WB 2.11.0

<?php

/**

 *

 * @package      Core

 * @copyright    WebsiteBaker Org. e.V.

 * @author       Ryan Djurovich

 * @author       Manuela v.d.Decken <manuela@isteam.de>

 * @author       Dietmar Wöllbrink <luisehahne@websitebaker.org>

 * @license      GNU General Public License 2.0

 * @version      3.0.1

 * @requirements PHP 5.6.x and higher

 * @revision     $Id: class.database.php 11 2017-09-04 09:58:50Z Manuela $

 * @deprecated   no / since 0000/00/00

 * @description  This class will be used to interface between the database and the Website Baker code

 */

    define('DATABASE_CLASS_LOADED', true);

    // define the old mysql consts for Backward compatibility

    if (!defined('MYSQL_ASSOC')) {

        define('MYSQL_ASSOC',                 1);

        define('MYSQL_NUM',                   2);

        define('MYSQL_BOTH',                  3);

        define('MYSQL_CLIENT_COMPRESS',      32);

        define('MYSQL_CLIENT_IGNORE_SPACE', 256);

        define('MYSQL_CLIENT_INTERACTIVE', 1024);

        define('MYSQL_CLIENT_SSL',         2048);

    }

class database {

    private $db_handle  = null; // readonly from outside

    private $db_name    = '';

    private $sTablePrefix = '';

    private $connected  = false;

    private $sCharset   = 'utf8mb4';

    private $sCollation = 'utf8mb4_unicode_ci';

    private $error      = '';

    private $error_no   = array();

    private $error_type = '';

    private $message    = array();

    private $sActionFile  = '';

    // Set DB_URL

    function __construct($url = '')

    {

        // Connect to database

        if (!$this->connect()) {

            throw new DatabaseException($this->get_error());

        }

        $this->sTablePrefix = TABLE_PREFIX;

    }

    // Connect to the database   DB_CHARSET

    function connect()

    {

        $aTmp = preg_split(

            '/[^a-z0-9]/i',

            strtolower(preg_replace('/[^a-z0-9_]/i', '', (defined('DB_CHARSET') ? DB_CHARSET : 'utf8mb4_unicode_ci'))),

            null,

            PREG_SPLIT_NO_EMPTY

        );

        $this->sCharset = $aTmp[0];

        $this->sCollation = implode('_', $aTmp);

        $port = defined('DB_PORT') ? DB_PORT : ini_get('mysqli.default_port');

        if (!($this->db_handle = mysqli_connect(DB_HOST, DB_USERNAME, DB_PASSWORD, DB_NAME, $port))) {

            $this->connected = false;

            $this->error = mysqli_connect_error();

        } else {

            if ($this->sCharset) {

                mysqli_query($this->db_handle, 'SET NAMES '.$this->sCharset);

                mysqli_set_charset($this->db_handle, $this->sCharset);

            }

            $this->db_name = DB_NAME;

            $this->connected = true;

        }

        return $this->connected;

    }

    // Disconnect from the database

    function disconnect()

    {

        if($this->connected==true) {

            mysqli_close();

            return true;

        } else {

            return false;

        }

    }

    // Run a query

    function query($statement)

    {

        $mysql = new mysql($this->db_handle);

        $mysql->query($statement);

        $this->set_error($mysql->error());

        if($mysql->error()) {

            return null;

        } else {

            return $mysql;

        }

    }

    // Gets the first column of the first row

    function get_one( $statement )

    {

        $fetch_row = mysqli_fetch_array(mysqli_query($this->db_handle, $statement) );

        $result = $fetch_row[0];

        $this->set_error(null);

        if(mysqli_error($this->db_handle)) {

            $this->set_error(mysqli_error($this->db_handle));

            return null;

        } else {

            return $result;

        }

    }

    // Set the DB error

    function set_error($message = null)

    {

        $this->error = $message;

        $this->error_type = 'unknown';

        if ($message!=''){

        }

    }

    // Return true if there was an error

    function is_error()

    {

        return (!empty($this->error)) ? true : false;

    }

    // Return the error

    function get_error()

    {

        return $this->error;

    }

    // Return the errno

    function get_errno()

    {

        return $this->is_error() ? mysqli_errno($this->db_handle) : 0;

    }

/**

 * default Getter for some properties

 * @param string $sPropertyName

 * @return mixed NULL on error or missing property

 */

    public function __get($sPropertyName)

    {

        switch ($sPropertyName):

            case 'db_handle':

            case 'DbHandle':

                $retval = $this->db_handle;

                break;

            case 'db_name':

            case 'DbName':

                $retval = $this->db_name;

                break;

            case 'sTablePrefix':

            case 'TablePrefix':

                $retval = $this->sTablePrefix;

                break;

            default:

                $retval = null;

                break;

        endswitch;

        return $retval;

    } // __get()

/**

 * Escapes special characters in a string for use in an SQL statement

 * @param string $unescaped_string

 * @return string

 */

    public function escapeString($unescaped_string)

    {

        return mysqli_real_escape_string($this->db_handle, $unescaped_string);

    }

/**

 * Last inserted Id

 * @return bool|int false on error, 0 if no record inserted

 */

    public function getLastInsertId()

    {

        return mysqli_insert_id($this->db_handle);

    }

/*

 * @param string $table_name: full name of the table (incl. TABLE_PREFIX)

 * @param string $field_name: name of the field to seek for

 * @return bool: true if field exists

 */

    public function field_exists($table_name, $field_name)

    {

        $bRetval = false;

        $aMatches = array();

        $sql = 'DESCRIBE `'.$table_name.'` `'.$field_name.'` ';

        if (($oQuery = $this->query($sql))) {

            while (($aRecord = $oQuery->fetchRow(MYSQLI_ASSOC))) {

                $aMatches[] = $aRecord['Field'];

            }

            $bRetval = in_array($field_name, $aMatches);

        }

        return $bRetval;

    }

/*

 * @param string $table_name: full name of the table (incl. TABLE_PREFIX)

 * @param string $index_name: name of the index to seek for

 * @return bool: true if field exists

 */

    public function index_exists($table_name, $index_name, $number_fields = 0)

    {

        $number_fields = intval($number_fields);

        $keys = 0;

        $sql = 'SHOW INDEX FROM `'.$table_name.'`';

        if (($res_keys = $this->query($sql))) {

            while (($rec_key = $res_keys->fetchRow(MYSQLI_ASSOC))) {

                if ($rec_key['Key_name'] == $index_name ) {

                    $keys++;

                }

            }

        }

        if ( $number_fields == 0 ) {

            return ($keys != $number_fields);

        } else {

            return ($keys == $number_fields);

        }

    }

/*

    public function index_exists1($sTableName, $sIndexName, $number_fields = 0){

      $sql  = 'SHOW INDEX FROM `'.$sTableName.'` WHERE `Column_name`= \''.$sIndexName.'\'';

    }

*/

/*

 * @param string $table_name: full name of the table (incl. TABLE_PREFIX)

 * @param string $field_name: name of the field to add

 * @param string $description: describes the new field like ( INT NOT NULL DEFAULT '0')

 * @return bool: true if successful, otherwise false and error will be set

 */

    public function field_add($table_name, $field_name, $description)

    {

        if( !$this->field_exists($table_name, $field_name) )

        { // add new field into a table

            $sql = 'ALTER TABLE `'.$table_name.'` ADD '.$field_name.' '.$description.' ';

            $query = $this->query($sql);

            $this->set_error(mysqli_error($this->db_handle));

            if( !$this->is_error() )

            {

                return ( $this->field_exists($table_name, $field_name) ) ? true : false;

            }

        }else

        {

            $this->set_error('field \''.$field_name.'\' already exists');

        }

        return false;

    }

/*

 * @param string $table_name: full name of the table (incl. TABLE_PREFIX)

 * @param string $field_name: name of the field to add

 * @param string $description: describes the new field like ( INT NOT NULL DEFAULT '0')

 * @return bool: true if successful, otherwise false and error will be set

 */

    public function field_modify($table_name, $field_name, $description)

    {

        $retval = false;

        if( $this->field_exists($table_name, $field_name) )

        { // modify a existing field in a table

            $sql  = 'ALTER TABLE `'.$table_name.'` MODIFY `'.$field_name.'` '.$description;

            $retval = ( $this->query($sql) ? true : false);

            $this->set_error(mysqli_error($this->db_handle));

        }

        return $retval;

    }

/*

 * @param string $table_name: full name of the table (incl. TABLE_PREFIX)

 * @param string $field_name: name of the field to remove

 * @return bool: true if successful, otherwise false and error will be set

 */

    public function field_remove($table_name, $field_name)

    {

        $retval = false;

        if( $this->field_exists($table_name, $field_name) )

        { // modify a existing field in a table

            $sql  = 'ALTER TABLE `'.$table_name.'` DROP `'.$field_name.'`';

            $retval = ( $this->query($sql) ? true : false );

        }

        return $retval;

    }

/*

 * @param string $table_name: full name of the table (incl. TABLE_PREFIX)

 * @param string $index_name: name of the new index (empty string for PRIMARY)

 * @param string $field_list: comma seperated list of fields for this index

 * @param string $index_type: kind of index (PRIMARY, UNIQUE, KEY, FULLTEXT)

 * @return bool: true if successful, otherwise false and error will be set

 */

    public function index_add($table_name, $index_name, $field_list, $index_type = 'KEY')

    {

       $retval = false;

       $field_list = explode(',', (str_replace(' ', '', $field_list)));

       $number_fields = sizeof($field_list);

       $field_list = '`'.implode('`,`', $field_list).'`';

       $index_name = (($index_type == 'PRIMARY') ? $index_type : $index_name);

       if ( $this->index_exists($table_name, $index_name, $number_fields) ||

            $this->index_exists($table_name, $index_name))

       {

           $sql  = 'ALTER TABLE `'.$table_name.'` ';

           $sql .= 'DROP INDEX `'.$index_name.'`';

           if (!$this->query($sql)) { return false; }

       }

       $sql  = 'ALTER TABLE `'.$table_name.'` ';

       $sql .= 'ADD '.$index_type.' ';

       $sql .= (($index_type == 'PRIMARY') ? 'KEY ' : '`'.$index_name.'` ');

       $sql .= '( '.$field_list.' ); ';

       if ($this->query($sql)) { $retval = true; }

       return $retval;

    }

/*

 * @param string $table_name: full name of the table (incl. TABLE_PREFIX)

 * @param string $field_name: name of the field to remove

 * @return bool: true if successful, otherwise false and error will be set

 */

    public function index_remove($table_name, $index_name)

    {

        $retval = false;

        if ($this->index_exists($table_name, $index_name)) {

        // modify a existing field in a table

            $sql  = 'ALTER TABLE `'.$table_name.'` DROP INDEX `'.$index_name.'`';

            $retval = ( $this->query($sql) ? true : false );

        }

        return $retval;

    }

    public function setSqlImportActionFile ( $sCallingScript ){

       $this->sActionFile = $sCallingScript;

        trigger_error('Deprecated function call: '.__CLASS__.'::'.__METHOD__, E_USER_DEPRECATED);

    }

/**

 * Import a standard *.sql dump file

 * @param string $sSqlDump link to the sql-dumpfile

 * @param string $sTablePrefix

 * @param mixed $mAction

 *        (bool)true => upgrade (default)

 *        (bool)false => install

 *        or command (install|uninstall|upgrade) as string

 *        or calling script as string

 * @param string $sTblEngine

 * @param string $sTblCollation

 * @return boolean true if import successful

 */

    public function SqlImport(

        $sSqlDump,

        $sTablePrefix  = '',

        $mAction       = true,

        $sTblEngine    = 'MyISAM',

        $sTblCollation = 'utf8mb4_unicode_ci'

    ) {

        $iCount = 0;

        $sSqlBuffer  = '';

        $bRetval     = true;

        $this->error = '';

        // detect requested action

        if (is_string($mAction)) {

            // search for valid command string in $mAction

            $sAction = strtolower(preg_replace(

                '/^.*?(uninstall|install|upgrade)(\.[^\.]+)?$/is',

                '$1',

                $mAction,

                -1,

                $iCount

            ));

            $sAction = $iCount ? $sAction : 'upgrade';

        } else if (is_bool($mAction)) {

            // on boolean request select true='upgrade' or false='install'

            $sAction = $mAction ? 'upgrade' : 'install';

        } else {

            // select 'upgrade' if no valid command found

            $sAction = 'upgrade';

        }

        // extract charset from given collation

        $aTmp = preg_split('/_/', $sTblCollation, null, PREG_SPLIT_NO_EMPTY);

        $sCharset = $aTmp[0];

        // define placeholders

        $aSearch[] = '/\{TABLE_PREFIX\}/';                                        /* step 0 */

        $aSearch[] = '/\{FIELD_CHARSET\}/';                                       /* step 1 */

        $aSearch[] = '/\{FIELD_COLLATION\}/';                                     /* step 2 */

        $aSearch[] = '/\{TABLE_ENGINE\}/';                                        /* step 3 */

        $aSearch[] = '/\{TABLE_ENGINE=([a-zA-Z_0-9]*)\}/';                        /* step 4 */

        $aSearch[] = '/\{CHARSET\}/';                                             /* step 5 */

        $aSearch[] = '/\{COLLATION\}/';                                           /* step 6 */

        // define replacements

        $aReplace[] = $sTablePrefix;                                              /* step 0 */

        $aReplace[] = ' CHARACTER SET {CHARSET}';                                 /* step 1 */

        $aReplace[] = ' COLLATE {COLLATION}';                                     /* step 2 */

        $aReplace[] = ' {TABLE_ENGINE='.$sTblEngine.'}';                          /* step 3 */

        $aReplace[] = ' ENGINE=$1 DEFAULT CHARSET={CHARSET} COLLATE={COLLATION}'; /* step 4 */

        $aReplace[] = $sCharset;                                                  /* step 5 */

        $aReplace[] = $sTblCollation;                                             /* step 6 */

        // read file into an array

        if (($aSql = file( $sSqlDump, FILE_SKIP_EMPTY_LINES ))) {

            if (sizeof($aSql) > 0) {

                // remove possible BOM from file

                $aSql[0] = preg_replace('/^[\xAA-\xFF]{3}/', '', $aSql[0]);

                // replace placeholders by replacements over the whole file

                $aSql = preg_replace($aSearch, $aReplace, $aSql);

            } else { $aSql = false; }

        }

        while ((bool)$aSql) {

            $sSqlLine = trim(array_shift($aSql));

            if (!preg_match('/^[\-\/]+.*/', $sSqlLine)) {

                $sSqlBuffer .= ' '.$sSqlLine;

                if ((substr($sSqlBuffer,-1,1) == ';')) {

                    if (

                        // drop tables on install or uninstall

                        preg_match('/^\s*DROP TABLE IF EXISTS/siU', $sSqlBuffer) &&

                        ($sAction == 'install' || $sAction == 'uninstall')

                    ) {

                        if (!$this->query($sSqlBuffer)) {

                            $aSql = $bRetval = false;

                            break;

                        }

                   } else if (

                        // create and alter tables on install or upgrade

                        (preg_match('/^\s*CREATE TABLE/siU', $sSqlBuffer) ||

                         preg_match('/^\s*ALTER TABLE/siU', $sSqlBuffer)) &&

                        ($sAction == 'install' || $sAction == 'upgrade')

                    ) {

                        if (!$this->query($sSqlBuffer))

                        {

                            switch ($this->get_errno()):

                                case 0: // no error

                                case 1060:

                                case 1061:

                                    break;

                                default: // all other errors

                                    $aSql = $bRetval = false;

                                    break;

                            endswitch;

                        }

                    } else if (

                        // insert default data on install

                        (preg_match('/^\s*INSERT INTO /siU', $sSqlBuffer)) &&

                        ( $sAction == 'install' )

                    ) {

                        if (!$this->query($sSqlBuffer)) {

                            $aSql = $bRetval = false;

                            break;

                        }

                    }

                    // clear buffer for next statement

                    $sSqlBuffer = '';

                }

            }

        }

        return $bRetval;

    }

/**

 * retuns the type of the engine used for requested table

 * @param string $table name of the table, including prefix

 * @return boolean/string false on error, or name of the engine (myIsam/InnoDb)

 */

    public function getTableEngine($table)

    {

        $retVal = false;

        $mysqlVersion = mysqli_get_server_info($this->db_handle);

        $engineValue = (version_compare($mysqlVersion, '5.0') < 0) ? 'Type' : 'Engine';

        $sql = "SHOW TABLE STATUS FROM " . $this->db_name . " LIKE '" . $table . "'";

        if(($result = $this->query($sql))) {

            if(($row = $result->fetchRow(MYSQLI_ASSOC))) {

                $retVal = $row[$engineValue];

            }

        }

        return $retVal;

    }

} /// end of class database

define('MYSQL_SEEK_FIRST', 0);

define('MYSQL_SEEK_LAST', -1);

define('MYSQLI_SEEK_FIRST', 0);

define('MYSQLI_SEEK_LAST', -1);

class mysql

{

    private $db_handle = null;

    private $result = null;

    private $error = '';

    public function __construct($handle)

    {

        $this->db_handle = $handle;

    }

/**

 * query sql statement

 * @param  string $statement

 * @return object

 * @throws WbDatabaseException

 */

    public function query($sStatement)

    {

        $this->result = @mysqli_query($this->db_handle, $sStatement);

        if (defined('DEBUG')&& DEBUG && ($this->result === false)) {

            if (DEBUG) {

                throw new DatabaseException(mysqli_error($this->db_handle));

            } else {

                throw new DatabaseException('Error in SQL-Statement');

            }

        }

        $this->error = mysqli_error($this->db_handle);

        return $this->result;

    }

    // Fetch num rows

    public function numRows()

    {

        return mysqli_num_rows($this->result);

    }

    // Fetch row  $typ = MYSQLI_ASSOC, MYSQLI_NUM, MYSQLI_BOTH

    public function fetchRow($typ = MYSQLI_BOTH)

    {

        return mysqli_fetch_array($this->result, $typ);

    }

/**

 * fetchAssoc

 * @return array with assotiative indexes

 * @description get current record and increment pointer

 */

    public function fetchAssoc()

    {

        return mysqli_fetch_assoc($this->result);

    }

/**

 * fetchArray

 * @param  int $iType MYSQL_ASSOC(default) | MYSQL_BOTH | MYSQL_NUM

 * @return array of current record

 * @description get current record and increment pointer

 */

    public function fetchArray($iType = MYSQLI_ASSOC)

    {

        if ($iType < MYSQLI_ASSOC || $iType > MYSQLI_BOTH) {

            $iType = MYSQLI_ASSOC;

        }

        return mysqli_fetch_array($this->result, $iType);

    }

/**

 * fetchObject

 * @param  string $sClassname Name of the class to use. Is no given use stdClass

 * @param  string $aParams    optional array of arguments for the constructor

 * @return object

 * @description get current record as an object and increment pointer

 */

    public function fetchObject($sClassName = 'stdClass', array $aParams = [])

    {

        if ($sClassName === 'stdClass' || !$sClassName) {

            $oRetval = mysqli_fetch_object($this->result, 'stdClass');

        } elseif (class_exists($sClassName)) {

            $oRetval = mysqli_fetch_object($this->result, $sClassName, $aParams);

        } else {

            throw new DatabaseException('Class <'.$sClassName.'> not available on request of mysqli_fetch_object()');

        }

        return $oRetval;

    }

/**

 * fetchAll

 * @param  int $iType MYSQL_ASSOC(default) | MYSQL_NUM

 * @return array of rows

 * @description get all records of the result set

 */

    public function fetchAll($iType = MYSQLI_ASSOC)

    {

        $iType = $iType != MYSQLI_NUM ? MYSQLI_ASSOC : MYSQLI_NUM;

        if (function_exists('mysqli_fetch_all')) { # Compatibility layer with PHP < 5.3

            $aRetval = mysqli_fetch_all($this->result, $iType);

        } else {

            for ($aRetval = array(); ($aTmp = mysqli_fetch_array($this->result, $iType));) { $aRetval[] = $aTmp; }

        }

        return $aRetval;

    }

    public function rewind()

    {

        return $this->seekRow();

    }

    public function seekRow( $position = MYSQLI_SEEK_FIRST )

    {

        $pmax = $this->numRows() - 1;

        $offset = (($position < 0 || $position > $pmax) ? $pmax : $position);

        return mysqli_data_seek($this->result, $offset);

    }

    // Get error

    public function error()

    {

        if (isset($this->error)) {

            return $this->error;

        } else {

            return null;

        }

    }

} // end of class mysql

class DatabaseException extends AppException {}

/* this function is placed inside this file temporarely until a better place is found */

/*  function to update a var/value-pair(s) in table ****************************

 *  nonexisting keys are inserted

 *  @param string $table: name of table to use (without prefix)

 *  @param mixed $key:    a array of key->value pairs to update

 *                        or a string with name of the key to update

 *  @param string $value: a sting with needed value, if $key is a string too

 *  @return bool:  true if any keys are updated, otherwise false

 */

    function db_update_key_value($table, $key, $value = '')

    {

        global $database;

        if( !is_array($key))

        {

            if( trim($key) != '' )

            {

                $key = array( trim($key) => trim($value) );

            } else {

                $key = array();

            }

        }

        $retval = true;

        foreach( $key as $index=>$val)

        {

            $index = strtolower($index);

            $sql = 'SELECT COUNT(*) FROM `'.TABLE_PREFIX.$table.'` WHERE `name` = \''.$index.'\' ';

            if (intval($database->get_one($sql))>0)

            {

                $sql = 'UPDATE ';

                $sql_where = 'WHERE `name` = \''.$index.'\'';

            } else {

                $sql = 'INSERT INTO ';

                $sql_where = '';

            }

            $sql .= '`'.TABLE_PREFIX.$table.'` ';

            $sql .= 'SET `name` = \''.$index.'\', ';

            $sql .= '`value` = \''.$val.'\' '.$sql_where;

            if (!$database->query($sql) )

            {

                $retval = false;

            }

        }

        return $retval;

    }