????

File manager - Edit - /usr/share/phpmyadmin/libraries/classes/Controllers/LintController.php

Back
<?php /** * Represents the interface between the linter and the query editor. / declare(strict_types=1); namespace PhpMyAdmin\Controllers; use PhpMyAdmin\Core; use PhpMyAdmin\Linter; use function json_encode; /* * Represents the interface between the linter and the query editor. / class LintController extends AbstractController { public function __invoke(): void { $params = [ 'sql_query' => $_POST['sql_query'] ?? null, 'options' => $_POST['options'] ?? null, ]; /* * The SQL query to be analyzed. * * This does not need to be checked again XSS or MySQL injections because it is * never executed, just parsed. * * The client, which will receive the JSON response will decode the message and * and any HTML fragments that are displayed to the user will be encoded anyway. * * @var string */ $sqlQuery = ! empty($params['sql_query']) ? $params['sql_query'] : ''; $this->response->setAjax(true); // Disabling standard response. $this->response->disable(); Core::headerJSON(); if (! empty($params['options'])) { $options = $params['options']; if (! empty($options['routineEditor'])) { $sqlQuery = 'CREATE PROCEDURE `a`() ' . $sqlQuery; } elseif (! empty($options['triggerEditor'])) { $sqlQuery = 'CREATE TRIGGER `a` AFTER INSERT ON `b` FOR EACH ROW ' . $sqlQuery; } elseif (! empty($options['eventEditor'])) { $sqlQuery = 'CREATE EVENT `a` ON SCHEDULE EVERY MINUTE DO ' . $sqlQuery; } } echo json_encode(Linter::lint("DELIMITER $$\n" . $sqlQuery . "$$\nDELIMITER ;\n")); } }

| ver. 1.4 | Github | . | PHP 8.3.6 | Generation time: 0.56 | proxy | phpinfo | Settings