mysqlidatabase.php

<?php
 
if (!defined('XOOPS_ROOT_PATH')) {
    exit();
}

include_once XOOPS_ROOT_PATH.'/class/database/database.php';
 
mysqli_report( MYSQLI_REPORT_ERROR ); // for backword compat
 
class XoopsMysqliDatabase extends XoopsDatabase
{
    public $conn;

    public $mPrepareQuery=null;

    public function connect($selectdb = true)
    {
        $this->conn = mysqli_init();
 
        if (!$this->conn) {
            $this->logger->addQuery('', $this->error(), $this->errno());
            return false;
        }
 
        if (XOOPS_DB_PCONNECT == 1 && PHP_VERSION_ID >= 50300 ) {
            mysqli_real_connect($this->conn, 'p:'.XOOPS_DB_HOST, XOOPS_DB_USER, XOOPS_DB_PASS, null, null, null, MYSQLI_CLIENT_FOUND_ROWS);
        } else {
            mysqli_real_connect($this->conn, XOOPS_DB_HOST, XOOPS_DB_USER, XOOPS_DB_PASS, null, null, null, MYSQLI_CLIENT_FOUND_ROWS);
        }
 
        if (false != $selectdb) {
            if (!mysqli_select_db($this->conn, XOOPS_DB_NAME)) {
                $this->logger->addQuery('', $this->error(), $this->errno());
                return false;
            }
        }
 
        // set sql_mode to '' for backward compatibility
        if (version_compare(mysqli_get_server_info($this->conn), '5.6', '>=')) {
            mysqli_query($this->conn, 'SET SESSION sql_mode = \'\'');
        }
 
        return true;
    }

    public function genId($sequence)
    {
        return 0; // will use auto_increment
    }

    public function fetchRow($result)
    {
        return @ mysqli_fetch_row($result);
    }

    public function fetchArray($result)
    {
        return @ mysqli_fetch_assoc($result);
    }

    public function fetchBoth($result)
    {
        return @ mysqli_fetch_array($result, MYSQLI_BOTH);
    }

    public function getInsertId()
    {
        return mysqli_insert_id($this->conn);
    }

    public function getRowsNum($result)
    {
        return @ mysqli_num_rows($result);
    }

    public function getAffectedRows()
    {
        return mysqli_affected_rows($this->conn);
    }

    public function close()
    {
        mysqli_close($this->conn);
    }

    public function freeRecordSet($result)
    {
        return mysqli_free_result($result);
    }

    public function error()
    {
        return @ mysqli_error($this->conn);
    }

    public function errno()
    {
        return @ mysqli_errno($this->conn);
    }

    public function quoteString($str)
    {
        $str = '\''.mysqli_real_escape_string($this->conn, $str ?? '').'\'';
        return $str;
    }

    public function &queryF($sql, $limit=0, $start=0)
    {
        if (!empty($limit)) {
            if (empty($start)) {
                $sql .= ' LIMIT ' . (int)$limit;
            } else {
                $sql = $sql. ' LIMIT '.(int)$start.', '.(int)$limit;
            }
        }
        $result = mysqli_query($this->conn, $sql);
 
        if ($result) {
            $this->logger->addQuery($sql);
            return $result;
        } else {
            $this->logger->addQuery($sql, $this->error(), $this->errno());
            $ret = false;
            return $ret;
        }
    }

    public function &query($sql, $limit=0, $start=0)
    {
    }

    public function queryFromFile($file)
    {
        if (false !== ($fp = fopen($file, 'r'))) {
            include_once XOOPS_ROOT_PATH.'/class/database/sqlutility.php';
            $sql_queries = trim(fread($fp, filesize($file)));
            SqlUtility::splitMySqlFile($pieces, $sql_queries);
            foreach ($pieces as $query) {
                // [0] contains the prefixed query
                // [4] contains unprefixed table name
                $prefixed_query = SqlUtility::prefixQuery(trim($query), $this->prefix());
                if (false != $prefixed_query) {
                    $this->query($prefixed_query[0]);
                }
            }
            return true;
        }
        return false;
    }

    public function getFieldName($result, $offset)
    {
        if ($finfo = mysqli_fetch_field_direct($result, $offset)) {
            return $finfo->orgname?: $finfo->name;
        } else {
            return false;
        }
    }

    public function getFieldType($result, $offset)
    {
        if ($finfo = mysqli_fetch_field_direct($result, $offset)) {
            return $finfo->type;
        } else {
            return false;
        }
    }

    public function getFieldsNum($result)
    {
        return mysqli_num_fields($result);
    }

    public function setCharset($charset)
    {
        return mysqli_set_charset($this->conn, $charset);
    }

    public function prepare($query)
    {
        $count=0;
        while (false !== ($pos=strpos($query, '?'))) {
            $pre=substr($query, 0, $pos);
            $after='';
            if ($pos+1<=strlen($query)) {
                $after=substr($query, $pos+1);
            }
 
            $query=$pre.'{'.$count.'}'.$after;
            $count++;
        }
        $this->mPrepareQuery=$query;
    }

    public function bind_param()
    {
        if (func_num_args()<2) {
            return;
        }
 
        $types=func_get_arg(0);
        $count=strlen($types);
        if (func_num_args()<$count) {
            return;
        }
 
        $searches= [];
        $replaces= [];
        for ($i=0;$i<$count;$i++) {
            $searches[$i]='{'.$i.'}';
            switch (substr($types, $i, 1)) {
                case 'i':
                    $replaces[$i]=(int)func_get_arg($i+1);
                    break;
 
                case 's':
                    $replaces[$i]=$this->quoteString(func_get_arg($i+1));
                    break;
 
                case 'd':
                    $replaces[$i]= (float)func_get_arg($i + 1);
                    break;
 
                case 'b':
                    // Exception
                    die();
            }
        }
 
        $this->mPrepareQuery=str_replace($searches, $replaces, $this->mPrepareQuery);
    }

    public function &execute()
    {
        $result=&$this->query($this->mPrepareQuery);
        $this->mPrepareQuery=null;
        return $result;
    }

    public function &executeF()
    {
        $result=&$this->queryF($this->mPrepareQuery);
        $this->mPrepareQuery=null;
        return $result;
    }
}

class XoopsMysqliDatabaseSafe extends XoopsMysqliDatabase
{

    public function &query($sql, $limit=0, $start=0)
    {
        $result =& $this->queryF($sql, $limit, $start);
        return $result;
    }
}

class XoopsMysqliDatabaseProxy extends XoopsMysqliDatabase
{

    public function &query($sql, $limit=0, $start=0)
    {
        $sql = ltrim($sql);
        if (preg_match('/^SELECT/i', $sql)) {
            $ret = $this->queryF($sql, $limit, $start);
            return $ret;
        }
        $this->logger->addQuery($sql, 'Database update not allowed during processing of a GET request', 0);
 
        $ret = false;
        return $ret;
    }
}