|
|
|
|
@ -178,6 +178,13 @@ class OC_DB { |
|
|
|
|
$dsn = 'oci:dbname=//' . $host . '/' . $name; |
|
|
|
|
} |
|
|
|
|
break; |
|
|
|
|
case 'mssql': |
|
|
|
|
if ($port) { |
|
|
|
|
$dsn='sqlsrv:Server='.$host.','.$port.';Database='.$name; |
|
|
|
|
} else { |
|
|
|
|
$dsn='sqlsrv:Server='.$host.';Database='.$name; |
|
|
|
|
} |
|
|
|
|
break; |
|
|
|
|
default: |
|
|
|
|
return false; |
|
|
|
|
} |
|
|
|
|
@ -277,6 +284,15 @@ class OC_DB { |
|
|
|
|
$dsn['database'] = $user; |
|
|
|
|
} |
|
|
|
|
break; |
|
|
|
|
case 'mssql': |
|
|
|
|
$dsn = array( |
|
|
|
|
'phptype' => 'sqlsrv', |
|
|
|
|
'username' => $user, |
|
|
|
|
'password' => $pass, |
|
|
|
|
'hostspec' => $host, |
|
|
|
|
'database' => $name |
|
|
|
|
); |
|
|
|
|
break; |
|
|
|
|
default: |
|
|
|
|
return false; |
|
|
|
|
} |
|
|
|
|
@ -540,7 +556,7 @@ class OC_DB { |
|
|
|
|
* http://www.sqlite.org/lang_createtable.html |
|
|
|
|
* http://docs.oracle.com/cd/B19306_01/server.102/b14200/functions037.htm |
|
|
|
|
*/ |
|
|
|
|
if( $CONFIG_DBTYPE == 'pgsql' ) { //mysql support it too but sqlite doesn't |
|
|
|
|
if( $CONFIG_DBTYPE == 'pgsql' || 'mssql') { //mysql support it too but sqlite doesn't |
|
|
|
|
$content = str_replace( '<default>0000-00-00 00:00:00</default>', '<default>CURRENT_TIMESTAMP</default>', $content ); |
|
|
|
|
} |
|
|
|
|
file_put_contents( $file2, $content ); |
|
|
|
|
@ -624,7 +640,7 @@ class OC_DB { |
|
|
|
|
} else { |
|
|
|
|
return true; |
|
|
|
|
} |
|
|
|
|
} elseif( $type == 'pgsql' || $type == 'oci' || $type == 'mysql') { |
|
|
|
|
} elseif( $type == 'pgsql' || $type == 'oci' || $type == 'mysql' || $type == 'mssql') { |
|
|
|
|
$query = 'INSERT INTO `' .$table . '` (' |
|
|
|
|
. implode(',', array_keys($input)) . ') SELECT \'' |
|
|
|
|
. implode('\',\'', array_values($input)) . '\' FROM ' . $table . ' WHERE '; |
|
|
|
|
@ -683,7 +699,15 @@ class OC_DB { |
|
|
|
|
}elseif( $type == 'oci' ) { |
|
|
|
|
$query = str_replace( '`', '"', $query ); |
|
|
|
|
$query = str_ireplace( 'NOW()', 'CURRENT_TIMESTAMP', $query ); |
|
|
|
|
} |
|
|
|
|
}elseif( $type == 'mssql' ) { |
|
|
|
|
$query = preg_replace( "/\`(.*?)`/", "[$1]", $query ); |
|
|
|
|
$query = str_replace( 'NOW()', 'CURRENT_TIMESTAMP', $query ); |
|
|
|
|
$query = str_replace( 'now()', 'CURRENT_TIMESTAMP', $query ); |
|
|
|
|
$query = str_replace( 'LENGTH(', 'LEN(', $query ); |
|
|
|
|
$query = str_replace( 'SUBSTR(', 'SUBSTRING(', $query ); |
|
|
|
|
|
|
|
|
|
$query = self::fixLimitClauseForMSSQL($query); |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
// replace table name prefix |
|
|
|
|
$query = str_replace( '*PREFIX*', $prefix, $query ); |
|
|
|
|
@ -691,6 +715,60 @@ class OC_DB { |
|
|
|
|
return $query; |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
private static function fixLimitClauseForMSSQL($query) { |
|
|
|
|
$limitLocation = stripos ($query, "LIMIT"); |
|
|
|
|
|
|
|
|
|
if ( $limitLocation === false ) { |
|
|
|
|
return $query; |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
// total == 0 means all results - not zero results |
|
|
|
|
// |
|
|
|
|
// First number is either total or offset, locate it by first space |
|
|
|
|
// |
|
|
|
|
$offset = substr ($query, $limitLocation + 5); |
|
|
|
|
$offset = substr ($offset, 0, stripos ($offset, ' ')); |
|
|
|
|
$offset = trim ($offset); |
|
|
|
|
|
|
|
|
|
// check for another parameter |
|
|
|
|
if (stripos ($offset, ',') === false) { |
|
|
|
|
// no more parameters |
|
|
|
|
$offset = 0; |
|
|
|
|
$total = intval ($offset); |
|
|
|
|
} else { |
|
|
|
|
// found another parameter |
|
|
|
|
$offset = intval ($offset); |
|
|
|
|
|
|
|
|
|
$total = substr ($query, $limitLocation + 5); |
|
|
|
|
$total = substr ($total, stripos ($total, ',')); |
|
|
|
|
|
|
|
|
|
$total = substr ($total, 0, stripos ($total, ' ')); |
|
|
|
|
$total = intval ($total); |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
$query = trim (substr ($query, 0, $limitLocation)); |
|
|
|
|
|
|
|
|
|
if ($offset == 0 && $total !== 0) { |
|
|
|
|
if (strpos($query, "SELECT") === false) { |
|
|
|
|
$query = "TOP {$total} " . $query; |
|
|
|
|
} else { |
|
|
|
|
$query = preg_replace('/SELECT(\s*DISTINCT)?/Dsi', 'SELECT$1 TOP '.$total, $query); |
|
|
|
|
} |
|
|
|
|
} else if ($offset > 0) { |
|
|
|
|
$query = preg_replace('/SELECT(\s*DISTINCT)?/Dsi', 'SELECT$1 TOP(10000000) ', $query); |
|
|
|
|
$query = 'SELECT * |
|
|
|
|
FROM (SELECT sub2.*, ROW_NUMBER() OVER(ORDER BY sub2.line2) AS line3 |
|
|
|
|
FROM (SELECT 1 AS line2, sub1.* FROM (' . $query . ') AS sub1) as sub2) AS sub3'; |
|
|
|
|
|
|
|
|
|
if ($total > 0) { |
|
|
|
|
$query .= ' WHERE line3 BETWEEN ' . ($offset + 1) . ' AND ' . ($offset + $total); |
|
|
|
|
} else { |
|
|
|
|
$query .= ' WHERE line3 > ' . $offset; |
|
|
|
|
} |
|
|
|
|
} |
|
|
|
|
return $query; |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
/** |
|
|
|
|
* @brief drop a table |
|
|
|
|
* @param string $tableName the table to drop |
|
|
|
|
@ -844,6 +922,14 @@ class PDOStatementWrapper{ |
|
|
|
|
public function execute($input=array()) { |
|
|
|
|
$this->lastArguments=$input; |
|
|
|
|
if(count($input)>0) { |
|
|
|
|
if (!isset($type)) { |
|
|
|
|
$type = OC_Config::getValue( "dbtype", "sqlite" ); |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
if ($type == 'mssql') { |
|
|
|
|
$this->tryFixSubstringLastArgumentDataForMSSQL($input); |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
$result=$this->statement->execute($input); |
|
|
|
|
}else{ |
|
|
|
|
$result=$this->statement->execute(); |
|
|
|
|
@ -855,6 +941,94 @@ class PDOStatementWrapper{ |
|
|
|
|
} |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
private function tryFixSubstringLastArgumentDataForMSSQL(&$input) { |
|
|
|
|
$query = $this->statement->queryString; |
|
|
|
|
$pos = stripos ($query, 'SUBSTRING'); |
|
|
|
|
|
|
|
|
|
if ( $pos === false) { |
|
|
|
|
return; |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
try { |
|
|
|
|
$newQuery = ''; |
|
|
|
|
|
|
|
|
|
$cArg = 0; |
|
|
|
|
|
|
|
|
|
$inSubstring = false; |
|
|
|
|
|
|
|
|
|
// Create new query |
|
|
|
|
for ($i = 0; $i < strlen ($query); $i++) { |
|
|
|
|
if ($inSubstring == false) { |
|
|
|
|
// Defines when we should start inserting values |
|
|
|
|
if (substr ($query, $i, 9) == 'SUBSTRING') { |
|
|
|
|
$inSubstring = true; |
|
|
|
|
} |
|
|
|
|
} else { |
|
|
|
|
// Defines when we should stop inserting values |
|
|
|
|
if (substr ($query, $i, 1) == ')') { |
|
|
|
|
$inSubstring = false; |
|
|
|
|
} |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
if (substr ($query, $i, 1) == '?') { |
|
|
|
|
// We found a question mark |
|
|
|
|
if ($inSubstring) { |
|
|
|
|
$newQuery .= $input[$cArg]; |
|
|
|
|
|
|
|
|
|
// |
|
|
|
|
// Remove from input array |
|
|
|
|
// |
|
|
|
|
array_splice ($input, $cArg, 1); |
|
|
|
|
} else { |
|
|
|
|
$newQuery .= substr ($query, $i, 1); |
|
|
|
|
$cArg++; |
|
|
|
|
} |
|
|
|
|
} else { |
|
|
|
|
$newQuery .= substr ($query, $i, 1); |
|
|
|
|
} |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
// The global data we need |
|
|
|
|
$name = OC_Config::getValue( "dbname", "owncloud" ); |
|
|
|
|
$host = OC_Config::getValue( "dbhost", "" ); |
|
|
|
|
$user = OC_Config::getValue( "dbuser", "" ); |
|
|
|
|
$pass = OC_Config::getValue( "dbpassword", "" ); |
|
|
|
|
if (strpos($host,':')) { |
|
|
|
|
list($host, $port) = explode(':', $host, 2); |
|
|
|
|
} else { |
|
|
|
|
$port = false; |
|
|
|
|
} |
|
|
|
|
$opts = array(); |
|
|
|
|
|
|
|
|
|
if ($port) { |
|
|
|
|
$dsn = 'sqlsrv:Server='.$host.','.$port.';Database='.$name; |
|
|
|
|
} else { |
|
|
|
|
$dsn = 'sqlsrv:Server='.$host.';Database='.$name; |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
$PDO = new PDO($dsn, $user, $pass, $opts); |
|
|
|
|
$PDO->setAttribute(PDO::ATTR_DEFAULT_FETCH_MODE, PDO::FETCH_ASSOC); |
|
|
|
|
$PDO->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION); |
|
|
|
|
|
|
|
|
|
$this->statement = $PDO->prepare($newQuery); |
|
|
|
|
|
|
|
|
|
$this->lastArguments = $input; |
|
|
|
|
} catch (PDOException $e){ |
|
|
|
|
$entry = 'PDO DB Error: "'.$e->getMessage().'"<br />'; |
|
|
|
|
$entry .= 'Offending command was: '.$this->statement->queryString .'<br />'; |
|
|
|
|
$entry .= 'Input parameters: ' .print_r($input, true).'<br />'; |
|
|
|
|
$entry .= 'Stack trace: ' .$e->getTraceAsString().'<br />'; |
|
|
|
|
OC_Log::write('core', $entry, OC_Log::FATAL); |
|
|
|
|
OC_User::setUserId(null); |
|
|
|
|
|
|
|
|
|
// send http status 503 |
|
|
|
|
header('HTTP/1.1 503 Service Temporarily Unavailable'); |
|
|
|
|
header('Status: 503 Service Temporarily Unavailable'); |
|
|
|
|
OC_Template::printErrorPage('Failed to connect to database'); |
|
|
|
|
die ($entry); |
|
|
|
|
} |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
/** |
|
|
|
|
* provide numRows |
|
|
|
|
*/ |
|
|
|
|
|
Tobias Ramforth
12 years ago