X-Git-Url: https://git.mxchange.org/?a=blobdiff_plain;f=inc%2Fdb%2Flib-mysql3.php;h=61aaa980cd7a7498ee0e30e7c1f8abb78fca6a4a;hb=7770a9545292d628afd2be4f58f86da5c9139619;hp=61d9be17fa1305e720669059823f380a1851389e;hpb=a954ccdf4aba81ec0e75a1836aa4bc14cb245aba;p=mailer.git diff --git a/inc/db/lib-mysql3.php b/inc/db/lib-mysql3.php index 61d9be17fa..fd86300e36 100644 --- a/inc/db/lib-mysql3.php +++ b/inc/db/lib-mysql3.php @@ -1,19 +1,23 @@ \n"; - $result = mysql_query($sql_string, $link) - or addFatalMessage($F." (".$L."):".mysql_error()."
-Query string:
-".$sql_string); + //* DEBUG: */ logDebugMessage(__FUNCTION__, __LINE__, 'Cache is: ' . $sqlString); + } + + // Starting time + $querytimeBefore = microtime(TRUE); - // Ending time - $querytimeAfter = array_sum(explode(' ', microtime())); + // Run SQL command + //* DEBUG: */ logDebugMessage(__FUNCTION__, __LINE__, 'file=' . basename($file) . ',line=' . $line . ',sql=' . $GLOBALS['last_sql']); + $result = mysql_query($GLOBALS['last_sql'], getSqlLink()) + or sqlError($file, $line, 'file='. basename($file) . ',line=' . $line . ':mysql_error()=' . mysql_error() . ',last_query=' . $GLOBALS['last_sql']); + //* DEBUG: */ logDebugMessage($file, $line, 'sql=' . $GLOBALS['last_sql'] . ',affected=' . sqlAffectedRows() . ',numRows='.(isValidSqlLink($result) ? sqlNumRows($result) : gettype($result))); // Calculate query time - $queryTime = $querytimeAfter - $querytimeBefore; + $queryTime = microtime(TRUE) - $querytimeBefore; + + // Add this query to array including timing + addSqlToDebug($result, $GLOBALS['last_sql'], $queryTime, $file, $line); // Save last successfull query - setConfigEntry('db_last_query', $sql_string); + setConfigEntry('db_last_query', $GLOBALS['last_sql']); + + // Count all query times + incrementConfigEntry('sql_time', $queryTime); // Count this query incrementConfigEntry('sql_count'); // Debug output - //* DEBUG: */ print "Query=
".$sql_string."
, affected=".SQL_AFFECTEDROWS().", numrows=".SQL_NUMROWS($result)."
\n"; - - if (($CSS != "1") && ($CSS != "-1") && (isBooleanConstantAndTrue('DEBUG_MODE')) && (isBooleanConstantAndTrue('DEBUG_SQL'))) { - // - // Debugging stuff... - // - $fp = @fopen(PATH."inc/cache/mysql.log", 'a') or mxchange_die("Cannot write mysql.log!"); - if (!isset($OK)) { + if (isSqlDebugEnabled()) { + // Is this the first call? + if (!isset($GLOBALS['sql_first_entry'])) { // Write first entry - fwrite($fp, "Module=".$GLOBALS['module']."\n"); - $OK = true; + appendLineToFile(getCachePath() . 'mysql.log', 'Module=' . getModule()); + $GLOBALS['sql_first_entry'] = TRUE; } // END - if - fwrite($fp, $F."(LINE=".$L."|NUM=".SQL_NUMROWS($result)."|AFFECTED=".SQL_AFFECTEDROWS()."|QUERYTIME:".$queryTime."): ".str_replace('\r', "", str_replace('\n', " ", $sql_string))."\n"); - fclose($fp); + + // Append debug line + appendLineToFile(getCachePath() . 'mysql.log', basename($file) . '|LINE=' . $line . '|NUM=' . (isValidSqlLink($result) ? sqlNumRows($result) : 'false') . '|AFFECTED=' . sqlAffectedRows() . '|QUERYTIME:' . ($queryTime * 1000) . 'ms): ' . str_replace(array(chr(13), PHP_EOL), array('', ' '), $GLOBALS['last_sql'])); } // END - if - // Count DB hits - if (!isConfigEntrySet('db_hits_run')) { - // Count in dummy variable - setConfigEntry('db_hits_run', 1); - } else { - // Count to config array - incrementConfigEntry('db_hits_run'); - } + // Increment stats entry + incrementStatsEntry('db_hits'); // Return the result return $result; } // SQL num rows -function SQL_NUMROWS ($result) { +function sqlNumRows ($resource) { + // Valid link resource? + if (!isSqlLinkUp()) return FALSE; + + // Link is not up, no rows by default + $lines = FALSE; + // Is the result a valid resource? - if (is_resource($result)) { + if (isset($GLOBALS['sql_numrows'][intval($resource)])) { + // Use cache + $lines = $GLOBALS['sql_numrows'][intval($resource)]; + } elseif (isValidSqlLink($resource)) { // Get the count of rows from database - $lines = mysql_num_rows($result); + $lines = mysql_num_rows($resource); - // Is the result empty? Then we have an error! - if (empty($lines)) $lines = 0; + // Remember it in cache + $GLOBALS['sql_numrows'][intval($resource)] = $lines; } else { - // No resource given, no lines found! - $lines = 0; + // No resource given, please fix this + reportBug(__FUNCTION__, __LINE__, 'No resource given! result[]=' . gettype($resource) . ',last_sql=' . $GLOBALS['last_sql']); } + + // Return lines return $lines; } // SQL affected rows -function SQL_AFFECTEDROWS() { - global $link; - +function sqlAffectedRows () { // Valid link resource? - if (!is_resource($link)) return false; + if (!isSqlLinkUp()) return FALSE; // Get affected rows - $lines = mysql_affected_rows($link); + $lines = mysql_affected_rows(getSqlLink()); // Return it return $lines; } // SQL fetch row -function SQL_FETCHROW($result) { - // Init data - $DATA = array(); - - // Is a result resource set? - if (!is_resource($result)) return false; +function sqlFetchRow ($resource) { + // Is $resource valid? + if ((!isValidSqlLink($resource)) || (!isSqlLinkUp())) return FALSE; - $DATA = mysql_fetch_row($result); - return $DATA; + // Fetch the data and return it + return mysql_fetch_row($resource); } // SQL fetch array -function SQL_FETCHARRAY($res, $nr=0, $remove_numerical=true) { - // Is a result resource set? - if (!is_resource($res)) return false; +function sqlFetchArray ($resource) { + // Is $resource valid? + if ((!isValidSqlLink($resource)) || (!isSqlLinkUp())) return FALSE; - // Initialize array - $row = array(); - - // Load row from database - $row = mysql_fetch_array($res); + // Load row as array from database + $row = mysql_fetch_assoc($resource); // Return only arrays here if (is_array($row)) { - // Shall we remove numerical data here automatically? - if ($remove_numerical) { - // So let's remove all numerical elements to save memory! - $max = count($row); - for ($idx = 0; $idx < ($max / 2); $idx++) { - // Remove entry - unset($row[$idx]); - } - } - // Return row return $row; } else { - // Return a false here... - return false; + // Return a false, else some loops would go endless... + return FALSE; } } // SQL result -function SQL_RESULT ($res, $row, $field) { - $result = mysql_result($res, $row, $field); +function sqlResult ($resource, $row, $field = '0') { + // Is $resource valid? + if ((!isValidSqlLink($resource)) || (!isSqlLinkUp())) return FALSE; + + // Run the result command + $result = mysql_result($resource, $row, $field); + + // ... and return the result return $result; } + // SQL connect -function SQL_CONNECT ($host, $login, $password, $F, $L) { - $connect = mysql_connect($host, $login, $password) or addFatalMessage($F." (".$L."):".mysql_error()); - return $connect; +function sqlConnectToDatabase ($host, $login, $password, $file, $line) { + // Try to connect + $linkResource = mysql_connect($host, $login, $password) or sqlError($file, $line, mysql_error()); + + // Set the link resource + if (isValidSqlLink($linkResource)) { + /* + * A non-resource (boolean) may happen on installation phase which + * shall not be set here. Only valid link resources shall be set so + * isSqlLinkUp() will only return 'true' if there is really a + * working database link. + */ + setSqlLink($file . ':' . __FUNCTION__, $line . ':' . __LINE__, $linkResource); + + // Init charsets (UTF-8 is default now) + sqlQuery("SET + `character_set_results`='utf8', + `character_set_client`='utf8', + `character_set_connection`='utf8', + `character_set_database`='utf8', + `character_set_server`='utf8'", $file . ':' . __FUNCTION__, $line . ':' . __LINE__); + + // Disallow subtraction for unsigned columns + sqlQuery("SET `sql_mode`='NO_UNSIGNED_SUBTRACTION'", $file . ':' . __FUNCTION__, $line . ':' . __LINE__); + } // END - if + + // Return the resource + //* DEBUG: */ logDebugMessage($file . ':' . __FUNCTION__, $line . ':' . __LINE__, 'linkResource[]=' . gettype($linkResource)); + return $linkResource; } + // SQL select database -function SQL_SELECT_DB ($dbName, $link, $F, $L) { +function sqlSelectDatabase ($dbName, $file, $line) { // Is there still a valid link? If not, skip it. - if (!is_resource($link)) return false; + if (!isSqlLinkUp()) return FALSE; - return mysql_select_db($dbName, $link) or addFatalMessage($F." (".$L."):".mysql_error()); + // Return the result + //* DEBUG: */ logDebugMessage($file . ':' . __FUNCTION__, $line . ':' . __LINE__, 'Selecting database ' . $dbName); + return mysql_select_db($dbName, getSqlLink()) or sqlError($file, $line, mysql_error()); } -// SQL close link -function SQL_CLOSE (&$link, $F, $L) { - global $cacheInstance, $cacheArray; - if (!is_resource($link)) { +// SQL close link +function sqlCloseLink ($file, $line) { + // Is the link up? + if (!isSqlLinkUp()) { // Skip double close - return false; + //* DEBUG: */ logDebugMessage($file . ':' . __FUNCTION__, $line . ':' . __LINE__, 'Called but no link is open.'); + return FALSE; } // END - if - // Do we need to update cache/db counter? - //* DEBUG: */ echo "DB=".getConfig('db_hits').",CACHE=".getConfig('cache_hits')."
\n"; - if ((GET_EXT_VERSION("cache") >= "0.0.7") && (getConfig('db_hits') > 0) && (getConfig('cache_hits') > 0) && (is_object($cacheInstance))) { - // Add new hits - incrementConfigEntry('db_hits', getConfig('db_hits_run')); + // Close database link and forget the link + $close = mysql_close(getSqlLink()) or sqlError($file . ':' . __FUNCTION__, $line . ':' . __LINE__, mysql_error()); - // Update counter for db/cache - UPDATE_CONFIG(array("db_hits", "cache_hits"), array(bigintval(getConfig('db_hits')), bigintval(getConfig('cache_hits')))); - } // END - if + // Close link in this layer + unsetSqlLinkUp(__FUNCTION__, __LINE__); - // Close database link and forget the link - $close = mysql_close($link) or addFatalMessage($F." (".$L."):".mysql_error()); - $link = null; + // Return the result + //* DEBUG: */ logDebugMessage($file . ':' . __FUNCTION__, $line . ':' . __LINE__, 'close[' . gettype($close) . ']=' . intval($close)); return $close; } // SQL free result -function SQL_FREERESULT ($result) { - if (!is_resource($result)) { +function sqlFreeResult ($resource) { + if ((!isValidSqlLink($resource)) || (!isSqlLinkUp())) { // Abort here - return false; + return FALSE; } // END - if - $res = mysql_free_result($result); + // Free result + $res = mysql_free_result($resource); + + // And return that result of freeing it... return $res; } -// SQL string escaping -function SQL_QUERY_ESC ($qstring, $data, $file, $line, $run=true, $strip=true) { - global $link; +// Get id from last INSERT command and secure id +function getSqlInsertId () { + if (!isSqlLinkUp()) return FALSE; + return bigintval(mysql_insert_id()); +} - // Link is there? - if (!is_resource($link)) return false; +// Escape a string for the database +function sqlEscapeString ($str, $secureString = TRUE, $strip = TRUE) { + // Is there cache? + if (!isset($GLOBALS['sql_escapes']['' . $str . ''])) { + // Debug message + //* DEBUG: */ logDebugMessage(__FUNCTION__, __LINE__, 'str=' . $str . ' - BEFORE!'); - // Init variable - $query = "failed"; + // Prepare the string here + $str = sqlPrepareQueryString($str); - if ($strip) { - $strip = "true"; - } else { - $strip = "false"; - } + // Debug message + //* DEBUG: */ logDebugMessage(__FUNCTION__, __LINE__, 'str=' . $str . ' - AFTER!'); - $eval = "\$query = sprintf(\"".$qstring."\""; - foreach ($data as $var) { - if ((!empty($var)) || ($var === 0)) { - $eval .= ", SQL_ESCAPE(\"".$var."\",true,".$strip.")"; - } else { - $eval .= ", ''"; - } - } - $eval .= ");"; - // - // Debugging - // - //* DEBUG: */ $fp = fopen(PATH."inc/cache/escape_debug.log", 'a') or mxchange_die("Cannot write debug.log!"); - //* DEBUG: */ fwrite($fp, $file."(".$line."): ".str_replace("\r", "", str_replace("\n", " ", $eval))."\n"); - //* DEBUG: */ fclose($fp); - - // Run the code - eval($eval); - - // Was the eval() command fine? - if ($query == "failed") { - // Something went wrong? - printf("eval=%s\n
%s
", - htmlentities($eval), - debug_get_printable_backtrace() - ); - - // Abort further code executions - exit; - } // END - if + // Secure string first? (which is the default behaviour!) + if ($secureString === TRUE) { + // Debug message + //* DEBUG: */ logDebugMessage(__FUNCTION__, __LINE__, 'str=' . $str . ',strip=' . intval($strip) . ' - BEFORE!'); - if ($run) { - // Run SQL query (default) - return SQL_QUERY($query, $file, $line); - } else { - // Return secured string - return $query; - } -} + // Then do it here + $str = secureString($str, $strip); -// Get ID from last INSERT command -function SQL_INSERTID () { - global $link; - if (!is_resource($link)) return false; - return mysql_insert_id(); -} + // Debug message + //* DEBUG: */ logDebugMessage(__FUNCTION__, __LINE__, 'str=' . $str . ',strip=' . intval($strip) . ' - AFTER!'); + } // END - if -// Escape a string for the database -function SQL_ESCAPE ($str, $secureString=true,$strip=true) { - global $link; + // Init (invalid) value + $ret = '!INVALID!'; - // Secure string first? (which is the default behaviour!) - if ($secureString) { - // Then do it here - $str = secureString($str, $strip); - } // END - if + if (!isSqlLinkUp()) { + // Fall-back to escapeQuotes() when there is no link + $ret = escapeQuotes($str); + } elseif (function_exists('mysql_real_escape_string')) { + // Debug message + //* DEBUG: */ logDebugMessage(__FUNCTION__, __LINE__, 'str=' . $str); - if (!is_resource($link)) { - // Fall-back to addslashes() when there is no link - return addslashes($str); - } // END - if + // The new and improved version + $ret = mysql_real_escape_string($str, getSqlLink()); - if (function_exists('mysql_real_escape_string')) { - // The new and improved version - //* DEBUG: */ print __FUNCTION__."(".__LINE__."):str={$str}
\n"; - return mysql_real_escape_string($str, $link); - } elseif (function_exists('mysql_escape_string')) { - // The obsolete function - return mysql_escape_string($str, $link); - } else { - // If nothing else works - return addslashes($str); - } -} + // Debug message + //* DEBUG: */ logDebugMessage(__FUNCTION__, __LINE__, 'str=' . $str . ',ret=' . $ret); + } elseif (function_exists('mysql_escape_string')) { + // The obsolete function + $ret = mysql_escape_string($str, getSqlLink()); + } else { + // If nothing else works, fall back to escapeQuotes() again + $ret = escapeQuotes($str); + } -// SELECT query string from table, columns and so on... ;-) -function SQL_RESULT_FROM_ARRAY ($table, $columns, $idRow, $id, $F, $L) { - // Is columns an array? - if (!is_array($columns) { - // No array - trigger_error(sprintf("columns is not array. %s!=array", gettype($columns))); - } + // Log message + //* DEBUG: */ logDebugMessage(__FUNCTION__, __LINE__, 'str=' . $str . ',ret=' . $ret); - // Prepare the SQL statement - $SQL = "SELECT `".implode("`, `", $columns)."` FROM `{!_MYSQL_PREFIX!}_%s` WHERE ``='%s' LIMIT 1"; + // Cache result + $GLOBALS['sql_escapes']['' . $str . ''] = $ret; + } // END - if - // Return the result - return SQL_QUERY_ESC($SQL, - array( - bigintval($id), - $table, - $idRow - ), $F, $L); -} + // Log message + //* DEBUG: */ logDebugMessage(__FUNCTION__, __LINE__, 'str=' . $str . ',sql_escapes=' . $GLOBALS['sql_escapes']['' . $str . '']); -// ALTER TABLE wrapper function -function SQL_ALTER_TABLE ($sql, $F, $L) { - // This is the default result... - $result = false; + // Return it + return $GLOBALS['sql_escapes']['' . $str . '']; +} - // Determine index/fulltext/unique word - $noIndex = ((eregi("INDEX", $sql) == false) && (eregi("FULLTEXT", $sql) == false) && (eregi("UNIQUE", $sql) == false); +// Log SQL errors to debug.log in installation phase or call reportBug() +function sqlError ($file, $line, $message) { + // Remember plain error in last_sql_error + $GLOBALS['last_sql_error'] = mysql_error(); - // Shall we add/drop? - if (((eregi("ADD", $sql) > 0) || (eregi("DROP", $sql) > 0)) && ($noIndex)) { - // Extract table name - $tableArray = explode(" ", $sql); - $tableName = str_replace("`", "", $tableArray[2]); + // Is login set? + if (!empty($GLOBALS['mysql']['login'])) { + // Secure login name in message + $message = str_replace($GLOBALS['mysql']['login'], '***', $message); + } // END - if - // And column name as well - $columnName = str_replace("`", "", $tableArray[4]); + // Is database password set? + if (!empty($GLOBALS['mysql']['password'])) { + // Secure password in message + $message = str_replace($GLOBALS['mysql']['password'], '***', $message); + } // END - if - // Get column information - $result = SQL_QUERY_ESC("SHOW COLUMNS FROM %s LIKE '%s'", - array($tableName, $columnName), $F, $L); + // Is database name set? + if (!empty($GLOBALS['mysql']['dbase'])) { + // Secure database name in message + $message = str_replace($GLOBALS['mysql']['dbase'], '***', $message); + } // END - if - // Do we have no entry on ADD or an entry on DROP? - if (((SQL_NUMROWS($result) == 0) && (eregi("ADD", $sql) > 0)) || ((SQL_NUMROWS($result) == 1) && (eregi("DROP", $sql) > 0))) { - // Do the query - $result = SQL_QUERY($sql, $F, $L, false); - } // END - if + // Is there installation phase? + if (isInstaller()) { + /* + * In installation phase, we don't want SQL errors abort e.g. connection + * tests, so just log it away. + */ + logDebugMessage($file, $line, $message); } else { - // Send it to the SQL_QUERY() function - $result = SQL_QUERY($sql, $F, $L, false); + // Regular mode, then call reportBug() + reportBug($file, $line, $message); } +} - // Return result - return $result; +// Checks whether given link is a valid SQL link +function isValidSqlLink ($linkResource) { + // Is it a resource? + return is_resource($linkResource); } -// + +// [EOF] ?>