DIR : /home/kozerus/public_html/zc/adam/sqlpatch.php
/home/kozerus/public_html/zc/adam
<?php
/**
* @copyright Copyright 2003-2020 Zen Cart Development Team
* @copyright Portions Copyright 2003 osCommerce
* @license http://www.zen-cart.com/license/2_0.txt GNU Public License V2.0
* @version $Id: DrByte 2020 Oct 01 Modified in v1.5.7a $
*/
require('includes/application_top.php');
if (!defined('DB_PREFIX')) {
define('DB_PREFIX', '');
}
if (!defined('TABLE_UPGRADE_EXCEPTIONS')) {
define('TABLE_UPGRADE_EXCEPTIONS', DB_PREFIX . 'upgrade_exceptions');
}
if (isset($_GET['debug']) && $_GET['debug'] == 'ON') {
$debug = true;
}
if (!isset($debug)) {
$debug = false;
}
if (!isset($_POST['debug'])) {
$_POST['debug'] = '';
}
if (!isset($_POST['debug2'])) {
$_POST['debug2'] = '';
}
if (!isset($_POST['debug3'])) {
$_POST['debug3'] = '';
}
if (!isset($_GET['debug']) && !zen_not_null($_POST['debug']) && $debug != true) {
define('ZC_UPG_DEBUG', false);
}
if (!isset($_GET['debug2']) && !zen_not_null($_POST['debug2']) && $debug != true) {
define('ZC_UPG_DEBUG2', false);
}
if (!isset($_GET['debug3']) && !zen_not_null($_POST['debug3']) && $debug != true) {
define('ZC_UPG_DEBUG3', false);
}
$keepslashes = (isset($_GET['keepslashes']) && ($_GET['keepslashes'] == '1' || $_GET['keepslashes'] == 'true')) ? true : false;
if (!isset($skip_stripslashes)) {
$skip_stripslashes = false;
}
//NOTE: THIS IS INTENTIONALLY ON 2 LINES:
$linebreak = '
';
// NOTE: this line break is intentional!!!!
function executeSql($lines, $database, $table_prefix = '') {
zen_set_time_limit(1200);
global $db, $debug, $messageStack;
$sql_file = 'SQLPATCH';
$newline = '';
$saveline = '';
$ignored_count = 0;
$return_output = array();
$errors = array();
$lines_to_keep_together_counter = 0;
$results = 0;
$ignore_line = false;
$string = '';
$result = '';
$complete_line = false;
if (!isset($_GET['debug'])) {
$_GET['debug'] = 'OFF';
}
foreach ($lines as $line) {
if ($_GET['debug'] == 'ON') {
echo $line . '<br>';
}
$line = trim($line);
$line = str_replace('`', '', $line); //remove backquotes
$line = $saveline . $line;
$keep_together = 1; // count of number of lines to treat as a single command
// split the line into words ... starts at $param[0] and so on. Also remove the ';' from end of last param if exists
$no_semi_line = rtrim($line, ';');
$param = preg_split('/\s+/', $no_semi_line);
// The following command checks to see if we're asking for a block of commands to be run at once.
// Syntax: #NEXT_X_ROWS_AS_ONE_COMMAND:6 for running the next 6 commands together (commands denoted by a ;)
if (substr($line, 0, 28) == '#NEXT_X_ROWS_AS_ONE_COMMAND:') {
$keep_together = substr($line, 28);
}
if (substr($line, 0, 1) != '#' && substr($line, 0, 1) != '-' && $line != '') {
// if ($table_prefix != -1) {
//echo '*}'.$line.'<br>';
$line_upper = strtoupper($line);
switch (true) {
case (substr($line_upper, 0, 21) == 'DROP TABLE IF EXISTS '):
// if (!$checkprivs = zen_check_database_privs('DROP')) return sprintf(REASON_NO_PRIVILEGES,'DROP');
$line = 'DROP TABLE IF EXISTS ' . $table_prefix . ltrim(substr($line, 21));
break;
case (substr($line_upper, 0, 11) == 'DROP TABLE ' && $param[2] != 'IF'):
if (!$checkprivs = zen_check_database_privs('DROP')) {
$result = sprintf(REASON_NO_PRIVILEGES, 'DROP');
}
if (!zen_table_exists($param[2]) || zen_not_null($result)) {
zen_write_to_upgrade_exceptions_table($line, (zen_not_null($result) ? $result : sprintf(REASON_TABLE_DOESNT_EXIST, $param[2])), $sql_file);
$ignore_line = true;
$result = (zen_not_null($result) ? $result : sprintf(REASON_TABLE_DOESNT_EXIST, $param[2])); //duplicated here for on-screen error-reporting
break;
} else {
$line = 'DROP TABLE ' . $table_prefix . ltrim(substr($line, 11));
}
break;
case (substr($line_upper, 0, 13) == 'CREATE TABLE '):
// check to see if table exists
$table = (strtoupper($param[2] . ' ' . $param[3] . ' ' . $param[4]) == 'IF NOT EXISTS') ? $param[5] : $param[2];
$result = zen_table_exists($table);
if ($result == true) {
zen_write_to_upgrade_exceptions_table($line, sprintf(REASON_TABLE_ALREADY_EXISTS, $table), $sql_file);
$ignore_line = true;
$result = sprintf(REASON_TABLE_ALREADY_EXISTS, $table); //duplicated here for on-screen error-reporting
break;
} else {
$line = (strtoupper($param[2] . ' ' . $param[3] . ' ' . $param[4]) == 'IF NOT EXISTS') ? 'CREATE TABLE IF NOT EXISTS ' . $table_prefix . ltrim(substr($line, 27)) : 'CREATE TABLE ' . $table_prefix . ltrim(substr($line, 13));
}
break;
case (substr($line_upper, 0, 15) == 'TRUNCATE TABLE '):
// check to see if TRUNCATE command may be safely executed
if (!$tbl_exists = zen_table_exists($param[2])) {
$result = sprintf(REASON_TABLE_NOT_FOUND, $param[2]) . ' CHECK PREFIXES!' . $param[2];
zen_write_to_upgrade_exceptions_table($line, $result, $sql_file);
$ignore_line = true;
break;
} else {
$line = 'TRUNCATE TABLE ' . $table_prefix . ltrim(substr($line, 15));
}
break;
case (substr($line_upper, 0, 13) == 'REPLACE INTO '):
//check to see if table prefix is going to match
if (!$tbl_exists = zen_table_exists($param[2])) {
$result = sprintf(REASON_TABLE_NOT_FOUND, $param[2]) . ' CHECK PREFIXES!';
}
// check to see if INSERT command may be safely executed for "configuration" or "product_type_layout" tables
if (($param[2] == 'configuration' && ($result = zen_check_config_key($line))) or ( $param[2] == 'product_type_layout' && ($result = zen_check_product_type_layout_key($line))) or ( !$tbl_exists)) {
zen_write_to_upgrade_exceptions_table($line, $result, $sql_file);
$ignore_line = true;
break;
} else {
$line = 'REPLACE INTO ' . $table_prefix . ltrim(substr($line, 13));
}
break;
case (substr($line_upper, 0, 12) == 'INSERT INTO '):
//check to see if table prefix is going to match
if (!$tbl_exists = zen_table_exists($param[2])) {
$result = sprintf(REASON_TABLE_NOT_FOUND, $param[2]) . ' CHECK PREFIXES!';
}
// check to see if INSERT command may be safely executed for "configuration" or "product_type_layout" tables
if (($param[2] == 'configuration' && ($result = zen_check_config_key($line))) or ( $param[2] == 'product_type_layout' && ($result = zen_check_product_type_layout_key($line))) or ( !$tbl_exists)) {
zen_write_to_upgrade_exceptions_table($line, $result, $sql_file);
$ignore_line = true;
break;
} else {
$line = 'INSERT INTO ' . $table_prefix . ltrim(substr($line, 12));
}
break;
case (substr($line_upper, 0, 19) == 'INSERT IGNORE INTO '):
//check to see if table prefix is going to match
if (!$tbl_exists = zen_table_exists($param[3])) {
$result = sprintf(REASON_TABLE_NOT_FOUND, $param[3]) . ' CHECK PREFIXES!';
zen_write_to_upgrade_exceptions_table($line, $result, $sql_file);
$ignore_line = true;
break;
} else {
$line = 'INSERT IGNORE INTO ' . $table_prefix . ltrim(substr($line, 19));
}
break;
case (substr($line_upper, 0, 12) == 'ALTER TABLE '):
// check to see if ALTER command may be safely executed
if ($result = zen_check_alter_command($param)) {
zen_write_to_upgrade_exceptions_table($line, $result, $sql_file);
$ignore_line = true;
break;
} else {
$line = 'ALTER TABLE ' . $table_prefix . ltrim(substr($line, 12));
}
break;
case (substr($line_upper, 0, 13) == 'RENAME TABLE '):
// RENAME TABLE command cannot be parsed to insert table prefixes, so skip if zen is using prefixes
if (zen_not_null(DB_PREFIX)) {
zen_write_to_upgrade_exceptions_table($line, 'RENAME TABLE command not supported by upgrader. Please use phpMyAdmin instead.', $sql_file);
$messageStack->add(ERROR_RENAME_TABLE, 'caution');
$ignore_line = true;
}
break;
case (substr($line_upper, 0, 7) == 'UPDATE '):
//check to see if table prefix is going to match
if (!$tbl_exists = zen_table_exists($param[1])) {
zen_write_to_upgrade_exceptions_table($line, sprintf(REASON_TABLE_NOT_FOUND, $param[1]) . ' CHECK PREFIXES!', $sql_file);
$result = sprintf(REASON_TABLE_NOT_FOUND, $param[1]) . ' CHECK PREFIXES!';
$ignore_line = true;
break;
} else {
$line = 'UPDATE ' . $table_prefix . ltrim(substr($line, 7));
}
break;
case (substr($line_upper, 0, 14) == 'UPDATE IGNORE '):
//check to see if table prefix is going to match
if (!$tbl_exists = zen_table_exists($param[2])) {
zen_write_to_upgrade_exceptions_table($line, sprintf(REASON_TABLE_NOT_FOUND, $param[2]) . ' CHECK PREFIXES!', $sql_file);
$result = sprintf(REASON_TABLE_NOT_FOUND, $param[2]) . ' CHECK PREFIXES!';
$ignore_line = true;
break;
} else {
$line = 'UPDATE IGNORE ' . $table_prefix . ltrim(substr($line, 14));
}
break;
case (substr($line_upper, 0, 12) == 'DELETE FROM '):
$line = 'DELETE FROM ' . $table_prefix . ltrim(substr($line, 12));
break;
case (substr($line_upper, 0, 11) == 'DROP INDEX '):
// check to see if DROP INDEX command may be safely executed
if ($result = zen_drop_index_command($param)) {
zen_write_to_upgrade_exceptions_table($line, $result, $sql_file);
$ignore_line = true;
break;
} else {
$line = 'DROP INDEX ' . $param[2] . ' ON ' . $table_prefix . $param[4];
}
break;
case (substr($line_upper, 0, 13) == 'CREATE INDEX ' || (strtoupper($param[0]) == 'CREATE' && strtoupper($param[2]) == 'INDEX')):
// check to see if CREATE INDEX command may be safely executed
if ($result = zen_create_index_command($param)) {
zen_write_to_upgrade_exceptions_table($line, $result, $sql_file);
$ignore_line = true;
break;
} else {
if (strtoupper($param[1]) == 'INDEX') {
$line = trim('CREATE INDEX ' . $param[2] . ' ON ' . $table_prefix . implode(' ', array($param[4], $param[5], $param[6], $param[7], $param[8], $param[9], $param[10], $param[11], $param[12], $param[13]))) . ';'; // add the ';' back since it was removed from $param at start
} else {
$line = trim('CREATE ' . $param[1] . ' INDEX ' . $param[3] . ' ON ' . $table_prefix . implode(' ', array($param[5], $param[6], $param[7], $param[8], $param[9], $param[10], $param[11], $param[12], $param[13]))); // add the ';' back since it was removed from $param at start
}
}
break;
case (substr($line_upper, 0, 7) == 'SELECT ' && substr_count($line_upper, 'FROM ') > 0):
$line = str_ireplace('FROM ', 'FROM ' . $table_prefix, $line);
break;
case (substr($line_upper, 0, 10) == 'LEFT JOIN '):
$line = 'LEFT JOIN ' . $table_prefix . ltrim(substr($line, 10));
break;
case (substr($line_upper, 0, 5) == 'FROM '):
if (substr_count($line, ',') > 0) { // contains FROM and a comma, thus must parse for multiple tablenames
$tbl_list = explode(',', ltrim(substr($line, 5)));
$line = 'FROM ';
foreach ($tbl_list as $val) {
$line .= $table_prefix . ltrim($val) . ','; // add prefix and comma
} //end foreach
if (substr($line, -1) == ',') {
$line = substr($line, 0, (strlen($line) - 1)); // remove trailing ','
}
} else { //didn't have a comma, but starts with "FROM ", so insert table prefix
$line = str_ireplace('FROM ', 'FROM ' . $table_prefix, $line);
}//endif substr_count(,)
break;
default:
break;
} //end switch
// } // endif $table_prefix
$newline .= $line . ' ';
if (substr($line, -1) == ';') {
//found a semicolon, so treat it as a full command, incrementing counter of rows to process at once
if (substr($newline, -1) == ' ') {
$newline = substr($newline, 0, (strlen($newline) - 1));
}
$lines_to_keep_together_counter++;
if ($lines_to_keep_together_counter == $keep_together) { // if all grouped rows have been loaded, go to execute.
$complete_line = true;
$lines_to_keep_together_counter = 0;
} else {
$complete_line = false;
}
} //endif found ';'
if ($complete_line) {
if ($debug == true) {
echo ((!$ignore_line) ? '<br>About to execute.' : 'Ignoring statement. This command WILL NOT be executed.') . '<br>Debug info:<br>$ line=' . $line . '<br>$ complete_line=' . $complete_line . '<br>$ keep_together=' . $keep_together . '<br>SQL=' . $newline . '<br><br>';
}
$output = array();
if (trim(str_replace(';', '', $newline)) != '' && !$ignore_line) {
$output = $db->Execute($newline);
}
$results++;
$string .= $newline . '<br>';
$return_output[] = $output;
if (zen_not_null($result)) {
$errors[] = $result;
}
// reset var's
$newline = '';
$keep_together = 1;
$complete_line = false;
if ($ignore_line) {
$ignored_count++;
}
$ignore_line = false;
// show progress bar
global $zc_show_progress;
if ($zc_show_progress == 'yes') {
$counter++;
if ($counter / 5 == (int)($counter / 5)) {
echo '~ ';
}
if ($counter > 200) {
echo '<br><br>';
$counter = 0;
}
@ob_flush();
@flush();
}
} //endif $complete_line
} //endif ! # or -
} // end foreach $lines
if (zen_not_null($newline)) {
$messageStack->add(ERROR_LINE_INCOMPLETE, 'error'); // Why not attempt to process this line instead of alert about it?
}
zen_record_admin_activity('Admin SQL Patch tool executed a query.', 'notice');
return array('queries' => $results, 'string' => $string, 'output' => $return_output, 'ignored' => ($ignored_count), 'errors' => $errors);
}
//end function
function zen_table_exists($tablename, $pre_install = false) {
global $db;
$tables = $db->Execute("SHOW TABLES LIKE '" . DB_PREFIX . $tablename . "'");
if (defined('ZC_UPG_DEBUG3') && ZC_UPG_DEBUG3 == true) {
echo 'Table check (' . $tablename . ') = ' . $tables->RecordCount() . '<br>';
}
if ($tables->RecordCount() > 0) {
return true;
} else {
return false;
}
}
function zen_check_database_privs($priv = '', $table = '', $show_privs = false) {
// bypass until future version
return true;
// end bypass
global $zdb_server, $zdb_user, $zdb_name;
if (isset($_GET['nogrants'])) {
return true; // bypass if flag set
}
if (isset($_POST['nogrants'])) {
return true; // bypass if flag set
}
//Display permissions, or check for suitable permissions to carry out a particular task
//possible outputs:
//GRANT ALL PRIVILEGES ON *.* TO 'xyz'@'localhost' WITH GRANT OPTION
//GRANT SELECT, INSERT, UPDATE, DELETE, CREATE, DROP, FILE, INDEX, ALTER ON *.* TO 'xyz'@'localhost' IDENTIFIED BY PASSWORD '2344'
//GRANT SELECT, INSERT, UPDATE, DELETE, CREATE, DROP, INDEX, ALTER ON `db1`.* TO 'xyz'@'localhost'
//GRANT SELECT (id) ON db1.tablename TO 'xyz'@'localhost
global $db;
global $db_test;
$granted_privs_list = '';
if (defined('ZC_UPG_DEBUG3') && ZC_UPG_DEBUG3 == true) {
echo '<br>Checking for priv: [' . (zen_not_null($priv) ? $priv : 'none specified') . ']<br>';
}
if (!defined('DB_SERVER')) {
define('DB_SERVER', $zdb_server);
}
if (!defined('DB_SERVER_USERNAME')) {
define('DB_SERVER_USERNAME', $zdb_user);
}
if (!defined('DB_DATABASE')) {
define('DB_DATABASE', $zdb_name);
}
$user = DB_SERVER_USERNAME . "@" . DB_SERVER;
if ($user == 'DB_SERVER_USERNAME@DB_SERVER' || DB_DATABASE == 'DB_DATABASE') {
return true; // bypass if constants not set properly
}
$sql = "SHOW GRANTS FOR " . $user;
if (ZC_UPG_DEBUG3 == true) {
echo $sql . '<br>';
}
$results = $db->Execute($sql);
foreach ($results as $result) {
if (ZC_UPG_DEBUG3 == true) {
echo $result['Grants for ' . $user] . '<br>';
}
$grant_syntax = $result['Grants for ' . $user] . ' ';
$granted_privs = str_replace('GRANT ', '', $grant_syntax); // remove "GRANT" keyword
$granted_privs = substr($granted_privs, 0, strpos($granted_privs, ' TO ')); //remove anything after the "TO" keyword
$granted_db = str_replace(array('`', '\\'), '', substr($granted_privs, strpos($granted_privs, ' ON ') + 4)); //remove backquote and find "ON" string
if (ZC_UPG_DEBUG3 == true) {
echo 'privs_list = ' . $granted_privs . '<br>';
}
if (ZC_UPG_DEBUG3 == true) {
echo 'granted_db = ' . $granted_db . '<br>';
}
$db_priv_ok += ($granted_db == '*.*' || $granted_db == DB_DATABASE . '.*' || $granted_db == DB_DATABASE . '.' . $table) ? true : false;
if (ZC_UPG_DEBUG3 == true) {
echo 'db-priv-ok=' . $db_priv_ok . '<br>';
}
if ($db_priv_ok) { // if the privs list pertains to the current database, or is *.*, carry on
$granted_privs = substr($granted_privs, 0, strpos($granted_privs, ' ON ')); //remove anything after the "ON" keyword
$granted_privs_list .= ($granted_privs_list == '') ? $granted_privs : ', ' . $granted_privs;
$specific_priv_found = (zen_not_null($priv) && substr_count($granted_privs, $priv) == 1);
if (ZC_UPG_DEBUG3 == true) {
echo 'specific priv[' . $priv . '] found =' . $specific_priv_found . '<br>';
}
if (ZC_UPG_DEBUG3 == true) {
echo 'spec+db=' . ($specific_priv_found && $db_priv_ok == true) . ' ||| ';
}
if (ZC_UPG_DEBUG3 == true) {
echo 'all+db=' . ($granted_privs == 'ALL PRIVILEGES' && $db_priv_ok == true) . '<br><br>';
}
if (($specific_priv_found && $db_priv_ok == true) || ($granted_privs == 'ALL PRIVILEGES' && $db_priv_ok == true)) {
return true; // privs found
}
} // endif $db_priv_ok
}
if ($show_privs) {
if (ZC_UPG_DEBUG3 == true) {
echo 'LIST OF PRIVS=' . $granted_privs_list . '<br>';
}
return $db_priv_ok . '|||' . $granted_privs_list;
} else {
return false; // if not found, return false
}
}
function zen_drop_index_command($param) {
if (!$checkprivs = zen_check_database_privs('INDEX')) {
return sprintf(REASON_NO_PRIVILEGES, 'INDEX');
}
//this is only slightly different from the ALTER TABLE DROP INDEX command
global $db;
if (!zen_not_null($param)) {
return "Empty SQL Statement";
}
$index = $param[2];
$sql = "SHOW INDEX FROM " . DB_PREFIX . $param[4];
$results = $db->Execute($sql);
foreach ($results as $result) {
if (defined('ZC_UPG_DEBUG3') && ZC_UPG_DEBUG3 == true) {
echo $result['Key_name'] . '<br>';
}
if ($result['Key_name'] == $index) {
// if (!$checkprivs = zen_check_database_privs('INDEX')) return sprintf(REASON_NO_PRIVILEGES,'INDEX');
return; // if we get here, the index exists, and we have index privileges, so return with no error
}
}
// if we get here, then the index didn't exist
return sprintf(REASON_INDEX_DOESNT_EXIST_TO_DROP, $index, $param[4]);
}
function zen_create_index_command($param) {
//this is only slightly different from the ALTER TABLE CREATE INDEX command
if (!$checkprivs = zen_check_database_privs('INDEX')) {
return sprintf(REASON_NO_PRIVILEGES, 'INDEX');
}
global $db;
if (!zen_not_null($param)) {
return "Empty SQL Statement";
}
$index = (strtoupper($param[1]) == 'INDEX') ? $param[2] : $param[3];
if (in_array('USING', $param)) {
return 'USING parameter found. Cannot validate syntax. Please run manually in phpMyAdmin.';
}
$table = (strtoupper($param[2]) == 'INDEX' && strtoupper($param[4]) == 'ON') ? $param[5] : $param[4];
$sql = "SHOW INDEX FROM " . DB_PREFIX . $table;
$results = $db->Execute($sql);
foreach ($results as $result) {
if (defined('ZC_UPG_DEBUG3') && ZC_UPG_DEBUG3 == true) {
echo $result['Key_name'] . '<br>';
}
if (strtoupper($result['Key_name']) == strtoupper($index)) {
return sprintf(REASON_INDEX_ALREADY_EXISTS, $index, $table);
}
}
/*
* @TODO: verify that individual columns exist, by parsing the index_col_name parameters list
* Structure is (colname(len)),
* or (colname),
*/
}
function zen_check_alter_command($param) {
global $db;
if (!zen_not_null($param)) {
return "Empty SQL Statement";
}
if (!$checkprivs = zen_check_database_privs('ALTER')) {
return sprintf(REASON_NO_PRIVILEGES, 'ALTER');
}
if (!defined('ZC_UPG_DEBUG3')) {
define('ZC_UPG_DEBUG3', false);
}
switch (strtoupper($param[3])) {
case ("ADD"):
if (strtoupper($param[4]) == 'INDEX') {
// check that the index to be added doesn't already exist
$index = $param[5];
$sql = "SHOW FIELDS FROM " . DB_PREFIX . $param[2];
$results = $db->Execute($sql);
foreach ($results as $result) {
if (ZC_UPG_DEBUG3 == true) {
echo 'KEY: ' . $result['Key_name'] . '<br>';
}
if ($result['Key_name'] == $index) {
return sprintf(REASON_INDEX_ALREADY_EXISTS, $index, $param[2]);
}
}
} elseif (strtoupper($param[4]) == 'PRIMARY') {
// check that the primary key to be added doesn't exist
if ($param[5] != 'KEY') {
return;
}
$sql = "SHOW FIELDS FROM " . DB_PREFIX . $param[2];
$results = $db->Execute($sql);
foreach ($results as $result) {
if (ZC_UPG_DEBUG3 == true) {
echo $result['Key_name'] . '<br>';
}
if ($result['Key_name'] == 'PRIMARY') {
return sprintf(REASON_PRIMARY_KEY_ALREADY_EXISTS, $param[2]);
}
}
} elseif (!in_array(strtoupper($param[4]), array('CONSTRAINT', 'UNIQUE', 'PRIMARY', 'FULLTEXT', 'FOREIGN', 'SPATIAL'))) {
// check that the column to be added does not exist
$colname = ($param[4] == 'COLUMN') ? $param[5] : $param[4];
$sql = "SHOW FIELDS FROM " . DB_PREFIX . $param[2];
$results = $db->Execute($sql);
foreach ($results as $result) {
if (ZC_UPG_DEBUG3 == true) {
echo $result['Field'] . '<br>';
}
if ($result['Field'] == $colname) {
return sprintf(REASON_COLUMN_ALREADY_EXISTS, $colname);
}
}
} elseif (strtoupper($param[5]) == 'AFTER') {
// check that the requested "after" field actually exists
$colname = ($param[6] == 'COLUMN') ? $param[7] : $param[6];
$sql = "SHOW FIELDS FROM " . DB_PREFIX . $param[2];
$results = $db->Execute($sql);
foreach ($results as $result) {
if (ZC_UPG_DEBUG3 == true) {
echo $result['Field'] . '<br>';
}
if ($result['Field'] == $colname) {
return; // exists, so return with no error
}
}
} elseif (strtoupper($param[6]) == 'AFTER') {
// check that the requested "after" field actually exists
$colname = ($param[7] == 'COLUMN') ? $param[8] : $param[7];
$sql = "SHOW FIELDS FROM " . DB_PREFIX . $param[2];
$results = $db->Execute($sql);
foreach ($results as $result) {
if (ZC_UPG_DEBUG3 == true) {
echo $result['Field'] . '<br>';
}
if ($result['Field'] == $colname) {
return; // exists, so return with no error
}
}
/*
* @TODO -- add check for FIRST parameter, to check that the FIRST colname specified actually exists
*/
}
break;
case ("DROP"):
if (strtoupper($param[4]) == 'INDEX') {
// check that the index to be dropped exists
$index = $param[5];
$sql = "SHOW FIELDS FROM " . DB_PREFIX . $param[2];
$results = $db->Execute($sql);
foreach ($results as $result) {
if (ZC_UPG_DEBUG3 == true) {
echo $result['Key_name'] . '<br>';
}
if ($result['Key_name'] == $index) {
return; // exists, so return with no error
}
}
// if we get here, then the index didn't exist
return sprintf(REASON_INDEX_DOESNT_EXIST_TO_DROP, $index, $param[2]);
} elseif (strtoupper($param[4]) == 'PRIMARY') {
// check that the primary key to be dropped exists
if ($param[5] != 'KEY') {
return;
}
$sql = "SHOW INDEX FROM " . DB_PREFIX . $param[2];
$results = $db->Execute($sql);
foreach ($results as $result) {
if (ZC_UPG_DEBUG3 == true) {
echo $result['Key_name'] . '<br>';
}
if ($result['Key_name'] == 'PRIMARY') {
return; // exists, so return with no error
}
}
// if we get here, then the primary key didn't exist
return sprintf(REASON_PRIMARY_KEY_DOESNT_EXIST_TO_DROP, $param[2]);
} elseif (!in_array(strtoupper($param[4]), array('CONSTRAINT', 'UNIQUE', 'PRIMARY', 'FULLTEXT', 'FOREIGN', 'SPATIAL'))) {
// check that the column to be dropped exists
$colname = ($param[4] == 'COLUMN') ? $param[5] : $param[4];
$sql = "SHOW FIELDS FROM " . DB_PREFIX . $param[2];
$results = $db->Execute($sql);
foreach ($results as $result) {
if (ZC_UPG_DEBUG3 == true) {
echo $result['Field'] . '<br>';
}
if ($result['Field'] == $colname) {
return; // exists, so return with no error
}
}
// if we get here, then the column didn't exist
return sprintf(REASON_COLUMN_DOESNT_EXIST_TO_DROP, $colname);
}//endif 'DROP'
break;
case ("ALTER"):
case ("MODIFY"):
case ("CHANGE"):
// just check that the column to be changed 'exists'
$colname = ($param[4] == 'COLUMN') ? $param[5] : $param[4];
$sql = "SHOW FIELDS FROM " . DB_PREFIX . $param[2];
$results = $db->Execute($sql);
foreach ($results as $result) {
if (ZC_UPG_DEBUG3 == true) {
echo $result['Field'] . '<br>';
}
if ($result['Field'] == $colname) {
return; // exists, so return with no error
}
}
// if we get here, then the column didn't exist
return sprintf(REASON_COLUMN_DOESNT_EXIST_TO_CHANGE, $colname);
default:
// if we get here, then we're processing an ALTER command other than what we're checking for, so let it be processed.
return;
} //end switch
}
function zen_check_config_key($line) {
global $db;
$values = array();
$values = explode("'", $line);
//INSERT INTO configuration blah blah blah VALUES ('title','key', blah blah blah);
//[0]=INSERT INTO.....
//[1]=title
//[2]=,
//[3]=key
//[4]=blah blah
$title = $values[1];
$key = $values[3];
$sql = "SELECT configuration_title FROM " . DB_PREFIX . "configuration WHERE configuration_key='" . zen_db_input($key) . "'";
$result = $db->Execute($sql);
if ($result->RecordCount() > 0) {
return sprintf(REASON_CONFIG_KEY_ALREADY_EXISTS, $key);
}
}
function zen_check_product_type_layout_key($line) {
global $db;
$values = array();
$values = explode("'", $line);
$title = $values[1];
$key = $values[3];
$sql = "SELECT configuration_title FROM " . DB_PREFIX . "product_type_layout WHERE configuration_key='" . zen_db_input($key) . "'";
$result = $db->Execute($sql);
if ($result->RecordCount() > 0) {
return sprintf(REASON_PRODUCT_TYPE_LAYOUT_KEY_ALREADY_EXISTS, $key);
}
}
function zen_write_to_upgrade_exceptions_table($line, $reason, $sql_file) {
global $db;
zen_create_exceptions_table();
$sql = "INSERT INTO " . DB_PREFIX . TABLE_UPGRADE_EXCEPTIONS . " (sql_file, reason, errordate, sqlstatement) VALUES (:file:, :reason:, now(), :line:)";
$sql = $db->bindVars($sql, ':file:', $sql_file, 'string');
$sql = $db->bindVars($sql, ':reason:', $reason, 'string');
$sql = $db->bindVars($sql, ':line:', $line, 'string');
if (defined('ZC_UPG_DEBUG3') && ZC_UPG_DEBUG3 == true) {
echo '<br>sql=' . $sql . '<br>';
}
$result = $db->Execute($sql);
return $result;
}
function zen_purge_exceptions_table() {
global $db;
zen_create_exceptions_table();
$result = $db->Execute("TRUNCATE TABLE " . DB_PREFIX . TABLE_UPGRADE_EXCEPTIONS);
return $result;
}
function zen_create_exceptions_table() {
global $db;
if (!zen_table_exists(TABLE_UPGRADE_EXCEPTIONS)) {
$result = $db->Execute("CREATE TABLE " . DB_PREFIX . TABLE_UPGRADE_EXCEPTIONS . " (
upgrade_exception_id smallint(5) NOT NULL auto_increment,
sql_file varchar(50) default NULL,
reason varchar(200) default NULL,
errordate datetime default '0001-01-01 00:00:00',
sqlstatement text, PRIMARY KEY (upgrade_exception_id)
)");
return $result;
}
}
//------------------------------------------------------
// END FUNCTIONS LIST
//------------------------------------------------------
$debug = (isset($_GET['debug']) && $_GET['debug'] == 'ON');
$action = (isset($_GET['action']) ? $_GET['action'] : '');
if (zen_not_null($action)) {
switch ($action) {
case 'execute':
if (isset($_POST['query_string']) && $_POST['query_string'] != '') {
$query_string = $_POST['query_string'];
if ($debug == true) {
echo $query_string . '<br>';
}
$query_string = explode($linebreak, ($query_string));
$query_results = executeSql($query_string, DB_DATABASE, DB_PREFIX);
if ($query_results['queries'] > 0 && $query_results['queries'] != $query_results['ignored']) {
$messageStack->add(sprintf(TEXT_EXECUTE_SUCCESS, (int)$query_results['queries']), 'success');
} else {
$messageStack->add(sprintf(ERROR_EXECUTE_FAILED, (int)$query_results['queries']), 'error');
}
if (zen_not_null($query_results['errors'])) {
foreach ($query_results['errors'] as $value) {
$messageStack->add('ERROR: ' . $value, 'error');
}
}
if ($query_results['ignored'] != 0) {
$messageStack->add(sprintf(ERROR_EXECUTE_IGNORED, (int)$query_results['ignored']), 'caution');
}
if (zen_not_null($query_results['output'])) {
foreach ($query_results['output'] as $value) {
if (zen_not_null($value)) {
$messageStack->add('INFO: ' . $value, 'caution');
}
}
}
} else {
$messageStack->add(ERROR_NOTHING_TO_DO, 'error');
}
break;
case 'uploadquery':
$query_string = '';
if (isset($_FILES['sql_file']) && isset($_FILES['sql_file']['tmp_name']) && $_FILES['sql_file']['tmp_name'] != '') {
$upload_query = file($_FILES['sql_file']['tmp_name']);
$query_string = $upload_query;
}
if ($query_string != '') {
$query_results = executeSql($query_string, DB_DATABASE, DB_PREFIX);
if ($query_results['queries'] > 0 && $query_results['queries'] != $query_results['ignored']) {
$messageStack->add(sprintf(TEXT_UPLOADQUERY_SUCCESS, (int)$query_results['queries']), 'success');
} else {
$messageStack->add(sprintf(ERROR_UPLOADQUERY_FAILED, (int)$query_results['queries']), 'error');
}
if (zen_not_null($query_results['errors'])) {
foreach ($query_results['errors'] as $value) {
$messageStack->add(ICON_ERROR . ': ' . $value, 'error');
}
}
if ($query_results['ignored'] != 0) {
$messageStack->add(ERROR_UPLOADQUERY_IGNORED, 'caution');
}
if (zen_not_null($query_results['output'])) {
foreach ($query_results['output'] as $value) {
if (zen_not_null($value)) {
$messageStack->add('ERROR: ' . $value, 'error');
}
}
}
} else {
$messageStack->add(ERROR_NOTHING_TO_DO, 'error');
}
break;
case 'help':
break;
default:
break;
}
}
?>
<?php if ($action != 'help') { ?>
<!doctype html>
<html <?php echo HTML_PARAMS; ?>>
<head>
<meta charset="<?php echo CHARSET; ?>">
<title><?php echo TITLE; ?></title>
<link rel="stylesheet" href="includes/stylesheet.css">
<link rel="stylesheet" href="includes/cssjsmenuhover.css" media="all" id="hoverJS">
<script src="includes/menu.js"></script>
<script>
function popupHelpWindow(url) {
window.open(url, 'popupImageWindow', 'toolbar=no,location=no,directories=no,status=no,menubar=no,scrollbars=no,resizable=yes,copyhistory=no,width=100,height=100,screenX=150,screenY=150,top=150,left=150,noreferrer')
}
function init() {
cssjsmenu('navbar');
if (document.getElementById) {
var kill = document.getElementById('hoverJS');
kill.disabled = true;
}
}
</script>
</head>
<body onLoad="init()" >
<!-- header //-->
<?php require(DIR_WS_INCLUDES . 'header.php'); ?>
<!-- header_eof //-->
<div class="container-fluid">
<!-- body //-->
<h1 class="pageHeading"><?php echo HEADING_TITLE; ?></h1>
<div class="row">
<div class="col-sm-12 text-danger"><?php echo HEADING_WARNING; ?></div>
</div>
<div class="row">
<div class="col-sm-12 text-danger"><strong><?php echo HEADING_WARNING2; ?></strong></div>
</div>
<?php
if ($action == 'execute' && !empty($_POST['query_string'])) {
?>
<div class="row">
<div class="col-sm-12 text-danger"><strong><?php echo TEXT_QUERY_RESULTS; ?></strong></div>
</div>
<div class="row">
<div class="col-sm-12 text-danger"><?php echo nl2br(zen_output_string_protected(preg_replace('~<br[ /]*>~', "\n", $query_results['string']))); ?></div>
</div>
<?php
}
?>
<div class="row"> </div>
<?php echo zen_draw_form('getquery', FILENAME_SQLPATCH, 'action=execute' . (($debug == true) ? '&debug=ON' : '') . (($skip_stripslashes == true) ? '&keepslashes=1' : ''), 'post', 'class="form-horizontal"'); ?>
<div class="form-group">
<?php echo zen_draw_label(TEXT_ENTER_QUERY_STRING, 'query_string', 'class="control-label col-sm-3"'); ?>
<div class="col-sm-9 col-md-6"><?php echo zen_draw_textarea_field('query_string', 'soft', '80', '10', '', 'id="query_string" class="form-control noEditor"', false); ?></div>
</div>
<div class="form-group">
<div class="col-sm-12 text-right"><button type="submit" class="btn btn-primary"><?php echo IMAGE_SEND; ?></button></div>
</div>
<?php echo '</form>'; ?>
<div class="row">
<div class="col-sm-12 text-danger"><?php echo HEADING_WARNING_INSTALLSCRIPTS; ?></div>
</div>
<div class="row"> </div>
<?php echo zen_draw_form('getqueryfile', FILENAME_SQLPATCH, 'action=uploadquery' . (($debug == true) ? '&debug=ON' : '') . (($skip_stripslashes == true) ? '&keepslashes=1' : ''), 'post', 'enctype="multipart/form-data" class="form-horizontal"'); ?>
<?php
if (isset($_GET['nogrants'])) {
echo zen_draw_hidden_field('nogrants', (bool)$_GET['nogrants'], 'id="nogrants"');
}
?>
<div class="form-group">
<?php echo zen_draw_label(TEXT_QUERY_FILENAME, 'sql_file', 'class="control-label col-sm-3"'); ?>
<div class="col-sm-9 col-md-6"><?php echo zen_draw_file_field('sql_file', '', 'class="form-control" id="sql_file"'); ?></div>
</div>
<div class="form-group">
<div class="col-sm-12 text-right"><button type="submit" class="btn btn-primary"><?php echo IMAGE_UPLOAD; ?></button></div>
</div>
<?php echo '</form>'; ?>
<div class="row">
<div class="col-sm-12 text-right"><a href="<?php echo zen_href_link(FILENAME_SQLPATCH, 'action=help'); ?>" target="_blank" class="btn btn-info" role="button"><?php echo IMAGE_DETAILS; ?></a></div>
</div>
<!-- body_text_eof //-->
</div>
<!-- body_eof //-->
<!-- footer //-->
<?php require(DIR_WS_INCLUDES . 'footer.php'); ?>
<!-- footer_eof //-->
</body>
</html>
<?php require(DIR_WS_INCLUDES . 'application_bottom.php'); ?>
<?php } elseif ($action == 'help') { ?>
<!doctype html>
<html <?php echo HTML_PARAMS; ?>>
<head>
<meta charset="<?php echo CHARSET; ?>" />
<title>HELP - <?php echo HEADING_TITLE; ?> - Zen Cart®</title>
<link rel="stylesheet" href="includes/stylesheet.css">
</head>
<body id="popup">
<div class="container-fluid">
<div id="popup_header">
<h1><?php echo 'Zen Cart® ' . HEADING_TITLE; ?></h1>
</div>
<div id="popup_content">
<span style="color: #FF0000; font-weight: bold;"><?php echo HEADING_WARNING; ?></span><br>
<?php
echo SQLPATCH_HELP_TEXT;
echo '<br><br>';
?>
<span style="color: #FF0000; font-weight: bold;"><?php echo HEADING_WARNING; ?></span><br>
<span style="color: #FF0000; font-weight: bold;"><?php echo HEADING_WARNING2; ?></span><br>
</div>
<div class="row text-center">
<a href="javascript:window.close()"><?php echo TEXT_CLOSE_WINDOW; ?></a>
</div>
</div>
</body>
</html>
<?php } ?>
//
koh5_pano
Drag mouse to navigate.
Navigation
- Left/Right Mouse drag: Changes camera heading.
- Up/Sown Mouse drag: Changes camera pitch.
- Scroll wheel: Changes camera field of view.
- I-Key: Displays Info panel with canvas size, image size and FPS.
17.Aug.2010, Martin Wengenmayer