Code Coverage
 
Classes and Traits
Functions and Methods
Lines
Total
0.00% covered (danger)
0.00%
0 / 1
0.00% covered (danger)
0.00%
0 / 14
CRAP
4.49% covered (danger)
4.49%
8 / 178
mysqli
0.00% covered (danger)
0.00%
0 / 1
0.00% covered (danger)
0.00%
0 / 14
7465.31
4.49% covered (danger)
4.49%
8 / 178
 sql_connect
0.00% covered (danger)
0.00%
0 / 1
189.59
8.11% covered (danger)
8.11%
3 / 37
 sql_server_info
0.00% covered (danger)
0.00%
0 / 1
72.00
0.00% covered (danger)
0.00%
0 / 10
 _sql_transaction
0.00% covered (danger)
0.00%
0 / 1
20.00
0.00% covered (danger)
0.00%
0 / 12
 sql_query
0.00% covered (danger)
0.00%
0 / 1
240.00
0.00% covered (danger)
0.00%
0 / 25
 sql_affectedrows
0.00% covered (danger)
0.00%
0 / 1
6.00
0.00% covered (danger)
0.00%
0 / 1
 sql_fetchrow
0.00% covered (danger)
0.00%
0 / 1
42.00
0.00% covered (danger)
0.00%
0 / 10
 sql_rowseek
0.00% covered (danger)
0.00%
0 / 1
30.00
0.00% covered (danger)
0.00%
0 / 7
 sql_last_inserted_id
0.00% covered (danger)
0.00%
0 / 1
6.00
0.00% covered (danger)
0.00%
0 / 1
 sql_freeresult
0.00% covered (danger)
0.00%
0 / 1
42.00
0.00% covered (danger)
0.00%
0 / 11
 sql_escape
0.00% covered (danger)
0.00%
0 / 1
2.00
0.00% covered (danger)
0.00%
0 / 1
 _sql_error
0.00% covered (danger)
0.00%
0 / 1
3.79
55.56% covered (warning)
55.56%
5 / 9
 _sql_close
0.00% covered (danger)
0.00%
0 / 1
2.00
0.00% covered (danger)
0.00%
0 / 1
 _sql_report
0.00% covered (danger)
0.00%
0 / 1
552.00
0.00% covered (danger)
0.00%
0 / 52
 sql_quote
0.00% covered (danger)
0.00%
0 / 1
2.00
0.00% covered (danger)
0.00%
0 / 1
<?php
/**
*
* This file is part of the phpBB Forum Software package.
*
* @copyright (c) phpBB Limited <https://www.phpbb.com>
* @license GNU General Public License, version 2 (GPL-2.0)
*
* For full copyright and license information, please see
* the docs/CREDITS.txt file.
*
*/
namespace phpbb\db\driver;
/**
* MySQLi Database Abstraction Layer
* mysqli-extension has to be compiled with:
* MySQL 4.1+ or MySQL 5.0+
*/
class mysqli extends \phpbb\db\driver\mysql_base
{
    var $multi_insert = true;
    var $connect_error = '';
    /**
    * {@inheritDoc}
    */
    function sql_connect($sqlserver, $sqluser, $sqlpassword, $database, $port = false, $persistency = false, $new_link = false)
    {
        if (!function_exists('mysqli_connect'))
        {
            $this->connect_error = 'mysqli_connect function does not exist, is mysqli extension installed?';
            return $this->sql_error('');
        }
        $this->persistency = $persistency;
        $this->user = $sqluser;
        // If persistent connection, set dbhost to localhost when empty and prepend it with 'p:' prefix
        $this->server = ($this->persistency) ? 'p:' . (($sqlserver) ? $sqlserver : 'localhost') : $sqlserver;
        $this->dbname = $database;
        $port = (!$port) ? null : $port;
        // If port is set and it is not numeric, most likely mysqli socket is set.
        // Try to map it to the $socket parameter.
        $socket = null;
        if ($port)
        {
            if (is_numeric($port))
            {
                $port = (int) $port;
            }
            else
            {
                $socket = $port;
                $port = null;
            }
        }
        $this->db_connect_id = mysqli_init();
        if (!@mysqli_real_connect($this->db_connect_id, $this->server, $this->user, $sqlpassword, $this->dbname, $port, $socket, MYSQLI_CLIENT_FOUND_ROWS))
        {
            $this->db_connect_id = '';
        }
        if ($this->db_connect_id && $this->dbname != '')
        {
            // Disable loading local files on client side
            @mysqli_options($this->db_connect_id, MYSQLI_OPT_LOCAL_INFILE, false);
            /*
             * As of PHP 8.1 MySQLi default error mode is set to MYSQLI_REPORT_ERROR | MYSQLI_REPORT_STRICT
             * See https://wiki.php.net/rfc/mysqli_default_errmode
             * Since phpBB implements own SQL errors handling, explicitly set it back to MYSQLI_REPORT_OFF
             */
            mysqli_report(MYSQLI_REPORT_OFF);
            @mysqli_query($this->db_connect_id, "SET NAMES 'utf8'");
            // enforce strict mode on databases that support it
            if (version_compare($this->sql_server_info(true), '5.0.2', '>='))
            {
                $result = @mysqli_query($this->db_connect_id, 'SELECT @@session.sql_mode AS sql_mode');
                if ($result)
                {
                    $row = mysqli_fetch_assoc($result);
                    mysqli_free_result($result);
                    $modes = array_map('trim', explode(',', $row['sql_mode']));
                }
                else
                {
                    $modes = array();
                }
                // TRADITIONAL includes STRICT_ALL_TABLES and STRICT_TRANS_TABLES
                if (!in_array('TRADITIONAL', $modes))
                {
                    if (!in_array('STRICT_ALL_TABLES', $modes))
                    {
                        $modes[] = 'STRICT_ALL_TABLES';
                    }
                    if (!in_array('STRICT_TRANS_TABLES', $modes))
                    {
                        $modes[] = 'STRICT_TRANS_TABLES';
                    }
                }
                $mode = implode(',', $modes);
                @mysqli_query($this->db_connect_id, "SET SESSION sql_mode='{$mode}'");
            }
            return $this->db_connect_id;
        }
        return $this->sql_error('');
    }
    /**
    * {@inheritDoc}
    */
    function sql_server_info($raw = false, $use_cache = true)
    {
        global $cache;
        if (!$use_cache || empty($cache) || ($this->sql_server_version = $cache->get('mysqli_version')) === false)
        {
            $result = @mysqli_query($this->db_connect_id, 'SELECT VERSION() AS version');
            if ($result)
            {
                $row = mysqli_fetch_assoc($result);
                mysqli_free_result($result);
                $this->sql_server_version = $row['version'];
                if (!empty($cache) && $use_cache)
                {
                    $cache->put('mysqli_version', $this->sql_server_version);
                }
            }
        }
        return ($raw) ? $this->sql_server_version : 'MySQL(i) ' . $this->sql_server_version;
    }
    /**
    * SQL Transaction
    * @access private
    */
    function _sql_transaction($status = 'begin')
    {
        switch ($status)
        {
            case 'begin':
                return @mysqli_autocommit($this->db_connect_id, false);
            break;
            case 'commit':
                $result = @mysqli_commit($this->db_connect_id);
                @mysqli_autocommit($this->db_connect_id, true);
                return $result;
            break;
            case 'rollback':
                $result = @mysqli_rollback($this->db_connect_id);
                @mysqli_autocommit($this->db_connect_id, true);
                return $result;
            break;
        }
        return true;
    }
    /**
    * {@inheritDoc}
    */
    function sql_query($query = '', $cache_ttl = 0)
    {
        if ($query != '')
        {
            global $cache;
            if ($this->debug_sql_explain)
            {
                $this->sql_report('start', $query);
            }
            else if ($this->debug_load_time)
            {
                $this->curtime = microtime(true);
            }
            $this->query_result = ($cache && $cache_ttl) ? $cache->sql_load($query) : false;
            $this->sql_add_num_queries($this->query_result);
            if ($this->query_result === false)
            {
                try
                {
                    $this->query_result = @mysqli_query($this->db_connect_id, $query);
                }
                catch (\Error $e)
                {
                    // Do nothing as SQL driver will report the error
                }
                if ($this->query_result === false)
                {
                    $this->sql_error($query);
                }
                if ($this->debug_sql_explain)
                {
                    $this->sql_report('stop', $query);
                }
                else if ($this->debug_load_time)
                {
                    $this->sql_time += microtime(true) - $this->curtime;
                }
                if (!$this->query_result)
                {
                    return false;
                }
                if ($cache && $cache_ttl)
                {
                    $this->query_result = $cache->sql_save($this, $query, $this->query_result, $cache_ttl);
                }
            }
            else if ($this->debug_sql_explain)
            {
                $this->sql_report('fromcache', $query);
            }
        }
        else
        {
            return false;
        }
        return $this->query_result;
    }
    /**
    * {@inheritDoc}
    */
    function sql_affectedrows()
    {
        return ($this->db_connect_id) ? @mysqli_affected_rows($this->db_connect_id) : false;
    }
    /**
    * {@inheritDoc}
    */
    function sql_fetchrow($query_id = false)
    {
        global $cache;
        if ($query_id === false)
        {
            $query_id = $this->query_result;
        }
        $safe_query_id = $this->clean_query_id($query_id);
        if ($cache && $cache->sql_exists($safe_query_id))
        {
            return $cache->sql_fetchrow($safe_query_id);
        }
        if ($query_id)
        {
            $result = mysqli_fetch_assoc($query_id);
            return $result !== null ? $result : false;
        }
        return false;
    }
    /**
    * {@inheritDoc}
    */
    function sql_rowseek($rownum, &$query_id)
    {
        global $cache;
        if ($query_id === false)
        {
            $query_id = $this->query_result;
        }
        $safe_query_id = $this->clean_query_id($query_id);
        if ($cache && $cache->sql_exists($safe_query_id))
        {
            return $cache->sql_rowseek($rownum, $safe_query_id);
        }
        return ($query_id) ? @mysqli_data_seek($query_id, $rownum) : false;
    }
    /**
     * {@inheritdoc}
     */
    public function sql_last_inserted_id()
    {
        return ($this->db_connect_id) ? @mysqli_insert_id($this->db_connect_id) : false;
    }
    /**
    * {@inheritDoc}
    */
    function sql_freeresult($query_id = false)
    {
        global $cache;
        if ($query_id === false)
        {
            $query_id = $this->query_result;
        }
        $safe_query_id = $this->clean_query_id($query_id);
        if ($cache && $cache->sql_exists($safe_query_id))
        {
            return $cache->sql_freeresult($safe_query_id);
        }
        if (!$query_id)
        {
            return false;
        }
        if ($query_id === true)
        {
            return true;
        }
        return mysqli_free_result($query_id);
    }
    /**
    * {@inheritDoc}
    */
    function sql_escape($msg)
    {
        return @mysqli_real_escape_string($this->db_connect_id, $msg);
    }
    /**
    * return sql error array
    * @access private
    */
    function _sql_error()
    {
        if ($this->db_connect_id)
        {
            $error = [
                'message'    => $this->db_connect_id->error,
                'code'        => $this->db_connect_id->errno,
            ];
        }
        else if (function_exists('mysqli_connect_error'))
        {
            $error = [
                'message'    => $this->db_connect_id->connect_error,
                'code'        => $this->db_connect_id->connect_errno,
            ];
        }
        else
        {
            $error = [
                'message'    => $this->connect_error,
                'code'        => '',
            ];
        }
        return $error;
    }
    /**
    * Close sql connection
    * @access private
    */
    function _sql_close()
    {
        return @mysqli_close($this->db_connect_id);
    }
    /**
    * Build db-specific report
    * @access private
    */
    function _sql_report($mode, $query = '')
    {
        static $test_prof;
        // current detection method, might just switch to see the existence of INFORMATION_SCHEMA.PROFILING
        if ($test_prof === null)
        {
            $test_prof = false;
            if (strpos(mysqli_get_server_info($this->db_connect_id), 'community') !== false)
            {
                $ver = mysqli_get_server_version($this->db_connect_id);
                if ($ver >= 50037 && $ver < 50100)
                {
                    $test_prof = true;
                }
            }
        }
        switch ($mode)
        {
            case 'start':
                $explain_query = $query;
                if (preg_match('/UPDATE ([a-z0-9_]+).*?WHERE(.*)/s', $query, $m))
                {
                    $explain_query = 'SELECT * FROM ' . $m[1] . ' WHERE ' . $m[2];
                }
                else if (preg_match('/DELETE FROM ([a-z0-9_]+).*?WHERE(.*)/s', $query, $m))
                {
                    $explain_query = 'SELECT * FROM ' . $m[1] . ' WHERE ' . $m[2];
                }
                if (preg_match('/^SELECT/', $explain_query))
                {
                    $html_table = false;
                    // begin profiling
                    if ($test_prof)
                    {
                        @mysqli_query($this->db_connect_id, 'SET profiling = 1;');
                    }
                    if ($result = @mysqli_query($this->db_connect_id, "EXPLAIN $explain_query"))
                    {
                        while ($row = mysqli_fetch_assoc($result))
                        {
                            $html_table = $this->sql_report('add_select_row', $query, $html_table, $row);
                        }
                        mysqli_free_result($result);
                    }
                    if ($html_table)
                    {
                        $this->html_hold .= '</table>';
                    }
                    if ($test_prof)
                    {
                        $html_table = false;
                        // get the last profile
                        if ($result = @mysqli_query($this->db_connect_id, 'SHOW PROFILE ALL;'))
                        {
                            $this->html_hold .= '<br />';
                            while ($row = mysqli_fetch_assoc($result))
                            {
                                // make <unknown> HTML safe
                                if (!empty($row['Source_function']))
                                {
                                    $row['Source_function'] = str_replace(array('<', '>'), array('&lt;', '&gt;'), $row['Source_function']);
                                }
                                // remove unsupported features
                                foreach ($row as $key => $val)
                                {
                                    if ($val === null)
                                    {
                                        unset($row[$key]);
                                    }
                                }
                                $html_table = $this->sql_report('add_select_row', $query, $html_table, $row);
                            }
                            mysqli_free_result($result);
                        }
                        if ($html_table)
                        {
                            $this->html_hold .= '</table>';
                        }
                        @mysqli_query($this->db_connect_id, 'SET profiling = 0;');
                    }
                }
            break;
            case 'fromcache':
                $endtime = explode(' ', microtime());
                $endtime = $endtime[0] + $endtime[1];
                $result = @mysqli_query($this->db_connect_id, $query);
                if ($result)
                {
                    while ($void = mysqli_fetch_assoc($result))
                    {
                        // Take the time spent on parsing rows into account
                    }
                    mysqli_free_result($result);
                }
                $splittime = explode(' ', microtime());
                $splittime = $splittime[0] + $splittime[1];
                $this->sql_report('record_fromcache', $query, $endtime, $splittime);
            break;
        }
    }
    /**
    * {@inheritDoc}
    */
    function sql_quote($msg)
    {
        return '`' . $msg . '`';
    }
}