| Current File : /home/escuelai/public_html/it/src/DBmysqlIterator.php |
<?php
/**
* ---------------------------------------------------------------------
*
* GLPI - Gestionnaire Libre de Parc Informatique
*
* http://glpi-project.org
*
* @copyright 2015-2022 Teclib' and contributors.
* @copyright 2003-2014 by the INDEPNET Development Team.
* @licence https://www.gnu.org/licenses/gpl-3.0.html
*
* ---------------------------------------------------------------------
*
* LICENSE
*
* This file is part of GLPI.
*
* This program is free software: you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation, either version 3 of the License, or
* (at your option) any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with this program. If not, see <https://www.gnu.org/licenses/>.
*
* ---------------------------------------------------------------------
*/
/**
* Database iterator class for Mysql
**/
class DBmysqlIterator implements SeekableIterator, Countable
{
/**
* DBmysql object
* @var DBmysql
*/
private $conn;
// Current SQL query
private $sql;
// Current result
private $res = false;
/**
* Total number of rows.
* @var int
*/
private $count;
/**
* Current row value.
* @var mixed
*/
private $row;
/**
* Current pointer position.
* @var int
*/
private $position = null;
//Known query operators
private $allowed_operators = [
'=',
'!=',
'<',
'<=',
'>',
'>=',
'<>',
'LIKE',
'REGEXP',
'NOT LIKE',
'NOT REGEX',
'&',
'|'
];
/**
* Constructor
*
* @param DBmysql $dbconnexion Database Connnexion (must be a CommonDBTM object)
*
* @return void
*/
public function __construct($dbconnexion)
{
$this->conn = $dbconnexion;
}
/**
* Executes the query
*
* @param string|array $table Table name (optional when $crit have FROM entry)
* @param string|array $crit Fields/values, ex array("id"=>1), if empty => all rows (default '')
* @param boolean $debug To log the request (default false)
*
* @return DBmysqlIterator
*/
public function execute($table, $crit = "", $debug = false)
{
$this->buildQuery($table, $crit, $debug);
$this->res = ($this->conn ? $this->conn->query($this->sql) : false);
$this->count = $this->res instanceof \mysqli_result ? $this->conn->numrows($this->res) : 0;
$this->setPosition(0);
return $this;
}
/**
* Builds the query
*
* @param string|array $table Table name (optional when $crit have FROM entry)
* @param string|array $crit Fields/values, ex array("id"=>1), if empty => all rows (default '')
* @param boolean $log To log the request (default false)
*
* @return void
*/
public function buildQuery($table, $crit = "", $log = false)
{
$this->sql = null;
$this->res = false;
$is_legacy = false;
if (is_string($table) && strpos($table, " ")) {
$names = preg_split('/\s+AS\s+/i', $table);
if (isset($names[1]) && strpos($names[1], ' ') || !isset($names[1]) || strpos($names[0], ' ')) {
$is_legacy = true;
}
}
if ($is_legacy) {
//if ($_SESSION['glpi_use_mode'] == Session::DEBUG_MODE) {
// trigger_error("Deprecated usage of SQL in DB/request (full query)", E_USER_DEPRECATED);
//}
$this->sql = $table;
} else {
// Modern way
if (is_array($table) && isset($table['FROM'])) {
// Shift the args
$debug = $crit;
$crit = $table;
$table = $crit['FROM'];
unset($crit['FROM']);
}
// Check field, orderby, limit, start in criterias
$field = "";
$distinct = false;
$orderby = null;
$limit = 0;
$start = 0;
$where = '';
$count = '';
$join = [];
$groupby = '';
$having = '';
if (is_array($crit) && count($crit)) {
foreach ($crit as $key => $val) {
switch ((string)$key) {
case 'SELECT':
case 'FIELDS':
$field = $val;
unset($crit[$key]);
break;
case 'DISTINCT':
if ($val) {
$distinct = true;
}
unset($crit[$key]);
break;
case 'COUNT':
$count = $val;
unset($crit[$key]);
break;
case 'ORDER':
case 'ORDERBY':
$orderby = $val;
unset($crit[$key]);
break;
case 'LIMIT':
$limit = $val;
unset($crit[$key]);
break;
case 'START':
case 'OFFSET':
$start = $val;
unset($crit[$key]);
break;
case 'WHERE':
$where = $val;
unset($crit[$key]);
break;
case 'HAVING':
$having = $val;
unset($crit[$key]);
break;
case 'GROUP':
case 'GROUPBY':
$groupby = $val;
unset($crit[$key]);
break;
case 'JOIN':
case 'LEFT JOIN':
case 'RIGHT JOIN':
case 'INNER JOIN':
$join[$key] = $val;
unset($crit[$key]);
break;
}
}
}
$this->sql = 'SELECT ';
$first = true;
// SELECT field list
if ($count) {
$this->sql .= 'COUNT(';
if ($distinct) {
$this->sql .= 'DISTINCT ';
}
if (!empty($field) && !is_array($field)) {
$this->sql .= "" . DBmysql::quoteName($field);
} else {
if ($distinct) {
trigger_error("With COUNT and DISTINCT, you must specify exactly one field, or use 'COUNT DISTINCT'", E_USER_ERROR);
}
$this->sql .= "*";
}
$this->sql .= ") AS $count";
$first = false;
}
if (!$count || $count && is_array($field)) {
if ($distinct && !$count) {
$this->sql .= 'DISTINCT ';
}
if (empty($field)) {
$this->sql .= '*';
}
if (!empty($field)) {
if (!is_array($field)) {
$field = [$field];
}
foreach ($field as $t => $f) {
if ($first) {
$first = false;
} else {
$this->sql .= ', ';
}
$this->sql .= $this->handleFields($t, $f);
}
}
}
// FROM table list
if (is_array($table)) {
if (count($table)) {
$table = array_map([DBmysql::class, 'quoteName'], $table);
$this->sql .= ' FROM ' . implode(", ", $table);
} else {
trigger_error("Missing table name", E_USER_ERROR);
}
} else if ($table) {
if ($table instanceof \AbstractQuery) {
$table = $table->getQuery();
} else if ($table instanceof \QueryExpression) {
$table = $table->getValue();
} else {
$table = DBmysql::quoteName($table);
}
$this->sql .= " FROM $table";
} else {
/*
* TODO filter with if ($where || !empty($crit)) {
* but not usefull for now, as we CANNOT write somthing like "SELECT NOW()"
*/
trigger_error("Missing table name", E_USER_ERROR);
}
// JOIN
if (!empty($join)) {
$this->sql .= $this->analyseJoins($join);
}
// WHERE criteria list
if (!empty($crit)) {
$this->sql .= " WHERE " . $this->analyseCrit($crit);
if ($where) {
trigger_error(
'Criteria found both inside and outside "WHERE" key. Some of them will be ignored',
E_USER_WARNING
);
}
} else if ($where) {
$this->sql .= " WHERE " . $this->analyseCrit($where);
}
// GROUP BY field list
if (is_array($groupby)) {
if (count($groupby)) {
$groupby = array_map([DBmysql::class, 'quoteName'], $groupby);
$this->sql .= ' GROUP BY ' . implode(", ", $groupby);
} else {
trigger_error("Missing group by field", E_USER_ERROR);
}
} else if ($groupby) {
$groupby = DBmysql::quoteName($groupby);
$this->sql .= " GROUP BY $groupby";
}
// HAVING criteria list
if ($having) {
$this->sql .= " HAVING " . $this->analyseCrit($having);
}
// ORDER BY
if ($orderby !== null) {
$this->sql .= $this->handleOrderClause($orderby);
}
//LIMIT & OFFSET
$this->sql .= $this->handleLimits($limit, $start);
}
if ($log == true || defined('GLPI_SQL_DEBUG') && GLPI_SQL_DEBUG == true) {
Toolbox::logSqlDebug("Generated query:", $this->getSql());
}
}
/**
* Handle "ORDER BY" SQL clause
*
* @param string|array $clause Clause parameters
*
* @reutn string
*/
public function handleOrderClause($clause)
{
if (!is_array($clause)) {
$clause = [$clause];
}
$cleanorderby = [];
foreach ($clause as $o) {
if (is_string($o)) {
$fields = explode(',', $o);
foreach ($fields as $field) {
$new = '';
$tmp = explode(' ', trim($field));
$new .= DBmysql::quoteName($tmp[0]);
// ASC OR DESC added
if (isset($tmp[1]) && in_array($tmp[1], ['ASC', 'DESC'])) {
$new .= ' ' . $tmp[1];
}
$cleanorderby[] = $new;
}
} else if ($o instanceof QueryExpression) {
$cleanorderby[] = $o->getValue();
} else {
trigger_error("Invalid order clause", E_USER_ERROR);
}
}
return " ORDER BY " . implode(", ", $cleanorderby);
}
/**
* Handle LIMIT and OFFSET
*
* @param integer $limit SQL LIMIT
* @param integer $offset Start OFFSET (defaults to null)
*
* @return string
*/
public function handleLimits($limit, $offset = null)
{
$limits = '';
if (is_numeric($limit) && ($limit > 0)) {
$limits = " LIMIT $limit";
if (is_numeric($offset) && ($offset > 0)) {
$limits .= " OFFSET $offset";
}
}
return $limits;
}
/**
* Handle fields
*
* @param integer|string $t Table name or function
* @param array|string $f Field(s) name(s)
*
* @return void
*/
private function handleFields($t, $f)
{
if (is_numeric($t)) {
if ($f instanceof \AbstractQuery) {
return $f->getQuery();
} else if ($f instanceof \QueryExpression) {
return $f->getValue();
} else {
return DBmysql::quoteName($f);
}
} else {
switch ($t) {
case 'COUNT DISTINCT':
case 'DISTINCT COUNT':
if (is_array($f)) {
$sub_count = [];
foreach ($f as $sub_f) {
$sub_count[] = $this->handleFieldsAlias("COUNT(DISTINCT", $sub_f, ')');
}
return implode(", ", $sub_count);
} else {
return $this->handleFieldsAlias("COUNT(DISTINCT", $f, ')');
}
break;
case 'COUNT':
case 'SUM':
case 'AVG':
case 'MAX':
case 'MIN':
if (is_array($f)) {
$sub_aggr = [];
foreach ($f as $sub_f) {
$sub_aggr[] = $this->handleFields($t, $sub_f);
}
return implode(", ", $sub_aggr);
} else {
return $this->handleFieldsAlias($t, $f);
}
break;
default:
if (is_array($f)) {
$t = DBmysql::quoteName($t);
$f = array_map([DBmysql::class, 'quoteName'], $f);
return "$t." . implode(", $t.", $f);
} else {
$t = DBmysql::quoteName($t);
$f = ($f == '*' ? $f : DBmysql::quoteName($f));
return "$t.$f";
}
break;
}
}
}
/**
* Handle alias on fields
*
* @param string $t Function name
* @param string $f Field name (with alias if any)
* @param string $suffix Suffix to append, defaults to ''
*
* @return string
*/
private function handleFieldsAlias($t, $f, $suffix = '')
{
$names = preg_split('/\s+AS\s+/i', $f);
$expr = "$t(" . $this->handleFields(0, $names[0]) . "$suffix)";
if (isset($names[1])) {
$expr .= " AS " . DBmysql::quoteName($names[1]);
}
return $expr;
}
/**
* Retrieve the SQL statement
*
* @since 9.1
*
* @return string
*/
public function getSql()
{
return preg_replace('/ +/', ' ', $this->sql);
}
/**
* Destructor
*
* @return void
*/
public function __destruct()
{
if ($this->res instanceof \mysqli_result) {
$this->conn->freeResult($this->res);
}
}
/**
* Generate the SQL statement for a array of criteria
*
* @param string[] $crit Criteria
* @param string $bool Boolean operator (default AND)
*
* @return string
*/
public function analyseCrit($crit, $bool = "AND")
{
if (!is_array($crit)) {
//if ($_SESSION['glpi_use_mode'] == Session::DEBUG_MODE) {
// trigger_error("Deprecated usage of SQL in DB/request (criteria)", E_USER_DEPRECATED);
//}
return $crit;
}
$ret = "";
foreach ($crit as $name => $value) {
if (!empty($ret)) {
$ret .= " $bool ";
}
if (is_numeric($name)) {
// no key and direct expression
if ($value instanceof QueryExpression) {
$ret .= $value->getValue();
} else if ($value instanceof QuerySubQuery) {
$ret .= $value->getQuery();
} else {
// No Key case => recurse.
$ret .= "(" . $this->analyseCrit($value) . ")";
}
} else if (($name === "OR") || ($name === "AND")) {
// Binary logical operator
$ret .= "(" . $this->analyseCrit($value, $name) . ")";
} else if ($name === "NOT") {
// Uninary logicial operator
$ret .= " NOT (" . $this->analyseCrit($value) . ")";
} else if ($name === "FKEY" || $name === 'ON') {
// Foreign Key condition
$ret .= $this->analyseFkey($value);
} else if ($name === 'RAW') {
$key = key($value);
$value = current($value);
$ret .= '((' . $key . ') ' . $this->analyseCriterion($value) . ')';
} else {
$ret .= DBmysql::quoteName($name) . ' ' . $this->analyseCriterion($value);
}
}
return $ret;
}
/**
* analyse a criterion
*
* @since 9.3.1
*
* @param mixed $value Value to analyse
*
* @return string
*/
private function analyseCriterion($value)
{
$criterion = null;
if (is_null($value) || (is_string($value) && strtolower($value) === 'null')) {
// NULL condition
$criterion = 'IS NULL';
} else {
if (is_array($value)) {
if (count($value) == 2 && isset($value[0]) && $this->isOperator($value[0])) {
$comparison = $value[0];
$criterion_value = $value[1];
} else {
if (!count($value)) {
throw new \RuntimeException('Empty IN are not allowed');
}
// Array of Values
return "IN (" . $this->analyseCriterionValue($value) . ")";
}
} else {
$comparison = ($value instanceof \AbstractQuery ? 'IN' : '=');
$criterion_value = $value;
}
$criterion = "$comparison " . $this->getCriterionValue($criterion_value);
}
return $criterion;
}
/**
* Handle a criterion value
*
* @since 9.5.0
*
* @param mixed $value The value to handle. This may be:
* - an instance of AbstractQuery
* - a QueryExpression
* - a value quoted as a name in the db engine
* - a QueryParam
* - a value or an array of values
*
* @return string
*/
private function getCriterionValue($value)
{
if ($value instanceof \AbstractQuery) {
return $value->getQuery();
} else if ($value instanceof \QueryExpression) {
return $value->getValue();
} else if ($value instanceof \QueryParam) {
return $value->getValue();
} else {
return $this->analyseCriterionValue($value);
}
}
private function analyseCriterionValue($value)
{
$crit_value = null;
if (is_array($value)) {
foreach ($value as $k => $v) {
$value[$k] = DBmysql::quoteValue($v);
}
$crit_value = implode(', ', $value);
} else {
$crit_value = DBmysql::quoteValue($value);
}
return $crit_value;
}
/**
* analyse an array of joins criteria
*
* @since 9.4.0
*
* @param array $joinarray Array of joins to analyse
* [jointype => [table => criteria]]
*
* @return string
*/
public function analyseJoins(array $joinarray)
{
$query = '';
foreach ($joinarray as $jointype => $jointables) {
if (!in_array($jointype, ['JOIN', 'LEFT JOIN', 'INNER JOIN', 'RIGHT JOIN'])) {
throw new \RuntimeException('BAD JOIN');
}
if ($jointype == 'JOIN') {
$jointype = 'LEFT JOIN';
}
if (!is_array($jointables)) {
trigger_error("BAD JOIN, value must be [ table => criteria ]", E_USER_ERROR);
continue;
}
foreach ($jointables as $jointablekey => $jointablecrit) {
if (isset($jointablecrit['TABLE'])) {
//not a "simple" FKEY
$jointablekey = $jointablecrit['TABLE'];
unset($jointablecrit['TABLE']);
} else if (is_numeric($jointablekey) || $jointablekey == 'FKEY' || $jointablekey == 'ON') {
throw new \RuntimeException('BAD JOIN');
}
if ($jointablekey instanceof \QuerySubQuery) {
$jointablekey = $jointablekey->getQuery();
} else {
$jointablekey = DBmysql::quoteName($jointablekey);
}
$query .= " $jointype $jointablekey ON (" . $this->analyseCrit($jointablecrit) . ")";
}
}
return $query;
}
/**
* Analyse foreign keys
*
* @param mixed $values Values for Foreign keys
*
* @return string
*/
private function analyseFkey($values)
{
if (is_array($values)) {
$keys = array_keys($values);
if (count($values) == 2) {
$t1 = $keys[0];
$f1 = $values[$t1];
$t2 = $keys[1];
$f2 = $values[$t2];
if ($f2 instanceof QuerySubQuery) {
return (is_numeric($t1) ? DBmysql::quoteName($f1) : DBmysql::quoteName($t1) . '.' . DBmysql::quoteName($f1)) . ' = ' .
$f2->getQuery();
} else {
return (is_numeric($t1) ? DBmysql::quoteName($f1) : DBmysql::quoteName($t1) . '.' . DBmysql::quoteName($f1)) . ' = ' .
(is_numeric($t2) ? DBmysql::quoteName($f2) : DBmysql::quoteName($t2) . '.' . DBmysql::quoteName($f2));
}
} else if (count($values) == 3) {
$condition = array_pop($values);
$fkey = $this->analyseFkey($values);
return $fkey . ' ' . key($condition) . ' ' . $this->analyseCrit(current($condition));
}
}
trigger_error("BAD FOREIGN KEY, should be [ table1 => key1, table2 => key2 ] or [ table1 => key1, table2 => key2, [criteria]]", E_USER_ERROR);
}
/**
* Rewind the Iterator to the first element
*
* @return void
*/
public function rewind(): void
{
$this->setPosition(0);
}
/**
* Return the current element
*
* @return mixed
*/
#[ReturnTypeWillChange]
public function current()
{
return $this->row;
}
/**
* Return the key of the current element
*
* @return mixed
*/
#[ReturnTypeWillChange]
public function key()
{
return $this->row !== null ? ($this->row["id"] ?? $this->position) : null;
}
/**
* Move forward to next element
*
* @return void
*/
public function next(): void
{
$this->setPosition($this->position + 1);
}
/**
* Checks if current position is valid
*
* @return bool
*/
public function valid(): bool
{
return $this->res instanceof \mysqli_result && $this->position < $this->count;
}
/**
* Number of rows on a result
*
* @return integer
*/
public function numrows()
{
return $this->count;
}
/**
* Number of rows on a result
*
* @since 9.2
*
* @return int
*/
public function count(): int
{
return $this->count;
}
public function seek(int $position): void
{
if ($position < 0 || $position + 1 > $this->count) {
throw new \OutOfBoundsException();
}
$this->setPosition($position);
}
/**
* Change pointer position, and fetch corresponding row value.
*
* @param int $position
*
* @return void
*/
private function setPosition(int $position): void
{
if (!($this->res instanceof \mysqli_result)) {
// Result is not valid, nothing to do.
return;
}
if ($position === $this->position) {
// Position does not changed, nothing to do
return;
}
if ($position === 0 && $this->position !== null || $position !== $this->position + 1) {
// position is set to 0 and was set previously (rewind case)
// OR position is not moved to next element
// => seek to requested position
$this->conn->dataSeek($this->res, $position);
}
$this->position = $position;
$this->row = $this->conn->fetchAssoc($this->res);
}
/**
* Do we have an operator?
*
* @param string $value Value to check
*
* @return boolean
*/
public function isOperator($value)
{
return in_array($value, $this->allowed_operators, true);
}
}