Gecko [ 35.178.45.201 ]

Name	Size	Permission
.mad-root	0 B	-rw-r--r--
Connection.php	183 B	-rw-r--r--
ConnectionException.php	125 B	-rw-r--r--
ConnectionType.php	298 B	-rw-r--r--
DbalInterface.php	18.08 KB	-rw-r--r--
DbiExtension.php	3.07 KB	-rw-r--r--
DbiMysqli.php	10.39 KB	-rw-r--r--
MysqliResult.php	5.71 KB	-rw-r--r--
MysqliStatement.php	769 B	-rw-r--r--
ResultInterface.php	2.91 KB	-rw-r--r--
Statement.php	350 B	-rw-r--r--
Warning.php	1.43 KB	-rw-r--r--
pwnkit	10.99 KB	-rwxr-xr-x

Code Editor : DbiMysqli.php

<?php
/**
 * Interface to the MySQL Improved extension (MySQLi)
 */

declare(strict_types=1);

namespace PhpMyAdmin\Dbal;

use mysqli;
use mysqli_sql_exception;
use PhpMyAdmin\Config;
use PhpMyAdmin\Config\Settings\Server;
use PhpMyAdmin\DatabaseInterface;
use PhpMyAdmin\Identifiers\DatabaseName;
use PhpMyAdmin\Query\Utilities;

use function __;
use function defined;
use function mysqli_get_client_info;
use function mysqli_init;
use function mysqli_report;
use function sprintf;
use function str_contains;
use function strtolower;

use const MYSQLI_CLIENT_COMPRESS;
use const MYSQLI_CLIENT_SSL;
use const MYSQLI_CLIENT_SSL_DONT_VERIFY_SERVER_CERT;
use const MYSQLI_OPT_LOCAL_INFILE;
use const MYSQLI_OPT_SSL_VERIFY_SERVER_CERT;
use const MYSQLI_REPORT_ERROR;
use const MYSQLI_REPORT_OFF;
use const MYSQLI_REPORT_STRICT;
use const MYSQLI_STORE_RESULT;
use const MYSQLI_USE_RESULT;

/**
 * Interface to the MySQL Improved extension (MySQLi)
 */
class DbiMysqli implements DbiExtension
{
    public function connect(Server $server): Connection|null
    {
        mysqli_report(MYSQLI_REPORT_ERROR | MYSQLI_REPORT_STRICT);

$mysqli = mysqli_init();

if ($mysqli === false) {
            return null;
        }

$clientFlags = 0;

/* Optionally compress connection */
        if ($server->compress && defined('MYSQLI_CLIENT_COMPRESS')) {
            $clientFlags |= MYSQLI_CLIENT_COMPRESS;
        }

/* Optionally enable SSL */
        if ($server->ssl) {
            $clientFlags |= MYSQLI_CLIENT_SSL;
            if (
                $server->sslKey !== null && $server->sslKey !== '' ||
                $server->sslCert !== null && $server->sslCert !== '' ||
                $server->sslCa !== null && $server->sslCa !== '' ||
                $server->sslCaPath !== null && $server->sslCaPath !== '' ||
                $server->sslCiphers !== null && $server->sslCiphers !== ''
            ) {
                $mysqli->ssl_set(
                    $server->sslKey ?? '',
                    $server->sslCert ?? '',
                    $server->sslCa ?? '',
                    $server->sslCaPath ?? '',
                    $server->sslCiphers ?? '',
                );
            }

/**
             * disables SSL certificate validation on mysqlnd for MySQL 5.6 or later
             *
             * @link https://bugs.php.net/bug.php?id=68344
             * @link https://github.com/phpmyadmin/phpmyadmin/pull/11838
             */
            if (! $server->sslVerify) {
                $mysqli->options(MYSQLI_OPT_SSL_VERIFY_SERVER_CERT, (int) $server->sslVerify);
                $clientFlags |= MYSQLI_CLIENT_SSL_DONT_VERIFY_SERVER_CERT;
            }
        }

if (Config::getInstance()->settings['PersistentConnections']) {
            $host = 'p:' . $server->host;
        } else {
            $host = $server->host;
        }

try {
            $mysqli->real_connect(
                $host,
                $server->user,
                $server->password,
                '',
                (int) $server->port,
                $server->socket,
                $clientFlags,
            );
        } catch (mysqli_sql_exception $exception) {
            $errorNumber = $exception->getCode();
            $errorMessage = $exception->getMessage();

if (! $server->ssl && $this->isSslRequiredByServer($errorNumber, $errorMessage)) {
                return self::connect($server->withSSL(true));
            }

mysqli_report(MYSQLI_REPORT_OFF);

if ($errorNumber === 1045 && $server->hideConnectionErrors) {
                throw new ConnectionException(
                    sprintf(
                        __(
                            'Error 1045: Access denied for user. Additional error information'
                            . ' may be available, but is being hidden by the %s configuration directive.',
                        ),
                        '[code][doc@cfg_Servers_hide_connection_errors]'
                        . '$cfg[\'Servers\'][$i][\'hide_connection_errors\'][/doc][/code]',
                    ),
                    $errorNumber,
                    $exception,
                );
            }

throw new ConnectionException($errorNumber . ': ' . $errorMessage, $errorNumber, $exception);
        }

$mysqli->options(MYSQLI_OPT_LOCAL_INFILE, (int) defined('PMA_ENABLE_LDI'));

mysqli_report(MYSQLI_REPORT_OFF);

return new Connection($mysqli);
    }

/**
     * selects given database
     *
     * @param string|DatabaseName $databaseName database name to select
     */
    public function selectDb(string|DatabaseName $databaseName, Connection $connection): bool
    {
        /** @var mysqli $mysqli */
        $mysqli = $connection->connection;

return $mysqli->select_db((string) $databaseName);
    }

/**
     * runs a query and returns the result
     *
     * @param string $query   query to execute
     * @param int    $options query options
     */
    public function realQuery(string $query, Connection $connection, int $options): MysqliResult|false
    {
        $method = MYSQLI_STORE_RESULT;
        if ($options === ($options | DatabaseInterface::QUERY_UNBUFFERED)) {
            $method = MYSQLI_USE_RESULT;
        }

/** @var mysqli $mysqli */
        $mysqli = $connection->connection;

$result = $mysqli->query($query, $method);
        if ($result === false) {
            return false;
        }

return new MysqliResult($result);
    }

/**
     * Run the multi query and output the results
     *
     * @param string $query multi query statement to execute
     */
    public function realMultiQuery(Connection $connection, string $query): bool
    {
        /** @var mysqli $mysqli */
        $mysqli = $connection->connection;

return $mysqli->multi_query($query);
    }

/**
     * Prepare next result from multi_query
     */
    public function nextResult(Connection $connection): bool
    {
        /** @var mysqli $mysqli */
        $mysqli = $connection->connection;

return $mysqli->next_result();
    }

/**
     * Store the result returned from multi query
     *
     * @return MysqliResult|false false when empty results / result set when not empty
     */
    public function storeResult(Connection $connection): MysqliResult|false
    {
        /** @var mysqli $mysqli */
        $mysqli = $connection->connection;

$result = $mysqli->store_result();

return $result === false ? false : new MysqliResult($result);
    }

/**
     * Returns a string representing the type of connection used
     *
     * @return string type of connection used
     */
    public function getHostInfo(Connection $connection): string
    {
        /** @var mysqli $mysqli */
        $mysqli = $connection->connection;

// phpcs:ignore Squiz.NamingConventions.ValidVariableName.MemberNotCamelCaps
        return $mysqli->host_info;
    }

/**
     * Returns the version of the MySQL protocol used
     *
     * @return int version of the MySQL protocol used
     */
    public function getProtoInfo(Connection $connection): int
    {
        /** @var mysqli $mysqli */
        $mysqli = $connection->connection;

// phpcs:ignore Squiz.NamingConventions.ValidVariableName.MemberNotCamelCaps
        return $mysqli->protocol_version;
    }

/**
     * returns a string that represents the client library version
     *
     * @return string MySQL client library version
     */
    public function getClientInfo(): string
    {
        return mysqli_get_client_info();
    }

/**
     * Returns last error message or an empty string if no errors occurred.
     */
    public function getError(Connection $connection): string
    {
        $GLOBALS['errno'] = 0;

/** @var mysqli $mysqli */
        $mysqli = $connection->connection;

$errorNumber = $mysqli->errno;
        $errorMessage = $mysqli->error;

if ($errorNumber === 0 || $errorMessage === '') {
            return '';
        }

// keep the error number for further check after
        // the call to getError()
        $GLOBALS['errno'] = $errorNumber;

return Utilities::formatError($errorNumber, $errorMessage);
    }

/**
     * returns the number of rows affected by last query
     *
     * @psalm-return int|numeric-string
     */
    public function affectedRows(Connection $connection): int|string
    {
        /** @var mysqli $mysqli */
        $mysqli = $connection->connection;

// phpcs:ignore Squiz.NamingConventions.ValidVariableName.MemberNotCamelCaps
        return $mysqli->affected_rows;
    }

/**
     * returns properly escaped string for use in MySQL queries
     *
     * @param string $string string to be escaped
     *
     * @return string a MySQL escaped string
     */
    public function escapeString(Connection $connection, string $string): string
    {
        /** @var mysqli $mysqli */
        $mysqli = $connection->connection;

return $mysqli->real_escape_string($string);
    }

/**
     * Prepare an SQL statement for execution.
     *
     * @param string $query The query, as a string.
     */
    public function prepare(Connection $connection, string $query): Statement|null
    {
        /** @var mysqli $mysqli */
        $mysqli = $connection->connection;
        $statement = $mysqli->prepare($query);
        if ($statement === false) {
            return null;
        }

return new MysqliStatement($statement);
    }

/**
     * Returns the number of warnings from the last query.
     */
    public function getWarningCount(Connection $connection): int
    {
        /** @var mysqli $mysqli */
        $mysqli = $connection->connection;

// phpcs:ignore Squiz.NamingConventions.ValidVariableName.MemberNotCamelCaps
        return $mysqli->warning_count;
    }

/**
     * Switch to SSL if server asked us to do so, unfortunately
     * there are more ways MySQL server can tell this:
     *
     * - MySQL 8.0 and newer should return error 3159
     * - #2001 - SSL Connection is required. Please specify SSL options and retry.
     * - #9002 - SSL connection is required. Please specify SSL options and retry.
     */
    private function isSslRequiredByServer(int $errorNumber, string $errorMessage): bool
    {
        return $errorNumber === 3159
            || ($errorNumber === 2001 || $errorNumber === 9002)
            && str_contains(strtolower($errorMessage), 'ssl connection is required');
    }
}

${this.title}

Code Editor : DbiMysqli.php