!C99Shell v. 1.0 pre-release build #16!

Software: Apache/2.0.54 (Fedora). PHP/5.0.4 

uname -a: Linux mina-info.me 2.6.17-1.2142_FC4smp #1 SMP Tue Jul 11 22:57:02 EDT 2006 i686 

uid=48(apache) gid=48(apache) groups=48(apache)
context=system_u:system_r:httpd_sys_script_t
 

Safe-mode: OFF (not secure)

/home/mnnews/public_html/login/phpmyadmin/libraries/   drwxr-xr-x
Free 831.2 MB of 27.03 GB (3%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     SavedSearches.class.php (11.33 KB)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?php
/* vim: set expandtab sw=4 ts=4 sts=4: */
/**
* Saved searches managing
*
* @package PhpMyAdmin
*/

if (! defined('PHPMYADMIN')) {
    exit;
}

/**
* Saved searches managing
*
* @package PhpMyAdmin
*/
class PMA_SavedSearches
{
    
/**
     * Global configuration
     * @var array
     */
    
private $_config = null;

    
/**
     * Id
     * @var int|null
     */
    
private $_id = null;

    
/**
     * Username
     * @var string
     */
    
private $_username = null;

    
/**
     * DB name
     * @var string
     */
    
private $_dbname = null;

    
/**
     * Saved search name
     * @var string
     */
    
private $_searchName = null;

    
/**
     * Setter of id
     *
     * @param int|null $searchId Id of search
     *
     * @return static
     */
    
public function setId($searchId)
    {
        
$searchId = (int)$searchId;
        if (empty(
$searchId)) {
            
$searchId = null;
        }

        
$this->_id = $searchId;
        return
$this;
    }

    
/**
     * Getter of id
     *
     * @return int|null
     */
    
public function getId()
    {
        return
$this->_id;
    }

    
/**
     * Setter of searchName
     *
     * @param string $searchName Saved search name
     *
     * @return static
     */
    
public function setSearchName($searchName)
    {
        
$this->_searchName = $searchName;
        return
$this;
    }

    
/**
     * Getter of searchName
     *
     * @return string
     */
    
public function getSearchName()
    {
        return
$this->_searchName;
    }

    
/**
     * Criterias
     * @var array
     */
    
private $_criterias = null;

    
/**
     * Setter of config
     *
     * @param array $config Global configuration
     *
     * @return static
     */
    
public function setConfig($config)
    {
        
$this->_config = $config;
        return
$this;
    }

    
/**
     * Getter of config
     *
     * @return array
     */
    
public function getConfig()
    {
        return
$this->_config;
    }

    
/**
     * Setter for criterias
     *
     * @param array|string $criterias Criterias of saved searches
     * @param bool         $json      Criterias are in JSON format
     *
     * @return static
     */
    
public function setCriterias($criterias, $json = false)
    {
        if (
true === $json && is_string($criterias)) {
            
$this->_criterias = json_decode($criterias, true);
            return
$this;
        }

        
$aListFieldsToGet = array(
            
'criteriaColumn',
            
'criteriaSort',
            
'criteriaShow',
            
'criteria',
            
'criteriaAndOrRow',
            
'criteriaAndOrColumn',
            
'rows'
        
);

        
$data = array();

        
$data['criteriaColumnCount'] = count($criterias['criteriaColumn']);

        foreach (
$aListFieldsToGet as $field) {
            
$data[$field] = $criterias[$field];
        }

        for (
$i = 0; $i <= $data['rows']; $i++) {
            
$data['Or' . $i] = $criterias['Or' . $i];
        }

        
$this->_criterias = $data;
        return
$this;
    }

    
/**
     * Getter for criterias
     *
     * @return array
     */
    
public function getCriterias()
    {
        return
$this->_criterias;
    }

    
/**
     * Setter for username
     *
     * @param string $username Username
     *
     * @return static
     */
    
public function setUsername($username)
    {
        
$this->_username = $username;
        return
$this;
    }

    
/**
     * Getter for username
     *
     * @return string
     */
    
public function getUsername()
    {
        return
$this->_username;
    }

    
/**
     * Setter for DB name
     *
     * @param string $dbname DB name
     *
     * @return static
     */
    
public function setDbname($dbname)
    {
        
$this->_dbname = $dbname;
        return
$this;
    }

    
/**
     * Getter for DB name
     *
     * @return string
     */
    
public function getDbname()
    {
        return
$this->_dbname;
    }

    
/**
     * Public constructor
     *
     * @param array $config Global configuration
     */
    
public function __construct($config)
    {
        
$this->setConfig($config);
    }

    
/**
     * Save the search
     *
     * @return boolean
     */
    
public function save()
    {
        if (
null == $this->getSearchName()) {
            
$message = PMA_Message::error(
                
__('Please provide a name for this bookmarked search.')
            );
            
$response = PMA_Response::getInstance();
            
$response->isSuccess($message->isSuccess());
            
$response->addJSON('fieldWithError', 'searchName');
            
$response->addJSON('message', $message);
            exit;
        }

        if (
null == $this->getUsername()
            ||
null == $this->getDbname()
            ||
null == $this->getSearchName()
            ||
null == $this->getCriterias()
        ) {
            
$message = PMA_Message::error(
                
__('Missing information to save the bookmarked search.')
            );
            
$response = PMA_Response::getInstance();
            
$response->isSuccess($message->isSuccess());
            
$response->addJSON('message', $message);
            exit;
        }

        
$savedSearchesTbl
            
= PMA_Util::backquote($this->_config['cfgRelation']['db']) . "."
            
. PMA_Util::backquote($this->_config['cfgRelation']['savedsearches']);

        
//If it's an insert.
        
if (null === $this->getId()) {
            
$wheres = array(
                
"search_name = '" . PMA_Util::sqlAddSlashes($this->getSearchName())
                .
"'"
            
);
            
$existingSearches = $this->getList($wheres);

            if (!empty(
$existingSearches)) {
                
$message = PMA_Message::error(
                    
__('An entry with this name already exists.')
                );
                
$response = PMA_Response::getInstance();
                
$response->isSuccess($message->isSuccess());
                
$response->addJSON('fieldWithError', 'searchName');
                
$response->addJSON('message', $message);
                exit;
            }

            
$sqlQuery = "INSERT INTO " . $savedSearchesTbl
                
. "(`username`, `db_name`, `search_name`, `search_data`)"
                
. " VALUES ("
                
. "'" . PMA_Util::sqlAddSlashes($this->getUsername()) . "',"
                
. "'" . PMA_Util::sqlAddSlashes($this->getDbname()) . "',"
                
. "'" . PMA_Util::sqlAddSlashes($this->getSearchName()) . "',"
                
. "'" . PMA_Util::sqlAddSlashes(json_encode($this->getCriterias()))
                .
"')";

            
$result = (bool)PMA_queryAsControlUser($sqlQuery);
            if (!
$result) {
                return
false;
            }

            
$this->setId($GLOBALS['dbi']->insertId());

            return
true;
        }

        
//Else, it's an update.
        
$wheres = array(
            
"id != " . $this->getId(),
            
"search_name = '" . PMA_Util::sqlAddSlashes($this->getSearchName()) . "'"
        
);
        
$existingSearches = $this->getList($wheres);

        if (!empty(
$existingSearches)) {
            
$message = PMA_Message::error(
                
__('An entry with this name already exists.')
            );
            
$response = PMA_Response::getInstance();
            
$response->isSuccess($message->isSuccess());
            
$response->addJSON('fieldWithError', 'searchName');
            
$response->addJSON('message', $message);
            exit;
        }

        
$sqlQuery = "UPDATE " . $savedSearchesTbl
            
. "SET `search_name` = '"
            
. PMA_Util::sqlAddSlashes($this->getSearchName()) . "', "
            
. "`search_data` = '"
            
. PMA_Util::sqlAddSlashes(json_encode($this->getCriterias())) . "' "
            
. "WHERE id = " . $this->getId();
        return (bool)
PMA_queryAsControlUser($sqlQuery);
    }

    
/**
     * Delete the search
     *
     * @return boolean
     */
    
public function delete()
    {
        if (
null == $this->getId()) {
            
$message = PMA_Message::error(
                
__('Missing information to delete the search.')
            );
            
$response = PMA_Response::getInstance();
            
$response->isSuccess($message->isSuccess());
            
$response->addJSON('fieldWithError', 'searchId');
            
$response->addJSON('message', $message);
            exit;
        }

        
$savedSearchesTbl
            
= PMA_Util::backquote($this->_config['cfgRelation']['db']) . "."
            
. PMA_Util::backquote($this->_config['cfgRelation']['savedsearches']);

        
$sqlQuery = "DELETE FROM " . $savedSearchesTbl
            
. "WHERE id = '" . PMA_Util::sqlAddSlashes($this->getId()) . "'";

        return (bool)
PMA_queryAsControlUser($sqlQuery);
    }

    
/**
     * Load the current search from an id.
     *
     * @return bool Success
     */
    
public function load()
    {
        if (
null == $this->getId()) {
            
$message = PMA_Message::error(
                
__('Missing information to load the search.')
            );
            
$response = PMA_Response::getInstance();
            
$response->isSuccess($message->isSuccess());
            
$response->addJSON('fieldWithError', 'searchId');
            
$response->addJSON('message', $message);
            exit;
        }

        
$savedSearchesTbl = PMA_Util::backquote($this->_config['cfgRelation']['db'])
            .
"."
            
. PMA_Util::backquote($this->_config['cfgRelation']['savedsearches']);
        
$sqlQuery = "SELECT id, search_name, search_data "
            
. "FROM " . $savedSearchesTbl . " "
            
. "WHERE id = '" . PMA_Util::sqlAddSlashes($this->getId()) . "' ";

        
$resList = PMA_queryAsControlUser($sqlQuery);

        if (
false === ($oneResult = $GLOBALS['dbi']->fetchArray($resList))) {
            
$message = PMA_Message::error(__('Error while loading the search.'));
            
$response = PMA_Response::getInstance();
            
$response->isSuccess($message->isSuccess());
            
$response->addJSON('fieldWithError', 'searchId');
            
$response->addJSON('message', $message);
            exit;
        }

        
$this->setSearchName($oneResult['search_name'])
            ->
setCriterias($oneResult['search_data'], true);

        return
true;
    }

    
/**
     * Get the list of saved search of a user on a DB
     *
     * @param string[] $wheres List of filters
     *
     * @return array|bool List of saved search or false on failure
     */
    
public function getList(array $wheres = array())
    {
        if (
null == $this->getUsername()
            ||
null == $this->getDbname()
        ) {
            return
false;
        }

        
$savedSearchesTbl = PMA_Util::backquote($this->_config['cfgRelation']['db'])
            .
"."
            
. PMA_Util::backquote($this->_config['cfgRelation']['savedsearches']);
        
$sqlQuery = "SELECT id, search_name "
            
. "FROM " . $savedSearchesTbl . " "
            
. "WHERE "
            
. "username = '" . PMA_Util::sqlAddSlashes($this->getUsername()) . "' "
            
. "AND db_name = '" . PMA_Util::sqlAddSlashes($this->getDbname()) . "' ";

        foreach (
$wheres as $where) {
            
$sqlQuery .= "AND " . $where . " ";
        }

        
$sqlQuery .= "order by search_name ASC ";

        
$resList = PMA_queryAsControlUser($sqlQuery);

        
$list = array();
        while (
$oneResult = $GLOBALS['dbi']->fetchArray($resList)) {
            
$list[$oneResult['id']] = $oneResult['search_name'];
        }

        return
$list;
    }
}

:: Command execute ::

Enter:
 
Select:
 

:: Search ::
  - regexp 

:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c99shell v. 1.0 pre-release build #16 powered by Captain Crunch Security Team | http://ccteam.ru | Generation time: 0.0058 ]--