ggoffy /
modulebuilder
This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include, or for example
via PHP's auto-loading mechanism.
| 1 | <?php |
||||||
| 2 | |||||||
| 3 | namespace XoopsModules\Modulebuilder\Common; |
||||||
| 4 | |||||||
| 5 | /* |
||||||
| 6 | You may not change or alter any portion of this comment or credits |
||||||
| 7 | of supporting developers from this source code or any supporting source code |
||||||
| 8 | which is considered copyrighted (c) material of the original comment or credit authors. |
||||||
| 9 | |||||||
| 10 | This program is distributed in the hope that it will be useful, |
||||||
| 11 | but WITHOUT ANY WARRANTY; without even the implied warranty of |
||||||
| 12 | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. |
||||||
| 13 | */ |
||||||
| 14 | |||||||
| 15 | use XoopsModules\Modulebuilder\Common; |
||||||
| 16 | |||||||
| 17 | /** |
||||||
| 18 | * Class to compare current DB table structure with sql/mysql.sql |
||||||
| 19 | * |
||||||
| 20 | * @category Table Checker |
||||||
| 21 | * @author Goffy <[email protected]> |
||||||
| 22 | * @copyright 2021 XOOPS Project (https://xoops.org) |
||||||
| 23 | * @license GNU GPL 2 or later (https://www.gnu.org/licenses/gpl-2.0.html) |
||||||
| 24 | * @link https://xoops.org |
||||||
| 25 | */ |
||||||
| 26 | |||||||
| 27 | class TableChecker extends \XoopsObject |
||||||
| 28 | { |
||||||
| 29 | |||||||
| 30 | /** |
||||||
| 31 | * @var mixed |
||||||
| 32 | */ |
||||||
| 33 | private $after = null; |
||||||
| 34 | |||||||
| 35 | /** |
||||||
| 36 | * @var mixed |
||||||
| 37 | */ |
||||||
| 38 | private $mydirname = null; |
||||||
| 39 | |||||||
| 40 | /** |
||||||
| 41 | * @var mixed |
||||||
| 42 | */ |
||||||
| 43 | private $result = []; |
||||||
| 44 | |||||||
| 45 | /** |
||||||
| 46 | * @var mixed |
||||||
| 47 | */ |
||||||
| 48 | private $checktype = null; |
||||||
| 49 | public const CHECKTYPE_REPORT = 0; //report only |
||||||
| 50 | public const CHECKTYPE_UPDATE = 1; //update only |
||||||
| 51 | public const CHECKTYPE_UPDATE_REPORT = 2; //update and report |
||||||
| 52 | |||||||
| 53 | |||||||
| 54 | /** |
||||||
| 55 | * @param \XoopsModules\Modulebuilder\Common\TableChecker|null |
||||||
| 56 | */ |
||||||
| 57 | public function __construct($mydirname, $checktype = 0) |
||||||
| 58 | { |
||||||
| 59 | $this->mydirname = $mydirname; |
||||||
| 60 | $this->checktype = $checktype; |
||||||
| 61 | $this->result = []; |
||||||
| 62 | } |
||||||
| 63 | |||||||
| 64 | /** |
||||||
| 65 | * |
||||||
| 66 | */ |
||||||
| 67 | public function processSQL() |
||||||
| 68 | { |
||||||
| 69 | |||||||
| 70 | $tabledefs = $this->readSQLFile(); |
||||||
| 71 | |||||||
| 72 | $this->result[] = 'Tables found in sql:' . \count($tabledefs); |
||||||
| 73 | |||||||
| 74 | foreach ($tabledefs as $tabledef) { |
||||||
| 75 | //echo '<br>' . $tabledef['name']; |
||||||
| 76 | //check whether table exist or not |
||||||
| 77 | $table = $tabledef['name']; |
||||||
| 78 | $check = $GLOBALS['xoopsDB']->queryF("SELECT * FROM INFORMATION_SCHEMA.TABLES WHERE TABLE_SCHEMA=DATABASE() AND TABLE_NAME='$table'"); |
||||||
| 79 | $numRows = $GLOBALS['xoopsDB']->getRowsNum($check); |
||||||
| 80 | if ($numRows) { |
||||||
| 81 | //table exist |
||||||
| 82 | $this->result[] = 'Table exist:' . $table; |
||||||
| 83 | $ret = $this->checkTableFields($table, $tabledef['fields']); |
||||||
|
0 ignored issues
–
show
Unused Code
introduced
by
Loading history...
|
|||||||
| 84 | } else { |
||||||
| 85 | if ($this::CHECKTYPE_UPDATE == $this->checktype || $this::CHECKTYPE_UPDATE_REPORT == $this->checktype) { |
||||||
| 86 | // create new table |
||||||
| 87 | $sql = $tabledef['sql']; |
||||||
| 88 | if ($this->result = $GLOBALS['xoopsDB']->queryF($sql)) { |
||||||
| 89 | $this->result[] = 'Table created:' . $table; |
||||||
| 90 | } else { |
||||||
| 91 | \xoops_error($GLOBALS['xoopsDB']->error() . '<br>' . $sql); |
||||||
| 92 | $this->result[] = 'Error creating table:' . $table; |
||||||
| 93 | } |
||||||
| 94 | } else { |
||||||
| 95 | $this->result[] = 'Table do not exist:' . $table . ' (creation not activated)'; |
||||||
| 96 | } |
||||||
| 97 | } |
||||||
| 98 | } |
||||||
| 99 | |||||||
| 100 | if (self::CHECKTYPE_REPORT == $this->checktype || self::CHECKTYPE_UPDATE_REPORT == $this->checktype) { |
||||||
| 101 | return $this->result; |
||||||
| 102 | } |
||||||
| 103 | } |
||||||
| 104 | |||||||
| 105 | /** |
||||||
| 106 | * |
||||||
| 107 | */ |
||||||
| 108 | private function readSQLFile() |
||||||
| 109 | { |
||||||
| 110 | $tabledefs = []; |
||||||
| 111 | |||||||
| 112 | $moduleHandler = \xoops_getHandler('module'); |
||||||
| 113 | $module = $moduleHandler->getByDirname($this->mydirname); |
||||||
|
0 ignored issues
–
show
The method
getByDirname() does not exist on XoopsObjectHandler. It seems like you code against a sub-type of XoopsObjectHandler such as XoopsModuleHandler or XoopsPersistableObjectHandler.
(
Ignorable by Annotation
)
If this is a false-positive, you can also ignore this issue in your code via the
Loading history...
|
|||||||
| 114 | $module->loadInfoAsVar($this->mydirname); |
||||||
| 115 | $sqlfile = $module->getInfo('sqlfile'); |
||||||
| 116 | $sql_file_path = \XOOPS_ROOT_PATH . '/modules/' . $this->mydirname . '/' . $sqlfile[\XOOPS_DB_TYPE]; |
||||||
| 117 | |||||||
| 118 | if (\file_exists($sql_file_path)) { |
||||||
| 119 | require_once \XOOPS_ROOT_PATH . '/class/database/sqlutility.php'; |
||||||
| 120 | $sqlutil = new \SqlUtility(); |
||||||
| 121 | $pieces = []; |
||||||
| 122 | $sql_query = \trim(file_get_contents($sql_file_path)); |
||||||
| 123 | $sqlutil->splitMySqlFile($pieces, $sql_query); |
||||||
| 124 | |||||||
| 125 | $countTable = 0; |
||||||
| 126 | foreach ($pieces as $piece) { |
||||||
| 127 | $singleSql = $sqlutil->prefixQuery($piece, $GLOBALS['xoopsDB']->prefix()); |
||||||
| 128 | $lines = \preg_split('/\r\n|\n|\r/', $piece); |
||||||
| 129 | //var_dump($lines); |
||||||
| 130 | $needle1 = 'create table'; |
||||||
| 131 | if ($needle1 == \mb_strtolower($singleSql[1])) { |
||||||
| 132 | $countLine = 0; |
||||||
| 133 | $tabledefs[$countTable]['sql'] = $singleSql[0]; |
||||||
| 134 | $tabledefs[$countTable]['name'] = $GLOBALS['xoopsDB']->prefix() . '_' . $singleSql[4]; |
||||||
| 135 | $this->after = ''; |
||||||
| 136 | foreach($lines as $line) { |
||||||
| 137 | if ($countLine > 0) { |
||||||
| 138 | $needle2 = 'primary key'; |
||||||
| 139 | $needle3 = 'unique key'; |
||||||
| 140 | $needle4 = 'key'; |
||||||
| 141 | if (0 === \stripos(\trim($line), $needle2)) { |
||||||
| 142 | $tabledefs[$countTable][$needle2] = $line; |
||||||
| 143 | } elseif (0 === \stripos(\trim($line), $needle3)) { |
||||||
| 144 | $tabledefs[$countTable][$needle3] = $line; |
||||||
| 145 | } elseif (0 === \stripos(\trim($line), $needle4)) { |
||||||
| 146 | $tabledefs[$countTable][$needle4] = $line; |
||||||
| 147 | } else { |
||||||
| 148 | if (\strpos($line, '`') > 0) { |
||||||
| 149 | $tabledefs[$countTable]['fields'][] = $this->extractField($line); |
||||||
| 150 | } |
||||||
| 151 | } |
||||||
| 152 | } |
||||||
| 153 | $countLine++; |
||||||
| 154 | } |
||||||
| 155 | $countTable++; |
||||||
| 156 | } |
||||||
| 157 | } |
||||||
| 158 | //var_dump($tabledefs); |
||||||
| 159 | } else { |
||||||
| 160 | $this->result[] = 'File do not exist:' . $sql_file_path; |
||||||
| 161 | } |
||||||
| 162 | |||||||
| 163 | return $tabledefs; |
||||||
| 164 | } |
||||||
| 165 | |||||||
| 166 | |||||||
| 167 | private function extractKey($line) { |
||||||
|
0 ignored issues
–
show
|
|||||||
| 168 | //todo: split string into single keys |
||||||
| 169 | $needle = '('; |
||||||
| 170 | $key_text = \substr($line, \strpos($line, $needle, 0) + 1); |
||||||
| 171 | $needle = ')'; |
||||||
| 172 | $key_text = \substr($key_text, 0, \strpos($key_text, $needle, 0)); |
||||||
| 173 | |||||||
| 174 | return $key_text; |
||||||
| 175 | |||||||
| 176 | } |
||||||
| 177 | |||||||
| 178 | private function extractField($line) { |
||||||
| 179 | //todo |
||||||
| 180 | $counter = 0; |
||||||
| 181 | $clean = mb_substr(\trim($line), 0, -1); |
||||||
| 182 | $params = \array_values(\array_filter(\explode(' ', $clean))); |
||||||
| 183 | $field['sql'] = $clean; |
||||||
|
0 ignored issues
–
show
Comprehensibility
Best Practice
introduced
by
|
|||||||
| 184 | $field['name'] = \trim($params[$counter], '`'); |
||||||
| 185 | $counter++; |
||||||
| 186 | $field['type'] = $params[$counter]; |
||||||
| 187 | $counter++; |
||||||
| 188 | if ('unsigned' == \mb_strtolower($params[$counter])) { |
||||||
| 189 | $field['unsigned'] = $params[$counter]; |
||||||
| 190 | $counter++; |
||||||
| 191 | } |
||||||
| 192 | if ('not' == \mb_strtolower($params[$counter]) && 'null' == \mb_strtolower($params[$counter + 1])) { |
||||||
| 193 | $field['null'] = $params[$counter] . ' ' . $params[$counter + 1]; |
||||||
| 194 | $counter = $counter+2; |
||||||
| 195 | } |
||||||
| 196 | if (\count($params) > $counter) { |
||||||
| 197 | if ('auto_increment' == \mb_strtolower($params[$counter])) { |
||||||
| 198 | $field['auto_increment'] = $params[$counter]; |
||||||
| 199 | $counter++; |
||||||
| 200 | } |
||||||
| 201 | } |
||||||
| 202 | if (\count($params) > $counter) { |
||||||
| 203 | if ('default' == \mb_strtolower($params[$counter])) { |
||||||
| 204 | $field['default'] = $params[$counter] . ' ' . $params[$counter + 1]; |
||||||
| 205 | $counter = $counter + 2; |
||||||
|
0 ignored issues
–
show
|
|||||||
| 206 | } |
||||||
| 207 | } |
||||||
| 208 | |||||||
| 209 | $field['after'] = $this->after; |
||||||
| 210 | $this->after = $field['name']; |
||||||
| 211 | |||||||
| 212 | return $field; |
||||||
| 213 | |||||||
| 214 | } |
||||||
| 215 | |||||||
| 216 | private function checkTableFields($table, $fields) |
||||||
| 217 | { |
||||||
| 218 | //to be created |
||||||
| 219 | foreach ($fields as $field) { |
||||||
| 220 | //check whether column exist or not |
||||||
| 221 | $fieldname = $field['name']; |
||||||
| 222 | $check = $GLOBALS['xoopsDB']->queryF("SHOW COLUMNS FROM `$table` LIKE '$fieldname'"); |
||||||
| 223 | $numRows = $GLOBALS['xoopsDB']->getRowsNum($check); |
||||||
| 224 | if ($numRows) { |
||||||
| 225 | //field exist |
||||||
| 226 | $this->checkField($table, $field); |
||||||
| 227 | } else { |
||||||
| 228 | if (self::CHECKTYPE_UPDATE == $this->checktype || self::CHECKTYPE_UPDATE_REPORT == $this->checktype) { |
||||||
| 229 | // create new field |
||||||
| 230 | $sql = "ALTER TABLE `$table` ADD " . $field['sql']; |
||||||
| 231 | if ('' !== (string)$field['after']) { |
||||||
| 232 | $sql .= ' AFTER `' . $field['after'] . '`;'; |
||||||
| 233 | } |
||||||
| 234 | if ($result = $GLOBALS['xoopsDB']->queryF($sql)) { |
||||||
|
0 ignored issues
–
show
|
|||||||
| 235 | $this->result[] = 'Field added:' . $fieldname; |
||||||
| 236 | } else { |
||||||
| 237 | \xoops_error($GLOBALS['xoopsDB']->error() . '<br>' . $sql); |
||||||
| 238 | $this->result[] = "Error when adding '$fieldname' to table '$table'."; |
||||||
| 239 | } |
||||||
| 240 | } else { |
||||||
| 241 | $this->result[] = 'Field do not exist:' . $fieldname . ' (creation not activated)'; |
||||||
| 242 | } |
||||||
| 243 | } |
||||||
| 244 | } |
||||||
| 245 | |||||||
| 246 | return true; |
||||||
| 247 | } |
||||||
| 248 | |||||||
| 249 | private function checkField($table, $field) |
||||||
|
0 ignored issues
–
show
The parameter
$table is not used and could be removed.
(
Ignorable by Annotation
)
If this is a false-positive, you can also ignore this issue in your code via the
This check looks for parameters that have been defined for a function or method, but which are not used in the method body. Loading history...
|
|||||||
| 250 | { |
||||||
| 251 | //to be created |
||||||
| 252 | $this->result[] = 'Field exist:' . $field['name'] . ' - no changes'; |
||||||
| 253 | |||||||
| 254 | return true; |
||||||
| 255 | } |
||||||
| 256 | } |
||||||
| 257 |