mirror of
https://github.com/YunoHost-Apps/hubzilla_ynh.git
synced 2024-09-03 19:26:21 +02:00
391 lines
9 KiB
PHP
391 lines
9 KiB
PHP
|
<?php
|
||
|
/**
|
||
|
* @file dba_driver.php
|
||
|
* @brief some database related functions and abstract driver class.
|
||
|
*
|
||
|
* This file contains the abstract database driver class dba_driver and some
|
||
|
* functions for working with databases.
|
||
|
*/
|
||
|
|
||
|
/**
|
||
|
* @brief Returns the database driver object.
|
||
|
*
|
||
|
* If available it will use PHP's mysqli otherwise mysql driver.
|
||
|
*
|
||
|
* @param string $server DB server name
|
||
|
* @param string $port DB port
|
||
|
* @param string $user DB username
|
||
|
* @param string $pass DB password
|
||
|
* @param string $db database name
|
||
|
* @param string $dbtype 0 for mysql, 1 for postgres
|
||
|
* @param bool $install Defaults to false
|
||
|
* @return null|dba_driver A database driver object (dba_mysql|dba_mysqli) or null if no driver found.
|
||
|
*/
|
||
|
function dba_factory($server, $port,$user,$pass,$db,$dbtype,$install = false) {
|
||
|
$dba = null;
|
||
|
|
||
|
$dbtype = intval($dbtype);
|
||
|
|
||
|
if($dbtype == DBTYPE_POSTGRES) {
|
||
|
require_once('include/dba/dba_postgres.php');
|
||
|
if(is_null($port)) $port = 5432;
|
||
|
$dba = new dba_postgres($server, $port, $user, $pass, $db, $install);
|
||
|
} else {
|
||
|
if(class_exists('mysqli')) {
|
||
|
if (is_null($port)) $port = ini_get("mysqli.default_port");
|
||
|
require_once('include/dba/dba_mysqli.php');
|
||
|
$dba = new dba_mysqli($server, $port,$user,$pass,$db,$install);
|
||
|
} else {
|
||
|
if (is_null($port)) $port = "3306";
|
||
|
require_once('include/dba/dba_mysql.php');
|
||
|
$dba = new dba_mysql($server, $port,$user,$pass,$db,$install);
|
||
|
}
|
||
|
}
|
||
|
|
||
|
define('NULL_DATE', $dba->get_null_date());
|
||
|
define('ACTIVE_DBTYPE', $dbtype);
|
||
|
return $dba;
|
||
|
}
|
||
|
|
||
|
/**
|
||
|
* @brief abstract database driver class.
|
||
|
*
|
||
|
* This class gets extended by the real database driver classes, e.g. dba_mysql,
|
||
|
* dba_mysqli.
|
||
|
*/
|
||
|
abstract class dba_driver {
|
||
|
// legacy behavior
|
||
|
const INSTALL_SCRIPT='install/schema_mysql.sql';
|
||
|
const NULL_DATE = '0000-00-00 00:00:00';
|
||
|
const UTC_NOW = 'UTC_TIMESTAMP()';
|
||
|
|
||
|
protected $debug = 0;
|
||
|
protected $db;
|
||
|
public $connected = false;
|
||
|
public $error = false;
|
||
|
|
||
|
/**
|
||
|
* @brief Connect to the database.
|
||
|
*
|
||
|
* This abstract function needs to be implemented in the real driver.
|
||
|
*
|
||
|
* @param string $server DB server name
|
||
|
* @param string $port DB port
|
||
|
* @param string $user DB username
|
||
|
* @param string $pass DB password
|
||
|
* @param string $db database name
|
||
|
* @return bool
|
||
|
*/
|
||
|
abstract function connect($server, $port, $user, $pass, $db);
|
||
|
|
||
|
/**
|
||
|
* @brief Perform a DB query with the SQL statement $sql.
|
||
|
*
|
||
|
* This abstract function needs to be implemented in the real driver.
|
||
|
*
|
||
|
* @param string $sql The SQL query to execute
|
||
|
*/
|
||
|
abstract function q($sql);
|
||
|
|
||
|
/**
|
||
|
* @brief Escape a string before being passed to a DB query.
|
||
|
*
|
||
|
* This abstract function needs to be implemented in the real driver.
|
||
|
*
|
||
|
* @param string $str The string to escape.
|
||
|
*/
|
||
|
abstract function escape($str);
|
||
|
|
||
|
/**
|
||
|
* @brief Close the database connection.
|
||
|
*
|
||
|
* This abstract function needs to be implemented in the real driver.
|
||
|
*/
|
||
|
abstract function close();
|
||
|
|
||
|
/**
|
||
|
* @brief Return text name for db driver
|
||
|
*
|
||
|
* This abstract function needs to be implemented in the real driver.
|
||
|
*/
|
||
|
abstract function getdriver();
|
||
|
|
||
|
function __construct($server, $port, $user,$pass,$db,$install = false) {
|
||
|
if(($install) && (! $this->install($server, $port, $user, $pass, $db))) {
|
||
|
return;
|
||
|
}
|
||
|
$this->connect($server, $port, $user, $pass, $db);
|
||
|
}
|
||
|
|
||
|
function get_null_date() {
|
||
|
return static::NULL_DATE;
|
||
|
}
|
||
|
|
||
|
function get_install_script() {
|
||
|
return static::INSTALL_SCRIPT;
|
||
|
}
|
||
|
|
||
|
function utcnow() {
|
||
|
return static::UTC_NOW;
|
||
|
}
|
||
|
|
||
|
function install($server,$user,$pass,$db) {
|
||
|
if (!(strlen($server) && strlen($user))){
|
||
|
$this->connected = false;
|
||
|
$this->db = null;
|
||
|
return false;
|
||
|
}
|
||
|
|
||
|
if(strlen($server) && ($server !== 'localhost') && ($server !== '127.0.0.1')) {
|
||
|
if(! dns_get_record($server, DNS_A + DNS_CNAME + DNS_PTR)) {
|
||
|
$this->error = sprintf( t('Cannot locate DNS info for database server \'%s\''), $server);
|
||
|
$this->connected = false;
|
||
|
$this->db = null;
|
||
|
return false;
|
||
|
}
|
||
|
}
|
||
|
|
||
|
return true;
|
||
|
}
|
||
|
|
||
|
/**
|
||
|
* @brief Sets the database driver's debugging state.
|
||
|
*
|
||
|
* @param int $dbg 0 to disable debugging
|
||
|
*/
|
||
|
function dbg($dbg) {
|
||
|
$this->debug = $dbg;
|
||
|
}
|
||
|
|
||
|
function __destruct() {
|
||
|
if($this->db && $this->connected) {
|
||
|
$this->close();
|
||
|
}
|
||
|
}
|
||
|
|
||
|
function quote_interval($txt) {
|
||
|
return $txt;
|
||
|
}
|
||
|
|
||
|
function optimize_table($table) {
|
||
|
q('OPTIMIZE TABLE '.$table);
|
||
|
}
|
||
|
|
||
|
function concat($fld, $sep) {
|
||
|
return 'GROUP_CONCAT(DISTINCT '.$fld.' SEPARATOR \''.$sep.'\')';
|
||
|
}
|
||
|
|
||
|
function escapebin($str) {
|
||
|
return $this->escape($str);
|
||
|
}
|
||
|
|
||
|
function unescapebin($str) {
|
||
|
return $str;
|
||
|
}
|
||
|
} // end abstract dba_driver class
|
||
|
|
||
|
|
||
|
|
||
|
// Procedural functions
|
||
|
|
||
|
function printable($s) {
|
||
|
$s = preg_replace("~([\x01-\x08\x0E-\x0F\x10-\x1F\x7F-\xFF])~",".", $s);
|
||
|
$s = str_replace("\x00",'.',$s);
|
||
|
if(x($_SERVER,'SERVER_NAME'))
|
||
|
$s = escape_tags($s);
|
||
|
|
||
|
return $s;
|
||
|
}
|
||
|
|
||
|
/**
|
||
|
* @brief set database driver debugging state.
|
||
|
*
|
||
|
* @param int $state 0 to disable debugging
|
||
|
*/
|
||
|
function dbg($state) {
|
||
|
global $db;
|
||
|
|
||
|
if($db)
|
||
|
$db->dbg($state);
|
||
|
}
|
||
|
|
||
|
/**
|
||
|
* @brief Escape strings being passed to DB queries.
|
||
|
*
|
||
|
* Always escape strings being used in DB queries. This function returns the
|
||
|
* escaped string. Integer DB parameters should all be proven integers by
|
||
|
* wrapping with intval().
|
||
|
*
|
||
|
* @param string $str A string to pass to a DB query
|
||
|
* @return Return an escaped string of the value to pass to a DB query.
|
||
|
*/
|
||
|
function dbesc($str) {
|
||
|
global $db;
|
||
|
|
||
|
if($db && $db->connected)
|
||
|
return($db->escape($str));
|
||
|
else
|
||
|
return(str_replace("'", "\\'", $str));
|
||
|
}
|
||
|
function dbescbin($str) {
|
||
|
global $db;
|
||
|
return $db->escapebin($str);
|
||
|
}
|
||
|
|
||
|
function dbunescbin($str) {
|
||
|
global $db;
|
||
|
return $db->unescapebin($str);
|
||
|
}
|
||
|
|
||
|
function dbescdate($date) {
|
||
|
if(ACTIVE_DBTYPE == DBTYPE_POSTGRES && $date == '0000-00-00 00:00:00') {
|
||
|
$date = NULL_DATE;
|
||
|
} else if(ACTIVE_DBTYPE != DBTYPE_POSTGRES && $date == '0001-01-01 00:00:00') {
|
||
|
$date = NULL_DATE;
|
||
|
}
|
||
|
return $date;
|
||
|
}
|
||
|
|
||
|
function db_quoteinterval($txt) {
|
||
|
global $db;
|
||
|
return $db->quote_interval($txt);
|
||
|
}
|
||
|
|
||
|
function dbesc_identifier($str) {
|
||
|
global $db;
|
||
|
return $db->escape_identifier($str);
|
||
|
}
|
||
|
|
||
|
function db_utcnow() {
|
||
|
global $db;
|
||
|
return $db->utcnow();
|
||
|
}
|
||
|
|
||
|
function db_optimizetable($table) {
|
||
|
global $db;
|
||
|
$db->optimize_table($table);
|
||
|
}
|
||
|
|
||
|
function db_concat($fld, $sep) {
|
||
|
global $db;
|
||
|
return $db->concat($fld, $sep);
|
||
|
}
|
||
|
|
||
|
// Function: q($sql,$args);
|
||
|
// Description: execute SQL query with printf style args.
|
||
|
// Example: $r = q("SELECT * FROM `%s` WHERE `uid` = %d",
|
||
|
// 'user', 1);
|
||
|
|
||
|
|
||
|
/**
|
||
|
* @brief Execute a SQL query with printf style args.
|
||
|
*
|
||
|
* printf style arguments %s and %d are replaced with variable arguments, which
|
||
|
* should each be appropriately dbesc() or intval().
|
||
|
* SELECT queries return an array of results or false if SQL or DB error. Other
|
||
|
* queries return true if the command was successful or false if it wasn't.
|
||
|
*
|
||
|
* Example:
|
||
|
* $r = q("SELECT * FROM `%s` WHERE `uid` = %d",
|
||
|
* 'user', 1);
|
||
|
*
|
||
|
* @param string $sql The SQL query to execute
|
||
|
* @return bool|array
|
||
|
*/
|
||
|
function q($sql) {
|
||
|
global $db;
|
||
|
|
||
|
$args = func_get_args();
|
||
|
unset($args[0]);
|
||
|
|
||
|
if($db && $db->connected) {
|
||
|
$stmt = vsprintf($sql, $args);
|
||
|
if($stmt === false) {
|
||
|
if(version_compare(PHP_VERSION, '5.4.0') >= 0)
|
||
|
logger('dba: vsprintf error: ' .
|
||
|
print_r(debug_backtrace(DEBUG_BACKTRACE_PROVIDE_OBJECT, 1), true));
|
||
|
else
|
||
|
logger('dba: vsprintf error: ' . print_r(debug_backtrace(), true));
|
||
|
}
|
||
|
return $db->q($stmt);
|
||
|
}
|
||
|
|
||
|
/*
|
||
|
* This will happen occasionally trying to store the
|
||
|
* session data after abnormal program termination
|
||
|
*/
|
||
|
logger('dba: no database: ' . print_r($args,true));
|
||
|
|
||
|
return false;
|
||
|
}
|
||
|
|
||
|
/**
|
||
|
* @brief Raw DB query, no arguments.
|
||
|
*
|
||
|
* This function executes a raw DB query without any arguments.
|
||
|
*
|
||
|
* @param string $sql The SQL query to execute
|
||
|
*/
|
||
|
function dbq($sql) {
|
||
|
global $db;
|
||
|
|
||
|
if($db && $db->connected)
|
||
|
$ret = $db->q($sql);
|
||
|
else
|
||
|
$ret = false;
|
||
|
|
||
|
return $ret;
|
||
|
}
|
||
|
|
||
|
|
||
|
|
||
|
// Caller is responsible for ensuring that any integer arguments to
|
||
|
// dbesc_array are actually integers and not malformed strings containing
|
||
|
// SQL injection vectors. All integer array elements should be specifically
|
||
|
// cast to int to avoid trouble.
|
||
|
|
||
|
function dbesc_array_cb(&$item, $key) {
|
||
|
if(is_string($item)) {
|
||
|
if($item == '0000-00-00 00:00:00' && ACTIVE_DBTYPE == DBTYPE_POSTGRES)
|
||
|
$item = '0001-01-01 00:00:00';
|
||
|
else if($item == '0001-01-01 00:00:00' && ACTIVE_DBTYPE == DBTYPE_MYSQL)
|
||
|
$item = '0000-00-00 00:00:00';
|
||
|
|
||
|
$item = dbesc($item);
|
||
|
}
|
||
|
}
|
||
|
|
||
|
|
||
|
function dbesc_array(&$arr) {
|
||
|
if(is_array($arr) && count($arr)) {
|
||
|
array_walk($arr,'dbesc_array_cb');
|
||
|
}
|
||
|
}
|
||
|
|
||
|
function db_getfunc($f) {
|
||
|
$lookup = array(
|
||
|
'rand'=>array(
|
||
|
DBTYPE_MYSQL=>'RAND()',
|
||
|
DBTYPE_POSTGRES=>'RANDOM()'
|
||
|
),
|
||
|
'utc_timestamp'=>array(
|
||
|
DBTYPE_MYSQL=>'UTC_TIMESTAMP()',
|
||
|
DBTYPE_POSTGRES=>"now() at time zone 'UTC'"
|
||
|
),
|
||
|
'regexp'=>array(
|
||
|
DBTYPE_MYSQL=>'REGEXP',
|
||
|
DBTYPE_POSTGRES=>'~'
|
||
|
),
|
||
|
'^'=>array(
|
||
|
DBTYPE_MYSQL=>'^',
|
||
|
DBTYPE_POSTGRES=>'#'
|
||
|
)
|
||
|
);
|
||
|
$f = strtolower($f);
|
||
|
if(isset($lookup[$f]) && isset($lookup[$f][ACTIVE_DBTYPE]))
|
||
|
return $lookup[$f][ACTIVE_DBTYPE];
|
||
|
|
||
|
logger('Unable to abstract DB function "'. $f . '" for dbtype ' . ACTIVE_DBTYPE, LOGGER_DEBUG);
|
||
|
return $f;
|
||
|
}
|