PhpMyAdmin\Tracker::handleQuery()

Complexity

Conditions	15
Paths	77

Size

Total Lines	116
Code Lines	65

Duplication

Lines	0
Ratio	0 %

Code Coverage

Tests	11
CRAP Score	140.2416

Importance

Changes

0

<?php
    public static function handleQuery($query)
    {
        $relation = new Relation($GLOBALS['dbi']);

        // If query is marked as untouchable, leave
        if (mb_strstr($query, '/*NOTRACK*/')) {
            return;
        }

        if (! (substr($query, -1) === ';')) {
            $query .= ";\n";
        }
        // Get some information about query
        $result = self::parseQuery($query);

        // Get database name
        $dbname = trim($GLOBALS['db'] ?? '', '`');
        // $dbname can be empty, for example when coming from Synchronize
        // and this is a query for the remote server
        if (empty($dbname)) {
            return;
        }

        // If we found a valid statement
        if (! isset($result['identifier'])) {
            return;
        }

        if (! self::isTracked($dbname, $result['tablename'])) {
            return;
        }

        $version = self::getVersion(
            $dbname,
            $result['tablename'],
            $result['identifier']
        );

        // If version not exists and auto-creation is enabled
        if ($GLOBALS['cfg']['Server']['tracking_version_auto_create'] == true
            && $version == -1
        ) {
            // Create the version

            switch ($result['identifier']) {
                case 'CREATE TABLE':
                    self::createVersion($dbname, $result['tablename'], '1');
                    break;
                case 'CREATE VIEW':
                    self::createVersion(
                        $dbname,
                        $result['tablename'],
                        '1',
                        '',
                        true
                    );
                    break;
                case 'CREATE DATABASE':
                    self::createDatabaseVersion($dbname, '1', $query);
                    break;
            } // end switch
        }

        // If version exists
        if ($version == -1) {
            return;
        }

        if ($result['type'] === 'DDL') {
            $save_to = 'schema_sql';
        } elseif ($result['type'] === 'DML') {
            $save_to = 'data_sql';
        } else {
            $save_to = '';
        }
        $date  = Util::date('Y-m-d H:i:s');

        // Cut off `dbname`. from query
        $query = preg_replace(
            '/`' . preg_quote($dbname, '/') . '`\s?\./',
            '',
            $query
        );

        // Add log information
        $query = self::getLogComment() . $query;

        // Mark it as untouchable
        $sql_query = " /*NOTRACK*/\n"
            . ' UPDATE ' . self::getTrackingTable()
            . ' SET ' . Util::backquote($save_to)
            . ' = CONCAT( ' . Util::backquote($save_to) . ",'\n"
            . $GLOBALS['dbi']->escapeString($query) . "') ,"
            . " `date_updated` = '" . $date . "' ";

        // If table was renamed we have to change
        // the tablename attribute in pma_tracking too
        if ($result['identifier'] === 'RENAME TABLE') {
            $sql_query .= ', `table_name` = \''
                . $GLOBALS['dbi']->escapeString($result['tablename_after_rename'])
                . '\' ';
        }

        // Save the tracking information only for
        //     1. the database
        //     2. the table / view
        //     3. the statements
        // we want to track
        $sql_query .=
        " WHERE FIND_IN_SET('" . $result['identifier'] . "',tracking) > 0" .
        " AND `db_name` = '" . $GLOBALS['dbi']->escapeString($dbname ?? '') . "' " .
        " AND `table_name` = '"
        . $GLOBALS['dbi']->escapeString($result['tablename']) . "' " .
        " AND `version` = '" . $GLOBALS['dbi']->escapeString($version ?? '') . "' ";

        $relation->queryAsControlUser($sql_query);
    }