File Manager

Hackfut Security File Manager

Current Path: /mnt/ceph/services/websiteos/phpmyadmin/phpMyAdmin-4.7.7-all-languages

mnt / ceph / services / websiteos / phpmyadmin / phpMyAdmin-4.7.7-all-languages /

📁 ..
📁 .svn
📄 CONTRIBUTING.md(1.69 KB)
📄 ChangeLog(15.43 KB)
📄 DCO(1.77 KB)
📄 LICENSE(17.67 KB)
📄 README(1.48 KB)
📄 RELEASE-DATE-4.7.7(29 B)
📄 ajax.php(913 B)
📄 browse_foreigners.php(1.49 KB)
📄 changelog.php(4.99 KB)
📄 chk_rel.php(772 B)
📄 composer.json(2.05 KB)
📄 composer.lock(92.65 KB)
📄 config.inc.php(317 B)
📄 config.sample.inc.php(4.41 KB)
📁 config_template
📄 db_central_columns.php(5.21 KB)
📄 db_datadict.php(5.69 KB)
📄 db_designer.php(5.72 KB)
📄 db_events.php(356 B)
📄 db_export.php(4.88 KB)
📄 db_import.php(1.02 KB)
📄 db_operations.php(10.37 KB)
📄 db_qbe.php(4.32 KB)
📄 db_routines.php(416 B)
📄 db_search.php(2.02 KB)
📄 db_sql.php(1.08 KB)
📄 db_sql_autocomplete.php(749 B)
📄 db_sql_format.php(488 B)
📄 db_structure.php(1.05 KB)
📄 db_tracking.php(4.34 KB)
📄 db_triggers.php(360 B)
📁 doc
📄 error_report.php(4.43 KB)
📁 examples
📄 export.php(15.27 KB)
📄 favicon.ico(21.96 KB)
📄 gis_data_editor.php(15.48 KB)
📄 htaccess.php(3.07 KB)
📄 import.php(23.29 KB)
📄 import_status.php(3.32 KB)
📄 index.php(19.29 KB)
📁 js
📁 libraries
📄 license.php(897 B)
📄 lint.php(1.38 KB)
📁 locale
📄 logout.php(287 B)
📄 navigation.php(2.14 KB)
📄 normalization.php(3.94 KB)
📁 phpMyAdmin.bk
📄 phpinfo.php(510 B)
📁 phpmyadmin.bk
📄 phpmyadmin.css.php(746 B)
📄 prefs_forms.php(2.7 KB)
📄 prefs_manage.php(14.89 KB)
📄 print.css(1.18 KB)
📄 robots.txt(26 B)
📄 schema_export.php(1.64 KB)
📄 server_binlog.php(804 B)
📄 server_collations.php(837 B)
📄 server_databases.php(817 B)
📄 server_engines.php(803 B)
📄 server_export.php(1.2 KB)
📄 server_import.php(779 B)
📄 server_plugins.php(808 B)
📄 server_privileges.php(13.56 KB)
📄 server_replication.php(2.18 KB)
📄 server_sql.php(847 B)
📄 server_status.php(995 B)
📄 server_status_advisor.php(954 B)
📄 server_status_monitor.php(2.88 KB)
📄 server_status_processes.php(1.9 KB)
📄 server_status_queries.php(1.36 KB)
📄 server_status_variables.php(1.59 KB)
📄 server_user_groups.php(1.8 KB)
📄 server_variables.php(817 B)
📁 setup
📄 show_config_errors.php(1.02 KB)
📁 sql
📄 sql.php(6.17 KB)
📄 tbl_addfield.php(3.82 KB)
📄 tbl_change.php(6.38 KB)
📄 tbl_chart.php(990 B)
📄 tbl_create.php(3.12 KB)
📄 tbl_export.php(4.38 KB)
📄 tbl_find_replace.php(1.02 KB)
📄 tbl_get_field.php(1.39 KB)
📄 tbl_gis_visualization.php(1.23 KB)
📄 tbl_import.php(873 B)
📄 tbl_indexes.php(1.4 KB)
📄 tbl_operations.php(13.31 KB)
📄 tbl_recent_favorite.php(455 B)
📄 tbl_relation.php(2.31 KB)
📄 tbl_replace.php(16.13 KB)
📄 tbl_row_action.php(4.94 KB)
📄 tbl_select.php(1.15 KB)
📄 tbl_sql.php(1.25 KB)
📄 tbl_structure.php(1.63 KB)
📄 tbl_tracking.php(5.76 KB)
📄 tbl_triggers.php(141 B)
📄 tbl_zoom_select.php(1.07 KB)
📁 templates
📁 themes
📄 themes.php(938 B)
📄 transformation_overview.php(1.88 KB)
📄 transformation_wrapper.php(4.39 KB)
📄 url.php(1.26 KB)
📄 user_password.php(9.03 KB)
📁 vendor
📄 version_check.php(1.07 KB)
📄 view_create.php(9.34 KB)
📄 view_operations.php(3.91 KB)

Editing: view_create.php

<?php
/* vim: set expandtab sw=4 ts=4 sts=4: */
/**
 * handles creation of VIEWs
 *
 * @todo js error when view name is empty (strFormEmpty)
 * @todo (also validate if js is disabled, after form submission?)
 * @package PhpMyAdmin
 */
use PMA\libraries\URL;
use PMA\libraries\Response;

require_once './libraries/common.inc.php';

/**
 * Runs common work
 */
require './libraries/db_common.inc.php';
$url_params['goto'] = 'tbl_structure.php';
$url_params['back'] = 'view_create.php';

$response = Response::getInstance();

$view_algorithm_options = array(
    'UNDEFINED',
    'MERGE',
    'TEMPTABLE',
);

$view_with_options = array(
    'CASCADED',
    'LOCAL'
);

$view_security_options = array(
    'DEFINER',
    'INVOKER'
);

if (empty($sql_query)) {
    $sql_query = '';
}

// View name is a compulsory field
if (isset($_REQUEST['view']['name'])
    && empty($_REQUEST['view']['name'])
) {
    $message = PMA\libraries\Message::error(__('View name can not be empty!'));
    $response->addJSON(
        'message',
        $message
    );
    $response->setRequestStatus(false);
    exit;
}

if (isset($_REQUEST['createview']) || isset($_REQUEST['alterview'])) {
    /**
     * Creates the view
     */
    $sep = "\r\n";

if (isset($_REQUEST['createview'])) {
        $sql_query = 'CREATE';
        if (isset($_REQUEST['view']['or_replace'])) {
            $sql_query .= ' OR REPLACE';
        }
    } else {
        $sql_query = 'ALTER';
    }

if (PMA_isValid($_REQUEST['view']['algorithm'], $view_algorithm_options)) {
        $sql_query .= $sep . ' ALGORITHM = ' . $_REQUEST['view']['algorithm'];
    }

if (! empty($_REQUEST['view']['definer'])) {
        if (strpos($_REQUEST['view']['definer'], '@') === FALSE) {
            $sql_query .= $sep . 'DEFINER='
                . PMA\libraries\Util::backquote($_REQUEST['view']['definer']);
        } else {
            $arr = explode('@', $_REQUEST['view']['definer']);
            $sql_query .= $sep . 'DEFINER=' . PMA\libraries\Util::backquote($arr[0]);
            $sql_query .= '@' . PMA\libraries\Util::backquote($arr[1]) . ' ';
        }
    }

if (isset($_REQUEST['view']['sql_security'])) {
        if (in_array($_REQUEST['view']['sql_security'], $view_security_options)) {
            $sql_query .= $sep . ' SQL SECURITY '
                . $_REQUEST['view']['sql_security'];
        }
    }

$sql_query .= $sep . ' VIEW '
        . PMA\libraries\Util::backquote($_REQUEST['view']['name']);

if (! empty($_REQUEST['view']['column_names'])) {
        $sql_query .= $sep . ' (' . $_REQUEST['view']['column_names'] . ')';
    }

$sql_query .= $sep . ' AS ' . $_REQUEST['view']['as'];

if (isset($_REQUEST['view']['with'])) {
        if (in_array($_REQUEST['view']['with'], $view_with_options)) {
            $sql_query .= $sep . ' WITH ' . $_REQUEST['view']['with']
                . '  CHECK OPTION';
        }
    }

if (!$GLOBALS['dbi']->tryQuery($sql_query)) {
        if (! isset($_REQUEST['ajax_dialog'])) {
            $message = PMA\libraries\Message::rawError($GLOBALS['dbi']->getError());
            return;
        }

$response->addJSON(
            'message',
            PMA\libraries\Message::error(
                "<i>" . htmlspecialchars($sql_query) . "</i><br /><br />"
                . $GLOBALS['dbi']->getError()
            )
        );
        $response->setRequestStatus(false);
        exit;
    }

// If different column names defined for VIEW
    $view_columns = array();
    if (isset($_REQUEST['view']['column_names'])) {
        $view_columns = explode(',', $_REQUEST['view']['column_names']);
    }

$column_map = $GLOBALS['dbi']->getColumnMapFromSql(
        $_REQUEST['view']['as'], $view_columns
    );

$systemDb = $GLOBALS['dbi']->getSystemDatabase();
    $pma_transformation_data = $systemDb->getExistingTransformationData(
        $GLOBALS['db']
    );

if ($pma_transformation_data !== false) {

// SQL for store new transformation details of VIEW
        $new_transformations_sql = $systemDb->getNewTransformationDataSql(
            $pma_transformation_data, $column_map,
            $_REQUEST['view']['name'], $GLOBALS['db']
        );

// Store new transformations
        if ($new_transformations_sql != '') {
            $GLOBALS['dbi']->tryQuery($new_transformations_sql);
        }

}
    unset($pma_transformation_data);

if (! isset($_REQUEST['ajax_dialog'])) {
        $message = PMA\libraries\Message::success();
        include 'tbl_structure.php';
    } else {
        $response->addJSON(
            'message',
            PMA\libraries\Util::getMessage(
                PMA\libraries\Message::success(),
                $sql_query
            )
        );
        $response->setRequestStatus(true);
    }

exit;
}

// prefill values if not already filled from former submission
$view = array(
    'operation' => 'create',
    'or_replace' => '',
    'algorithm' => '',
    'definer' => '',
    'sql_security' => '',
    'name' => '',
    'column_names' => '',
    'as' => $sql_query,
    'with' => '',
);

if (PMA_isValid($_REQUEST['view'], 'array')) {
    $view = array_merge($view, $_REQUEST['view']);
}

$url_params['db'] = $GLOBALS['db'];
$url_params['reload'] = 1;

/**
 * Displays the page
 */
$htmlString = ''
    . '<div id="div_view_options">'
    . '<form method="post" action="view_create.php">'
    . URL::getHiddenInputs($url_params)
    . '<fieldset>'
    . '<legend>'
    . (isset($_REQUEST['ajax_dialog']) ?
        __('Details') :
        ($view['operation'] == 'create' ? __('Create view') : __('Edit view'))
    )
    . '</legend>'
    . '<table class="rte_table">';

if ($view['operation'] == 'create') {
    $htmlString .= '<tr>'
        . '<td class="nowrap"><label for="or_replace">OR REPLACE</label></td>'
        . '<td><input type="checkbox" name="view[or_replace]" id="or_replace"';
    if ($view['or_replace']) {
        $htmlString .= ' checked="checked"';
    }
    $htmlString .= ' value="1" /></td></tr>';
}

$htmlString .= '<tr>'
    . '<td class="nowrap"><label for="algorithm">ALGORITHM</label></td>'
    . '<td><select name="view[algorithm]" id="algorithm">';
foreach ($view_algorithm_options as $option) {
    $htmlString .= '<option value="' . htmlspecialchars($option) . '"';
    if ($view['algorithm'] === $option) {
        $htmlString .= ' selected="selected"';
    }
    $htmlString .= '>' . htmlspecialchars($option) . '</option>';
}
$htmlString .= '</select>'
    . '</td></tr>';

$htmlString .= '<tr><td class="nowrap">' . __('Definer') . '</td>'
    . '<td><input type="text" maxlength="100" size="50" name="view[definer]"'
    . ' value="' . htmlspecialchars($view['definer']) . '" />'
    . '</td></tr>';

$htmlString .= '<tr><td class="nowrap">SQL SECURITY</td>'
    . '<td><select name="view[sql_security]">'
    . '<option value=""></option>';
foreach ($view_security_options as $option) {
    $htmlString .= '<option value="' . htmlspecialchars($option) . '"';
    if ($option == $view['sql_security']) {
        $htmlString .= ' selected="selected"';
    }
    $htmlString .= '>' . htmlspecialchars($option) . '</option>';
}
$htmlString .= '<select>'
    . '</td></tr>';

if ($view['operation'] == 'create') {
    $htmlString .= '<tr><td class="nowrap">' . __('VIEW name') . '</td>'
        . '<td><input type="text" size="20" name="view[name]"'
        . ' onfocus="this.select()" maxlength="64"'
        . ' value="' . htmlspecialchars($view['name']) . '" />'
        . '</td></tr>';
} else {
    $htmlString .= '<tr><td><input type="hidden" name="view[name]"'
        . ' value="' . htmlspecialchars($view['name']) . '" />'
        . '</td></tr>';
}

$htmlString .= '<tr><td class="nowrap">' . __('Column names') . '</td>'
    . '<td><input type="text" maxlength="100" size="50" name="view[column_names]"'
    . ' onfocus="this.select()"'
    . ' value="' . htmlspecialchars($view['column_names']) . '" />'
    . '</td></tr>';

$htmlString .= '<tr><td class="nowrap">AS</td>'
    . '<td>'
    . '<textarea name="view[as]" rows="15" cols="40" dir="' . $text_dir . '"';
if ($GLOBALS['cfg']['TextareaAutoSelect'] || true) {
    $htmlString .= ' onclick="selectContent(this, sql_box_locked, true)"';
}
$htmlString .= '>' . htmlspecialchars($view['as']) . '</textarea>'
    . '</td></tr>';

$htmlString .= '<tr><td class="nowrap">WITH CHECK OPTION</td>'
    . '<td><select name="view[with]">'
    . '<option value=""></option>';
foreach ($view_with_options as $option) {
    $htmlString .= '<option value="' . htmlspecialchars($option) . '"';
    if ($option == $view['with']) {
        $htmlString .= ' selected="selected"';
    }
    $htmlString .= '>' . htmlspecialchars($option) . '</option>';
}
$htmlString .= '<select>'
    . '</td></tr>';

$htmlString .= '</table>'
    . '</fieldset>';

if (! isset($_REQUEST['ajax_dialog'])) {
    $htmlString .= '<fieldset class="tblFooters">'
        . '<input type="hidden" name="'
        . ($view['operation'] == 'create' ? 'createview' : 'alterview' )
        . '" value="1" />'
        . '<input type="submit" name="" value="' . __('Go') . '" />'
        . '</fieldset>';
} else {
    $htmlString .= '<input type="hidden" name="'
        . ($view['operation'] == 'create' ? 'createview' : 'alterview' )
        . '" value="1" />'
        . '<input type="hidden" name="ajax_dialog" value="1" />'
        . '<input type="hidden" name="ajax_request" value="1" />';
}

$htmlString .= '</form>'
    . '</div>';

echo $htmlString;

Hackfut Security File Manager

Editing: view_create.php

Upload File

Create Folder