File Manager

Hackfut Security File Manager

Current Path: /mnt/ceph/services/websiteos/phpmyadmin/phpMyAdmin-3.5.7-all-languages

mnt / ceph / services / websiteos / phpmyadmin / phpMyAdmin-3.5.7-all-languages /

📁 ..
📄 .htaccess(44 B)
📄 .travis.yml(139 B)
📄 ChangeLog(30.44 KB)
📄 Documentation.html(251.47 KB)
📄 Documentation.txt(175.88 KB)
📄 LICENSE(17.59 KB)
📄 README(2.05 KB)
📄 README.VENDOR(1.18 KB)
📄 RELEASE-DATE-3.5.7(29 B)
📄 browse_foreigners.php(11.1 KB)
📄 bs_disp_as_mime_type.php(1.27 KB)
📄 bs_play_media.php(2.01 KB)
📄 changelog.php(3.89 KB)
📄 chk_rel.php(363 B)
📄 config.inc.php(2.83 KB)
📄 config.sample.inc.php(3.82 KB)
📁 config_template
📄 db_create.php(4 KB)
📄 db_datadict.php(8.35 KB)
📄 db_events.php(773 B)
📄 db_export.php(2.64 KB)
📄 db_import.php(466 B)
📄 db_operations.php(21.85 KB)
📄 db_printview.php(6.91 KB)
📄 db_qbe.php(30.43 KB)
📄 db_routines.php(964 B)
📄 db_search.php(13.24 KB)
📄 db_sql.php(1.17 KB)
📄 db_structure.php(23.54 KB)
📄 db_tracking.php(7.84 KB)
📄 db_triggers.php(728 B)
📄 docs.css(2.76 KB)
📄 enum_editor.php(5.11 KB)
📁 examples
📄 export.php(27.87 KB)
📄 favicon.ico(18.46 KB)
📄 file_echo.php(2.03 KB)
📄 gis_data_editor.php(16.79 KB)
📄 htaccess.php(2.24 KB)
📄 import.php(17.47 KB)
📄 import_status.php(953 B)
📄 index.php(5.67 KB)
📁 js
📁 libraries
📄 license.php(730 B)
📁 locale
📄 main.php(16.67 KB)
📄 navigation.php(25.14 KB)
📄 phpinfo.php(349 B)
📄 phpmyadmin.css.php(1.08 KB)
📄 phpunit.xml.nocoverage(1.78 KB)
📄 pmd_display_field.php(1.74 KB)
📄 pmd_general.php(34.7 KB)
📄 pmd_pdf.php(4.16 KB)
📄 pmd_relation_new.php(3.85 KB)
📄 pmd_relation_upd.php(2.11 KB)
📄 pmd_save_pos.php(2.03 KB)
📄 prefs_forms.php(2.54 KB)
📄 prefs_manage.php(14.44 KB)
📄 print.css(1.09 KB)
📄 querywindow.php(6.3 KB)
📄 robots.txt(26 B)
📄 schema_edit.php(4.06 KB)
📄 schema_export.php(1.21 KB)
📄 server_binlog.php(6.06 KB)
📄 server_collations.php(2.54 KB)
📄 server_databases.php(9.87 KB)
📄 server_engines.php(4.88 KB)
📄 server_export.php(2.03 KB)
📄 server_import.php(477 B)
📄 server_plugins.php(7.04 KB)
📄 server_privileges.php(107.3 KB)
📄 server_replication.php(16.67 KB)
📄 server_sql.php(743 B)
📄 server_status.php(77.78 KB)
📄 server_synchronize.php(55.94 KB)
📄 server_variables.php(5.67 KB)
📁 setup
📄 show_config_errors.php(574 B)
📄 sql.php(37.2 KB)
📄 tbl_addfield.php(8.04 KB)
📄 tbl_alter.php(6.92 KB)
📄 tbl_change.php(48.74 KB)
📄 tbl_chart.php(7.66 KB)
📄 tbl_create.php(13.93 KB)
📄 tbl_export.php(2.53 KB)
📄 tbl_get_field.php(1.12 KB)
📄 tbl_gis_visualization.php(7.29 KB)
📄 tbl_import.php(624 B)
📄 tbl_indexes.php(9.46 KB)
📄 tbl_move_copy.php(2.51 KB)
📄 tbl_operations.php(31.95 KB)
📄 tbl_printview.php(14.04 KB)
📄 tbl_relation.php(23.14 KB)
📄 tbl_replace.php(23.06 KB)
📄 tbl_row_action.php(4.57 KB)
📄 tbl_select.php(10.57 KB)
📄 tbl_sql.php(1.11 KB)
📄 tbl_structure.php(39.23 KB)
📄 tbl_tracking.php(28.56 KB)
📄 tbl_triggers.php(144 B)
📄 tbl_zoom_select.php(16.86 KB)
📁 themes
📄 themes.php(822 B)
📄 transformation_overview.php(1.52 KB)
📄 transformation_wrapper.php(3.29 KB)
📄 url.php(398 B)
📄 user_password.php(4.32 KB)
📄 version_check.php(358 B)
📄 view_create.php(5.23 KB)
📄 view_operations.php(2.74 KB)
📄 webapp.php(1.06 KB)

Editing: db_search.php

<?php
/* vim: set expandtab sw=4 ts=4 sts=4: */
/**
 * searchs the entire database
 *
 * @todo    make use of UNION when searching multiple tables
 * @todo    display executed query, optional?
 * @package PhpMyAdmin
 */

/**
 *
 */
require_once './libraries/common.inc.php';

$GLOBALS['js_include'][] = 'db_search.js';
$GLOBALS['js_include'][] = 'sql.js';
$GLOBALS['js_include'][] = 'makegrid.js';
$GLOBALS['js_include'][] = 'jquery/timepicker.js';

/**
 * Gets some core libraries and send headers
 */
require './libraries/db_common.inc.php';

/**
 * init
 */
// If config variable $GLOBALS['cfg']['Usedbsearch'] is on false : exit.
if (! $GLOBALS['cfg']['UseDbSearch']) {
    PMA_mysqlDie(__('Access denied'), '', false, $err_url);
} // end if
$url_query .= '&amp;goto=db_search.php';
$url_params['goto'] = 'db_search.php';

/**
 * @global array list of tables from the current database
 * but do not clash with $tables coming from db_info.inc.php
 */
$tables_names_only = PMA_DBI_get_tables($GLOBALS['db']);

$search_options = array(
    '1' => __('at least one of the words'),
    '2' => __('all words'),
    '3' => __('the exact phrase'),
    '4' => __('as regular expression'),
);

if (empty($_REQUEST['search_option']) || ! is_string($_REQUEST['search_option'])
 || ! array_key_exists($_REQUEST['search_option'], $search_options)) {
    $search_option = 1;
    unset($_REQUEST['submit_search']);
} else {
    $search_option = (int) $_REQUEST['search_option'];
    $option_str = $search_options[$_REQUEST['search_option']];
}

if (empty($_REQUEST['search_str']) || ! is_string($_REQUEST['search_str'])) {
    unset($_REQUEST['submit_search']);
    $searched = '';
} else {
    $searched = htmlspecialchars($_REQUEST['search_str']);
    // For "as regular expression" (search option 4), we should not treat
    // this as an expression that contains a LIKE (second parameter of
    // PMA_sqlAddSlashes()).
    //
    // Usage example: If user is seaching for a literal $ in a regexp search,
    // he should enter \$ as the value.
    $search_str = PMA_sqlAddSlashes($_REQUEST['search_str'], ($search_option == 4 ? false : true));
}

$tables_selected = array();
if (empty($_REQUEST['table_select']) || ! is_array($_REQUEST['table_select'])) {
    unset($_REQUEST['submit_search']);
} elseif (! isset($_REQUEST['selectall']) && ! isset($_REQUEST['unselectall'])) {
    $tables_selected = array_intersect($_REQUEST['table_select'], $tables_names_only);
}

if (isset($_REQUEST['selectall'])) {
    $tables_selected = $tables_names_only;
} elseif (isset($_REQUEST['unselectall'])) {
    $tables_selected = array();
}

if (empty($_REQUEST['field_str']) || ! is_string($_REQUEST['field_str'])) {
    unset($field_str);
} else {
    $field_str = PMA_sqlAddSlashes($_REQUEST['field_str'], true);
}

/**
 * Displays top links if we are not in an Ajax request
 */
$sub_part = '';

if ( $GLOBALS['is_ajax_request'] != true) {
    include './libraries/db_info.inc.php';
    echo '<div id="searchresults">';
}

/**
 * 1. Main search form has been submitted
 */
if (isset($_REQUEST['submit_search'])) {

/**
     * Builds the SQL search query
     *
     * @todo    can we make use of fulltextsearch IN BOOLEAN MODE for this?
     * PMA_backquote
     * PMA_DBI_free_result
     * PMA_DBI_fetch_assoc
     * $GLOBALS['db']
     * explode
     * count
     * strlen
     * @param string   the table name
     * @param string   restrict the search to this field
     * @param string   the string to search
     * @param integer  type of search (1 -> 1 word at least, 2 -> all words,
     *                                   3 -> exact string, 4 -> regexp)
     *
     * @return  array    3 SQL querys (for count, display and delete results)
     */
    function PMA_getSearchSqls($table, $field, $search_str, $search_option)
    {
        // Statement types
        $sqlstr_select = 'SELECT';
        $sqlstr_delete = 'DELETE';

// Fields to select
        $tblfields = PMA_DBI_get_columns($GLOBALS['db'], $table);

// Table to use
        $sqlstr_from = ' FROM ' . PMA_backquote($GLOBALS['db']) . '.' . PMA_backquote($table);

$search_words    = (($search_option > 2) ? array($search_str) : explode(' ', $search_str));

$like_or_regex   = (($search_option == 4) ? 'REGEXP' : 'LIKE');
        $automatic_wildcard   = (($search_option < 3) ? '%' : '');

$fieldslikevalues = array();
        foreach ($search_words as $search_word) {
            // Eliminates empty values
            if (strlen($search_word) === 0) {
                continue;
            }

$thefieldlikevalue = array();
            foreach ($tblfields as $tblfield) {
                if (! isset($field) || strlen($field) == 0 || $tblfield['Field'] == $field) {
                    // Drizzle has no CONVERT and all text columns are UTF-8
                    if (PMA_DRIZZLE) {
                        $thefieldlikevalue[] = PMA_backquote($tblfield['Field'])
                                            . ' ' . $like_or_regex . ' '
                                            . "'" . $automatic_wildcard
                                            . $search_word
                                            . $automatic_wildcard . "'";
                    } else {
                        $thefieldlikevalue[] = 'CONVERT(' . PMA_backquote($tblfield['Field']) . ' USING utf8)'
                                            . ' ' . $like_or_regex . ' '
                                            . "'" . $automatic_wildcard
                                            . $search_word
                                            . $automatic_wildcard . "'";
                    }
                }
            } // end for

if (count($thefieldlikevalue) > 0) {
                $fieldslikevalues[]      = implode(' OR ', $thefieldlikevalue);
            }
        } // end for

$implode_str  = ($search_option == 1 ? ' OR ' : ' AND ');
        if ( empty($fieldslikevalues)) {
            // this could happen when the "inside field" does not exist
            // in any selected tables
            $sqlstr_where = ' WHERE FALSE';
        } else {
            $sqlstr_where = ' WHERE (' . implode(') ' . $implode_str . ' (', $fieldslikevalues) . ')';
        }
        unset($fieldslikevalues);

// Builds complete queries
        $sql['select_fields'] = $sqlstr_select . ' * ' . $sqlstr_from . $sqlstr_where;
        // here, I think we need to still use the COUNT clause, even for
        // VIEWs, anyway we have a WHERE clause that should limit results
        $sql['select_count']  = $sqlstr_select . ' COUNT(*) AS `count`' . $sqlstr_from . $sqlstr_where;
        $sql['delete']        = $sqlstr_delete . $sqlstr_from . $sqlstr_where;

return $sql;
    } // end of the "PMA_getSearchSqls()" function

/**
     * Displays the results
     */
    $this_url_params = array(
        'db'    => $GLOBALS['db'],
        'goto'  => 'db_sql.php',
        'pos'   => 0,
        'is_js_confirmed' => 0,
    );

// Displays search string
    echo '<br />' . "\n"
        .'<table class="data">' . "\n"
        .'<caption class="tblHeaders">' . "\n"
        .sprintf(__('Search results for "<i>%s</i>" %s:'),
            $searched, $option_str) . "\n"
        .'</caption>' . "\n";

$num_search_result_total = 0;
    $odd_row = true;

foreach ($tables_selected as $each_table) {
        // Gets the SQL statements
        $newsearchsqls = PMA_getSearchSqls($each_table, (! empty($field_str) ? $field_str : ''), $search_str, $search_option);

// Executes the "COUNT" statement
        $res_cnt = PMA_DBI_fetch_value($newsearchsqls['select_count']);
        $num_search_result_total += $res_cnt;

$sql_query .= $newsearchsqls['select_count'];

echo '<tr class="noclick ' . ($odd_row ? 'odd' : 'even') . '">'
            .'<td>' . sprintf(_ngettext('%s match inside table <i>%s</i>', '%s matches inside table <i>%s</i>', $res_cnt), $res_cnt,
                htmlspecialchars($each_table)) . "</td>\n";

if ($res_cnt > 0) {
            $this_url_params['sql_query'] = $newsearchsqls['select_fields'];
             $browse_result_path = 'sql.php' . PMA_generate_common_url($this_url_params);
             ?>
            <td> <a name="browse_search" href="<?php echo $browse_result_path; ?>" onclick="loadResult('<?php echo $browse_result_path ?> ',' <?php echo  $each_table?> ' , '<?php echo PMA_generate_common_url($GLOBALS['db'], $each_table)?>','<?php echo ($GLOBALS['cfg']['AjaxEnable']); ?>');return false;" ><?php echo __('Browse') ?></a>   </td>
            <?php
            $this_url_params['sql_query'] = $newsearchsqls['delete'];
            $delete_result_path = 'sql.php' . PMA_generate_common_url($this_url_params);
            ?>
            <td> <a name="delete_search" href="<?php echo $delete_result_path; ?>" onclick="deleteResult('<?php echo $delete_result_path ?>' , ' <?php printf(__('Delete the matches for the %s table?'), htmlspecialchars($each_table)); ?>','<?php echo ($GLOBALS['cfg']['AjaxEnable']); ?>');return false;" ><?php echo __('Delete') ?></a>   </td>
            <?php
         } else {
            echo '<td>&nbsp;</td>' . "\n"
                .'<td>&nbsp;</td>' . "\n";
        }// end if else
        $odd_row = ! $odd_row;
        echo '</tr>' . "\n";
    } // end for

echo '</table>' . "\n";

if (count($tables_selected) > 1) {
        echo '<p>' . sprintf(_ngettext('<b>Total:</b> <i>%s</i> match', '<b>Total:</b> <i>%s</i> matches', $num_search_result_total),
            $num_search_result_total) . '</p>' . "\n";
    }
} // end 1.

/**
 * If we are in an Ajax request, we need to exit after displaying all the HTML
 */
if ($GLOBALS['is_ajax_request'] == true) {
    exit;
} else {
    echo '</div>';//end searchresults div
}

/**
 * 2. Displays the main search form
 */
?>
<a name="db_search"></a>
<form id="db_search_form"<?php echo ($GLOBALS['cfg']['AjaxEnable'] ? ' class="ajax"' : ''); ?> method="post" action="db_search.php" name="db_search">
<?php echo PMA_generate_common_hidden_inputs($GLOBALS['db']); ?>
<fieldset>
    <legend><?php echo __('Search in database'); ?></legend>

<table class="formlayout">
    <tr><td><?php echo __('Words or values to search for (wildcard: "%"):'); ?></td>
        <td><input type="text" name="search_str" size="60"
                value="<?php echo $searched; ?>" /></td>
    </tr>
    <tr><td align="right" valign="top">
            <?php echo __('Find:'); ?></td>
            <td><?php

$choices = array(
    '1' => __('at least one of the words') . PMA_showHint(__('Words are separated by a space character (" ").')),
    '2' => __('all words') . PMA_showHint(__('Words are separated by a space character (" ").')),
    '3' => __('the exact phrase'),
    '4' => __('as regular expression') . ' ' . PMA_showMySQLDocu('Regexp', 'Regexp')
);
// 4th parameter set to true to add line breaks
// 5th parameter set to false to avoid htmlspecialchars() escaping in the label
//  since we have some HTML in some labels
PMA_display_html_radio('search_option', $choices, $search_option, true, false);
unset($choices);
            ?>
            </td>
    </tr>
    <tr><td align="right" valign="top">
            <?php echo __('Inside tables:'); ?></td>
        <td rowspan="2">
<?php
echo '            <select name="table_select[]" size="6" multiple="multiple">' . "\n";
foreach ($tables_names_only as $each_table) {
    if (in_array($each_table, $tables_selected)) {
        $is_selected = ' selected="selected"';
    } else {
        $is_selected = '';
    }

echo '                <option value="' . htmlspecialchars($each_table) . '"'
        . $is_selected . '>'
        . str_replace(' ', '&nbsp;', htmlspecialchars($each_table)) . '</option>' . "\n";
} // end while

echo '            </select>' . "\n";
$alter_select
    = '<a href="db_search.php' . PMA_generate_common_url(array_merge($url_params, array('selectall' => 1))) . '#db_search"'
    . ' onclick="setSelectOptions(\'db_search\', \'table_select[]\', true); return false;">' . __('Select All') . '</a>'
    . '&nbsp;/&nbsp;'
    . '<a href="db_search.php' . PMA_generate_common_url(array_merge($url_params, array('unselectall' => 1))) . '#db_search"'
    . ' onclick="setSelectOptions(\'db_search\', \'table_select[]\', false); return false;">' . __('Unselect All') . '</a>';
?>
        </td>
    </tr>
    <tr><td align="right" valign="bottom">
            <?php echo $alter_select; ?></td>
    </tr>
    <tr><td align="right">
            <?php echo __('Inside column:'); ?></td>
        <td><input type="text" name="field_str" size="60"
                value="<?php echo ! empty($field_str) ? htmlspecialchars($field_str) : ''; ?>" /></td>
    </tr>
    </table>
</fieldset>
<fieldset class="tblFooters">
    <input type="submit" name="submit_search" value="<?php echo __('Go'); ?>"
        id="buttonGo" />
</fieldset>
</form>

<div id='table-info'>
<a class="item" id="table-link" ></a>
</div>
<div id="browse-results">

</div>
<br class="clearfloat" />
<div id="sqlqueryform">

</div>

<a id="togglequerybox"></a>

<?php
/**
 * Displays the footer
 */
require './libraries/footer.inc.php';
?>

Hackfut Security File Manager

Editing: db_search.php

Upload File

Create Folder