File Manager

Hackfut Security File Manager

Current Path: /mnt/ceph/services/websiteos/phpmyadmin/phpMyAdmin-3.5.7-all-languages

mnt / ceph / services / websiteos / phpmyadmin / phpMyAdmin-3.5.7-all-languages /

📁 ..
📄 .htaccess(44 B)
📄 .travis.yml(139 B)
📄 ChangeLog(30.44 KB)
📄 Documentation.html(251.47 KB)
📄 Documentation.txt(175.88 KB)
📄 LICENSE(17.59 KB)
📄 README(2.05 KB)
📄 README.VENDOR(1.18 KB)
📄 RELEASE-DATE-3.5.7(29 B)
📄 browse_foreigners.php(11.1 KB)
📄 bs_disp_as_mime_type.php(1.27 KB)
📄 bs_play_media.php(2.01 KB)
📄 changelog.php(3.89 KB)
📄 chk_rel.php(363 B)
📄 config.inc.php(2.83 KB)
📄 config.sample.inc.php(3.82 KB)
📁 config_template
📄 db_create.php(4 KB)
📄 db_datadict.php(8.35 KB)
📄 db_events.php(773 B)
📄 db_export.php(2.64 KB)
📄 db_import.php(466 B)
📄 db_operations.php(21.85 KB)
📄 db_printview.php(6.91 KB)
📄 db_qbe.php(30.43 KB)
📄 db_routines.php(964 B)
📄 db_search.php(13.24 KB)
📄 db_sql.php(1.17 KB)
📄 db_structure.php(23.54 KB)
📄 db_tracking.php(7.84 KB)
📄 db_triggers.php(728 B)
📄 docs.css(2.76 KB)
📄 enum_editor.php(5.11 KB)
📁 examples
📄 export.php(27.87 KB)
📄 favicon.ico(18.46 KB)
📄 file_echo.php(2.03 KB)
📄 gis_data_editor.php(16.79 KB)
📄 htaccess.php(2.24 KB)
📄 import.php(17.47 KB)
📄 import_status.php(953 B)
📄 index.php(5.67 KB)
📁 js
📁 libraries
📄 license.php(730 B)
📁 locale
📄 main.php(16.67 KB)
📄 navigation.php(25.14 KB)
📄 phpinfo.php(349 B)
📄 phpmyadmin.css.php(1.08 KB)
📄 phpunit.xml.nocoverage(1.78 KB)
📄 pmd_display_field.php(1.74 KB)
📄 pmd_general.php(34.7 KB)
📄 pmd_pdf.php(4.16 KB)
📄 pmd_relation_new.php(3.85 KB)
📄 pmd_relation_upd.php(2.11 KB)
📄 pmd_save_pos.php(2.03 KB)
📄 prefs_forms.php(2.54 KB)
📄 prefs_manage.php(14.44 KB)
📄 print.css(1.09 KB)
📄 querywindow.php(6.3 KB)
📄 robots.txt(26 B)
📄 schema_edit.php(4.06 KB)
📄 schema_export.php(1.21 KB)
📄 server_binlog.php(6.06 KB)
📄 server_collations.php(2.54 KB)
📄 server_databases.php(9.87 KB)
📄 server_engines.php(4.88 KB)
📄 server_export.php(2.03 KB)
📄 server_import.php(477 B)
📄 server_plugins.php(7.04 KB)
📄 server_privileges.php(107.3 KB)
📄 server_replication.php(16.67 KB)
📄 server_sql.php(743 B)
📄 server_status.php(77.78 KB)
📄 server_synchronize.php(55.94 KB)
📄 server_variables.php(5.67 KB)
📁 setup
📄 show_config_errors.php(574 B)
📄 sql.php(37.2 KB)
📄 tbl_addfield.php(8.04 KB)
📄 tbl_alter.php(6.92 KB)
📄 tbl_change.php(48.74 KB)
📄 tbl_chart.php(7.66 KB)
📄 tbl_create.php(13.93 KB)
📄 tbl_export.php(2.53 KB)
📄 tbl_get_field.php(1.12 KB)
📄 tbl_gis_visualization.php(7.29 KB)
📄 tbl_import.php(624 B)
📄 tbl_indexes.php(9.46 KB)
📄 tbl_move_copy.php(2.51 KB)
📄 tbl_operations.php(31.95 KB)
📄 tbl_printview.php(14.04 KB)
📄 tbl_relation.php(23.14 KB)
📄 tbl_replace.php(23.06 KB)
📄 tbl_row_action.php(4.57 KB)
📄 tbl_select.php(10.57 KB)
📄 tbl_sql.php(1.11 KB)
📄 tbl_structure.php(39.23 KB)
📄 tbl_tracking.php(28.56 KB)
📄 tbl_triggers.php(144 B)
📄 tbl_zoom_select.php(16.86 KB)
📁 themes
📄 themes.php(822 B)
📄 transformation_overview.php(1.52 KB)
📄 transformation_wrapper.php(3.29 KB)
📄 url.php(398 B)
📄 user_password.php(4.32 KB)
📄 version_check.php(358 B)
📄 view_create.php(5.23 KB)
📄 view_operations.php(2.74 KB)
📄 webapp.php(1.06 KB)

Editing: tbl_select.php

<?php
/* vim: set expandtab sw=4 ts=4 sts=4: */
/**
 * Handles table search tab
 *
 * display table search form, create SQL query from form data
 * and include sql.php to execute it
 *
 * @todo display search form again if no results from previous search
 * @package PhpMyAdmin
 */

/**
 * Gets some core libraries
 */
require_once './libraries/common.inc.php';
require_once './libraries/mysql_charsets.lib.php';
require_once './libraries/tbl_select.lib.php';

$GLOBALS['js_include'][] = 'makegrid.js';
$GLOBALS['js_include'][] = 'sql.js';
$GLOBALS['js_include'][] = 'tbl_select.js';
$GLOBALS['js_include'][] = 'tbl_change.js';
$GLOBALS['js_include'][] = 'jquery/jquery-ui-1.8.16.custom.js';
$GLOBALS['js_include'][] = 'jquery/timepicker.js';
$GLOBALS['js_include'][] = 'gis_data_editor.js';
$GLOBALS['js_include'][] = 'codemirror/lib/codemirror.js';
$GLOBALS['js_include'][] = 'codemirror/mode/mysql/mysql.js';

$titles['Browse'] = PMA_getIcon('b_browse.png', __('Browse foreign values'));

$geom_types = PMA_getGISDatatypes();
/**
 * Not selection yet required -> displays the selection form
 */
if ((! isset($param) || $param[0] == '') && ! isset($displayAllColumns)) {
    // Gets some core libraries
    include_once './libraries/tbl_common.php';
    //$err_url   = 'tbl_select.php' . $err_url;
    $url_query .= '&amp;goto=tbl_select.php&amp;back=tbl_select.php';

/**
     * Gets tables informations
     */
    include_once './libraries/tbl_info.inc.php';

/**
     * Displays top menu links
     */
    include_once './libraries/tbl_links.inc.php';

if (! isset($goto)) {
        $goto = $GLOBALS['cfg']['DefaultTabTable'];
    }
    // Defines the url to return to in case of error in the next sql statement
    $err_url   = $goto . '?' . PMA_generate_common_url($db, $table);

// Gets the list and number of fields
    list($fields_list, $fields_type, $fields_collation, $fields_null, $geom_column_present) = PMA_tbl_getFields($db, $table);
    $fields_cnt = count($fields_list);

// retrieve keys into foreign fields, if any
    // check also foreigners even if relwork is FALSE (to get
    // foreign keys from innodb)
    $foreigners = PMA_getForeigners($db, $table);
    ?>

<fieldset id="fieldset_subtab">
<?php
$url_params = array();
$url_params['db']    = $db;
$url_params['table'] = $table;

echo PMA_generate_html_tabs(PMA_tbl_getSubTabs(), $url_params, '', 'topmenu2');

<fieldset id="fieldset_table_qbe">
    <legend><?php echo __('Do a "query by example" (wildcard: "%")') ?></legend>
    <table class="data">
    <?php echo PMA_tbl_setTableHeader($geom_column_present); ?>
    <tbody>
    <?php
    $odd_row = true;

for ($i = 0; $i < $fields_cnt; $i++) {
        ?>
        <tr class="noclick <?php echo $odd_row ? 'odd' : 'even'; $odd_row = ! $odd_row; ?>">
            <?php
            // if 'Function' column is present
            if ($geom_column_present) {
                echo('<td>');
                // if a geometry column
                if (in_array($fields_type[$i], $geom_types)) {
                    echo('<select class="geom_func" name="geom_func['. $i .']">');
                        // get the relevant list of functions
                        $funcs = PMA_getGISFunctions($fields_type[$i], true, true);
                        foreach ($funcs as $func_name => $func) {
                            $name =  isset($func['display']) ? $func['display'] : $func_name;
                            echo('<option value="' . htmlspecialchars($name) . '">'
                                . htmlspecialchars($name) . '</option>');
                        }
                    echo('</select>');
                } else {
                    echo('&nbsp;');
                }
                echo('</td>');
            }
            ?>
            <th><?php echo htmlspecialchars($fields_list[$i]); ?></th>
            <td><?php echo htmlspecialchars($fields_type[$i]); ?></td>
            <td><?php echo $fields_collation[$i]; ?></td>
            <td><select name="func[<?php echo $i; ?>]">
        <?php
        if (strncasecmp($fields_type[$i], 'enum', 4) == 0) {
            foreach ($GLOBALS['cfg']['EnumOperators'] as $fc) {
                echo "\n" . '                        '
                   . '<option value="' . htmlspecialchars($fc) . '">'
                   . htmlspecialchars($fc) . '</option>';
            }
        } elseif (preg_match('@char|blob|text|set@i', $fields_type[$i])) {
            foreach ($GLOBALS['cfg']['TextOperators'] as $fc) {
            echo "\n" . '                        '
               . '<option value="' . htmlspecialchars($fc) . '">'
               . htmlspecialchars($fc) . '</option>';
            }
        } else {
            foreach ($GLOBALS['cfg']['NumOperators'] as $fc) {
                echo "\n" . '                        '
                   . '<option value="' .  htmlspecialchars($fc) . '">'
                   . htmlspecialchars($fc) . '</option>';
            }
        } // end if... else...
        if ($fields_null[$i]) {
            foreach ($GLOBALS['cfg']['NullOperators'] as $fc) {
                echo "\n" . '                        '
                   . '<option value="' .  htmlspecialchars($fc) . '">'
                   . htmlspecialchars($fc) . '</option>';
            }
        }
        ?>

</select>
            </td>
            <td>
        <?php
        $field = $fields_list[$i];

$foreignData = PMA_getForeignData($foreigners, $field, false, '', '');

echo PMA_getForeignFields_Values($foreigners, $foreignData, $field, $fields_type, $i, $db, $table, $titles, $GLOBALS['cfg']['ForeignKeyMaxLimit'], '', true);

?>
            <input type="hidden" name="names[<?php echo $i; ?>]"
                value="<?php echo htmlspecialchars($fields_list[$i]); ?>" />
            <input type="hidden" name="types[<?php echo $i; ?>]"
                value="<?php echo $fields_type[$i]; ?>" />
            <input type="hidden" name="collations[<?php echo $i; ?>]"
                value="<?php echo $fields_collation[$i]; ?>" />
        </td>
    </tr>
        <?php
    } // end for
    ?>
    </tbody>
    </table>
<div id="gis_editor"></div><div id="popup_background"></div>
</fieldset>
<?php
    PMA_generate_slider_effect('searchoptions', __('Options'));
?>
<fieldset id="fieldset_select_fields">
    <legend><?php echo __('Select columns (at least one):'); ?></legend>
    <select name="param[]" size="<?php echo min($fields_cnt, 10); ?>"
        multiple="multiple">
    <?php
    // Displays the list of the fields
    foreach ($fields_list as $each_field) {
        echo '        '
            .'<option value="' . htmlspecialchars($each_field) . '"'
            .' selected="selected">' . htmlspecialchars($each_field)
            .'</option>' . "\n";
    }
    ?>
    </select>
    <input type="checkbox" name="distinct" value="DISTINCT" id="oDistinct" />
    <label for="oDistinct">DISTINCT</label>
</fieldset>

<fieldset id="fieldset_search_conditions">
    <legend><?php echo '<em>' . __('Or') . '</em> ' . __('Add search conditions (body of the "where" clause):'); ?></legend>
<?php echo PMA_showMySQLDocu('SQL-Syntax', 'Functions'); ?>

<fieldset id="fieldset_limit_rows">
    <legend><?php echo __('Number of rows per page'); ?></legend>
    <input type="text" size="4" name="session_max_rows"
        value="<?php echo $GLOBALS['cfg']['MaxRows']; ?>" class="textfield" />
</fieldset>

<fieldset id="fieldset_display_order">
    <legend><?php echo __('Display order:'); ?></legend>
    <select name="orderField">
        <option value="--nil--"></option>
    <?php
    foreach ($fields_list as $each_field) {
        echo '        '
            .'<option value="' . htmlspecialchars($each_field) . '">'
            .htmlspecialchars($each_field) . '</option>' . "\n";
    } // end for
    ?>
    </select>
<?php
    $choices = array(
        'ASC'  => __('Ascending'),
        'DESC' => __('Descending')
    );
    PMA_display_html_radio('order', $choices, 'ASC', false, true, "formelement");
    unset($choices);
?>
</fieldset>
<br style="clear: both;"/>
</div>
</fieldset>
<fieldset class="tblFooters">
    <input type="hidden" name="max_number_of_fields"
        value="<?php echo $fields_cnt; ?>" />
    <input type="submit" name="submit" value="<?php echo __('Go'); ?>" />
</fieldset>
</form>
<div id="sqlqueryresults"></div>
    <?php
    include './libraries/footer.inc.php';
?>

</fieldset>

<?php
} else {
    /**
     * Selection criteria have been submitted -> do the work
     */

// Builds the query

$sql_query = 'SELECT ' . (isset($distinct) ? 'DISTINCT ' : '');

// if all fields were selected to display, we do a SELECT *
    // (more efficient and this helps prevent a problem in IE
    // if one of the rows is edited and we come back to the Select results)

if (! empty($displayAllColumns) || count($param) == $max_number_of_fields) {
        $sql_query .= '* ';
    } else {
        $param = PMA_backquote($param);
        $sql_query .= implode(', ', $param);
    } // end if

// avoid a loop, for example when $cfg['DefaultTabTable'] is set
    // to 'tbl_select.php'
    unset($param);

$sql_query .= ' FROM ' . PMA_backquote($table);

// The where clause
    if (trim($where) != '') {
        $sql_query .= ' WHERE ' . $where;
    } else if (isset($func)) {
        $w = $charsets = array();
        $cnt_func = count($func);
        reset($func);
        while (list($i, $func_type) = each($func)) {

list($charsets[$i]) = explode('_', $collations[$i]);
            $unaryFlag =  (isset($GLOBALS['cfg']['UnaryOperators'][$func_type]) && $GLOBALS['cfg']['UnaryOperators'][$func_type] == 1) ? true : false;

$tmp_geom_func = isset($geom_func[$i]) ? $geom_func[$i] : null;
            $whereClause = PMA_tbl_search_getWhereClause($fields[$i], $names[$i], $types[$i], $collations[$i], $func_type, $unaryFlag, $tmp_geom_func);

if($whereClause)
                $w[] = $whereClause;
            } // end for
        if ($w) {
            $sql_query .= ' WHERE ' . implode(' AND ', $w);
        }
    } // end if

if ($orderField != '--nil--') {
        $sql_query .= ' ORDER BY ' . PMA_backquote($orderField) . ' ' . $order;
    } // end if
    include './sql.php';
}

Hackfut Security File Manager

Editing: tbl_select.php

Upload File

Create Folder