104
PHP Database Wizard: <?echo $title?>
</TITLE>
</HEAD>
<BODY BGCOLOR="#B1CEF7">
<H1 ALIGN="CENTER">PHP Database Wizard: <?echo $title?></H1>
<?
}
function PrintFoot($str = "") {
echo $str;
?>
<P ALIGN="CENTER">
<A HREF="<?echo $PHP_SELF;?>">Return to Start</A>
</P>
</BODY>
</HTML>
<?
}
function NotAvailable($file = "", $line = 0) {
PrintHead("Not available");
if ($line):
echo "<H2>Error at $file:$line</H2>\n";
endif;
PrintFoot();
}
function FormStart() {
Global $PHP_SELF;
Global $DB;
Global $TABLE;
Global $SQL;
105
Global $VIEW;
Global $PAGESIZE;
Global $IDFIELD;
Global $IDTYPE;
Global $FIELDS;
Global $FIELDNAMES;
Global $CAPTIONS;
Global $OPTIONS;
Global $OPTIONS1;
Global $OPTIONS2;
Global $CONTROLS;
?>
<FORM ACTION="<?echo $PHP_SELF;?>" METHOD="POST">
<?
if ($DB):
?>
<INPUT TYPE="HIDDEN" NAME="DB" VALUE="<?echo $DB;?>">
<?
endif;
if ($TABLE):
?>
<INPUT TYPE="HIDDEN" NAME="TABLE" VALUE="<?echo $TABLE;?>">
<?
endif;
if ($SQL):
?>
<INPUT TYPE="HIDDEN" NAME="SQL" VALUE="<?echo
HtmlSpecialChars($SQL);?>">
<?
endif;
if ($VIEW):
?>
106
<INPUT TYPE="HIDDEN" NAME="VIEW" VALUE="<?echo $VIEW;?>">
<?
endif;
if ($PAGESIZE):
?>
<INPUT TYPE="HIDDEN" NAME="PAGESIZE" VALUE="<?echo
$PAGESIZE;?>">
<?
endif;
if ($IDFIELD):
?>
<INPUT TYPE="HIDDEN" NAME="IDFIELD" VALUE="<?echo $IDFIELD;?>">
<?
endif;
if ($IDTYPE):
?>
<INPUT TYPE="HIDDEN" NAME="IDTYPE" VALUE="<?echo $IDTYPE;?>">
<?
endif;
$i = 0;
while ($i < count($FIELDS)):
?>
<INPUT TYPE="HIDDEN" NAME="FIELDS[]" VALUE="<?echo
$FIELDS[$i];?>">
<?
$i++;
endwhile;
$i = 0;
while ($i < count($FIELDNAMES)):
?>
<INPUT TYPE="HIDDEN" NAME="FIELDNAMES[]" VALUE="<?echo
$FIELDNAMES[$i];?>">
107
<?
$i++;
endwhile;
$i = 0;
while ($i < count($CONTROLS)):
?>
<INPUT TYPE="HIDDEN" NAME="CONTROLS[]" VALUE="<?echo
$CONTROLS[$i];?>">
<?
$i++;
endwhile;
while (list($key, $val) = each($OPTIONS)):
?>
<INPUT TYPE="HIDDEN" NAME="OPTIONS[<?echo $key;?>]" VALUE="<?echo
HtmlSpecialChars($val);?>">
<?
endwhile;
while (list($key, $val) = each($OPTIONS1)):
?>
<INPUT TYPE="HIDDEN" NAME="OPTIONS1[<?echo $key;?>]"
VALUE="<?echo HtmlSpecialChars($val);?>">
<?
endwhile;
while (list($key, $val) = each($OPTIONS2)):
?>
<INPUT TYPE="HIDDEN" NAME="OPTIONS2[<?echo $key;?>]"
VALUE="<?echo HtmlSpecialChars($val);?>">
<?
endwhile;
$i = 0;
while ($i < count($CAPTIONS)):
?>
108
<INPUT TYPE="HIDDEN" NAME="CAPTIONS[]" VALUE="<?echo
$CAPTIONS[$i];?>">
<?
$i++;
endwhile;
} // FormStart
function FormEnd($str = "", $noreset = 0) {
if ("$str" != ""):
?>
<INPUT TYPE="SUBMIT" NAME="cmd" VALUE="<?echo $str;?>">
<?
if (!$noreset):
?>
<INPUT TYPE="RESET">
<?
endif;
endif;
?>
</FORM>
<?
} // FormEnd
function PrintSqlInput() {
Global $SQL;
FormStart();
?>
<TABLE CELLPADDING=5 CELLSPACING=0>
<TR VALIGN="TOP">
<TH NOWRAP ALIGN="RIGHT"><FONT
SIZE="+1">SQL:</FONT> SELECT</TH>
<TD><TEXTAREA NAME="SQL" ROWS=3 COLS=60 WRAP="VIRTUAL"
109
TITLE="Type your SQL here"><?echo $SQL;?></TEXTAREA></TD>
</TR></TABLE>
<?
FormEnd("Select SQL");
} // PrintSqlInput
if(!$PHP_AUTH_USER):
NotAuthorized();
exit;
else:
// $VALID_USERS = " nmark mvl ise ";
// $TMP_USER = " $PHP_AUTH_USER ";
// if (!ereg($TMP_USER, $VALID_USERS)):
// NotAuthorized();
// exit;
// endif;
$pw = getpwnam($PHP_AUTH_USER);
if (!$pw):
NotAuthorized();
exit;
endif;
$login = strtok($pw, ":");
$passwd = strtok(":");
if (crypt($PHP_AUTH_PW, substr($passwd, 0, 2)) != $passwd):
NotAuthorized();
exit;
endif;
endif;
if (!mysql_pconnect($DBHOST)):
NotAvailable();
exit;
110
endif;
if (!$DB): // No database selected yet
$dbs = mysql_list_dbs();
if (!$dbs):
NotAvailable();
exit;
endif;
$num_dbs = mysql_num_rows($dbs);
if (!num_dbs):
NotAvailable();
exit;
endif;
PrintHead("Select Database");
FormStart();
echo "<CENTER>\n";
echo "<SELECT NAME=\"DB\">\n";
$i = 0;
while ($i < $num_dbs):
$dbname = mysql_dbname($dbs, $i);
echo "<OPTION>$dbname\n";//</OPTION>\n";
$i++;
endwhile;
echo "</SELECT><BR><BR>\n";
FormEnd("Select DB");
echo "</CENTER>\n";
PrintFoot();
elseif ("$cmd" == "Select DB"): //Database selected in $DB variable
if (!mysql_select_db($DB)):
NotAvailable(__FILE__, __LINE__ . "<BR>" . mysql_error());
exit;
endif;
$tables = mysql_list_tables($DB);
111
if (!$tables):
NotAvailable(__FILE__, __LINE__);
exit;
endif;
PrintHead("Type in SQL or select table");
PrintSqlInput();
echo "<BR>\n";
FormStart();
?>
<SELECT NAME="TABLE">
<?
$tables_num = mysql_num_rows($tables);
$i = 0;
while ($i < $tables_num):
$table_name = mysql_tablename ($tables, $i);
echo "<OPTION>$table_name\n";
$i++;
endwhile;
mysql_free_result($tables);
?>
</SELECT>
<?
FormEnd("Select Table", 1);
PrintFoot();
elseif ("$cmd" == "Select SQL" || "$cmd" == "Table View"): // Preview SQL output
format
if (Trim($SQL) == ""): // Just forgot SQL
PrintHead("Type in SQL please");
PrintSqlInput();
PrintFoot();
else: // We have SQL expression here
if (!mysql_select_db($DB)):
112
NotAvailable(__FILE__, __LINE__);
exit;
endif;
$SQL = stripslashes($SQL);
if (!eregi("LIMIT", $SQL)):
$LSQL = "$SQL LIMIT 1"; // Prevent huge results transfer
else:
$LSQL = $SQL;
endif;
$result = mysql_query("SELECT $LSQL");
if (!$result):
PrintHead("Please correct your SQL");
echo "<B>The error was:</B> ";
echo "<TT>" . mysql_error() . "</TT>\n";
PrintSqlInput();
PrintFoot();
else: // SQL parse ok
$fields = mysql_list_fields($result);
PrintHead("Select Fields to Show");
FormStart();
?>
<H3>SQL: 'SELECT <?echo $SQL;?>'</H3>
<CENTER>
<TABLE BORDER=1 CELLSPACING=1 CELLPADDING="3">
<TR><TH>Column</TH><TH>Table</TH><TH>Size</TH><TH>Null</TH>
<TH>Key</TH><TH>Type</TH><TH>Show as</TH><TH>Caption /
Name</TH></TR>
<?
while ($field = mysql_fetch_field($result)):
$name = $field->name;
$table = $field->table;
$maxlength = $field->max_length;
113
$null = $field->not_null ? "No" : "Yes";
$keytype = " ";
if ($field->primary_key):
$keytype = "Pri";
elseif ($field->unique_key):
$keytype = "Uni";
elseif ($field->multiple_key):
$keytype = "Mul";
endif;
$type = $field->type;
echo "<TR><TD>$name</TD><TD>$table</TD><TD>$maxlength</TD>";
echo "<TD>$null</TD><TD>$keytype</TD><TD>$type</TD>";
?>
<TD>
<SELECT NAME="FIELDS[]">
<OPTION VALUE="Dont">Dont show
<OPTION VALUE="Hidden">Hidden Input
<OPTION SELECTED>Text
<OPTION>Picture
<OPTION>Input
<OPTION>Email
<OPTION>URL
</SELECT>
<TD><INPUT TYPE="Text" CHECKED SIZE=10 NAME="CAPTIONS[]"
VALUE="<?echo $name;?>"></TD>
<INPUT TYPE="Hidden" NAME="FIELDNAMES[]" VALUE="<?echo
$name;?>">
</TR>
<?
endwhile;
?>
</TABLE>