Issues in Schema.php (master) - Issues in master - edgardmessias/yii2-firebird - Measure and Improve Code Quality continuously with Scrutinizer

Issues (28)

Security Analysis not enabled

Cross-Site Scripting
Cross-Site Scripting enables an attacker to inject code into the response of a web-request that is viewed by other users. It can for example be used to bypass access controls, or even to take over other users' accounts.
File Exposure
File Exposure allows an attacker to gain access to local files that he should not be able to access. These files can for example include database credentials, or other configuration files.
File Manipulation
File Manipulation enables an attacker to write custom data to files. This potentially leads to injection of arbitrary code on the server.
Object Injection
Object Injection enables an attacker to inject an object into PHP code, and can lead to arbitrary code execution, file exposure, or file manipulation attacks.
Code Injection
Code Injection enables an attacker to execute arbitrary code on the server.
Response Splitting
Response Splitting can be used to send arbitrary responses.
File Inclusion
File Inclusion enables an attacker to inject custom files into PHP's file loading mechanism, either explicitly passed to include, or for example via PHP's auto-loading mechanism.
Command Injection
Command Injection enables an attacker to inject a shell command that is execute with the privileges of the web-server. This can be used to expose sensitive data, or gain access of your server.
SQL Injection
SQL Injection enables an attacker to execute arbitrary SQL code on your database server gaining access to user data, or manipulating user data.
XPath Injection
XPath Injection enables an attacker to modify the parts of XML document that are read. If that XML document is for example used for authentication, this can lead to further vulnerabilities similar to SQL Injection.
LDAP Injection
LDAP Injection enables an attacker to inject LDAP statements potentially granting permission to run unauthorized queries, or modify content inside the LDAP tree.
Header Injection
Other Vulnerability
This category comprises other attack vectors such as manipulating the PHP runtime, loading custom extensions, freezing the runtime, or similar.
Regex Injection
Regex Injection enables an attacker to execute arbitrary code in your PHP process.
XML Injection
XML Injection enables an attacker to read files on your local filesystem including configuration files, or can be abused to freeze your web-server process.
Variable Injection
Variable Injection enables an attacker to overwrite program variables with custom data, and can lead to further vulnerabilities.
Unfortunately, the security analysis is currently not available for your project. If you are a non-commercial open-source project, please contact support to gain access.
src/Schema.php (9 issues)

Labels

Severity

Upgrade to new PHP Analysis Engine

These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
<?php

/**
 * @link http://www.yiiframework.com/
 * @copyright Copyright (c) 2008 Yii Software LLC
 * @license http://www.yiiframework.com/license/
 */

namespace edgardmessias\db\firebird;

use yii\base\InvalidCallException;
use yii\db\CheckConstraint;
use yii\db\Constraint;
use yii\db\ConstraintFinderInterface;
use yii\db\ConstraintFinderTrait;
use yii\db\Exception;
use yii\db\Expression;
use yii\db\ForeignKeyConstraint;
use yii\db\IndexConstraint;
use yii\db\Schema as BaseSchema;
use yii\db\TableSchema;
use yii\db\Transaction;
.
|-- OtherDir
|   |-- Bar.php
|   `-- Foo.php
`-- SomeDir
    `-- Foo.php
use yii\db\ViewFinderTrait;
use yii\helpers\ArrayHelper;

/**
 * Schema represents the Firebird schema information.
 *
 * @property string[] $indexNames All index names in the Firebird. This property is read-only.
 * @property IndexSchema[] $indexSchemas The metadata for all indexes in the Firebird. Each array element is an
 * instance of [[IndexSchema]] or its child class. This property is read-only.
 * @property array $indexTypes All index types in the Firebird in format: index name => index type. This
 * property is read-only.
 * @property QueryBuilder $queryBuilder The query builder for this connection. This property is read-only.
 *
 * @author Edgard Lorraine Messias <[email protected]>
 * @since 2.0
 */
class Schema extends BaseSchema implements ConstraintFinderInterface
{
    use ViewFinderTrait;
    use ConstraintFinderTrait;

    private $_lastInsertID = null;

    /**
     * @var array map of DB errors and corresponding exceptions
     * If left part is found in DB error message exception class from the right part is used.
     */
    public $exceptionMap = [
        'SQLSTATE[23'                                               => 'yii\db\IntegrityException',
        'SQLSTATE[HY000]: General error: -803 violation of PRIMARY' => 'yii\db\IntegrityException',
    ];
    public $reservedWords = [
        'ADD',
        'ADMIN',
        'ALL',
        'ALTER',
        'AND',
        'ANY',
        'AS',
        'AT',
        'AVG',
        'BEGIN',
        'BETWEEN',
        'BIGINT',
        'BIT_LENGTH',
        'BLOB',
        'BOTH',
        'BOOLEAN',
        'BY',
        'CASE',
        'CAST',
        'CHAR',
        'CHAR_LENGTH',
        'CHARACTER',
        'CHARACTER_LENGTH',
        'CHECK',
        'CLOSE',
        'COLLATE',
        'COLUMN',
        'COMMIT',
        'CONNECT',
        'CONSTRAINT',
        'CORR',
        'COUNT',
        'COVAR_POP',
        'CREATE',
        'CROSS',
        'CURRENT',
        'CURRENT_CONNECTION',
        'CURRENT_DATE',
        'CURRENT_ROLE',
        'CURRENT_TIME',
        'CURRENT_TIMESTAMP',
        'CURRENT_TRANSACTION',
        'CURRENT_USER',
        'CURSOR',
        'DATE',
        'DAY',
        'DEC',
        'DECIMAL',
        'DECLARE',
        'DEFAULT',
        'DELETE',
        'DELETING',
        'DETERMINISTIC',
        'DISCONNECT',
        'DISTINCT',
        'DOUBLE',
        'DROP',
        'ELSE',
        'END',
        'ESCAPE',
        'EXECUTE',
        'EXISTS',
        'EXTERNAL',
        'EXRACT',
        'FALSE',
        'FETCH',
        'FILTER',
        'FLOAT',
        'FOR',
        'FOREIGN',
        'FROM',
        'FULL',
        'FUNCTION',
        'GDSCODE',
        'GLOBAL',
        'GRANT',
        'GROUP',
        'HAVING',
        'HOUR',
        'IN',
        'INDEX',
        'INNER',
        'INSENSITIVE',
        'INSERT',
        'INSERTING',
        'INT',
        'INTEGER',
        'INTO',
        'IS',
        'JOIN',
        'LEADING',
        'LEFT',
        'LIKE',
        'LONG',
        'LOWER',
        'MAX',
        'MAXIMUM_SEGMENT',
        'MERGE',
        'MIN',
        'MINUTE',
        'MONTH',
        'NATIONAL',
        'NATURAL',
        'NCHAR',
        'NO',
        'NOT',
        'NULL',
        'NUMERIC',
        'OCTET_LENGTH',
        'OF',
        'OFFSET',
        'ON',
        'OPEN',
        'OR',
        'ORDER',
        'OUTER',
        'OVER',
        'PARAMETER',
        'PASSWORD',
        'PLAN',
        'POSITION',
        'POST_EVENT',
        'PRECISION',
        'PRIMARY',
        'PROCEDURE',
        'RDB$DB_KEY',
        'RDB$RECORD_VERSION',
        'REAL',
        'RECORD_VERSION',
        'RECREATE',
        'RECURSIVE',
        'REFERENCES',
        'REGR_AVGX',
        'REGR_AVGY',
        'REGR_COUNT',
        'REGR_INTERCEPT',
        'REGR_R2',
        'REGR_SLOPE',
        'REGR_SXX',
        'REGR_SXY',
        'REGR_SYY',
        'RELEASE',
        'RETURN',
        'RETURNING_VALUES',
        'RETURNS',
        'REVOKE',
        'RIGHT',
        'ROLLBACK',
        'ROW',
        'ROWS',
        'ROW_COUNT',
        'SAVEPOINT',
        'SCROLL',
        'SECOND',
        'SELECT',
        'SENSITIVE',
        'SET',
        'SIMILAR',
        'SOME',
        'SQLCODE',
        'SQLSTATE',
        'START',
        'STDDEV_POP',
        'STDDEV_SAMP',
        'SUM',
        'TABLE',
        'THEN',
        'TIME',
        'TIMESTAMP',
        'TO',
        'TRAILING',
        'TRIGGER',
        'TRIM',
        'TRUE',
        'UNION',
        'UNIQUE',
        'UNKNOWN',
        'UPDATE',
        'UPDATING',
        'UPPER',
        'USER',
        'USING',
        'VALUE',
        'VALUES',
        'VARCHAR',
        'VARIABLE',
        'VARYING',
        'VAR_POP',
        'VAR_SAMP',
        'VIEW',
        'WHEN',
        'WHERE',
        'WHILE',
        'WITH',
        'YEAR',
    ];

    /**
     * @var array mapping from physical column types (keys) to abstract column types (values)
     */
    public $typeMap = [
        'bigint'             => self::TYPE_BIGINT,
        'char'               => self::TYPE_CHAR,
        'varchar'            => self::TYPE_STRING,
        'timestamp'          => self::TYPE_TIMESTAMP,
        'decimal'            => self::TYPE_DECIMAL,
        'float'              => self::TYPE_FLOAT,
        'blob'               => self::TYPE_BINARY,
        'integer'            => self::TYPE_INTEGER,
        'blob sub_type text' => self::TYPE_TEXT,
        'numeric'            => self::TYPE_DECIMAL,
        'double precision'   => self::TYPE_DOUBLE,
        'smallint'           => self::TYPE_SMALLINT,
    ];

    /**
     * {@inheritdoc}
     */
    protected function resolveTableName($name)
    {
        $resolvedName = new TableSchema();
        $this->resolveTableNames($resolvedName, $name);
        return $resolvedName;
    }

    /**
     * Creates a query builder for the database.
     * This method may be overridden by child classes to create a DBMS-specific query builder.
     * @return QueryBuilder query builder instance
     */
    public function createQueryBuilder()
    {
        return new QueryBuilder($this->db);
    }

    /**
     * @inheritdoc
     */
    public function createColumnSchemaBuilder($type, $length = null)
    {
        return new ColumnSchemaBuilder($type, $length);
    }

    public function quoteSimpleTableName($name)
    {
        if ($this->db->tablePrefix !== '') {
            return $name;
        }

        $word = strtoupper(str_replace('%', '', $name));
        if (in_array($word, $this->reservedWords)) {
            return strpos($name, '"') !== false ? $name : '"' . $name . '"';
        }

        return $name;
    }

    public function quoteSimpleColumnName($name)
    {
        if (in_array(strtoupper($name), $this->reservedWords)) {
            return parent::quoteSimpleColumnName($name);
        }
        return $name;
    }

    protected function loadTableSchema($name)
    {
        $table = $this->resolveTableName($name);
        if ($this->findColumns($table)) {
            $this->findConstraints($table);
            return $table;
        }
        return null;
    }

    public function getPdoType($data)
    {
        static $typeMap = [
            // php type => PDO type
            'boolean'  => \PDO::PARAM_INT,
            'integer'  => \PDO::PARAM_INT,
            'string'   => \PDO::PARAM_STR,
            'resource' => \PDO::PARAM_LOB,
            'NULL'     => \PDO::PARAM_NULL,
        ];
        $type = gettype($data);

        return isset($typeMap[$type]) ? $typeMap[$type] : \PDO::PARAM_STR;
    }

    /**
     *
     * @param TableSchema $table
     * @param string $name
     */
    protected function resolveTableNames($table, $name)
    {
        $parts = explode('.', str_replace('"', '', $name));
        if (isset($parts[1])) {
            $table->schemaName = $parts[0];
            $table->name = strtolower($parts[1]);
            $table->fullName = $this->quoteTableName($table->schemaName) . '.' . $this->quoteTableName($table->name);
        } else {
            $table->name = strtolower($parts[0]);
            $table->fullName = $this->quoteTableName($table->name);
        }
    }

    /**
     * Collects the table column metadata.
     *
     * @param TableSchema $table the table metadata
     * @return boolean whether the table exists in the database
     */
    protected function findColumns($table)
    {
        // Zoggo - Converted sql to use join syntax
        // robregonm - Added isAutoInc
        $sql = 'SELECT
                    rel.rdb$field_name AS fname,
                    rel.rdb$default_source AS fdefault,
                    fld.rdb$field_type AS fcodtype,
                    fld.rdb$field_sub_type AS fcodsubtype,
                    fld.rdb$field_length AS flength,
                    fld.rdb$character_length AS fcharlength,
                    fld.rdb$field_scale AS fscale,
                    fld.rdb$field_precision AS fprecision,
                    rel.rdb$null_flag AS fnull,
                    rel.rdb$description AS fcomment,
                    fld.rdb$default_value AS fdefault_value,';

        if ($this->db->supportColumnIdentity) {
            $sql .= '
                    rel.rdb$generator_name AS fgenerator_name,';
        }

        $sql .= '
                    (SELECT RDB$TRIGGER_SOURCE FROM RDB$TRIGGERS
                        WHERE RDB$SYSTEM_FLAG = 0
                        AND UPPER(RDB$RELATION_NAME)=UPPER(\'' . $table->name . '\')
                        AND RDB$TRIGGER_TYPE = 1
                        AND RDB$TRIGGER_INACTIVE = 0
                        AND (UPPER(REPLACE(RDB$TRIGGER_SOURCE,\' \',\'\')) LIKE \'%NEW.\'||TRIM(rel.rdb$field_name)||\'=GEN_ID%\'
                            OR UPPER(REPLACE(RDB$TRIGGER_SOURCE,\' \',\'\')) LIKE \'%NEW.\'||TRIM(rel.rdb$field_name)||\'=NEXTVALUEFOR%\'))
                    AS fautoinc
                FROM
                    rdb$relation_fields rel
                    JOIN rdb$fields fld ON rel.rdb$field_source=fld.rdb$field_name
                WHERE
                    UPPER(rel.rdb$relation_name)=UPPER(\'' . $table->name . '\')
                ORDER BY
                    rel.rdb$field_position;';
        try {
            $columns = $this->db->createCommand($sql)->queryAll();
            if (empty($columns)) {
                return false;
            }
        } catch (Exception $e) {
            return false;
        }
        $sql = 'SELECT
                    idx.rdb$field_name AS fname
                FROM
                    rdb$relation_constraints rc
                    JOIN rdb$index_segments idx ON idx.rdb$index_name=rc.rdb$index_name
                WHERE rc.rdb$constraint_type=\'PRIMARY KEY\'
					AND UPPER(rc.rdb$relation_name)=UPPER(\'' . $table->name . '\')';
        try {
            $pkeys = $this->db->createCommand($sql)->queryColumn();
        } catch (Exception $e) {
            return false;
        }
        $pkeys = array_map('rtrim', $pkeys);
        $pkeys = array_map('strtolower', $pkeys);
        foreach ($columns as $key => $column) {
            $column = array_map('strtolower', $column);
            $columns[$key]['fprimary'] = in_array(rtrim($column['fname']), $pkeys);
        }
        foreach ($columns as $column) {
            $c = $this->loadColumnSchema($column);
            if ($table->sequenceName === null && $c->autoIncrement) {
                $matches = [];

                if (isset($column['fgenerator_name']) && $column['fgenerator_name']) {
                    $table->sequenceName = $column['fgenerator_name'];
                } elseif (preg_match("/NEW.{$c->name}\s*=\s*GEN_ID\((\w+)/i", $column['fautoinc'], $matches)) {
                    $table->sequenceName = $matches[1];
                } elseif (preg_match("/NEW.{$c->name}\s*=\s*NEXT\s+VALUE\s+FOR\s+(\w+)/i", $column['fautoinc'], $matches)) {
                    $table->sequenceName = $matches[1];
                }
            }
            $table->columns[$c->name] = $c;
            if ($c->isPrimaryKey) {
                $table->primaryKey[] = $c->name;
            }
        }
        return (count($table->columns) > 0);
    }

    /**
     * @return ColumnSchema
     * @throws \yii\base\InvalidConfigException
     */
    protected function createColumnSchema()
    {
        return \Yii::createObject('\edgardmessias\db\firebird\ColumnSchema');
    }

    /**
     * Creates a table column.
     *
     * @param array $column column metadata
     * @return ColumnSchema normalized column metadata
     */
    protected function loadColumnSchema($column)
    {
        $c = $this->createColumnSchema();
        $c->name = strtolower(rtrim($column['fname']));
        $c->allowNull = (int) $column['fnull'] !== 1;
        $c->isPrimaryKey = $column['fprimary'];
        $c->autoIncrement = (isset($column['fgenerator_name']) && $column['fgenerator_name']) || (boolean) $column['fautoinc'];
        $c->comment = $column['fcomment'] === null ? '' : $column['fcomment'];

        $c->type = self::TYPE_STRING;

        $defaultValue = null;
        if (!empty($column['fdefault'])) {
            // remove whitespace, 'DEFAULT ' prefix and surrounding single quotes; all optional
            if (preg_match("/\s*(DEFAULT\s+){0,1}('(.*)'|(.*))\s*/i", $column['fdefault'], $parts)) {
                $defaultValue = array_pop($parts);
            }
            // handle escaped single quotes like in "funny''quoted''string"
            $defaultValue = str_replace('\'\'', '\'', $defaultValue);
        }
        if ($defaultValue === null) {
            $defaultValue = $column['fdefault_value'];
        }
        $dbType = '';
        $baseTypes = [
            7   => 'SMALLINT',
            8   => 'INTEGER',
            16  => 'INT64',
            9   => 'QUAD',
            10  => 'FLOAT',
            11  => 'D_FLOAT',
            17  => 'BOOLEAN',
            27  => 'DOUBLE PRECISION',
            12  => 'DATE',
            13  => 'TIME',
            35  => 'TIMESTAMP',
            261 => 'BLOB',
            40  => 'CSTRING',
            45  => 'BLOB_ID',
        ];
        $baseCharTypes = [
            37 => 'VARCHAR',
            14 => 'CHAR',
        ];
        if (array_key_exists((int) $column['fcodtype'], $baseTypes)) {
            $dbType = $baseTypes[(int) $column['fcodtype']];
        } elseif (array_key_exists((int) $column['fcodtype'], $baseCharTypes)) {
            $c->size = (int) $column['fcharlength'];
            $c->precision = $c->size;
            $dbType = $baseCharTypes[(int) $column['fcodtype']] . "($c->size)";
        }
        switch ((int) $column['fcodtype']) {
            case 7:
            case 8:
                switch ((int) $column['fcodsubtype']) {
                    case 1:
                        $c->precision = (int) $column['fprecision'];
                        $c->size = $c->precision;
                        $c->scale = abs((int) $column['fscale']);
class Id
{
    public $id;

    public function __construct($id)
    {
        $this->id = $id;
    }

}

class Account
{
    /** @var  Id $id */
    public $id;
}

$account_id = false;

if (starsAreRight()) {
    $account_id = new Id(42);
}

$account = new Account();
if ($account instanceof Id)
{
    $account->id = $account_id;
}
                        $dbType = "NUMERIC({$c->precision},{$c->scale})";
                        break;
                    case 2:
                        $c->precision = (int) $column['fprecision'];
                        $c->size = $c->precision;
                        $c->scale = abs((int) $column['fscale']);
                        $dbType = "DECIMAL({$c->precision},{$c->scale})";
                        break;
                }
                break;
            case 16:
                switch ((int) $column['fcodsubtype']) {
                    case 1:
                        $c->precision = (int) $column['fprecision'];
                        $c->size = $c->precision;
                        $c->scale = abs((int) $column['fscale']);
                        $dbType = "NUMERIC({$c->precision},{$c->scale})";
                        break;
                    case 2:
                        $c->precision = (int) $column['fprecision'];
                        $c->size = $c->precision;
                        $c->scale = abs((int) $column['fscale']);
                        $dbType = "DECIMAL({$c->precision},{$c->scale})";
                        break;
                    default:
                        $dbType = 'BIGINT';
                        break;
                }
                break;
            case 261:
                switch ((int) $column['fcodsubtype']) {
                    case 1:
                        $dbType = 'BLOB SUB_TYPE TEXT';
                        $c->size = null;
                        break;
                }
                break;
        }

        $c->dbType = strtolower($dbType);

        $c->type = self::TYPE_STRING;
        if (preg_match('/^([\w\ ]+)(?:\(([^\)]+)\))?/', $c->dbType, $matches)) {
            $type = strtolower($matches[1]);
            if (isset($this->typeMap[$type])) {
                $c->type = $this->typeMap[$type];
            }
        }


        $c->phpType = $this->getColumnPhpType($c);

        $c->defaultValue = null;
        if ($defaultValue !== null) {
            if (in_array($c->type, [self::TYPE_DATE, self::TYPE_DATETIME, self::TYPE_TIME, self::TYPE_TIMESTAMP])
                    && preg_match('/(CURRENT_|NOW|NULL|TODAY|TOMORROW|YESTERDAY)/i', $defaultValue)) {
                $c->defaultValue = new Expression(trim($defaultValue));
            } else {
                $c->defaultValue = $c->phpTypecast($defaultValue);
            }
        }

        return $c;
    }

    /**
     * Collects the foreign key column details for the given table.
     *
     * @param TableSchema $table the table metadata
     */
    protected function findConstraints($table)
    {
        // Zoggo - Converted sql to use join syntax
        $sql = 'SELECT
                    a.rdb$constraint_name as fconstraint,
                    c.rdb$relation_name AS ftable,
                    d.rdb$field_name AS pfield,
                    e.rdb$field_name AS ffield
                FROM
                    rdb$ref_constraints b
                    JOIN rdb$relation_constraints a ON a.rdb$constraint_name=b.rdb$constraint_name
                    JOIN rdb$relation_constraints c ON b.rdb$const_name_uq=c.rdb$constraint_name
                    JOIN rdb$index_segments d ON c.rdb$index_name=d.rdb$index_name
                    JOIN rdb$index_segments e ON a.rdb$index_name=e.rdb$index_name AND e.rdb$field_position = d.rdb$field_position
                WHERE
                    a.rdb$constraint_type=\'FOREIGN KEY\' AND
                    UPPER(a.rdb$relation_name)=UPPER(\'' . $table->name . '\') ';
        try {
            $fkeys = $this->db->createCommand($sql)->queryAll();
        } catch (Exception $e) {
            return false;
        }

        $constraints = [];
        foreach ($fkeys as $fkey) {
            // Zoggo - Added strtolower here to guarantee that values are
            // returned lower case. Otherwise gii generates wrong code.
            $fkey = array_map('rtrim', $fkey);
            $fkey = array_map('strtolower', $fkey);

            if (!isset($constraints[$fkey['fconstraint']])) {
                $constraints[$fkey['fconstraint']] = [
                    $fkey['ftable']
                ];
            }
            $constraints[$fkey['fconstraint']][$fkey['ffield']] = $fkey['pfield'];
        }
        $table->foreignKeys = $constraints;
    }

    protected function findTableNames($schema = '')
    {
        $sql = 'SELECT
                    rdb$relation_name
                FROM
                    rdb$relations
                WHERE
                    (rdb$system_flag is null OR rdb$system_flag=0)';
        try {
            $tables = $this->db->createCommand($sql)->queryColumn();
        } catch (Exception $e) {
            return false;
        }

        $tables = array_map('rtrim', $tables);
        $tables = array_map('strtolower', $tables);

        return $tables;
    }

    /**
     * Returns all unique indexes for the given table.
     * Each array element is of the following structure:
     *
     * ~~~
     * [
     *  'IndexName1' => ['col1' [, ...]],
     *  'IndexName2' => ['col2' [, ...]],
     * ]
     * ~~~
     *
     * @param TableSchema $table the table metadata
     * @return array all unique indexes for the given table.
     * @since 2.0.4
     */
    public function findUniqueIndexes($table)
    {
        $query = '
SELECT id.RDB$INDEX_NAME as index_name, ids.RDB$FIELD_NAME as column_name
FROM RDB$INDICES id
INNER JOIN RDB$INDEX_SEGMENTS ids ON ids.RDB$INDEX_NAME = id.RDB$INDEX_NAME
WHERE id.RDB$UNIQUE_FLAG = 1
AND   id.RDB$SYSTEM_FLAG = 0
AND UPPER(id.RDB$RELATION_NAME) = UPPER(\'' . $table->name . '\')
ORDER BY id.RDB$RELATION_NAME, id.RDB$INDEX_NAME, ids.RDB$FIELD_POSITION';
        $result = [];
        $command = $this->db->createCommand($query);
        foreach ($command->queryAll() as $row) {
            $result[strtolower(rtrim($row['index_name']))][] = strtolower(rtrim($row['column_name']));
        }
        return $result;
    }

    /**
     * Sets the isolation level of the current transaction.
     * @param string $level The transaction isolation level to use for this transaction.
     * This can be one of [[Transaction::READ_UNCOMMITTED]], [[Transaction::READ_COMMITTED]], [[Transaction::REPEATABLE_READ]]
     * and [[Transaction::SERIALIZABLE]] but also a string containing DBMS specific syntax to be used
     * after `SET TRANSACTION ISOLATION LEVEL`.
     * @see http://en.wikipedia.org/wiki/Isolation_%28database_systems%29#Isolation_levels
     */
    public function setTransactionIsolationLevel($level)
    {
        if ($level == Transaction::READ_UNCOMMITTED) {
            parent::setTransactionIsolationLevel('READ COMMITTED RECORD_VERSION');
        } elseif ($level == Transaction::REPEATABLE_READ) {
            parent::setTransactionIsolationLevel('SNAPSHOT');
        } elseif ($level == Transaction::SERIALIZABLE) {
            parent::setTransactionIsolationLevel('SNAPSHOT TABLE STABILITY');
        } else {
            parent::setTransactionIsolationLevel($level);
        }
    }

    /**
     * @inheritdoc
     */
    public function insert($table, $columns)
    {
        $this->_lastInsertID = false;
        $params = [];
        $sql = "";
<?php

$singleQuoted = 'Value';
$doubleQuoted = "\tSingle is $singleQuoted";

print $doubleQuoted;
        $returnColumns = $this->getTableSchema($table)->primaryKey;
        if (!empty($returnColumns)) {
            if (!$this->db->supportReturningInsert) {
                $returs = [];
                $returning = [];
                $columnSchemas = $this->getTableSchema($table)->columns;
                foreach ((array) $returnColumns as $name) {
                    $returs[] = $this->quoteColumnName($name) . ' ' . $columnSchemas[$name]->dbType;
                    $returning[] = $this->quoteColumnName($name);
                }

                $sql = $this->db->getQueryBuilder()->rawInsert($table, array_keys($columns), array_values($columns), $params);


                $sql = "EXECUTE block RETURNS (" 
<?php

$singleQuoted = 'Value';
$doubleQuoted = "\tSingle is $singleQuoted";

print $doubleQuoted;
                        . implode(', ',$returs) 
                        . ") AS BEGIN\n" 
                        . $sql . ' RETURNING ' . implode(', ', $returning)
                        . ' INTO ' . implode(', ', $returning)
                        . ";\nSUSPEND;\nEND;";
            } else {
                $sql = $this->db->getQueryBuilder()->insert($table, $columns, $params);
                $returning = [];
                foreach ((array) $returnColumns as $name) {
                    $returning[] = $this->quoteColumnName($name);
                }
                $sql .= ' RETURNING ' . implode(', ', $returning);
            }
        }

        $command = $this->db->createCommand($sql, $params);
        $command->prepare(false);
        $result = $command->queryOne();

        if (!$command->pdoStatement->rowCount()) {
            return false;
        } else {
            if (!empty($returnColumns)) {
                foreach ((array) $returnColumns as $name) {
                    if ($this->getTableSchema($table)->getColumn($name)->autoIncrement) {
                        $this->_lastInsertID = $result[$name];
                        break;
                    }
                }
            }
            return $result;
        }
    }

    /**
     * @inheritdoc
     */
    public function getLastInsertID($sequenceName = '')
    {
        if (!$this->db->isActive) {
            throw new InvalidCallException('DB Connection is not active.');
        }

        if ($sequenceName !== '') {
            return $this->db->createCommand('SELECT GEN_ID(' . $this->db->quoteTableName($sequenceName) . ', 0 ) FROM RDB$DATABASE;')->queryScalar();

        }

        if ($this->_lastInsertID !== false) {
            return $this->_lastInsertID;
class Author {
    private $name;

    public function __construct($name) {
        $this->name = $name;
    }

    public function getName() {
        return $this->name;
    }
}

abstract class Post {
    public function getAuthor() {
        return 'Johannes';
    }
}

class BlogPost extends Post {
    public function getAuthor() {
        return new Author('Johannes');
    }
}

class ForumPost extends Post { /* ... */ }

function my_function(Post $post) {
    echo strtoupper($post->getAuthor());
}
        }
        return null;
    }

    protected function loadTablePrimaryKey($tableName)
    {
        static $sql = <<<'SQL'
SELECT RC.RDB$CONSTRAINT_NAME AS NAME, IDX.RDB$FIELD_NAME AS COLUMN_NAME
FROM RDB$RELATION_CONSTRAINTS RC
  JOIN RDB$INDEX_SEGMENTS IDX
    ON IDX.RDB$INDEX_NAME = RC.RDB$INDEX_NAME
WHERE RC.RDB$CONSTRAINT_TYPE = 'PRIMARY KEY'
AND   UPPER(RC.RDB$RELATION_NAME) = UPPER(:tableName)
ORDER BY IDX.RDB$FIELD_POSITION
SQL;

        $resolvedName = $this->resolveTableName($tableName);
        $constraints = $this->db->createCommand($sql, [
            ':tableName' => $resolvedName->name,
        ])->queryAll();
        $constraints = $this->normalizePdoRowKeyCase($constraints, true);
        $constraints = ArrayHelper::index($constraints, null, ['name']);

        foreach ($constraints as $name => $constraint) {
            $columns = ArrayHelper::getColumn($constraint, 'column_name');
            $columns = array_map('trim', $columns);
            $columns = array_map('strtolower', $columns);
            return new Constraint([
                'name' => strtolower(trim($name)),
                'columnNames' => $columns,
            ]);
        }

        return null;
    }

    protected function loadTableUniques($tableName)
    {
        static $sql = <<<'SQL'
SELECT RC.RDB$CONSTRAINT_NAME AS NAME, IDX.RDB$FIELD_NAME AS COLUMN_NAME
FROM RDB$RELATION_CONSTRAINTS RC
  JOIN RDB$INDEX_SEGMENTS IDX
    ON IDX.RDB$INDEX_NAME = RC.RDB$INDEX_NAME
WHERE RC.RDB$CONSTRAINT_TYPE = 'UNIQUE'
AND   UPPER(RC.RDB$RELATION_NAME) = UPPER(:tableName)
ORDER BY IDX.RDB$FIELD_POSITION
SQL;

        $resolvedName = $this->resolveTableName($tableName);
        $constraints = $this->db->createCommand($sql, [
            ':tableName' => $resolvedName->name,
        ])->queryAll();
        $constraints = $this->normalizePdoRowKeyCase($constraints, true);
        $constraints = ArrayHelper::index($constraints, null, ['name']);

        $result = [];
        foreach ($constraints as $name => $rows) {
            $columns = ArrayHelper::getColumn($rows, 'column_name');
            $columns = array_map('trim', $columns);
            $columns = array_map('strtolower', $columns);
            $result[] = new Constraint([
                'name' => strtolower(trim($name)),
                'columnNames' => $columns,
            ]);
        }

        return $result;
    }

    protected function loadTableChecks($tableName)
    {
        // DISTINCT not work on blob, need cast to varchar
        // 8191 Is max for UTF-8
        static $sql = <<<'SQL'
SELECT DISTINCT RC.RDB$CONSTRAINT_NAME AS NAME,
       DEP.RDB$FIELD_NAME AS COLUMN_NAME,
       CAST(TRIG.RDB$TRIGGER_SOURCE AS VARCHAR(8191)) AS CHECK_EXPR
       FROM RDB$RELATION_CONSTRAINTS RC
  JOIN RDB$CHECK_CONSTRAINTS CH_CONST
    ON CH_CONST.RDB$CONSTRAINT_NAME = RC.RDB$CONSTRAINT_NAME
  JOIN RDB$TRIGGERS TRIG
    ON TRIG.RDB$TRIGGER_NAME = CH_CONST.RDB$TRIGGER_NAME
  JOIN RDB$DEPENDENCIES DEP
    ON DEP.RDB$DEPENDENT_NAME = TRIG.RDB$TRIGGER_NAME
   AND DEP.RDB$DEPENDED_ON_NAME = TRIG.RDB$RELATION_NAME
WHERE RC.RDB$CONSTRAINT_TYPE = 'CHECK'
AND   UPPER(RC.RDB$RELATION_NAME) = UPPER(:tableName)
SQL;

        $resolvedName = $this->resolveTableName($tableName);
        $constraints = $this->db->createCommand($sql, [
            ':tableName' => $resolvedName->name,
        ])->queryAll();
        $constraints = $this->normalizePdoRowKeyCase($constraints, true);
        $constraints = ArrayHelper::index($constraints, null, ['name']);

        $result = [];
        foreach ($constraints as $name => $constraint) {
            $columns = ArrayHelper::getColumn($constraint, 'column_name');
            $columns = array_map('trim', $columns);
            $columns = array_map('strtolower', $columns);

            $check_expr = $constraint[0]['check_expr'];
            $check_expr = preg_replace('/^\s*CHECK\s*/i', '', $check_expr); // remove "CHECK " at begin
            $check_expr = preg_replace('/^\((.*)\)$/i', '\1', $check_expr); // remove bracket () at begin and end

            $result[] = new CheckConstraint([
                'name' => strtolower(trim($name)),
                'columnNames' => $columns,
                'expression' => $check_expr,
            ]);
        }

        return $result;
    }

    protected function loadTableIndexes($tableName)
    {
        static $sql = <<<'SQL'
SELECT IDX.RDB$INDEX_NAME AS NAME,
       SEG.RDB$FIELD_NAME AS COLUMN_NAME,
       IDX.RDB$UNIQUE_FLAG AS INDEX_IS_UNIQUE,
       CASE WHEN CONST.RDB$CONSTRAINT_NAME IS NOT NULL THEN 1 ELSE 0 END AS INDEX_IS_PRIMARY
       FROM RDB$INDICES IDX
  JOIN RDB$INDEX_SEGMENTS SEG
  LEFT JOIN RDB$RELATION_CONSTRAINTS CONST ON CONST.RDB$INDEX_NAME = SEG.RDB$INDEX_NAME AND CONST.RDB$CONSTRAINT_TYPE = 'PRIMARY KEY'
    ON SEG.RDB$INDEX_NAME = IDX.RDB$INDEX_NAME
WHERE UPPER(IDX.RDB$RELATION_NAME) = UPPER(:tableName)
ORDER BY SEG.RDB$FIELD_POSITION
SQL;

        $resolvedName = $this->resolveTableName($tableName);
        $indexes = $this->db->createCommand($sql, [
            ':tableName' => $resolvedName->name,
        ])->queryAll();
        $indexes = $this->normalizePdoRowKeyCase($indexes, true);
        $indexes = ArrayHelper::index($indexes, null, 'name');
        $result = [];
        foreach ($indexes as $name => $index) {
            $columns = ArrayHelper::getColumn($index, 'column_name');
            $columns = array_map('trim', $columns);
            $columns = array_map('strtolower', $columns);

            $result[] = new IndexConstraint([
                'isPrimary' => (bool) $index[0]['index_is_primary'],
                'isUnique' => (bool) $index[0]['index_is_unique'],
                'name' => strtolower(trim($name)),
                'columnNames' => $columns,
            ]);
        }

        return $result;
    }

    protected function loadTableDefaultValues($tableName)

    {
        throw new \yii\base\NotSupportedException('FirebirdSQL does not support default value constraints.');
    }

    protected function loadTableForeignKeys($tableName)
    {
        static $sql = <<<'SQL'
SELECT A.RDB$CONSTRAINT_NAME AS NAME,
       E.RDB$FIELD_NAME AS COLUMN_NAME,
       C.RDB$RELATION_NAME AS FOREIGN_TABLE_NAME,
       D.RDB$FIELD_NAME AS FOREIGN_COLUMN_NAME,
       B.RDB$UPDATE_RULE AS ON_UPDATE,
       B.RDB$DELETE_RULE AS ON_DELETE
FROM RDB$REF_CONSTRAINTS B
  JOIN RDB$RELATION_CONSTRAINTS A
    ON A.RDB$CONSTRAINT_NAME = B.RDB$CONSTRAINT_NAME
  JOIN RDB$RELATION_CONSTRAINTS C
    ON B.RDB$CONST_NAME_UQ = C.RDB$CONSTRAINT_NAME
  JOIN RDB$INDEX_SEGMENTS D
    ON C.RDB$INDEX_NAME = D.RDB$INDEX_NAME
  JOIN RDB$INDEX_SEGMENTS E
    ON A.RDB$INDEX_NAME = E.RDB$INDEX_NAME
   AND E.RDB$FIELD_POSITION = D.RDB$FIELD_POSITION
WHERE A.RDB$CONSTRAINT_TYPE = 'FOREIGN KEY'
AND   UPPER(A.RDB$RELATION_NAME) = UPPER(:tableName)
ORDER BY E.RDB$FIELD_POSITION
SQL;

        $resolvedName = $this->resolveTableName($tableName);
        $constraints = $this->db->createCommand($sql, [
            ':tableName' => $resolvedName->name,
        ])->queryAll();
        $constraints = $this->normalizePdoRowKeyCase($constraints, true);
        $constraints = ArrayHelper::index($constraints, null, ['name']);

        $result = [];
        foreach ($constraints as $name => $constraint) {
            $columnNames = ArrayHelper::getColumn($constraint, 'column_name');
            $columnNames = array_map('trim', $columnNames);
            $columnNames = array_map('strtolower', $columnNames);
            
            $foreignColumnNames = ArrayHelper::getColumn($constraint, 'foreign_column_name');
            $foreignColumnNames = array_map('trim', $foreignColumnNames);
            $foreignColumnNames = array_map('strtolower', $foreignColumnNames);
            
            $result[] = new ForeignKeyConstraint([
                'name' => strtolower(trim($name)),
                'columnNames' => $columnNames,
                'foreignTableName' => strtolower(trim($constraint[0]['foreign_table_name'])),
                'foreignColumnNames' => $foreignColumnNames,
                'onDelete' => trim($constraint[0]['on_delete']),
                'onUpdate' => trim($constraint[0]['on_update']),
            ]);
        }

        return $result;
    }

    protected function findViewNames($schema = '')

    {
        $sql = <<<'SQL'
SELECT RDB$RELATION_NAME
FROM RDB$RELATIONS
WHERE RDB$VIEW_BLR IS NOT NULL
AND   (RDB$SYSTEM_FLAG IS NULL OR RDB$SYSTEM_FLAG = 0)
SQL;

        $views = $this->db->createCommand($sql)->queryColumn();
        $views = array_map('trim', $views);
        $views = array_map('strtolower', $views);

        return $views;
    }
}

edgardmessias / yii2-firebird

Issues (28)

Security Analysis not enabled

src/Schema.php (9 issues)

Labels

Severity

Introduced By

Upgrade to new PHP Analysis Engine

Duplication Side-by-Side

Filter issues like
