FM / Controllers

/usr/share/phpmyadmin/libraries/classes/Controllers/

/usr/share/phpmyadmin/libraries/classes/Controllers

Name	Size	Mode	Actions
Database/	-	0755	rm
Preferences/	-	0755	rm
Server/	-	0755	rm
Setup/	-	0755	rm
Table/	-	0755	rm
AbstractController.php	2399	0644	edit dl rm
BrowseForeignersController.php	2325	0644	edit dl rm
ChangeLogController.php	3603	0644	edit dl rm
CheckRelationsController.php	1512	0644	edit dl rm
ColumnController.php	908	0644	edit dl rm
ConfigController.php	1370	0644	edit dl rm
DatabaseController.php	270	0644	edit dl rm
ErrorReportController.php	6029	0644	edit dl rm
ExportController.php	24066	0644	edit dl rm
ExportTemplateController.php	4212	0644	edit dl rm
GisDataEditorController.php	4906	0644	edit dl rm
HomeController.php	18249	0644	edit dl rm
ImportController.php	32537	0644	edit dl rm
ImportStatusController.php	2313	0644	edit dl rm
JavaScriptMessagesController.php	37407	0644	edit dl rm
LicenseController.php	968	0644	edit dl rm
LintController.php	1774	0644	edit dl rm
LogoutController.php	407	0644	edit dl rm
NavigationController.php	3335	0644	edit dl rm
NormalizationController.php	5669	0644	edit dl rm
PhpInfoController.php	681	0644	edit dl rm
SchemaExportController.php	1128	0644	edit dl rm
SqlController.php	11564	0644	edit dl rm
TableController.php	867	0644	edit dl rm
ThemesController.php	776	0644	edit dl rm
TransformationOverviewController.php	1792	0644	edit dl rm
TransformationWrapperController.php	7480	0644	edit dl rm
UserPasswordController.php	3351	0644	edit dl rm
VersionCheckController.php	1241	0644	edit dl rm
ViewCreateController.php	9622	0644	edit dl rm
ViewOperationsController.php	3339	0644	edit dl rm

Edit: /usr/share/phpmyadmin/libraries/classes/Controllers/ExportController.php (24066B)

<?php

declare(strict_types=1);

namespace PhpMyAdmin\Controllers;

use PhpMyAdmin\Controllers\Database\ExportController as DatabaseExportController;
use PhpMyAdmin\Core;
use PhpMyAdmin\Encoding;
use PhpMyAdmin\Exceptions\ExportException;
use PhpMyAdmin\Export;
use PhpMyAdmin\Message;
use PhpMyAdmin\Plugins;
use PhpMyAdmin\Plugins\ExportPlugin;
use PhpMyAdmin\Relation;
use PhpMyAdmin\Response;
use PhpMyAdmin\Sanitize;
use PhpMyAdmin\SqlParser\Parser;
use PhpMyAdmin\SqlParser\Statements\SelectStatement;
use PhpMyAdmin\SqlParser\Utils\Misc;
use PhpMyAdmin\Template;
use PhpMyAdmin\Url;
use PhpMyAdmin\Util;
use const PHP_EOL;
use function count;
use function function_exists;
use function in_array;
use function ini_set;
use function is_array;
use function ob_end_clean;
use function ob_get_length;
use function ob_get_level;
use function register_shutdown_function;
use function strlen;
use function time;

final class ExportController extends AbstractController
{
    /** @var Export */
    private $export;

/** @var Relation */
    private $relation;

/**
     * @param Response $response
     */
    public function __construct($response, Template $template, Export $export, Relation $relation)
    {
        parent::__construct($response, $template);
        $this->export = $export;
        $this->relation = $relation;
    }

public function index(): void
    {
        global $containerBuilder, $db, $export_type, $filename_template, $sql_query, $err_url, $message;
        global $compression, $crlf, $asfile, $buffer_needed, $save_on_server, $file_handle, $separate_files;
        global $output_charset_conversion, $output_kanji_conversion, $table, $what, $export_plugin, $single_table;
        global $compression_methods, $onserver, $back_button, $refreshButton, $save_filename, $filename;
        global $quick_export, $cfg, $tables, $table_select, $aliases, $dump_buffer, $dump_buffer_len;
        global $time_start, $charset, $remember_template, $mime_type, $num_tables, $dump_buffer_objects;
        global $active_page, $do_relation, $do_comments, $do_mime, $do_dates, $whatStrucOrData, $db_select;
        global $table_structure, $table_data, $lock_tables, $allrows, $limit_to, $limit_from;

$this->addScriptFiles(['export_output.js']);

/**
         * Sets globals from $_POST
         *
         * - Please keep the parameters in order of their appearance in the form
         * - Some of these parameters are not used, as the code below directly
         *   verifies from the superglobal $_POST or $_REQUEST
         * TODO: this should be removed to avoid passing user input to GLOBALS
         * without checking
         */
        $post_params = [
            'db',
            'table',
            'what',
            'single_table',
            'export_type',
            'export_method',
            'quick_or_custom',
            'db_select',
            'table_select',
            'table_structure',
            'table_data',
            'limit_to',
            'limit_from',
            'allrows',
            'lock_tables',
            'output_format',
            'filename_template',
            'maxsize',
            'remember_template',
            'charset',
            'compression',
            'as_separate_files',
            'knjenc',
            'xkana',
            'htmlword_structure_or_data',
            'htmlword_null',
            'htmlword_columns',
            'mediawiki_headers',
            'mediawiki_structure_or_data',
            'mediawiki_caption',
            'pdf_structure_or_data',
            'odt_structure_or_data',
            'odt_relation',
            'odt_comments',
            'odt_mime',
            'odt_columns',
            'odt_null',
            'codegen_structure_or_data',
            'codegen_format',
            'excel_null',
            'excel_removeCRLF',
            'excel_columns',
            'excel_edition',
            'excel_structure_or_data',
            'yaml_structure_or_data',
            'ods_null',
            'ods_structure_or_data',
            'ods_columns',
            'json_structure_or_data',
            'json_pretty_print',
            'json_unicode',
            'xml_structure_or_data',
            'xml_export_events',
            'xml_export_functions',
            'xml_export_procedures',
            'xml_export_tables',
            'xml_export_triggers',
            'xml_export_views',
            'xml_export_contents',
            'texytext_structure_or_data',
            'texytext_columns',
            'texytext_null',
            'phparray_structure_or_data',
            'sql_include_comments',
            'sql_header_comment',
            'sql_dates',
            'sql_relation',
            'sql_mime',
            'sql_use_transaction',
            'sql_disable_fk',
            'sql_compatibility',
            'sql_structure_or_data',
            'sql_create_database',
            'sql_drop_table',
            'sql_procedure_function',
            'sql_create_table',
            'sql_create_view',
            'sql_create_trigger',
            'sql_view_current_user',
            'sql_simple_view_export',
            'sql_if_not_exists',
            'sql_or_replace_view',
            'sql_auto_increment',
            'sql_backquotes',
            'sql_truncate',
            'sql_delayed',
            'sql_ignore',
            'sql_type',
            'sql_insert_syntax',
            'sql_max_query_size',
            'sql_hex_for_binary',
            'sql_utc_time',
            'sql_drop_database',
            'sql_views_as_tables',
            'sql_metadata',
            'csv_separator',
            'csv_enclosed',
            'csv_escaped',
            'csv_terminated',
            'csv_null',
            'csv_removeCRLF',
            'csv_columns',
            'csv_structure_or_data',
            // csv_replace should have been here but we use it directly from $_POST
            'latex_caption',
            'latex_structure_or_data',
            'latex_structure_caption',
            'latex_structure_continued_caption',
            'latex_structure_label',
            'latex_relation',
            'latex_comments',
            'latex_mime',
            'latex_columns',
            'latex_data_caption',
            'latex_data_continued_caption',
            'latex_data_label',
            'latex_null',
            'aliases',
        ];

foreach ($post_params as $one_post_param) {
            if (! isset($_POST[$one_post_param])) {
                continue;
            }

$GLOBALS[$one_post_param] = $_POST[$one_post_param];
        }

Util::checkParameters(['what', 'export_type']);

// sanitize this parameter which will be used below in a file inclusion
        $what = Core::securePath($_POST['what']);

// export class instance, not array of properties, as before
        /** @var ExportPlugin $export_plugin */
        $export_plugin = Plugins::getPlugin(
            'export',
            $what,
            'libraries/classes/Plugins/Export/',
            [
                'export_type' => $export_type,
                'single_table' => isset($single_table),
            ]
        );

// Check export type
        if (empty($export_plugin)) {
            Core::fatalError(__('Bad type!'));
        }

/**
         * valid compression methods
         */
        $compression_methods = [];
        if ($GLOBALS['cfg']['ZipDump'] && function_exists('gzcompress')) {
            $compression_methods[] = 'zip';
        }
        if ($GLOBALS['cfg']['GZipDump'] && function_exists('gzencode')) {
            $compression_methods[] = 'gzip';
        }

/**
         * init and variable checking
         */
        $compression = '';
        $onserver = false;
        $save_on_server = false;
        $buffer_needed = false;
        $back_button = '';
        $refreshButton = '';
        $save_filename = '';
        $file_handle = '';
        $err_url = '';
        $filename = '';
        $separate_files = '';

// Is it a quick or custom export?
        if (isset($_POST['quick_or_custom'])
            && $_POST['quick_or_custom'] === 'quick'
        ) {
            $quick_export = true;
        } else {
            $quick_export = false;
        }

if ($_POST['output_format'] === 'astext') {
            $asfile = false;
        } else {
            $asfile = true;
            $selectedCompression = $_POST['compression'] ?? '';
            if (isset($_POST['as_separate_files'])
                && ! empty($_POST['as_separate_files'])
            ) {
                if (! empty($selectedCompression)
                    && $selectedCompression === 'zip'
                ) {
                    $separate_files = $_POST['as_separate_files'];
                }
            }
            if (in_array($selectedCompression, $compression_methods)) {
                $compression = $selectedCompression;
                $buffer_needed = true;
            }
            if (($quick_export && ! empty($_POST['quick_export_onserver']))
                || (! $quick_export && ! empty($_POST['onserver']))
            ) {
                if ($quick_export) {
                    $onserver = $_POST['quick_export_onserver'];
                } else {
                    $onserver = $_POST['onserver'];
                }
                // Will we save dump on server?
                $save_on_server = ! empty($cfg['SaveDir']) && $onserver;
            }
        }

/**
         * If we are sending the export file (as opposed to just displaying it
         * as text), we have to bypass the usual PhpMyAdmin\Response mechanism
         */
        if (isset($_POST['output_format']) && $_POST['output_format'] === 'sendit' && ! $save_on_server) {
            $this->response->disable();
            //Disable all active buffers (see: ob_get_status(true) at this point)
            do {
                if (ob_get_length() > 0 || ob_get_level() > 0) {
                    $hasBuffer = ob_end_clean();
                } else {
                    $hasBuffer = false;
                }
            } while ($hasBuffer);
        }

$tables = [];
        // Generate error url and check for needed variables
        if ($export_type === 'server') {
            $err_url = Url::getFromRoute('/server/export');
        } elseif ($export_type === 'database' && strlen($db) > 0) {
            $err_url = Url::getFromRoute('/database/export', ['db' => $db]);
            // Check if we have something to export
            if (isset($table_select)) {
                $tables = $table_select;
            } else {
                $tables = [];
            }
        } elseif ($export_type === 'table' && strlen($db) > 0 && strlen($table) > 0) {
            $err_url = Url::getFromRoute('/table/export', [
                'db' => $db,
                'table' => $table,
            ]);
        } elseif ($export_type === 'raw') {
            $err_url = Url::getFromRoute('/server/export', ['sql_query' => $sql_query]);
        } else {
            Core::fatalError(__('Bad parameters!'));
        }

// Merge SQL Query aliases with Export aliases from
        // export page, Export page aliases are given more
        // preference over SQL Query aliases.
        $parser = new Parser($sql_query);
        $aliases = [];
        if (! empty($parser->statements[0])
            && ($parser->statements[0] instanceof SelectStatement)
        ) {
            $aliases = Misc::getAliases($parser->statements[0], $db);
        }
        if (! empty($_POST['aliases'])) {
            $aliases = $this->export->mergeAliases($aliases, $_POST['aliases']);
            $_SESSION['tmpval']['aliases'] = $_POST['aliases'];
        }

/**
         * Increase time limit for script execution and initializes some variables
         */
        Util::setTimeLimit();
        if (! empty($cfg['MemoryLimit'])) {
            ini_set('memory_limit', $cfg['MemoryLimit']);
        }
        register_shutdown_function([$this->export, 'shutdown']);
        // Start with empty buffer
        $dump_buffer = '';
        $dump_buffer_len = 0;

// Array of dump_buffers - used in separate file exports
        $dump_buffer_objects = [];

// We send fake headers to avoid browser timeout when buffering
        $time_start = time();

// Defines the default <CR><LF> format.
        // For SQL always use \n as MySQL wants this on all platforms.
        if ($what === 'sql') {
            $crlf = "\n";
        } else {
            $crlf = PHP_EOL;
        }

$output_kanji_conversion = Encoding::canConvertKanji();

// Do we need to convert charset?
        $output_charset_conversion = $asfile
            && Encoding::isSupported()
            && isset($charset) && $charset !== 'utf-8';

// Use on the fly compression?
        $GLOBALS['onfly_compression'] = $GLOBALS['cfg']['CompressOnFly']
            && $compression === 'gzip';
        if ($GLOBALS['onfly_compression']) {
            $GLOBALS['memory_limit'] = $this->export->getMemoryLimit();
        }

// Generate filename and mime type if needed
        if ($asfile) {
            if (empty($remember_template)) {
                $remember_template = '';
            }
            [$filename, $mime_type] = $this->export->getFilenameAndMimetype(
                $export_type,
                $remember_template,
                $export_plugin,
                $compression,
                $filename_template
            );
        } else {
            $mime_type = '';
        }

// For raw query export, filename will be export.extension
        if ($export_type === 'raw') {
            [$filename] = $this->export->getFinalFilenameAndMimetypeForFilename(
                $export_plugin,
                $compression,
                'export'
            );
        }

// Open file on server if needed
        if ($save_on_server) {
            [$save_filename, $message, $file_handle] = $this->export->openFile(
                $filename,
                $quick_export
            );

// problem opening export file on server?
            if (! empty($message)) {
                $this->export->showPage($export_type);

return;
            }
        } else {
            /**
             * Send headers depending on whether the user chose to download a dump file
             * or not
             */
            if ($asfile) {
                // Download
                // (avoid rewriting data containing HTML with anchors and forms;
                // this was reported to happen under Plesk)
                ini_set('url_rewriter.tags', '');
                $filename = Sanitize::sanitizeFilename($filename);

Core::downloadHeader($filename, $mime_type);
            } else {
                // HTML
                if ($export_type === 'database') {
                    $num_tables = count($tables);
                    if ($num_tables === 0) {
                        $message = Message::error(
                            __('No tables found in database.')
                        );
                        $active_page = Url::getFromRoute('/database/export');
                        /** @var DatabaseExportController $controller */
                        $controller = $containerBuilder->get(DatabaseExportController::class);
                        $controller->index();
                        exit;
                    }
                }
                [$html, $back_button, $refreshButton] = $this->export->getHtmlForDisplayedExportHeader(
                    $export_type,
                    $db,
                    $table
                );
                echo $html;
                unset($html);
            }
        }

try {
            // Re - initialize
            $dump_buffer = '';
            $dump_buffer_len = 0;

// Add possibly some comments to export
            if (! $export_plugin->exportHeader()) {
                throw new ExportException('Failure during header export.');
            }

// Will we need relation & co. setup?
            $do_relation = isset($GLOBALS[$what . '_relation']);
            $do_comments = isset($GLOBALS[$what . '_include_comments'])
                || isset($GLOBALS[$what . '_comments']);
            $do_mime     = isset($GLOBALS[$what . '_mime']);
            if ($do_relation || $do_comments || $do_mime) {
                $this->relation->getRelationsParam();
            }

// Include dates in export?
            $do_dates = isset($GLOBALS[$what . '_dates']);

$whatStrucOrData = $GLOBALS[$what . '_structure_or_data'];

if ($export_type === 'raw') {
                $whatStrucOrData = 'raw';
            }

/**
             * Builds the dump
             */
            if ($export_type === 'server') {
                if (! isset($db_select)) {
                    $db_select = '';
                }
                $this->export->exportServer(
                    $db_select,
                    $whatStrucOrData,
                    $export_plugin,
                    $crlf,
                    $err_url,
                    $export_type,
                    $do_relation,
                    $do_comments,
                    $do_mime,
                    $do_dates,
                    $aliases,
                    $separate_files
                );
            } elseif ($export_type === 'database') {
                if (! isset($table_structure) || ! is_array($table_structure)) {
                    $table_structure = [];
                }
                if (! isset($table_data) || ! is_array($table_data)) {
                    $table_data = [];
                }
                if (! empty($_POST['structure_or_data_forced'])) {
                    $table_structure = $tables;
                    $table_data = $tables;
                }
                if (isset($lock_tables)) {
                    $this->export->lockTables($db, $tables, 'READ');
                    try {
                        $this->export->exportDatabase(
                            $db,
                            $tables,
                            $whatStrucOrData,
                            $table_structure,
                            $table_data,
                            $export_plugin,
                            $crlf,
                            $err_url,
                            $export_type,
                            $do_relation,
                            $do_comments,
                            $do_mime,
                            $do_dates,
                            $aliases,
                            $separate_files
                        );
                    } finally {
                        $this->export->unlockTables();
                    }
                } else {
                    $this->export->exportDatabase(
                        $db,
                        $tables,
                        $whatStrucOrData,
                        $table_structure,
                        $table_data,
                        $export_plugin,
                        $crlf,
                        $err_url,
                        $export_type,
                        $do_relation,
                        $do_comments,
                        $do_mime,
                        $do_dates,
                        $aliases,
                        $separate_files
                    );
                }
            } elseif ($export_type === 'raw') {
                Export::exportRaw(
                    $whatStrucOrData,
                    $export_plugin,
                    $crlf,
                    $err_url,
                    $sql_query,
                    $export_type
                );
            } else {
                // We export just one table
                // $allrows comes from the form when "Dump all rows" has been selected
                if (! isset($allrows)) {
                    $allrows = '';
                }
                if (! isset($limit_to)) {
                    $limit_to = '0';
                }
                if (! isset($limit_from)) {
                    $limit_from = '0';
                }
                if (isset($lock_tables)) {
                    try {
                        $this->export->lockTables($db, [$table], 'READ');
                        $this->export->exportTable(
                            $db,
                            $table,
                            $whatStrucOrData,
                            $export_plugin,
                            $crlf,
                            $err_url,
                            $export_type,
                            $do_relation,
                            $do_comments,
                            $do_mime,
                            $do_dates,
                            $allrows,
                            $limit_to,
                            $limit_from,
                            $sql_query,
                            $aliases
                        );
                    } finally {
                        $this->export->unlockTables();
                    }
                } else {
                    $this->export->exportTable(
                        $db,
                        $table,
                        $whatStrucOrData,
                        $export_plugin,
                        $crlf,
                        $err_url,
                        $export_type,
                        $do_relation,
                        $do_comments,
                        $do_mime,
                        $do_dates,
                        $allrows,
                        $limit_to,
                        $limit_from,
                        $sql_query,
                        $aliases
                    );
                }
            }
            if (! $export_plugin->exportFooter()) {
                throw new ExportException('Failure during footer export.');
            }
        } catch (ExportException $e) {
            null; // Avoid phpcs error...
        }

if ($save_on_server && ! empty($message)) {
            $this->export->showPage($export_type);

return;
        }

/**
         * Send the dump as a file...
         */
        if (empty($asfile)) {
            echo $this->export->getHtmlForDisplayedExportFooter($back_button, $refreshButton);

return;
        }

// Convert the charset if required.
        if ($output_charset_conversion) {
            $dump_buffer = Encoding::convertString(
                'utf-8',
                $GLOBALS['charset'],
                $dump_buffer
            );
        }

// Compression needed?
        if ($compression) {
            if (! empty($separate_files)) {
                $dump_buffer = $this->export->compress(
                    $dump_buffer_objects,
                    $compression,
                    $filename
                );
            } else {
                $dump_buffer = $this->export->compress($dump_buffer, $compression, $filename);
            }
        }

/* If we saved on server, we have to close file now */
        if ($save_on_server) {
            $message = $this->export->closeFile(
                $file_handle,
                $dump_buffer,
                $save_filename
            );
            $this->export->showPage($export_type);

return;
        }

echo $dump_buffer;
    }

public function checkTimeOut(): void
    {
        $this->response->setAjax(true);

if (isset($_SESSION['pma_export_error'])) {
            unset($_SESSION['pma_export_error']);
            $this->response->addJSON('message', 'timeout');

return;
        }

$this->response->addJSON('message', 'success');
    }
}

cmd: