Code Coverage |
||||||||||
Classes and Traits |
Functions and Methods |
Lines |
||||||||
Total | |
0.00% |
0 / 1 |
|
0.00% |
0 / 14 |
CRAP | |
4.44% |
8 / 180 |
mysqli | |
0.00% |
0 / 1 |
|
0.00% |
0 / 14 |
7476.88 | |
4.44% |
8 / 180 |
sql_connect | |
0.00% |
0 / 1 |
189.59 | |
8.11% |
3 / 37 |
|||
sql_server_info | |
0.00% |
0 / 1 |
72.00 | |
0.00% |
0 / 10 |
|||
_sql_transaction | |
0.00% |
0 / 1 |
20.00 | |
0.00% |
0 / 14 |
|||
sql_query | |
0.00% |
0 / 1 |
240.00 | |
0.00% |
0 / 25 |
|||
sql_affectedrows | |
0.00% |
0 / 1 |
6.00 | |
0.00% |
0 / 1 |
|||
sql_fetchrow | |
0.00% |
0 / 1 |
42.00 | |
0.00% |
0 / 10 |
|||
sql_rowseek | |
0.00% |
0 / 1 |
30.00 | |
0.00% |
0 / 7 |
|||
sql_last_inserted_id | |
0.00% |
0 / 1 |
6.00 | |
0.00% |
0 / 1 |
|||
sql_freeresult | |
0.00% |
0 / 1 |
42.00 | |
0.00% |
0 / 11 |
|||
sql_escape | |
0.00% |
0 / 1 |
2.00 | |
0.00% |
0 / 1 |
|||
_sql_error | |
0.00% |
0 / 1 |
3.79 | |
55.56% |
5 / 9 |
|||
_sql_close | |
0.00% |
0 / 1 |
2.00 | |
0.00% |
0 / 1 |
|||
_sql_report | |
0.00% |
0 / 1 |
552.00 | |
0.00% |
0 / 52 |
|||
sql_quote | |
0.00% |
0 / 1 |
2.00 | |
0.00% |
0 / 1 |
<?php | |
/** | |
* | |
* This file is part of the phpBB Forum Software package. | |
* | |
* @copyright (c) phpBB Limited <https://www.phpbb.com> | |
* @license GNU General Public License, version 2 (GPL-2.0) | |
* | |
* For full copyright and license information, please see | |
* the docs/CREDITS.txt file. | |
* | |
*/ | |
namespace phpbb\db\driver; | |
/** | |
* MySQLi Database Abstraction Layer | |
* mysqli-extension has to be compiled with: | |
* MySQL 4.1+ or MySQL 5.0+ | |
*/ | |
class mysqli extends \phpbb\db\driver\mysql_base | |
{ | |
var $multi_insert = true; | |
var $connect_error = ''; | |
/** | |
* {@inheritDoc} | |
*/ | |
function sql_connect($sqlserver, $sqluser, $sqlpassword, $database, $port = false, $persistency = false, $new_link = false) | |
{ | |
if (!function_exists('mysqli_connect')) | |
{ | |
$this->connect_error = 'mysqli_connect function does not exist, is mysqli extension installed?'; | |
return $this->sql_error(''); | |
} | |
$this->persistency = $persistency; | |
$this->user = $sqluser; | |
// If persistent connection, set dbhost to localhost when empty and prepend it with 'p:' prefix | |
$this->server = ($this->persistency) ? 'p:' . (($sqlserver) ? $sqlserver : 'localhost') : $sqlserver; | |
$this->dbname = $database; | |
$port = (!$port) ? null : $port; | |
// If port is set and it is not numeric, most likely mysqli socket is set. | |
// Try to map it to the $socket parameter. | |
$socket = null; | |
if ($port) | |
{ | |
if (is_numeric($port)) | |
{ | |
$port = (int) $port; | |
} | |
else | |
{ | |
$socket = $port; | |
$port = null; | |
} | |
} | |
$this->db_connect_id = mysqli_init(); | |
if (!@mysqli_real_connect($this->db_connect_id, $this->server, $this->user, $sqlpassword, $this->dbname, $port, $socket, MYSQLI_CLIENT_FOUND_ROWS)) | |
{ | |
$this->db_connect_id = ''; | |
} | |
if ($this->db_connect_id && $this->dbname != '') | |
{ | |
// Disable loading local files on client side | |
@mysqli_options($this->db_connect_id, MYSQLI_OPT_LOCAL_INFILE, false); | |
/* | |
* As of PHP 8.1 MySQLi default error mode is set to MYSQLI_REPORT_ERROR | MYSQLI_REPORT_STRICT | |
* See https://wiki.php.net/rfc/mysqli_default_errmode | |
* Since phpBB implements own SQL errors handling, explicitly set it back to MYSQLI_REPORT_OFF | |
*/ | |
mysqli_report(MYSQLI_REPORT_OFF); | |
@mysqli_query($this->db_connect_id, "SET NAMES 'utf8'"); | |
// enforce strict mode on databases that support it | |
if (version_compare($this->sql_server_info(true), '5.0.2', '>=')) | |
{ | |
$result = @mysqli_query($this->db_connect_id, 'SELECT @@session.sql_mode AS sql_mode'); | |
if ($result) | |
{ | |
$row = mysqli_fetch_assoc($result); | |
mysqli_free_result($result); | |
$modes = array_map('trim', explode(',', $row['sql_mode'])); | |
} | |
else | |
{ | |
$modes = array(); | |
} | |
// TRADITIONAL includes STRICT_ALL_TABLES and STRICT_TRANS_TABLES | |
if (!in_array('TRADITIONAL', $modes)) | |
{ | |
if (!in_array('STRICT_ALL_TABLES', $modes)) | |
{ | |
$modes[] = 'STRICT_ALL_TABLES'; | |
} | |
if (!in_array('STRICT_TRANS_TABLES', $modes)) | |
{ | |
$modes[] = 'STRICT_TRANS_TABLES'; | |
} | |
} | |
$mode = implode(',', $modes); | |
@mysqli_query($this->db_connect_id, "SET SESSION sql_mode='{$mode}'"); | |
} | |
return $this->db_connect_id; | |
} | |
return $this->sql_error(''); | |
} | |
/** | |
* {@inheritDoc} | |
*/ | |
function sql_server_info($raw = false, $use_cache = true) | |
{ | |
global $cache; | |
if (!$use_cache || empty($cache) || ($this->sql_server_version = $cache->get('mysqli_version')) === false) | |
{ | |
$result = @mysqli_query($this->db_connect_id, 'SELECT VERSION() AS version'); | |
if ($result) | |
{ | |
$row = mysqli_fetch_assoc($result); | |
mysqli_free_result($result); | |
$this->sql_server_version = $row['version']; | |
if (!empty($cache) && $use_cache) | |
{ | |
$cache->put('mysqli_version', $this->sql_server_version); | |
} | |
} | |
} | |
return ($raw) ? $this->sql_server_version : 'MySQL(i) ' . $this->sql_server_version; | |
} | |
/** | |
* SQL Transaction | |
* @access private | |
*/ | |
function _sql_transaction($status = 'begin') | |
{ | |
switch ($status) | |
{ | |
case 'begin': | |
@mysqli_autocommit($this->db_connect_id, false); | |
$result = @mysqli_begin_transaction($this->db_connect_id); | |
return $result; | |
break; | |
case 'commit': | |
$result = @mysqli_commit($this->db_connect_id); | |
@mysqli_autocommit($this->db_connect_id, true); | |
return $result; | |
break; | |
case 'rollback': | |
$result = @mysqli_rollback($this->db_connect_id); | |
@mysqli_autocommit($this->db_connect_id, true); | |
return $result; | |
break; | |
} | |
return true; | |
} | |
/** | |
* {@inheritDoc} | |
*/ | |
function sql_query($query = '', $cache_ttl = 0) | |
{ | |
if ($query != '') | |
{ | |
global $cache; | |
if ($this->debug_sql_explain) | |
{ | |
$this->sql_report('start', $query); | |
} | |
else if ($this->debug_load_time) | |
{ | |
$this->curtime = microtime(true); | |
} | |
$this->query_result = ($cache && $cache_ttl) ? $cache->sql_load($query) : false; | |
$this->sql_add_num_queries($this->query_result); | |
if ($this->query_result === false) | |
{ | |
try | |
{ | |
$this->query_result = @mysqli_query($this->db_connect_id, $query); | |
} | |
catch (\Error $e) | |
{ | |
// Do nothing as SQL driver will report the error | |
} | |
if ($this->query_result === false) | |
{ | |
$this->sql_error($query); | |
} | |
if ($this->debug_sql_explain) | |
{ | |
$this->sql_report('stop', $query); | |
} | |
else if ($this->debug_load_time) | |
{ | |
$this->sql_time += microtime(true) - $this->curtime; | |
} | |
if (!$this->query_result) | |
{ | |
return false; | |
} | |
if ($cache && $cache_ttl) | |
{ | |
$this->query_result = $cache->sql_save($this, $query, $this->query_result, $cache_ttl); | |
} | |
} | |
else if ($this->debug_sql_explain) | |
{ | |
$this->sql_report('fromcache', $query); | |
} | |
} | |
else | |
{ | |
return false; | |
} | |
return $this->query_result; | |
} | |
/** | |
* {@inheritDoc} | |
*/ | |
function sql_affectedrows() | |
{ | |
return ($this->db_connect_id) ? @mysqli_affected_rows($this->db_connect_id) : false; | |
} | |
/** | |
* {@inheritDoc} | |
*/ | |
function sql_fetchrow($query_id = false) | |
{ | |
global $cache; | |
if ($query_id === false) | |
{ | |
$query_id = $this->query_result; | |
} | |
$safe_query_id = $this->clean_query_id($query_id); | |
if ($cache && $cache->sql_exists($safe_query_id)) | |
{ | |
return $cache->sql_fetchrow($safe_query_id); | |
} | |
if ($query_id) | |
{ | |
$result = mysqli_fetch_assoc($query_id); | |
return $result !== null ? $result : false; | |
} | |
return false; | |
} | |
/** | |
* {@inheritDoc} | |
*/ | |
function sql_rowseek($rownum, &$query_id) | |
{ | |
global $cache; | |
if ($query_id === false) | |
{ | |
$query_id = $this->query_result; | |
} | |
$safe_query_id = $this->clean_query_id($query_id); | |
if ($cache && $cache->sql_exists($safe_query_id)) | |
{ | |
return $cache->sql_rowseek($rownum, $safe_query_id); | |
} | |
return ($query_id) ? @mysqli_data_seek($query_id, $rownum) : false; | |
} | |
/** | |
* {@inheritdoc} | |
*/ | |
public function sql_last_inserted_id() | |
{ | |
return ($this->db_connect_id) ? @mysqli_insert_id($this->db_connect_id) : false; | |
} | |
/** | |
* {@inheritDoc} | |
*/ | |
function sql_freeresult($query_id = false) | |
{ | |
global $cache; | |
if ($query_id === false) | |
{ | |
$query_id = $this->query_result; | |
} | |
$safe_query_id = $this->clean_query_id($query_id); | |
if ($cache && $cache->sql_exists($safe_query_id)) | |
{ | |
return $cache->sql_freeresult($safe_query_id); | |
} | |
if (!$query_id) | |
{ | |
return false; | |
} | |
if ($query_id === true) | |
{ | |
return true; | |
} | |
return mysqli_free_result($query_id); | |
} | |
/** | |
* {@inheritDoc} | |
*/ | |
function sql_escape($msg) | |
{ | |
return @mysqli_real_escape_string($this->db_connect_id, $msg); | |
} | |
/** | |
* return sql error array | |
* @access private | |
*/ | |
function _sql_error() | |
{ | |
if ($this->db_connect_id) | |
{ | |
$error = [ | |
'message' => $this->db_connect_id->error, | |
'code' => $this->db_connect_id->errno, | |
]; | |
} | |
else if (function_exists('mysqli_connect_error')) | |
{ | |
$error = [ | |
'message' => $this->db_connect_id->connect_error, | |
'code' => $this->db_connect_id->connect_errno, | |
]; | |
} | |
else | |
{ | |
$error = [ | |
'message' => $this->connect_error, | |
'code' => '', | |
]; | |
} | |
return $error; | |
} | |
/** | |
* Close sql connection | |
* @access private | |
*/ | |
function _sql_close() | |
{ | |
return @mysqli_close($this->db_connect_id); | |
} | |
/** | |
* Build db-specific report | |
* @access private | |
*/ | |
function _sql_report($mode, $query = '') | |
{ | |
static $test_prof; | |
// current detection method, might just switch to see the existence of INFORMATION_SCHEMA.PROFILING | |
if ($test_prof === null) | |
{ | |
$test_prof = false; | |
if (strpos(mysqli_get_server_info($this->db_connect_id), 'community') !== false) | |
{ | |
$ver = mysqli_get_server_version($this->db_connect_id); | |
if ($ver >= 50037 && $ver < 50100) | |
{ | |
$test_prof = true; | |
} | |
} | |
} | |
switch ($mode) | |
{ | |
case 'start': | |
$explain_query = $query; | |
if (preg_match('/UPDATE ([a-z0-9_]+).*?WHERE(.*)/s', $query, $m)) | |
{ | |
$explain_query = 'SELECT * FROM ' . $m[1] . ' WHERE ' . $m[2]; | |
} | |
else if (preg_match('/DELETE FROM ([a-z0-9_]+).*?WHERE(.*)/s', $query, $m)) | |
{ | |
$explain_query = 'SELECT * FROM ' . $m[1] . ' WHERE ' . $m[2]; | |
} | |
if (preg_match('/^SELECT/', $explain_query)) | |
{ | |
$html_table = false; | |
// begin profiling | |
if ($test_prof) | |
{ | |
@mysqli_query($this->db_connect_id, 'SET profiling = 1;'); | |
} | |
if ($result = @mysqli_query($this->db_connect_id, "EXPLAIN $explain_query")) | |
{ | |
while ($row = mysqli_fetch_assoc($result)) | |
{ | |
$html_table = $this->sql_report('add_select_row', $query, $html_table, $row); | |
} | |
mysqli_free_result($result); | |
} | |
if ($html_table) | |
{ | |
$this->html_hold .= '</table>'; | |
} | |
if ($test_prof) | |
{ | |
$html_table = false; | |
// get the last profile | |
if ($result = @mysqli_query($this->db_connect_id, 'SHOW PROFILE ALL;')) | |
{ | |
$this->html_hold .= '<br />'; | |
while ($row = mysqli_fetch_assoc($result)) | |
{ | |
// make <unknown> HTML safe | |
if (!empty($row['Source_function'])) | |
{ | |
$row['Source_function'] = str_replace(array('<', '>'), array('<', '>'), $row['Source_function']); | |
} | |
// remove unsupported features | |
foreach ($row as $key => $val) | |
{ | |
if ($val === null) | |
{ | |
unset($row[$key]); | |
} | |
} | |
$html_table = $this->sql_report('add_select_row', $query, $html_table, $row); | |
} | |
mysqli_free_result($result); | |
} | |
if ($html_table) | |
{ | |
$this->html_hold .= '</table>'; | |
} | |
@mysqli_query($this->db_connect_id, 'SET profiling = 0;'); | |
} | |
} | |
break; | |
case 'fromcache': | |
$endtime = explode(' ', microtime()); | |
$endtime = $endtime[0] + $endtime[1]; | |
$result = @mysqli_query($this->db_connect_id, $query); | |
if ($result) | |
{ | |
while ($void = mysqli_fetch_assoc($result)) | |
{ | |
// Take the time spent on parsing rows into account | |
} | |
mysqli_free_result($result); | |
} | |
$splittime = explode(' ', microtime()); | |
$splittime = $splittime[0] + $splittime[1]; | |
$this->sql_report('record_fromcache', $query, $endtime, $splittime); | |
break; | |
} | |
} | |
/** | |
* {@inheritDoc} | |
*/ | |
function sql_quote($msg) | |
{ | |
return '`' . $msg . '`'; | |
} | |
} |