2013-06-28 13:48:38 +04:00
|
|
|
<?php
|
|
|
|
/**
|
|
|
|
* Copyright (c) 2013 Bart Visscher <bartv@thisnet.nl>
|
|
|
|
* This file is licensed under the Affero General Public License version 3 or
|
|
|
|
* later.
|
|
|
|
* See the COPYING-README file.
|
|
|
|
*/
|
|
|
|
|
|
|
|
/**
|
|
|
|
* small wrapper around \Doctrine\DBAL\Driver\Statement to make it behave, more like an MDB2 Statement
|
2014-03-28 15:57:27 +04:00
|
|
|
*
|
|
|
|
* @method boolean bindValue(mixed $param, mixed $value, integer $type = null);
|
|
|
|
* @method string errorCode();
|
|
|
|
* @method array errorInfo();
|
|
|
|
* @method integer rowCount();
|
2013-06-28 13:48:38 +04:00
|
|
|
*/
|
|
|
|
class OC_DB_StatementWrapper {
|
|
|
|
/**
|
|
|
|
* @var \Doctrine\DBAL\Driver\Statement
|
|
|
|
*/
|
2013-07-11 20:47:19 +04:00
|
|
|
private $statement = null;
|
|
|
|
private $isManipulation = false;
|
|
|
|
private $lastArguments = array();
|
2013-06-28 13:48:38 +04:00
|
|
|
|
2014-02-06 19:30:58 +04:00
|
|
|
/**
|
|
|
|
* @param boolean $isManipulation
|
|
|
|
*/
|
2013-07-11 20:47:19 +04:00
|
|
|
public function __construct($statement, $isManipulation) {
|
|
|
|
$this->statement = $statement;
|
|
|
|
$this->isManipulation = $isManipulation;
|
2013-06-28 13:48:38 +04:00
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
|
|
* pass all other function directly to the \Doctrine\DBAL\Driver\Statement
|
|
|
|
*/
|
|
|
|
public function __call($name,$arguments) {
|
|
|
|
return call_user_func_array(array($this->statement,$name), $arguments);
|
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
|
|
* make execute return the result instead of a bool
|
2014-02-07 17:03:39 +04:00
|
|
|
*
|
|
|
|
* @param array $input
|
2014-05-11 21:28:45 +04:00
|
|
|
* @return \OC_DB_StatementWrapper|int
|
2013-06-28 13:48:38 +04:00
|
|
|
*/
|
|
|
|
public function execute($input=array()) {
|
|
|
|
if(OC_Config::getValue( "log_query", false)) {
|
2013-08-07 20:16:34 +04:00
|
|
|
$params_str = str_replace("\n", " ", var_export($input, true));
|
2013-06-28 13:48:38 +04:00
|
|
|
OC_Log::write('core', 'DB execute with arguments : '.$params_str, OC_Log::DEBUG);
|
|
|
|
}
|
|
|
|
$this->lastArguments = $input;
|
|
|
|
if (count($input) > 0) {
|
|
|
|
|
|
|
|
if (!isset($type)) {
|
|
|
|
$type = OC_Config::getValue( "dbtype", "sqlite" );
|
|
|
|
}
|
|
|
|
|
|
|
|
if ($type == 'mssql') {
|
|
|
|
$input = $this->tryFixSubstringLastArgumentDataForMSSQL($input);
|
|
|
|
}
|
|
|
|
|
2013-07-11 20:47:19 +04:00
|
|
|
$result = $this->statement->execute($input);
|
2013-06-28 13:48:38 +04:00
|
|
|
} else {
|
2013-07-11 20:47:19 +04:00
|
|
|
$result = $this->statement->execute();
|
2013-06-28 13:48:38 +04:00
|
|
|
}
|
|
|
|
|
2013-07-11 20:47:19 +04:00
|
|
|
if ($result === false) {
|
2013-06-28 13:48:38 +04:00
|
|
|
return false;
|
|
|
|
}
|
2013-07-11 20:47:19 +04:00
|
|
|
if ($this->isManipulation) {
|
|
|
|
return $this->statement->rowCount();
|
|
|
|
} else {
|
|
|
|
return $this;
|
|
|
|
}
|
2013-06-28 13:48:38 +04:00
|
|
|
}
|
|
|
|
|
|
|
|
private function tryFixSubstringLastArgumentDataForMSSQL($input) {
|
|
|
|
$query = $this->statement->getWrappedStatement()->queryString;
|
|
|
|
$pos = stripos ($query, 'SUBSTRING');
|
|
|
|
|
|
|
|
if ( $pos === false) {
|
|
|
|
return $input;
|
|
|
|
}
|
|
|
|
|
|
|
|
try {
|
|
|
|
$newQuery = '';
|
|
|
|
|
|
|
|
$cArg = 0;
|
|
|
|
|
|
|
|
$inSubstring = false;
|
|
|
|
|
|
|
|
// Create new query
|
|
|
|
for ($i = 0; $i < strlen ($query); $i++) {
|
|
|
|
if ($inSubstring == false) {
|
|
|
|
// Defines when we should start inserting values
|
|
|
|
if (substr ($query, $i, 9) == 'SUBSTRING') {
|
|
|
|
$inSubstring = true;
|
|
|
|
}
|
|
|
|
} else {
|
|
|
|
// Defines when we should stop inserting values
|
|
|
|
if (substr ($query, $i, 1) == ')') {
|
|
|
|
$inSubstring = false;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
if (substr ($query, $i, 1) == '?') {
|
|
|
|
// We found a question mark
|
|
|
|
if ($inSubstring) {
|
|
|
|
$newQuery .= $input[$cArg];
|
|
|
|
|
|
|
|
//
|
|
|
|
// Remove from input array
|
|
|
|
//
|
|
|
|
array_splice ($input, $cArg, 1);
|
|
|
|
} else {
|
|
|
|
$newQuery .= substr ($query, $i, 1);
|
|
|
|
$cArg++;
|
|
|
|
}
|
|
|
|
} else {
|
|
|
|
$newQuery .= substr ($query, $i, 1);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
// The global data we need
|
|
|
|
$name = OC_Config::getValue( "dbname", "owncloud" );
|
|
|
|
$host = OC_Config::getValue( "dbhost", "" );
|
|
|
|
$user = OC_Config::getValue( "dbuser", "" );
|
|
|
|
$pass = OC_Config::getValue( "dbpassword", "" );
|
2013-08-07 20:16:34 +04:00
|
|
|
if (strpos($host, ':')) {
|
2013-06-28 13:48:38 +04:00
|
|
|
list($host, $port) = explode(':', $host, 2);
|
|
|
|
} else {
|
|
|
|
$port = false;
|
|
|
|
}
|
|
|
|
$opts = array();
|
|
|
|
|
|
|
|
if ($port) {
|
|
|
|
$dsn = 'sqlsrv:Server='.$host.','.$port.';Database='.$name;
|
|
|
|
} else {
|
|
|
|
$dsn = 'sqlsrv:Server='.$host.';Database='.$name;
|
|
|
|
}
|
|
|
|
|
|
|
|
$PDO = new PDO($dsn, $user, $pass, $opts);
|
|
|
|
$PDO->setAttribute(PDO::ATTR_DEFAULT_FETCH_MODE, PDO::FETCH_ASSOC);
|
|
|
|
$PDO->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
|
|
|
|
|
|
|
|
$this->statement = $PDO->prepare($newQuery);
|
|
|
|
|
|
|
|
$this->lastArguments = $input;
|
|
|
|
|
|
|
|
return $input;
|
|
|
|
} catch (PDOException $e){
|
|
|
|
$entry = 'PDO DB Error: "'.$e->getMessage().'"<br />';
|
|
|
|
$entry .= 'Offending command was: '.$this->statement->queryString .'<br />';
|
|
|
|
$entry .= 'Input parameters: ' .print_r($input, true).'<br />';
|
|
|
|
$entry .= 'Stack trace: ' .$e->getTraceAsString().'<br />';
|
|
|
|
OC_Log::write('core', $entry, OC_Log::FATAL);
|
|
|
|
OC_User::setUserId(null);
|
|
|
|
|
|
|
|
// send http status 503
|
|
|
|
header('HTTP/1.1 503 Service Temporarily Unavailable');
|
|
|
|
header('Status: 503 Service Temporarily Unavailable');
|
|
|
|
OC_Template::printErrorPage('Failed to connect to database');
|
|
|
|
die ($entry);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
|
|
* provide an alias for fetch
|
2014-03-28 15:57:27 +04:00
|
|
|
*
|
|
|
|
* @return mixed
|
2013-06-28 13:48:38 +04:00
|
|
|
*/
|
|
|
|
public function fetchRow() {
|
|
|
|
return $this->statement->fetch();
|
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
|
|
* Provide a simple fetchOne.
|
2014-03-28 15:57:27 +04:00
|
|
|
*
|
2013-06-28 13:48:38 +04:00
|
|
|
* fetch single column from the next row
|
2014-03-28 15:57:27 +04:00
|
|
|
* @param int $column the column number to fetch
|
2013-06-28 13:48:38 +04:00
|
|
|
* @return string
|
|
|
|
*/
|
2014-03-28 15:57:27 +04:00
|
|
|
public function fetchOne($column = 0) {
|
|
|
|
return $this->statement->fetchColumn($column);
|
2013-06-28 13:48:38 +04:00
|
|
|
}
|
2014-01-16 17:07:16 +04:00
|
|
|
|
|
|
|
/**
|
|
|
|
* Binds a PHP variable to a corresponding named or question mark placeholder in the
|
|
|
|
* SQL statement that was use to prepare the statement.
|
|
|
|
*
|
|
|
|
* @param mixed $column Either the placeholder name or the 1-indexed placeholder index
|
|
|
|
* @param mixed $variable The variable to bind
|
|
|
|
* @param integer|null $type one of the PDO::PARAM_* constants
|
|
|
|
* @param integer|null $length max length when using an OUT bind
|
|
|
|
* @return boolean
|
|
|
|
*/
|
|
|
|
public function bindParam($column, &$variable, $type = null, $length = null){
|
|
|
|
return $this->statement->bindParam($column, $variable, $type, $length);
|
|
|
|
}
|
2013-06-28 13:48:38 +04:00
|
|
|
}
|