libraries/Tracker.class.php

   1 <?php
   2 /* vim: set expandtab sw=4 ts=4 sts=4: */
   3 /**
   4  *
   5  * @package PhpMyAdmin
   6  */
   7
   8 /**
   9  * This class tracks changes on databases, tables and views.
  10  * For more information please see phpMyAdmin/Documentation.html
  11  *
  12  * @package PhpMyAdmin
  13  *
  14  * @todo use stristr instead of strstr
  15  */
  16 class PMA_Tracker
  17 {
  18     /**
  19      * Whether tracking is ready.
  20      */
  21     static protected $enabled = false;
  22
  23     /**
  24      * Defines the internal PMA table which contains tracking data.
  25      *
  26      * @access  protected
  27      * @var string
  28      */
  29     static protected $pma_table;
  30
  31     /**
  32      * Defines the usage of DROP TABLE statment in SQL dumps.
  33      *
  34      * @access protected
  35      * @var boolean
  36      */
  37     static protected $add_drop_table;
  38
  39     /**
  40      * Defines the usage of DROP VIEW statment in SQL dumps.
  41      *
  42      * @access protected
  43      * @var boolean
  44      */
  45     static protected $add_drop_view;
  46
  47     /**
  48      * Defines the usage of DROP DATABASE statment in SQL dumps.
  49      *
  50      * @access protected
  51      * @var boolean
  52      */
  53     static protected $add_drop_database;
  54
  55     /**
  56      * Defines auto-creation of tracking versions.
  57      *
  58      * @var boolean
  59      */
  60     static protected $version_auto_create;
  61
  62     /**
  63      * Defines the default set of tracked statements.
  64      *
  65      * @var string
  66      */
  67     static protected $default_tracking_set;
  68
  69     /**
  70      * Flags copied from `tracking` column definition in `pma_tracking` table.
  71      * Used for column type conversion in Drizzle.
  72      *
  73      * @var array
  74      */
  75     static private $tracking_set_flags = array('UPDATE','REPLACE','INSERT','DELETE','TRUNCATE','CREATE DATABASE',
  76             'ALTER DATABASE','DROP DATABASE','CREATE TABLE','ALTER TABLE','RENAME TABLE','DROP TABLE','CREATE INDEX',
  77             'DROP INDEX','CREATE VIEW','ALTER VIEW','DROP VIEW');
  78
  79     /**
  80      * Initializes settings. See phpMyAdmin/Documentation.html.
  81      *
  82      * @static
  83      *
  84      * @return nothing
  85      */
  86     static protected function init()
  87     {
  88         self::$pma_table = PMA_backquote($GLOBALS['cfg']['Server']['pmadb']) .".".
  89                            PMA_backquote($GLOBALS['cfg']['Server']['tracking']);
  90
  91         self::$add_drop_table = $GLOBALS['cfg']['Server']['tracking_add_drop_table'];
  92
  93         self::$add_drop_view = $GLOBALS['cfg']['Server']['tracking_add_drop_view'];
  94
  95         self::$add_drop_database = $GLOBALS['cfg']['Server']['tracking_add_drop_database'];
  96
  97         self::$default_tracking_set = $GLOBALS['cfg']['Server']['tracking_default_statements'];
  98
  99         self::$version_auto_create = $GLOBALS['cfg']['Server']['tracking_version_auto_create'];
 100     }
 101
 102     /**
 103      * Actually enables tracking. This needs to be done after all
 104      * underlaying code is initialized.
 105      *
 106      * @static
 107      *
 108      * @return nothing
 109      */
 110     static public function enable()
 111     {
 112         self::$enabled = true;
 113     }
 114
 115     /**
 116      * Gets the on/off value of the Tracker module, starts initialization.
 117      *
 118      * @static
 119      *
 120      * @return boolean (true=on|false=off)
 121      */
 122     static public function isActive()
 123     {
 124         if (! self::$enabled) {
 125             return false;
 126         }
 127         /* We need to avoid attempt to track any queries from PMA_getRelationsParam */
 128         self::$enabled = false;
 129         $cfgRelation = PMA_getRelationsParam();
 130         /* Restore original state */
 131         self::$enabled = true;
 132         if (! $cfgRelation['trackingwork']) {
 133             return false;
 134         }
 135         self::init();
 136
 137         if (isset(self::$pma_table)) {
 138             return true;
 139         } else {
 140             return false;
 141         }
 142     }
 143
 144     /**
 145      * Parses the name of a table from a SQL statement substring.
 146      *
 147      * @param string $string part of SQL statement
 148      *
 149      * @static
 150      *
 151      * @return string the name of table
 152      */
 153     static protected function getTableName($string)
 154     {
 155         if (strstr($string, '.')) {
 156             $temp = explode('.', $string);
 157             $tablename = $temp[1];
 158         } else {
 159             $tablename = $string;
 160         }
 161
 162         $str = explode("\n", $tablename);
 163         $tablename = $str[0];
 164
 165         $tablename = str_replace(';', '', $tablename);
 166         $tablename = str_replace('`', '', $tablename);
 167         $tablename = trim($tablename);
 168
 169         return $tablename;
 170     }
 171
 172
 173     /**
 174      * Gets the tracking status of a table, is it active or deactive ?
 175      *
 176      * @param string $dbname    name of database
 177      * @param string $tablename name of table
 178      *
 179      * @static
 180      *
 181      * @return boolean true or false
 182      */
 183     static public function isTracked($dbname, $tablename)
 184     {
 185         if (! self::$enabled) {
 186             return false;
 187         }
 188         /* We need to avoid attempt to track any queries from PMA_getRelationsParam */
 189         self::$enabled = false;
 190         $cfgRelation = PMA_getRelationsParam();
 191         /* Restore original state */
 192         self::$enabled = true;
 193         if (! $cfgRelation['trackingwork']) {
 194             return false;
 195         }
 196
 197         $sql_query = " SELECT tracking_active FROM " . self::$pma_table .
 198         " WHERE db_name = '" . PMA_sqlAddSlashes($dbname) . "' " .
 199         " AND table_name = '" . PMA_sqlAddSlashes($tablename) . "' " .
 200         " ORDER BY version DESC";
 201
 202         $row = PMA_DBI_fetch_array(PMA_query_as_controluser($sql_query));
 203
 204         if (isset($row['tracking_active']) && $row['tracking_active'] == 1) {
 205             return true;
 206         } else {
 207             return false;
 208         }
 209     }
 210
 211     /**
 212      * Returns the comment line for the log.
 213      *
 214      * @return string Comment, contains date and username
 215      */
 216     static public function getLogComment()
 217     {
 218         $date = date('Y-m-d H:i:s');
 219
 220         return "# log " . $date . " " . $GLOBALS['cfg']['Server']['user'] . "\n";
 221     }
 222
 223     /**
 224      * Creates tracking version of a table / view
 225      * (in other words: create a job to track future changes on the table).
 226      *
 227      * @param string $dbname       name of database
 228      * @param string $tablename    name of table
 229      * @param string $version      version
 230      * @param string $tracking_set set of tracking statements
 231      * @param bool   $is_view      if table is a view
 232      *
 233      * @static
 234      *
 235      * @return int result of version insertion
 236      */
 237     static public function createVersion($dbname, $tablename, $version, $tracking_set = '', $is_view = false)
 238     {
 239         global $sql_backquotes;
 240
 241         if ($tracking_set == '') {
 242             $tracking_set = self::$default_tracking_set;
 243         }
 244
 245         include_once './libraries/export/sql.php';
 246
 247         $sql_backquotes = true;
 248
 249         $date = date('Y-m-d H:i:s');
 250
 251         // Get data definition snapshot of table
 252
 253         $columns = PMA_DBI_get_columns($dbname, $tablename, null, true);
 254         // int indices to reduce size
 255         $columns = array_values($columns);
 256         // remove Privileges to reduce size
 257         for ($i = 0; $i < count($columns); $i++) {
 258             unset($columns[$i]['Privileges']);
 259         }
 260
 261         $indexes = PMA_DBI_get_table_indexes($dbname, $tablename);
 262
 263         $snapshot = array('COLUMNS' => $columns, 'INDEXES' => $indexes);
 264         $snapshot = serialize($snapshot);
 265
 266         // Get DROP TABLE / DROP VIEW and CREATE TABLE SQL statements
 267         $sql_backquotes = true;
 268
 269         $create_sql  = "";
 270
 271         if (self::$add_drop_table == true && $is_view == false) {
 272             $create_sql .= self::getLogComment() .
 273                            'DROP TABLE IF EXISTS ' . PMA_backquote($tablename) . ";\n";
 274
 275         }
 276
 277         if (self::$add_drop_view == true && $is_view == true) {
 278             $create_sql .= self::getLogComment() .
 279                            'DROP VIEW IF EXISTS ' . PMA_backquote($tablename) . ";\n";
 280         }
 281
 282         $create_sql .= self::getLogComment() .
 283                        PMA_getTableDef($dbname, $tablename, "\n", "");
 284
 285         // Save version
 286
 287         $sql_query = "/*NOTRACK*/\n" .
 288         "INSERT INTO" . self::$pma_table . " (" .
 289         "db_name, " .
 290         "table_name, " .
 291         "version, " .
 292         "date_created, " .
 293         "date_updated, " .
 294         "schema_snapshot, " .
 295         "schema_sql, " .
 296         "data_sql, " .
 297         "tracking " .
 298         ") " .
 299         "values (
 300         '" . PMA_sqlAddSlashes($dbname) . "',
 301         '" . PMA_sqlAddSlashes($tablename) . "',
 302         '" . PMA_sqlAddSlashes($version) . "',
 303         '" . PMA_sqlAddSlashes($date) . "',
 304         '" . PMA_sqlAddSlashes($date) . "',
 305         '" . PMA_sqlAddSlashes($snapshot) . "',
 306         '" . PMA_sqlAddSlashes($create_sql) . "',
 307         '" . PMA_sqlAddSlashes("\n") . "',
 308         '" . PMA_sqlAddSlashes(self::transformTrackingSet($tracking_set)) . "' )";
 309
 310         $result = PMA_query_as_controluser($sql_query);
 311
 312         if ($result) {
 313             // Deactivate previous version
 314             self::deactivateTracking($dbname, $tablename, ($version - 1));
 315         }
 316
 317         return $result;
 318     }
 319
 320
 321     /**
 322      * Removes all tracking data for a table
 323      *
 324      * @param string $dbname    name of database
 325      * @param string $tablename name of table
 326      *
 327      * @static
 328      *
 329      * @return int result of version insertion
 330      */
 331     static public function deleteTracking($dbname, $tablename)
 332     {
 333         $sql_query = "/*NOTRACK*/\n" .
 334         "DELETE FROM " . self::$pma_table . " WHERE `db_name` = '" . PMA_sqlAddSlashes($dbname) . "' AND `table_name` = '" . PMA_sqlAddSlashes($tablename) . "'";
 335         $result = PMA_query_as_controluser($sql_query);
 336
 337         return $result;
 338     }
 339
 340     /**
 341      * Creates tracking version of a database
 342      * (in other words: create a job to track future changes on the database).
 343      *
 344      * @param string $dbname       name of database
 345      * @param string $version      version
 346      * @param string $query        query
 347      * @param string $tracking_set set of tracking statements
 348      *
 349      * @static
 350      *
 351      * @return int result of version insertion
 352      */
 353     static public function createDatabaseVersion($dbname, $version, $query, $tracking_set = 'CREATE DATABASE,ALTER DATABASE,DROP DATABASE')
 354     {
 355         $date = date('Y-m-d H:i:s');
 356
 357         if ($tracking_set == '') {
 358             $tracking_set = self::$default_tracking_set;
 359         }
 360
 361         include_once './libraries/export/sql.php';
 362
 363         $create_sql  = "";
 364
 365         if (self::$add_drop_database == true) {
 366             $create_sql .= self::getLogComment() .
 367                            'DROP DATABASE IF EXISTS ' . PMA_backquote($dbname) . ";\n";
 368         }
 369
 370         $create_sql .= self::getLogComment() . $query;
 371
 372         // Save version
 373         $sql_query = "/*NOTRACK*/\n" .
 374         "INSERT INTO" . self::$pma_table . " (" .
 375         "db_name, " .
 376         "table_name, " .
 377         "version, " .
 378         "date_created, " .
 379         "date_updated, " .
 380         "schema_snapshot, " .
 381         "schema_sql, " .
 382         "data_sql, " .
 383         "tracking " .
 384         ") " .
 385         "values (
 386         '" . PMA_sqlAddSlashes($dbname) . "',
 387         '" . PMA_sqlAddSlashes('') . "',
 388         '" . PMA_sqlAddSlashes($version) . "',
 389         '" . PMA_sqlAddSlashes($date) . "',
 390         '" . PMA_sqlAddSlashes($date) . "',
 391         '" . PMA_sqlAddSlashes('') . "',
 392         '" . PMA_sqlAddSlashes($create_sql) . "',
 393         '" . PMA_sqlAddSlashes("\n") . "',
 394         '" . PMA_sqlAddSlashes(self::transformTrackingSet($tracking_set)) . "' )";
 395
 396         $result = PMA_query_as_controluser($sql_query);
 397
 398         return $result;
 399     }
 400
 401
 402
 403     /**
 404      * Changes tracking of a table.
 405      *
 406      * @param string  $dbname    name of database
 407      * @param string  $tablename name of table
 408      * @param string  $version   version
 409      * @param integer $new_state the new state of tracking
 410      *
 411      * @static
 412      *
 413      * @return int result of SQL query
 414      */
 415     static private function _changeTracking($dbname, $tablename, $version, $new_state)
 416     {
 417         $sql_query = " UPDATE " . self::$pma_table .
 418         " SET `tracking_active` = '" . $new_state . "' " .
 419         " WHERE `db_name` = '" . PMA_sqlAddSlashes($dbname) . "' " .
 420         " AND `table_name` = '" . PMA_sqlAddSlashes($tablename) . "' " .
 421         " AND `version` = '" . PMA_sqlAddSlashes($version) . "' ";
 422
 423         $result = PMA_query_as_controluser($sql_query);
 424
 425         return $result;
 426     }
 427
 428     /**
 429      * Changes tracking data of a table.
 430      *
 431      * @param string       $dbname    name of database
 432      * @param string       $tablename name of table
 433      * @param string       $version   version
 434      * @param string       $type      type of data(DDL || DML)
 435      * @param string|array $new_data  the new tracking data
 436      *
 437      * @static
 438      *
 439      * @return bool result of change
 440      */
 441     static public function changeTrackingData($dbname, $tablename, $version, $type, $new_data)
 442     {
 443         if ($type == 'DDL') {
 444             $save_to = 'schema_sql';
 445         } elseif ($type == 'DML') {
 446             $save_to = 'data_sql';
 447         } else {
 448             return false;
 449         }
 450         $date  = date('Y-m-d H:i:s');
 451
 452         $new_data_processed = '';
 453         if (is_array($new_data)) {
 454             foreach ($new_data as $data) {
 455                 $new_data_processed .= '# log ' . $date . ' ' . $data['username']
 456                     . PMA_sqlAddSlashes($data['statement']) . "\n";
 457             }
 458         } else {
 459             $new_data_processed = $new_data;
 460         }
 461
 462         $sql_query = " UPDATE " . self::$pma_table .
 463         " SET `" . $save_to . "` = '" . $new_data_processed . "' " .
 464         " WHERE `db_name` = '" . PMA_sqlAddSlashes($dbname) . "' " .
 465         " AND `table_name` = '" . PMA_sqlAddSlashes($tablename) . "' " .
 466         " AND `version` = '" . PMA_sqlAddSlashes($version) . "' ";
 467
 468         $result = PMA_query_as_controluser($sql_query);
 469
 470         return $result;
 471     }
 472
 473     /**
 474      * Activates tracking of a table.
 475      *
 476      * @param string $dbname    name of database
 477      * @param string $tablename name of table
 478      * @param string $version   version
 479      *
 480      * @static
 481      *
 482      * @return int result of SQL query
 483      */
 484     static public function activateTracking($dbname, $tablename, $version)
 485     {
 486         return self::_changeTracking($dbname, $tablename, $version, 1);
 487     }
 488
 489
 490     /**
 491      * Deactivates tracking of a table.
 492      *
 493      * @param string $dbname    name of database
 494      * @param string $tablename name of table
 495      * @param string $version   version
 496      *
 497      * @static
 498      *
 499      * @return int result of SQL query
 500      */
 501     static public function deactivateTracking($dbname, $tablename, $version)
 502     {
 503         return self::_changeTracking($dbname, $tablename, $version, 0);
 504     }
 505
 506
 507     /**
 508      * Gets the newest version of a tracking job
 509      * (in other words: gets the HEAD version).
 510      *
 511      * @param string $dbname    name of database
 512      * @param string $tablename name of table
 513      * @param string $statement tracked statement
 514      *
 515      * @static
 516      *
 517      * @return int (-1 if no version exists | >  0 if a version exists)
 518      */
 519     static public function getVersion($dbname, $tablename, $statement = null)
 520     {
 521         $sql_query = " SELECT MAX(version) FROM " . self::$pma_table .
 522         " WHERE `db_name` = '" . PMA_sqlAddSlashes($dbname) . "' " .
 523         " AND `table_name` = '" . PMA_sqlAddSlashes($tablename) . "' ";
 524
 525         if ($statement != "") {
 526             $sql_query .= PMA_DRIZZLE
 527                 ? ' AND tracking & ' . self::transformTrackingSet($statement) . ' <> 0'
 528                 : " AND FIND_IN_SET('" . $statement . "',tracking) > 0" ;
 529         }
 530         $row = PMA_DBI_fetch_array(PMA_query_as_controluser($sql_query));
 531         return isset($row[0])
 532             ? $row[0]
 533             : -1;
 534     }
 535
 536
 537     /**
 538      * Gets the record of a tracking job.
 539      *
 540      * @param string $dbname    name of database
 541      * @param string $tablename name of table
 542      * @param string $version   version number
 543      *
 544      * @static
 545      *
 546      * @return mixed record DDM log, DDL log, structure snapshot, tracked statements.
 547      */
 548     static public function getTrackedData($dbname, $tablename, $version)
 549     {
 550         if (! isset(self::$pma_table)) {
 551             self::init();
 552         }
 553         $sql_query = " SELECT * FROM " . self::$pma_table .
 554             " WHERE `db_name` = '" . PMA_sqlAddSlashes($dbname) . "' ";
 555         if (! empty($tablename)) {
 556             $sql_query .= " AND `table_name` = '" . PMA_sqlAddSlashes($tablename) ."' ";
 557         }
 558         $sql_query .= " AND `version` = '" . PMA_sqlAddSlashes($version) ."' ".
 559                      " ORDER BY `version` DESC LIMIT 1";
 560
 561         $mixed = PMA_DBI_fetch_assoc(PMA_query_as_controluser($sql_query));
 562
 563         // Parse log
 564         $log_schema_entries = explode('# log ',  $mixed['schema_sql']);
 565         $log_data_entries   = explode('# log ',  $mixed['data_sql']);
 566
 567         $ddl_date_from = $date = date('Y-m-d H:i:s');
 568
 569         $ddlog = array();
 570         $i = 0;
 571
 572         // Iterate tracked data definition statements
 573         // For each log entry we want to get date, username and statement
 574         foreach ($log_schema_entries as $log_entry) {
 575             if (trim($log_entry) != '') {
 576                 $date      = substr($log_entry, 0, 19);
 577                 $username  = substr($log_entry, 20, strpos($log_entry, "\n") - 20);
 578                 if ($i == 0) {
 579                     $ddl_date_from = $date;
 580                 }
 581                 $statement = rtrim(strstr($log_entry, "\n"));
 582
 583                 $ddlog[] = array( 'date' => $date,
 584                                   'username'=> $username,
 585                                   'statement' => $statement );
 586                 $i++;
 587             }
 588         }
 589
 590         $date_from = $ddl_date_from;
 591         $date_to   = $ddl_date_to = $date;
 592
 593         $dml_date_from = $date_from;
 594
 595         $dmlog = array();
 596         $i = 0;
 597
 598         // Iterate tracked data manipulation statements
 599         // For each log entry we want to get date, username and statement
 600         foreach ($log_data_entries as $log_entry) {
 601             if (trim($log_entry) != '') {
 602                 $date      = substr($log_entry, 0, 19);
 603                 $username  = substr($log_entry, 20, strpos($log_entry, "\n") - 20);
 604                 if ($i == 0) {
 605                     $dml_date_from = $date;
 606                 }
 607                 $statement = rtrim(strstr($log_entry, "\n"));
 608
 609                 $dmlog[] = array( 'date' => $date,
 610                                   'username' => $username,
 611                                   'statement' => $statement );
 612                 $i++;
 613             }
 614         }
 615
 616         $dml_date_to = $date;
 617
 618         // Define begin and end of date range for both logs
 619         if (strtotime($ddl_date_from) <= strtotime($dml_date_from)) {
 620             $data['date_from'] = $ddl_date_from;
 621         } else {
 622             $data['date_from'] = $dml_date_from;
 623         }
 624         if (strtotime($ddl_date_to) >= strtotime($dml_date_to)) {
 625             $data['date_to'] = $ddl_date_to;
 626         } else {
 627             $data['date_to'] = $dml_date_to;
 628         }
 629         $data['ddlog']           = $ddlog;
 630         $data['dmlog']           = $dmlog;
 631         $data['tracking']        = self::transformTrackingSet($mixed['tracking']);
 632         $data['schema_snapshot'] = $mixed['schema_snapshot'];
 633
 634         return $data;
 635     }
 636
 637
 638     /**
 639      * Parses a query. Gets
 640      *  - statement identifier (UPDATE, ALTER TABLE, ...)
 641      *  - type of statement, is it part of DDL or DML ?
 642      *  - tablename
 643      *
 644      * @param string $query query
 645      *
 646      * @static
 647      * @todo: using PMA SQL Parser when possible
 648      * @todo: support multi-table/view drops
 649      *
 650      * @return mixed Array containing identifier, type and tablename.
 651      *
 652      */
 653     static public function parseQuery($query)
 654     {
 655
 656         // Usage of PMA_SQP does not work here
 657         //
 658         // require_once("libraries/sqlparser.lib.php");
 659         // $parsed_sql = PMA_SQP_parse($query);
 660         // $sql_info = PMA_SQP_analyze($parsed_sql);
 661
 662         $query = str_replace("\n", " ", $query);
 663         $query = str_replace("\r", " ", $query);
 664
 665         $query = trim($query);
 666         $query = trim($query, ' -');
 667
 668         $tokens = explode(" ", $query);
 669         $tokens = array_map('strtoupper', $tokens);
 670
 671         // Parse USE statement, need it for SQL dump imports
 672         if (substr($query, 0, 4) == 'USE ') {
 673             $prefix = explode('USE ', $query);
 674             $GLOBALS['db'] = self::getTableName($prefix[1]);
 675         }
 676
 677         /*
 678          * DDL statements
 679          */
 680
 681         $result['type']         = 'DDL';
 682
 683         // Parse CREATE VIEW statement
 684         if (in_array('CREATE', $tokens) == true
 685             && in_array('VIEW', $tokens) == true
 686             && in_array('AS', $tokens) == true
 687         ) {
 688             $result['identifier'] = 'CREATE VIEW';
 689
 690             $index = array_search('VIEW', $tokens);
 691
 692             $result['tablename'] = strtolower(self::getTableName($tokens[$index + 1]));
 693         }
 694
 695         // Parse ALTER VIEW statement
 696         if (in_array('ALTER', $tokens) == true
 697             && in_array('VIEW', $tokens) == true
 698             && in_array('AS', $tokens) == true
 699             && ! isset($result['identifier'])
 700         ) {
 701             $result['identifier'] = 'ALTER VIEW';
 702
 703             $index = array_search('VIEW', $tokens);
 704
 705             $result['tablename'] = strtolower(self::getTableName($tokens[$index + 1]));
 706         }
 707
 708         // Parse DROP VIEW statement
 709         if (! isset($result['identifier']) && substr($query, 0, 10) == 'DROP VIEW ') {
 710             $result['identifier'] = 'DROP VIEW';
 711
 712             $prefix  = explode('DROP VIEW ', $query);
 713             $str = strstr($prefix[1], 'IF EXISTS');
 714
 715             if ($str == false ) {
 716                 $str = $prefix[1];
 717             }
 718             $result['tablename'] = self::getTableName($str);
 719         }
 720
 721         // Parse CREATE DATABASE statement
 722         if (! isset($result['identifier']) && substr($query, 0, 15) == 'CREATE DATABASE') {
 723             $result['identifier'] = 'CREATE DATABASE';
 724             $str = str_replace('CREATE DATABASE', '', $query);
 725             $str = str_replace('IF NOT EXISTS', '', $str);
 726
 727             $prefix = explode('DEFAULT ', $str);
 728
 729             $result['tablename'] = '';
 730             $GLOBALS['db'] = self::getTableName($prefix[0]);
 731         }
 732
 733         // Parse ALTER DATABASE statement
 734         if (! isset($result['identifier']) && substr($query, 0, 14) == 'ALTER DATABASE') {
 735             $result['identifier'] = 'ALTER DATABASE';
 736             $result['tablename'] = '';
 737         }
 738
 739         // Parse DROP DATABASE statement
 740         if (! isset($result['identifier']) && substr($query, 0, 13) == 'DROP DATABASE') {
 741             $result['identifier'] = 'DROP DATABASE';
 742             $str = str_replace('DROP DATABASE', '', $query);
 743             $str = str_replace('IF EXISTS', '', $str);
 744             $GLOBALS['db'] = self::getTableName($str);
 745             $result['tablename'] = '';
 746         }
 747
 748         // Parse CREATE TABLE statement
 749         if (! isset($result['identifier']) && substr($query, 0, 12) == 'CREATE TABLE' ) {
 750             $result['identifier'] = 'CREATE TABLE';
 751             $query   = str_replace('IF NOT EXISTS', '', $query);
 752             $prefix  = explode('CREATE TABLE ', $query);
 753             $suffix  = explode('(', $prefix[1]);
 754             $result['tablename'] = self::getTableName($suffix[0]);
 755         }
 756
 757         // Parse ALTER TABLE statement
 758         if (! isset($result['identifier']) && substr($query, 0, 12) == 'ALTER TABLE ') {
 759             $result['identifier'] = 'ALTER TABLE';
 760
 761             $prefix  = explode('ALTER TABLE ', $query);
 762             $suffix  = explode(' ', $prefix[1]);
 763             $result['tablename']  = self::getTableName($suffix[0]);
 764         }
 765
 766         // Parse DROP TABLE statement
 767         if (! isset($result['identifier']) && substr($query, 0, 11) == 'DROP TABLE ') {
 768             $result['identifier'] = 'DROP TABLE';
 769
 770             $prefix  = explode('DROP TABLE ', $query);
 771             $str = strstr($prefix[1], 'IF EXISTS');
 772
 773             if ($str == false ) {
 774                 $str = $prefix[1];
 775             }
 776             $result['tablename'] = self::getTableName($str);
 777         }
 778
 779         // Parse CREATE INDEX statement
 780         if (! isset($result['identifier'])
 781             && (substr($query, 0, 12) == 'CREATE INDEX'
 782             || substr($query, 0, 19) == 'CREATE UNIQUE INDEX'
 783             || substr($query, 0, 20) == 'CREATE SPATIAL INDEX')
 784         ) {
 785              $result['identifier'] = 'CREATE INDEX';
 786              $prefix = explode('ON ', $query);
 787              $suffix = explode('(', $prefix[1]);
 788              $result['tablename'] = self::getTableName($suffix[0]);
 789         }
 790
 791         // Parse DROP INDEX statement
 792         if (! isset($result['identifier']) && substr($query, 0, 10) == 'DROP INDEX') {
 793              $result['identifier'] = 'DROP INDEX';
 794              $prefix = explode('ON ', $query);
 795              $result['tablename'] = self::getTableName($prefix[1]);
 796         }
 797
 798         // Parse RENAME TABLE statement
 799         if (! isset($result['identifier']) && substr($query, 0, 13) == 'RENAME TABLE ') {
 800             $result['identifier'] = 'RENAME TABLE';
 801             $prefix = explode('RENAME TABLE ', $query);
 802             $names  = explode(' TO ', $prefix[1]);
 803             $result['tablename']      = self::getTableName($names[0]);
 804             $result["tablename_after_rename"]  = self::getTableName($names[1]);
 805         }
 806
 807         /*
 808          * DML statements
 809          */
 810
 811         if (! isset($result['identifier'])) {
 812             $result["type"]       = 'DML';
 813         }
 814         // Parse UPDATE statement
 815         if (! isset($result['identifier']) && substr($query, 0, 6) == 'UPDATE') {
 816             $result['identifier'] = 'UPDATE';
 817             $prefix  = explode('UPDATE ', $query);
 818             $suffix  = explode(' ', $prefix[1]);
 819             $result['tablename'] = self::getTableName($suffix[0]);
 820         }
 821
 822         // Parse INSERT INTO statement
 823         if (! isset($result['identifier']) && substr($query, 0, 11) == 'INSERT INTO') {
 824             $result['identifier'] = 'INSERT';
 825             $prefix  = explode('INSERT INTO', $query);
 826             $suffix  = explode('(', $prefix[1]);
 827             $result['tablename'] = self::getTableName($suffix[0]);
 828         }
 829
 830         // Parse DELETE statement
 831         if (! isset($result['identifier']) && substr($query, 0, 6) == 'DELETE') {
 832             $result['identifier'] = 'DELETE';
 833             $prefix  = explode('FROM ', $query);
 834             $suffix  = explode(' ', $prefix[1]);
 835             $result['tablename'] = self::getTableName($suffix[0]);
 836         }
 837
 838         // Parse TRUNCATE statement
 839         if (! isset($result['identifier']) && substr($query, 0, 8) == 'TRUNCATE') {
 840             $result['identifier'] = 'TRUNCATE';
 841             $prefix  = explode('TRUNCATE', $query);
 842             $result['tablename'] = self::getTableName($prefix[1]);
 843         }
 844
 845         return $result;
 846     }
 847
 848
 849     /**
 850      * Analyzes a given SQL statement and saves tracking data.
 851      *
 852      * @param string $query a SQL query
 853      *
 854      * @static
 855      *
 856      * @return nothing
 857      */
 858     static public function handleQuery($query)
 859     {
 860         // If query is marked as untouchable, leave
 861         if (strstr($query, "/*NOTRACK*/")) {
 862             return;
 863         }
 864
 865         if (! (substr($query, -1) == ';')) {
 866             $query = $query . ";\n";
 867         }
 868         // Get some information about query
 869         $result = self::parseQuery($query);
 870
 871         // Get database name
 872         $dbname = trim($GLOBALS['db'], '`');
 873         // $dbname can be empty, for example when coming from Synchronize
 874         // and this is a query for the remote server
 875         if (empty($dbname)) {
 876             return;
 877         }
 878
 879         // If we found a valid statement
 880         if (isset($result['identifier'])) {
 881             $version = self::getVersion($dbname, $result['tablename'], $result['identifier']);
 882
 883             // If version not exists and auto-creation is enabled
 884             if (self::$version_auto_create == true
 885                 && self::isTracked($dbname, $result['tablename']) == false
 886                 && $version == -1
 887             ) {
 888                 // Create the version
 889
 890                 switch ($result['identifier']) {
 891                 case 'CREATE TABLE':
 892                     self::createVersion($dbname, $result['tablename'], '1');
 893                     break;
 894                 case 'CREATE VIEW':
 895                     self::createVersion($dbname, $result['tablename'], '1', '', true);
 896                     break;
 897                 case 'CREATE DATABASE':
 898                     self::createDatabaseVersion($dbname, '1', $query);
 899                     break;
 900                 } // end switch
 901             }
 902
 903             // If version exists
 904             if (self::isTracked($dbname, $result['tablename']) && $version != -1) {
 905                 if ($result['type'] == 'DDL') {
 906                     $save_to = 'schema_sql';
 907                 } elseif ($result['type'] == 'DML') {
 908                     $save_to = 'data_sql';
 909                 } else {
 910                     $save_to = '';
 911                 }
 912                 $date  = date('Y-m-d H:i:s');
 913
 914                 // Cut off `dbname`. from query
 915                 $query = preg_replace('/`' . $dbname . '`\s?\./', '', $query);
 916
 917                 // Add log information
 918                 $query = self::getLogComment() . $query ;
 919
 920                 // Mark it as untouchable
 921                 $sql_query = " /*NOTRACK*/\n" .
 922                 " UPDATE " . self::$pma_table .
 923                 " SET " . PMA_backquote($save_to) ." = CONCAT( " . PMA_backquote($save_to) . ",'\n"
 924                 . PMA_sqlAddSlashes($query) . "') ," . " `date_updated` = '" . $date . "' ";
 925
 926                 // If table was renamed we have to change the tablename attribute in pma_tracking too
 927                 if ($result['identifier'] == 'RENAME TABLE') {
 928                     $sql_query .= ', `table_name` = \'' . PMA_sqlAddSlashes($result['tablename_after_rename']) . '\' ';
 929                 }
 930
 931                 // Save the tracking information only for
 932                 //     1. the database
 933                 //     2. the table / view
 934                 //     3. the statements
 935                 // we want to track
 936                 $sql_query .=
 937                 " WHERE FIND_IN_SET('" . $result['identifier'] . "',tracking) > 0" .
 938                 " AND `db_name` = '" . PMA_sqlAddSlashes($dbname) . "' " .
 939                 " AND `table_name` = '" . PMA_sqlAddSlashes($result['tablename']) . "' " .
 940                 " AND `version` = '" . PMA_sqlAddSlashes($version) . "' ";
 941
 942                 $result = PMA_query_as_controluser($sql_query);
 943             }
 944         }
 945     }
 946
 947     /**
 948      * Transforms tracking set for Drizzle, which has no SET type
 949      *
 950      * Converts int<>string for Drizzle, does nothing for MySQL
 951      *
 952      * @param int|string $tracking_set
 953      * @return int|string
 954      */
 955     static private function transformTrackingSet($tracking_set)
 956     {
 957         if (!PMA_DRIZZLE) {
 958             return $tracking_set;
 959         }
 960
 961         // init conversion array (key 3 doesn't exist in calculated array)
 962         if (isset(self::$tracking_set_flags[3])) {
 963             // initialize flags
 964             $set = self::$tracking_set_flags;
 965             $array = array();
 966             for ($i = 0; $i < count($set); $i++) {
 967                 $flag = 1 << $i;
 968                 $array[$flag] = $set[$i];
 969                 $array[$set[$i]] = $flag;
 970             }
 971             self::$tracking_set_flags = $array;
 972         }
 973
 974         if (is_numeric($tracking_set)) {
 975             // int > string conversion
 976             $aflags = array();
 977             // count/2 - conversion table has both int > string and string > int values
 978             for ($i = 0; $i < count(self::$tracking_set_flags)/2; $i++) {
 979                 $flag = 1 << $i;
 980                 if ($tracking_set & $flag) {
 981                     $aflags[] = self::$tracking_set_flags[$flag];
 982                 }
 983             }
 984             $flags = implode(',', $aflags);
 985         } else {
 986             // string > int conversion
 987             $flags = 0;
 988             foreach (explode(',', $tracking_set) as $strflag) {
 989                 if ($strflag == '') {
 990                     continue;
 991                 }
 992                 $flags |= self::$tracking_set_flags[$strflag];
 993             }
 994         }
 995
 996         return $flags;
 997     }
 998 }
 999 ?>