max_size . '" />';
    }

    /**
     * Add slashes before "'" and "\" characters so a value containing them can
     * be used in a sql comparison.
     *
     * @param string $a_string the string to slash
     * @param bool   $is_like  whether the string will be used in a 'LIKE' clause
     *                         (it then requires two more escaped sequences) or not
     * @param bool   $crlf     whether to treat cr/lfs as escape-worthy entities
     *                         (converts \n to \\n, \r to \\r)
     * @param bool   $php_code whether this function is used as part of the
     *                         "Create PHP code" dialog
     *
     * @return string   the slashed string
     *
     * @access  public
     */
    public static function sqlAddSlashes(
        $a_string = '', $is_like = false, $crlf = false, $php_code = false
    ) {
        if ($is_like) {
            $a_string = str_replace('\\', '\\\\\\\\', $a_string);
        } else {
            $a_string = str_replace('\\', '\\\\', $a_string);
        }

        if ($crlf) {
            $a_string = strtr(
                $a_string,
                array("\n" => '\n', "\r" => '\r', "\t" => '\t')
            );
        }

        if ($php_code) {
            $a_string = str_replace('\'', '\\\'', $a_string);
        } else {
            $a_string = str_replace('\'', '\'\'', $a_string);
        }

        return $a_string;
    } // end of the 'sqlAddSlashes()' function

    /**
     * Add slashes before "_" and "%" characters for using them in MySQL
     * database, table and field names.
     * Note: This function does not escape backslashes!
     *
     * @param string $name the string to escape
     *
     * @return string the escaped string
     *
     * @access  public
     */
    public static function escapeMysqlWildcards($name)
    {
        return strtr($name, array('_' => '\\_', '%' => '\\%'));
    } // end of the 'escapeMysqlWildcards()' function

    /**
     * removes slashes before "_" and "%" characters
     * Note: This function does not unescape backslashes!
     *
     * @param string $name the string to escape
     *
     * @return string   the escaped string
     *
     * @access  public
     */
    public static function unescapeMysqlWildcards($name)
    {
        return strtr($name, array('\\_' => '_', '\\%' => '%'));
    } // end of the 'unescapeMysqlWildcards()' function

    /**
     * removes quotes (',",`) from a quoted string
     *
     * checks if the string is quoted and removes this quotes
     *
     * @param string $quoted_string string to remove quotes from
     * @param string $quote         type of quote to remove
     *
     * @return string unqoted string
     */
    public static function unQuote($quoted_string, $quote = null)
    {
        $quotes = array();

        if ($quote === null) {
            $quotes[] = '`';
            $quotes[] = '"';
            $quotes[] = "'";
        } else {
            $quotes[] = $quote;
        }

        foreach ($quotes as $quote) {
            if (substr($quoted_string, 0, 1) === $quote
                && substr($quoted_string, -1, 1) === $quote
            ) {
                $unquoted_string = substr($quoted_string, 1, -1);
                // replace escaped quotes
                $unquoted_string = str_replace(
                    $quote . $quote,
                    $quote,
                    $unquoted_string
                );
                return $unquoted_string;
            }
        }

        return $quoted_string;
    }

    /**
     * format sql strings
     *
     * @param mixed  $parsed_sql   pre-parsed SQL structure
     * @param string $unparsed_sql raw SQL string
     *
     * @return string  the formatted sql
     *
     * @global  array    the configuration array
     * @global  boolean  whether the current statement is a multiple one or not
     *
     * @access  public
     * @todo    move into PMA_Sql
     */
    public static function formatSql($parsed_sql, $unparsed_sql = '')
    {
        global $cfg;

        // Check that we actually have a valid set of parsed data
        // well, not quite
        // first check for the SQL parser having hit an error
        if (PMA_SQP_isError()) {
            return htmlspecialchars($parsed_sql['raw']);
        }
        // then check for an array
        if (! is_array($parsed_sql)) {
            // We don't so just return the input directly
            // This is intended to be used for when the SQL Parser is turned off
            $formatted_sql = "<pre>\n";
            if (($cfg['SQP']['fmtType'] == 'none') && ($unparsed_sql != '')) {
                $formatted_sql .= $unparsed_sql;
            } else {
                $formatted_sql .= $parsed_sql;
            }
            $formatted_sql .= "\n</pre>";
            return $formatted_sql;
        }

        $formatted_sql = '';

        switch ($cfg['SQP']['fmtType']) {
        case 'none':
            if ($unparsed_sql != '') {
                $formatted_sql = '<span class="inner_sql"><pre>' . "\n"
                    . PMA_SQP_formatNone(array('raw' => $unparsed_sql)) . "\n"
                    . '</pre></span>';
            } else {
                $formatted_sql = PMA_SQP_formatNone($parsed_sql);
            }
            break;
        case 'html':
            $formatted_sql = PMA_SQP_formatHtml($parsed_sql, 'color');
            break;
        case 'text':
            $formatted_sql = PMA_SQP_formatHtml($parsed_sql, 'text');
            break;
        default:
            break;
        } // end switch

        return $formatted_sql;
    } // end of the "formatSql()" function

    /**
     * Displays a link to the documentation as an icon
     *
     * @param string $link   documentation link
     * @param string $target optional link target
     *
     * @return string the html link
     *
     * @access public
     */
    public static function showDocLink($link, $target = 'documentation')
    {
        return '<a href="' . $link . '" target="' . $target . '">'
            . self::getImage('b_help.png', __('Documentation'))
            . '</a>';
    } // end of the 'showDocLink()' function

    /**
     * Displays a link to the official MySQL documentation
     *
     * @param string $chapter   chapter of "HTML, one page per chapter" documentation
     * @param string $link      contains name of page/anchor that is being linked
     * @param bool   $big_icon  whether to use big icon (like in left frame)
     * @param string $anchor    anchor to page part
     * @param bool   $just_open whether only the opening <a> tag should be returned
     *
     * @return string  the html link
     *
     * @access  public
     */
    public static function showMySQLDocu(
        $chapter, $link, $big_icon = false, $anchor = '', $just_open = false
    ) {
        global $cfg;

        if (($cfg['MySQLManualType'] == 'none') || empty($cfg['MySQLManualBase'])) {
            return '';
        }

        // Fixup for newly used names:
        $chapter = str_replace('_', '-', strtolower($chapter));
        $link = str_replace('_', '-', strtolower($link));

        switch ($cfg['MySQLManualType']) {
        case 'chapters':
            if (empty($chapter)) {
                $chapter = 'index';
            }
            if (empty($anchor)) {
                $anchor = $link;
            }
            $url = $cfg['MySQLManualBase'] . '/' . $chapter . '.html#' . $anchor;
            break;
        case 'big':
            if (empty($anchor)) {
                $anchor = $link;
            }
            $url = $cfg['MySQLManualBase'] . '#' . $anchor;
            break;
        case 'searchable':
            if (empty($link)) {
                $link = 'index';
            }
            $url = $cfg['MySQLManualBase'] . '/' . $link . '.html';
            if (! empty($anchor)) {
                $url .= '#' . $anchor;
            }
            break;
        case 'viewable':
        default:
            if (empty($link)) {
                $link = 'index';
            }
            $mysql = '5.5';
            $lang = 'en';
            if (defined('PMA_MYSQL_INT_VERSION')) {
                if (PMA_MYSQL_INT_VERSION >= 50600) {
                    $mysql = '5.6';
                } else if (PMA_MYSQL_INT_VERSION >= 50500) {
                    $mysql = '5.5';
                } else if (PMA_MYSQL_INT_VERSION >= 50100) {
                    $mysql = '5.1';
                } else {
                    $mysql = '5.0';
                }
            }
            $url = $cfg['MySQLManualBase']
                . '/' . $mysql . '/' . $lang . '/' . $link . '.html';
            if (! empty($anchor)) {
                $url .= '#' . $anchor;
            }
            break;
        }

        $open_link = '<a href="' . PMA_linkURL($url) . '" target="mysql_doc">';
        if ($just_open) {
            return $open_link;
        } elseif ($big_icon) {
            return $open_link
                . self::getImage('b_sqlhelp.png', __('Documentation')) . '</a>';
        } else {
            return self::showDocLink(PMA_linkURL($url), 'mysql_doc');
        }
    } // end of the 'showMySQLDocu()' function

    /**
     * Returns link to documentation.
     *
     * @param string $page   Page in documentation
     * @param string $anchor Optional anchor in page
     *
     * @return string URL
     */
    public static function getDocuLink($page, $anchor = '')
    {
        /* Construct base URL */
        $url =  $page . '.html';
        if (!empty($anchor)) {
            $url .= '#' . $anchor;
        }

        /* Check if we have built local documentation */
        if (defined('TESTSUITE')) {
            /* Provide consistent URL for testsuite */
            return PMA_linkURL('http://docs.phpmyadmin.net/en/latest/' . $url);
        } else if (file_exists('doc/html/index.html')) {
            if (defined('PMA_SETUP')) {
                return '../doc/html/' . $url;
            } else {
                return './doc/html/' . $url;
            }
        } else {
            /* TODO: Should link to correct branch for released versions */
            return PMA_linkURL('http://docs.phpmyadmin.net/en/latest/' . $url);
        }
    }

    /**
     * Displays a link to the phpMyAdmin documentation
     *
     * @param string $page   Page in documentation
     * @param string $anchor Optional anchor in page
     *
     * @return string  the html link
     *
     * @access  public
     */
    public static function showDocu($page, $anchor = '')
    {
        return self::showDocLink(self::getDocuLink($page, $anchor));
    } // end of the 'showDocu()' function

    /**
     * Displays a link to the PHP documentation
     *
     * @param string $target anchor in documentation
     *
     * @return string  the html link
     *
     * @access  public
     */
    public static function showPHPDocu($target)
    {
        $url = PMA_getPHPDocLink($target);

        return self::showDocLink($url);
    } // end of the 'showPHPDocu()' function

    /**
     * Returns HTML code for a tooltip
     *
     * @param string $message the message for the tooltip
     *
     * @return string
     *
     * @access  public
     */
    public static function showHint($message)
    {
        if ($GLOBALS['cfg']['ShowHint']) {
            $classClause = ' class="pma_hint"';
        } else {
            $classClause = '';
        }
        return '<span' . $classClause . '>'
            . self::getImage('b_help.png')
            . '<span class="hide">' . $message . '</span>'
            . '</span>';
    }

    /**
     * Displays a MySQL error message in the main panel when $exit is true.
     * Returns the error message otherwise.
     *
     * @param string $error_message  the error message
     * @param string $the_query      the sql query that failed
     * @param bool   $is_modify_link whether to show a "modify" link or not
     * @param string $back_url       the "back" link url (full path is not required)
     * @param bool   $exit           EXIT the page?
     *
     * @return mixed
     *
     * @global  string    the curent table
     * @global  string    the current db
     *
     * @access  public
     */
    public static function mysqlDie(
        $error_message = '', $the_query = '',
        $is_modify_link = true, $back_url = '', $exit = true
    ) {
        global $table, $db;

        $error_msg = '';

        if (! $error_message) {
            $error_message = PMA_DBI_getError();
        }
        if (! $the_query && ! empty($GLOBALS['sql_query'])) {
            $the_query = $GLOBALS['sql_query'];
        }

        // --- Added to solve bug #641765
        if (! function_exists('PMA_SQP_isError') || PMA_SQP_isError()) {
            $formatted_sql = htmlspecialchars($the_query);
        } elseif (empty($the_query) || (trim($the_query) == '')) {
            $formatted_sql = '';
        } else {
            if (strlen($the_query) > $GLOBALS['cfg']['MaxCharactersInDisplayedSQL']) {
                $formatted_sql = htmlspecialchars(
                    substr(
                        $the_query, 0,
                        $GLOBALS['cfg']['MaxCharactersInDisplayedSQL']
                    )
                )
                . '[...]';
            } else {
                $formatted_sql = self::formatSql(
                    PMA_SQP_parse($the_query), $the_query
                );
            }
        }
        // ---
        $error_msg .= "\n" . '<!-- PMA-SQL-ERROR -->' . "\n";
        $error_msg .= '    <div class="error"><h1>' . __('Error')
            . '</h1>' . "\n";
        // if the config password is wrong, or the MySQL server does not
        // respond, do not show the query that would reveal the
        // username/password
        if (! empty($the_query) && ! strstr($the_query, 'connect')) {
            // --- Added to solve bug #641765
            if (function_exists('PMA_SQP_isError') && PMA_SQP_isError()) {
                $error_msg .= PMA_SQP_getErrorString() . "\n";
                $error_msg .= '<br />' . "\n";
            }
            // ---
            // modified to show the help on sql errors
            $error_msg .= '<p><strong>' . __('SQL query') . ':</strong>' . "\n";
            if (strstr(strtolower($formatted_sql), 'select')) {
                // please show me help to the error on select
                $error_msg .= self::showMySQLDocu('SQL-Syntax', 'SELECT');
            }
            if ($is_modify_link) {
                $_url_params = array(
                    'sql_query' => $the_query,
                    'show_query' => 1,
                );
                if (strlen($table)) {
                    $_url_params['db'] = $db;
                    $_url_params['table'] = $table;
                    $doedit_goto = '<a href="tbl_sql.php'
                        . PMA_generate_common_url($_url_params) . '">';
                } elseif (strlen($db)) {
                    $_url_params['db'] = $db;
                    $doedit_goto = '<a href="db_sql.php'
                        . PMA_generate_common_url($_url_params) . '">';
                } else {
                    $doedit_goto = '<a href="server_sql.php'
                        . PMA_generate_common_url($_url_params) . '">';
                }

                $error_msg .= $doedit_goto
                   . self::getIcon('b_edit.png', __('Edit'))
                   . '</a>';
            } // end if
            $error_msg .= '    </p>' . "\n"
                .'<p>' . "\n"
                . $formatted_sql . "\n"
                . '</p>' . "\n";
        } // end if

        if (! empty($error_message)) {
            $error_message = preg_replace(
                "@((\015\012)|(\015)|(\012)){3,}@",
                "\n\n",
                $error_message
            );
        }
        // modified to show the help on error-returns
        // (now error-messages-server)
        $error_msg .= '<p>' . "\n"
            . '    <strong>' . __('MySQL said: ') . '</strong>'
            . self::showMySQLDocu('Error-messages-server', 'Error-messages-server')
            . "\n"
            . '</p>' . "\n";

        // The error message will be displayed within a CODE segment.
        // To preserve original formatting, but allow wordwrapping,
        // we do a couple of replacements

        // Replace all non-single blanks with their HTML-counterpart
        $error_message = str_replace('  ', '&nbsp;&nbsp;', $error_message);
        // Replace TAB-characters with their HTML-counterpart
        $error_message = str_replace(
            "\t", '&nbsp;&nbsp;&nbsp;&nbsp;', $error_message
        );
        // Replace linebreaks
        $error_message = nl2br($error_message);

        $error_msg .= '<code>' . "\n"
            . $error_message . "\n"
            . '</code><br />' . "\n";
        $error_msg .= '</div>';

        $_SESSION['Import_message']['message'] = $error_msg;

        if ($exit) {
            /**
             * If in an Ajax request
             * - avoid displaying a Back link
             * - use PMA_Response() to transmit the message and exit
             */
            if ($GLOBALS['is_ajax_request'] == true) {
                $response = PMA_Response::getInstance();
                $response->isSuccess(false);
                $response->addJSON('message', $error_msg);
                exit;
            }
            if (! empty($back_url)) {
                if (strstr($back_url, '?')) {
                    $back_url .= '&amp;no_history=true';
                } else {
                    $back_url .= '?no_history=true';
                }

                $_SESSION['Import_message']['go_back_url'] = $back_url;

                $error_msg .= '<fieldset class="tblFooters">'
                    . '[ <a href="' . $back_url . '">' . __('Back') . '</a> ]'
                    . '</fieldset>' . "\n\n";
            }
            echo $error_msg;
            exit;
        } else {
            return $error_msg;
        }
    } // end of the 'mysqlDie()' function

    /**
     * returns array with tables of given db with extended information and grouped
     *
     * @param string   $db           name of db
     * @param string   $tables       name of tables
     * @param integer  $limit_offset list offset
     * @param int|bool $limit_count  max tables to return
     *
     * @return array    (recursive) grouped table list
     */
    public static function getTableList(
        $db, $tables = null, $limit_offset = 0, $limit_count = false
    ) {
        $sep = $GLOBALS['cfg']['NavigationTreeTableSeparator'];

        if ($tables === null) {
            $tables = PMA_DBI_get_tables_full(
                $db, false, false, null, $limit_offset, $limit_count
            );
            if ($GLOBALS['cfg']['NaturalOrder']) {
                uksort($tables, 'strnatcasecmp');
            }
        }

        if (count($tables) < 1) {
            return $tables;
        }

        $default = array(
            'Name'      => '',
            'Rows'      => 0,
            'Comment'   => '',
            'disp_name' => '',
        );

        $table_groups = array();

        foreach ($tables as $table_name => $table) {
            // check for correct row count
            if ($table['Rows'] === null) {
                // Do not check exact row count here,
                // if row count is invalid possibly the table is defect
                // and this would break left frame;
                // but we can check row count if this is a view or the
                // information_schema database
                // since PMA_Table::countRecords() returns a limited row count
                // in this case.

                // set this because PMA_Table::countRecords() can use it
                $tbl_is_view = $table['TABLE_TYPE'] == 'VIEW';

                if ($tbl_is_view || PMA_is_system_schema($db)) {
                    $table['Rows'] = PMA_Table::countRecords(
                        $db,
                        $table['Name'],
                        false,
                        true
                    );
                }
            }

            // in $group we save the reference to the place in $table_groups
            // where to store the table info
            if ($GLOBALS['cfg']['NavigationTreeEnableGrouping']
                && $sep && strstr($table_name, $sep)
            ) {
                $parts = explode($sep, $table_name);

                $group =& $table_groups;
                $i = 0;
                $group_name_full = '';
                $parts_cnt = count($parts) - 1;

                while (($i < $parts_cnt)
                    && ($i < $GLOBALS['cfg']['NavigationTreeTableLevel'])
                ) {
                    $group_name = $parts[$i] . $sep;
                    $group_name_full .= $group_name;

                    if (! isset($group[$group_name])) {
                        $group[$group_name] = array();
                        $group[$group_name]['is' . $sep . 'group'] = true;
                        $group[$group_name]['tab' . $sep . 'count'] = 1;
                        $group[$group_name]['tab' . $sep . 'group']
                            = $group_name_full;

                    } elseif (! isset($group[$group_name]['is' . $sep . 'group'])) {
                        $table = $group[$group_name];
                        $group[$group_name] = array();
                        $group[$group_name][$group_name] = $table;
                        unset($table);
                        $group[$group_name]['is' . $sep . 'group'] = true;
                        $group[$group_name]['tab' . $sep . 'count'] = 1;
                        $group[$group_name]['tab' . $sep . 'group']
                            = $group_name_full;

                    } else {
                        $group[$group_name]['tab' . $sep . 'count']++;
                    }

                    $group =& $group[$group_name];
                    $i++;
                }

            } else {
                if (! isset($table_groups[$table_name])) {
                    $table_groups[$table_name] = array();
                }
                $group =& $table_groups;
            }

            $table['disp_name'] = $table['Name'];
            $group[$table_name] = array_merge($default, $table);
        }

        return $table_groups;
    }

    /* ----------------------- Set of misc functions ----------------------- */

    /**
     * Adds backquotes on both sides of a database, table or field name.
     * and escapes backquotes inside the name with another backquote
     *
     * example:
     * <code>
     * echo backquote('owner`s db'); // `owner``s db`
     *
     * </code>
     *
     * @param mixed   $a_name the database, table or field name to "backquote"
     *                        or array of it
     * @param boolean $do_it  a flag to bypass this function (used by dump
     *                        functions)
     *
     * @return mixed    the "backquoted" database, table or field name
     *
     * @access  public
     */
    public static function backquote($a_name, $do_it = true)
    {
        if (is_array($a_name)) {
            foreach ($a_name as &$data) {
                $data = self::backquote($data, $do_it);
            }
            return $a_name;
        }

        if (! $do_it) {
            global $PMA_SQPdata_forbidden_word;
            if (! in_array(strtoupper($a_name), $PMA_SQPdata_forbidden_word)) {
                return $a_name;
            }
        }

        // '0' is also empty for php :-(
        if (strlen($a_name) && $a_name !== '*') {
            return '`' . str_replace('`', '``', $a_name) . '`';
        } else {
            return $a_name;
        }
    } // end of the 'backquote()' function

    /**
     * Adds quotes on both sides of a database, table or field name.
     * in compatibility mode
     *
     * example:
     * <code>
     * echo backquote('owner`s db'); // `owner``s db`
     *
     * </code>
     *
     * @param mixed   $a_name        the database, table or field name to
     *                               "backquote" or array of it
     * @param string  $compatibility string compatibility mode (used by dump
     *                               functions)
     * @param boolean $do_it         a flag to bypass this function (used by dump
     *                               functions)
     *
     * @return mixed the "backquoted" database, table or field name
     *
     * @access  public
     */
    public static function backquoteCompat(
        $a_name, $compatibility = 'MSSQL', $do_it = true
    ) {
        if (is_array($a_name)) {
            foreach ($a_name as &$data) {
                $data = self::backquoteCompat($data, $compatibility, $do_it);
            }
            return $a_name;
        }

        if (! $do_it) {
            global $PMA_SQPdata_forbidden_word;
            if (! in_array(strtoupper($a_name), $PMA_SQPdata_forbidden_word)) {
                return $a_name;
            }
        }

        // @todo add more compatibility cases (ORACLE for example)
        switch ($compatibility) {
        case 'MSSQL':
            $quote = '"';
            break;
        default:
            (isset($GLOBALS['sql_backquotes'])) ? $quote = "`" : $quote = '';
            break;
        }

        // '0' is also empty for php :-(
        if (strlen($a_name) && $a_name !== '*') {
            return $quote . $a_name . $quote;
        } else {
            return $a_name;
        }
    } // end of the 'backquoteCompat()' function

    /**
     * Defines the <CR><LF> value depending on the user OS.
     *
     * @return string   the <CR><LF> value to use
     *
     * @access  public
     */
    public static function whichCrlf()
    {
        // The 'PMA_USR_OS' constant is defined in "libraries/Config.class.php"
        // Win case
        if (PMA_USR_OS == 'Win') {
            $the_crlf = "\r\n";
        } else {
            // Others
            $the_crlf = "\n";
        }

        return $the_crlf;
    } // end of the 'whichCrlf()' function

    /**
     * Prepare the message and the query
     * usually the message is the result of the query executed
     *
     * @param string  $message   the message to display
     * @param string  $sql_query the query to display
     * @param string  $type      the type (level) of the message
     * @param boolean $is_view   is this a message after a VIEW operation?
     *
     * @return string
     *
     * @access  public
     */
    public static function getMessage(
        $message, $sql_query = null, $type = 'notice', $is_view = false
    ) {
        global $cfg;
        $retval = '';

        if (null === $sql_query) {
            if (! empty($GLOBALS['display_query'])) {
                $sql_query = $GLOBALS['display_query'];
            } elseif ($cfg['SQP']['fmtType'] == 'none'
                && ! empty($GLOBALS['unparsed_sql'])
            ) {
                $sql_query = $GLOBALS['unparsed_sql'];
            } elseif (! empty($GLOBALS['sql_query'])) {
                $sql_query = $GLOBALS['sql_query'];
            } else {
                $sql_query = '';
            }
        }

        if (isset($GLOBALS['using_bookmark_message'])) {
            $retval .= $GLOBALS['using_bookmark_message']->getDisplay();
            unset($GLOBALS['using_bookmark_message']);
        }

        // In an Ajax request, $GLOBALS['cell_align_left'] may not be defined. Hence,
        // check for it's presence before using it
        $retval .= '<div id="result_query"'
            . ( isset($GLOBALS['cell_align_left'])
                ? ' style="text-align: ' . $GLOBALS['cell_align_left'] . '"'
                : '' )
            . '>' . "\n";

        if ($message instanceof PMA_Message) {
            if (isset($GLOBALS['special_message'])) {
                $message->addMessage($GLOBALS['special_message']);
                unset($GLOBALS['special_message']);
            }
            $retval .= $message->getDisplay();
        } else {
            $retval .= '<div class="' . $type . '">';
            $retval .= PMA_sanitize($message);
            if (isset($GLOBALS['special_message'])) {
                $retval .= PMA_sanitize($GLOBALS['special_message']);
                unset($GLOBALS['special_message']);
            }
            $retval .= '</div>';
        }

        if ($cfg['ShowSQL'] == true && ! empty($sql_query)) {
            // Html format the query to be displayed
            // If we want to show some sql code it is easiest to create it here
            /* SQL-Parser-Analyzer */

            if (! empty($GLOBALS['show_as_php'])) {
                $new_line = '\\n"<br />' . "\n"
                    . '&nbsp;&nbsp;&nbsp;&nbsp;. "';
                $query_base = htmlspecialchars(addslashes($sql_query));
                $query_base = preg_replace(
                    '/((\015\012)|(\015)|(\012))/', $new_line, $query_base
                );
            } else {
                $query_base = $sql_query;
            }

            $query_too_big = false;

            if (strlen($query_base) > $cfg['MaxCharactersInDisplayedSQL']) {
                // when the query is large (for example an INSERT of binary
                // data), the parser chokes; so avoid parsing the query
                $query_too_big = true;
                $shortened_query_base = nl2br(
                    htmlspecialchars(
                        substr($sql_query, 0, $cfg['MaxCharactersInDisplayedSQL'])
                        . '[...]'
                    )
                );
            } elseif (! empty($GLOBALS['parsed_sql'])
             && $query_base == $GLOBALS['parsed_sql']['raw']) {
                // (here, use "! empty" because when deleting a bookmark,
                // $GLOBALS['parsed_sql'] is set but empty
                $parsed_sql = $GLOBALS['parsed_sql'];
            } else {
                // Parse SQL if needed
                $parsed_sql = PMA_SQP_parse($query_base);
            }

            // Analyze it
            if (isset($parsed_sql) && ! PMA_SQP_isError()) {
                $analyzed_display_query = PMA_SQP_analyze($parsed_sql);

                // Same as below (append LIMIT), append the remembered ORDER BY
                if ($GLOBALS['cfg']['RememberSorting']
                    && isset($analyzed_display_query[0]['queryflags']['select_from'])
                    && isset($GLOBALS['sql_order_to_append'])
                ) {
                    $query_base = $analyzed_display_query[0]['section_before_limit']
                        . "\n" . $GLOBALS['sql_order_to_append']
                        . $analyzed_display_query[0]['limit_clause'] . ' '
                        . $analyzed_display_query[0]['section_after_limit'];

                    // Need to reparse query
                    $parsed_sql = PMA_SQP_parse($query_base);
                    // update the $analyzed_display_query
                    $analyzed_display_query[0]['section_before_limit']
                        .= $GLOBALS['sql_order_to_append'];
                    $analyzed_display_query[0]['order_by_clause']
                        = $GLOBALS['sorted_col'];
                }

                // Here we append the LIMIT added for navigation, to
                // enable its display. Adding it higher in the code
                // to $sql_query would create a problem when
                // using the Refresh or Edit links.

                // Only append it on SELECTs.

                /**
                 * @todo what would be the best to do when someone hits Refresh:
                 * use the current LIMITs ?
                 */

                if (isset($analyzed_display_query[0]['queryflags']['select_from'])
                    && ! empty($GLOBALS['sql_limit_to_append'])
                ) {
                    $query_base = $analyzed_display_query[0]['section_before_limit']
                        . "\n" . $GLOBALS['sql_limit_to_append']
                        . $analyzed_display_query[0]['section_after_limit'];
                    // Need to reparse query
                    $parsed_sql = PMA_SQP_parse($query_base);
                }
            }

            if (! empty($GLOBALS['show_as_php'])) {
                $query_base = '$sql  = "' . $query_base;
            } elseif (! empty($GLOBALS['validatequery'])) {
                try {
                    $query_base = PMA_validateSQL($query_base);
                } catch (Exception $e) {
                    $retval .= PMA_Message::error(
                        __('Failed to connect to SQL validator!')
                    )->getDisplay();
                }
            } elseif (isset($parsed_sql)) {
                $query_base = self::formatSql($parsed_sql, $query_base);
            }

            // Prepares links that may be displayed to edit/explain the query
            // (don't go to default pages, we must go to the page
            // where the query box is available)

            // Basic url query part
            $url_params = array();
            if (! isset($GLOBALS['db'])) {
                $GLOBALS['db'] = '';
            }
            if (strlen($GLOBALS['db'])) {
                $url_params['db'] = $GLOBALS['db'];
                if (strlen($GLOBALS['table'])) {
                    $url_params['table'] = $GLOBALS['table'];
                    $edit_link = 'tbl_sql.php';
                } else {
                    $edit_link = 'db_sql.php';
                }
            } else {
                $edit_link = 'server_sql.php';
            }

            // Want to have the query explained
            // but only explain a SELECT (that has not been explained)
            /* SQL-Parser-Analyzer */
            $explain_link = '';
            $is_select = false;
            if (! empty($cfg['SQLQuery']['Explain']) && ! $query_too_big) {
                $explain_params = $url_params;
                // Detect if we are validating as well
                // To preserve the validate uRL data
                if (! empty($GLOBALS['validatequery'])) {
                    $explain_params['validatequery'] = 1;
                }
                if (preg_match('@^SELECT[[:space:]]+@i', $sql_query)) {
                    $explain_params['sql_query'] = 'EXPLAIN ' . $sql_query;
                    $_message = __('Explain SQL');
                    $is_select = true;
                } elseif (
                    preg_match(
                        '@^EXPLAIN[[:space:]]+SELECT[[:space:]]+@i', $sql_query
                    )
                ) {
                    $explain_params['sql_query'] = substr($sql_query, 8);
                    $_message = __('Skip Explain SQL');
                }
                if (isset($explain_params['sql_query'])) {
                    $explain_link = 'import.php'
                        . PMA_generate_common_url($explain_params);
                    $explain_link = ' ['
                        . self::linkOrButton($explain_link, $_message) . ']';
                }
            } //show explain

            $url_params['sql_query']  = $sql_query;
            $url_params['show_query'] = 1;

            // even if the query is big and was truncated, offer the chance
            // to edit it (unless it's enormous, see linkOrButton() )
            if (! empty($cfg['SQLQuery']['Edit'])) {
                if ($cfg['EditInWindow'] == true) {
                    $onclick = 'PMA_querywindow.focus(\''
                        . PMA_jsFormat($sql_query, false) . '\'); return false;';
                } else {
                    $onclick = '';
                }

                $edit_link .= PMA_generate_common_url($url_params) . '#querybox';
                $edit_link = ' ['
                    . self::linkOrButton(
                        $edit_link, __('Edit'),
                        array('onclick' => $onclick, 'class' => 'disableAjax')
                    )
                    . ']';
            } else {
                $edit_link = '';
            }

            // Also we would like to get the SQL formed in some nice
            // php-code
            if (! empty($cfg['SQLQuery']['ShowAsPHP']) && ! $query_too_big) {
                $php_params = $url_params;

                if (! empty($GLOBALS['show_as_php'])) {
                    $_message = __('Without PHP Code');
                } else {
                    $php_params['show_as_php'] = 1;
                    $_message = __('Create PHP Code');
                }

                $php_link = 'import.php' . PMA_generate_common_url($php_params);
                $php_link = ' [' . self::linkOrButton($php_link, $_message) . ']';

                if (isset($GLOBALS['show_as_php'])) {

                    $runquery_link = 'import.php'
                        . PMA_generate_common_url($url_params);

                    $php_link .= ' ['
                        . self::linkOrButton($runquery_link, __('Submit Query'))
                        . ']';
                }
            } else {
                $php_link = '';
            } //show as php

            // Refresh query
            if (! empty($cfg['SQLQuery']['Refresh'])
                && ! isset($GLOBALS['show_as_php']) // 'Submit query' does the same
                && preg_match('@^(SELECT|SHOW)[[:space:]]+@i', $sql_query)
            ) {
                $refresh_link = 'import.php' . PMA_generate_common_url($url_params);
                $refresh_link = ' ['
                    . self::linkOrButton($refresh_link, __('Refresh')) . ']';
            } else {
                $refresh_link = '';
            } //refresh

            if (! empty($cfg['SQLValidator']['use'])
                && ! empty($cfg['SQLQuery']['Validate'])
            ) {
                $validate_params = $url_params;
                if (! empty($GLOBALS['validatequery'])) {
                    $validate_message = __('Skip Validate SQL');
                } else {
                    $validate_params['validatequery'] = 1;
                    $validate_message = __('Validate SQL');
                }

                $validate_link = 'import.php'
                    . PMA_generate_common_url($validate_params);
                $validate_link = ' ['
                    . self::linkOrButton($validate_link, $validate_message) . ']';
            } else {
                $validate_link = '';
            } //validator

            if (! empty($GLOBALS['validatequery'])) {
                $retval .= '<div class="sqlvalidate">';
            } else {
                $retval .= '<code class="sql">';
            }
            if ($query_too_big) {
                $retval .= $shortened_query_base;
            } else {
                $retval .= $query_base;
            }

            //Clean up the end of the PHP
            if (! empty($GLOBALS['show_as_php'])) {
                $retval .= '";';
            }
            if (! empty($GLOBALS['validatequery'])) {
                $retval .= '</div>';
            } else {
                $retval .= '</code>';
            }

            $retval .= '<div class="tools">';
            // avoid displaying a Profiling checkbox that could
            // be checked, which would reexecute an INSERT, for example
            if (! empty($refresh_link)) {
                $retval .= self::getProfilingForm($sql_query);
            }
            // if needed, generate an invisible form that contains controls for the
            // Inline link; this way, the behavior of the Inline link does not
            // depend on the profiling support or on the refresh link
            if (empty($refresh_link) || !self::profilingSupported()) {
                $retval .= '<form action="sql.php" method="post">';
                $retval .= PMA_generate_common_hidden_inputs(
                    $GLOBALS['db'], $GLOBALS['table']
                );
                $retval .= '<input type="hidden" name="sql_query" value="'
                    . htmlspecialchars($sql_query) . '" />';
                $retval .= '</form>';
            }

            // in the tools div, only display the Inline link when not in ajax
            // mode because 1) it currently does not work and 2) we would
            // have two similar mechanisms on the page for the same goal
            if ($is_select || ($GLOBALS['is_ajax_request'] === false)
                && ! $query_too_big
            ) {
                // see in js/functions.js the jQuery code attached to id inline_edit
                // document.write conflicts with jQuery, hence used $().append()
                $retval .= "<script type=\"text/javascript\">\n" .
                    "//<![CDATA[\n" .
                    "$('.tools form').last().after('[ <a href=\"#\" title=\"" .
                    PMA_escapeJsString(__('Inline edit of this query')) .
                    "\" class=\"inline_edit_sql\">" .
                    PMA_escapeJsString(_pgettext('Inline edit query', 'Inline')) .
                    "</a> ]');\n" .
                    "//]]>\n" .
                    "</script>";
            }
            $retval .= $edit_link . $explain_link . $php_link
                . $refresh_link . $validate_link;
            $retval .= '</div>';
        }

        $retval .= '</div>';
        if ($GLOBALS['is_ajax_request'] === false) {
            $retval .= '<br class="clearfloat" />';
        }

        return $retval;
    } // end of the 'getMessage()' function

    /**
     * Verifies if current MySQL server supports profiling
     *
     * @access  public
     *
     * @return boolean whether profiling is supported
     */
    public static function profilingSupported()
    {
        if (!self::cacheExists('profiling_supported', true)) {
            // 5.0.37 has profiling but for example, 5.1.20 does not
            // (avoid a trip to the server for MySQL before 5.0.37)
            // and do not set a constant as we might be switching servers
            if (defined('PMA_MYSQL_INT_VERSION')
                && (PMA_MYSQL_INT_VERSION >= 50037)
                && PMA_DBI_fetch_value("SHOW VARIABLES LIKE 'profiling'")
            ) {
                self::cacheSet('profiling_supported', true…

Large files files are truncated, but you can click here to view the full file