FM / classes

/usr/share/phpmyadmin/libraries/classes/

/usr/share/phpmyadmin/libraries/classes

Name	Size	Mode	Actions
Charsets/	-	0755	rm
Command/	-	0755	rm
Config/	-	0755	rm
Controllers/	-	0755	rm
Database/	-	0755	rm
Dbal/	-	0755	rm
Display/	-	0755	rm
Engines/	-	0755	rm
Exceptions/	-	0755	rm
Export/	-	0755	rm
Gis/	-	0755	rm
Html/	-	0755	rm
Import/	-	0755	rm
Navigation/	-	0755	rm
Plugins/	-	0755	rm
Properties/	-	0755	rm
Providers/	-	0755	rm
Query/	-	0755	rm
Server/	-	0755	rm
Setup/	-	0755	rm
Table/	-	0755	rm
Twig/	-	0755	rm
Utils/	-	0755	rm
Advisor.php	12517	0644	edit dl rm
Bookmark.php	10944	0644	edit dl rm
BrowseForeigners.php	11083	0644	edit dl rm
Charsets.php	7267	0644	edit dl rm
CheckUserPrivileges.php	12230	0644	edit dl rm
Config.php	46456	0644	edit dl rm
Console.php	3460	0644	edit dl rm
Core.php	43344	0644	edit dl rm
CreateAddField.php	17993	0644	edit dl rm
DatabaseInterface.php	76802	0644	edit dl rm
DbTableExists.php	3287	0644	edit dl rm
Encoding.php	8715	0644	edit dl rm
Error.php	14304	0644	edit dl rm
ErrorHandler.php	17557	0644	edit dl rm
ErrorReport.php	9364	0644	edit dl rm
Export.php	47351	0644	edit dl rm
File.php	21786	0644	edit dl rm
FileListing.php	2923	0644	edit dl rm
Font.php	5718	0644	edit dl rm
Footer.php	10794	0644	edit dl rm
Git.php	18381	0644	edit dl rm
Header.php	21967	0644	edit dl rm
Import.php	58840	0644	edit dl rm
Index.php	15428	0644	edit dl rm
IndexColumn.php	4331	0644	edit dl rm
InsertEdit.php	133309	0644	edit dl rm
InternalRelations.php	17730	0644	edit dl rm
IpAllowDeny.php	9997	0644	edit dl rm
Language.php	4568	0644	edit dl rm
LanguageManager.php	24532	0644	edit dl rm
Linter.php	5374	0644	edit dl rm
ListAbstract.php	1814	0644	edit dl rm
ListDatabase.php	4402	0644	edit dl rm
Logging.php	2781	0644	edit dl rm
Menu.php	21812	0644	edit dl rm
Message.php	19547	0644	edit dl rm
Mime.php	916	0644	edit dl rm
Normalization.php	42475	0644	edit dl rm
OpenDocument.php	8617	0644	edit dl rm
Operations.php	38748	0644	edit dl rm
OutputBuffering.php	4074	0644	edit dl rm
ParseAnalyze.php	2429	0644	edit dl rm
Partition.php	7340	0644	edit dl rm
Pdf.php	4449	0644	edit dl rm
Plugins.php	25783	0644	edit dl rm
Profiling.php	2317	0644	edit dl rm
RecentFavoriteTable.php	12297	0644	edit dl rm
Relation.php	79247	0644	edit dl rm
RelationCleanup.php	15051	0644	edit dl rm
Replication.php	4843	0644	edit dl rm
ReplicationGui.php	22038	0644	edit dl rm
ReplicationInfo.php	4943	0644	edit dl rm
Response.php	16864	0644	edit dl rm
Routing.php	5845	0644	edit dl rm
Sanitize.php	12418	0644	edit dl rm
SavedSearches.php	12221	0644	edit dl rm
Scripts.php	3726	0644	edit dl rm
Session.php	8198	0644	edit dl rm
Sql.php	68272	0644	edit dl rm
SqlQueryForm.php	7286	0644	edit dl rm
StorageEngine.php	12828	0644	edit dl rm
SubPartition.php	3398	0644	edit dl rm
SystemDatabase.php	3748	0644	edit dl rm
Table.php	97961	0644	edit dl rm
TablePartitionDefinition.php	6664	0644	edit dl rm
Template.php	3962	0644	edit dl rm
Theme.php	8969	0644	edit dl rm
ThemeManager.php	9815	0644	edit dl rm
Tracker.php	30497	0644	edit dl rm
Tracking.php	38141	0644	edit dl rm
Transformations.php	16685	0644	edit dl rm
TwoFactor.php	6968	0644	edit dl rm
Types.php	25805	0644	edit dl rm
Url.php	8973	0644	edit dl rm
UserPassword.php	7284	0644	edit dl rm
UserPreferences.php	8657	0644	edit dl rm
Util.php	104768	0644	edit dl rm
Version.php	533	0644	edit dl rm
VersionInformation.php	7319	0644	edit dl rm
ZipExtension.php	11017	0644	edit dl rm

Edit: /usr/share/phpmyadmin/libraries/classes/SavedSearches.php (12221B)

<?php
/**
 * Saved searches managing
 */

declare(strict_types=1);

namespace PhpMyAdmin;

use function count;
use function intval;
use function is_string;
use function json_decode;
use function json_encode;
use function max;
use function min;

/**
 * Saved searches managing
 */
class SavedSearches
{
    /**
     * Global configuration
     *
     * @var array
     */
    private $config = null;

/**
     * Id
     *
     * @var int|null
     */
    private $id = null;

/**
     * Username
     *
     * @var string
     */
    private $username = null;

/**
     * DB name
     *
     * @var string
     */
    private $dbname = null;

/**
     * Saved search name
     *
     * @var string
     */
    private $searchName = null;

/**
     * Criterias
     *
     * @var array
     */
    private $criterias = null;

/** @var Relation */
    private $relation;

/**
     * @param array    $config   Global configuration
     * @param Relation $relation Relation instance
     */
    public function __construct(array $config, Relation $relation)
    {
        $this->setConfig($config);
        $this->relation = $relation;
    }

/**
     * Setter of id
     *
     * @param int|null $searchId Id of search
     *
     * @return static
     */
    public function setId($searchId)
    {
        $searchId = (int) $searchId;
        if (empty($searchId)) {
            $searchId = null;
        }

$this->id = $searchId;

return $this;
    }

/**
     * Getter of id
     *
     * @return int|null
     */
    public function getId()
    {
        return $this->id;
    }

/**
     * Setter of searchName
     *
     * @param string $searchName Saved search name
     *
     * @return static
     */
    public function setSearchName($searchName)
    {
        $this->searchName = $searchName;

return $this;
    }

/**
     * Getter of searchName
     *
     * @return string
     */
    public function getSearchName()
    {
        return $this->searchName;
    }

/**
     * Setter of config
     *
     * @param array $config Global configuration
     *
     * @return static
     */
    public function setConfig(array $config)
    {
        $this->config = $config;

return $this;
    }

/**
     * Getter of config
     *
     * @return array
     */
    public function getConfig()
    {
        return $this->config;
    }

/**
     * Setter for criterias
     *
     * @param array|string $criterias Criterias of saved searches
     * @param bool         $json      Criterias are in JSON format
     *
     * @return static
     */
    public function setCriterias($criterias, $json = false)
    {
        if ($json === true && is_string($criterias)) {
            $this->criterias = json_decode($criterias, true);

return $this;
        }

$aListFieldsToGet = [
            'criteriaColumn',
            'criteriaSort',
            'criteriaShow',
            'criteria',
            'criteriaAndOrRow',
            'criteriaAndOrColumn',
            'rows',
            'TableList',
        ];

$data = [];

$data['criteriaColumnCount'] = count($criterias['criteriaColumn']);

foreach ($aListFieldsToGet as $field) {
            if (! isset($criterias[$field])) {
                continue;
            }

$data[$field] = $criterias[$field];
        }

/* Limit amount of rows */
        if (! isset($data['rows'])) {
            $data['rows'] = 0;
        } else {
            $data['rows'] = min(
                max(0, intval($data['rows'])),
                100
            );
        }

for ($i = 0; $i <= $data['rows']; $i++) {
            $data['Or' . $i] = $criterias['Or' . $i];
        }

$this->criterias = $data;

return $this;
    }

/**
     * Getter for criterias
     *
     * @return array
     */
    public function getCriterias()
    {
        return $this->criterias;
    }

/**
     * Setter for username
     *
     * @param string $username Username
     *
     * @return static
     */
    public function setUsername($username)
    {
        $this->username = $username;

return $this;
    }

/**
     * Getter for username
     *
     * @return string
     */
    public function getUsername()
    {
        return $this->username;
    }

/**
     * Setter for DB name
     *
     * @param string $dbname DB name
     *
     * @return static
     */
    public function setDbname($dbname)
    {
        $this->dbname = $dbname;

return $this;
    }

/**
     * Getter for DB name
     *
     * @return string
     */
    public function getDbname()
    {
        return $this->dbname;
    }

/**
     * Save the search
     *
     * @return bool
     */
    public function save()
    {
        global $dbi;

if ($this->getSearchName() == null) {
            $message = Message::error(
                __('Please provide a name for this bookmarked search.')
            );
            $response = Response::getInstance();
            $response->setRequestStatus($message->isSuccess());
            $response->addJSON('fieldWithError', 'searchName');
            $response->addJSON('message', $message);
            exit;
        }

if ($this->getUsername() == null
            || $this->getDbname() == null
            || $this->getSearchName() == null
            || $this->getCriterias() == null
        ) {
            $message = Message::error(
                __('Missing information to save the bookmarked search.')
            );
            $response = Response::getInstance();
            $response->setRequestStatus($message->isSuccess());
            $response->addJSON('message', $message);
            exit;
        }

$savedSearchesTbl
            = Util::backquote($this->config['cfgRelation']['db']) . '.'
            . Util::backquote($this->config['cfgRelation']['savedsearches']);

//If it's an insert.
        if ($this->getId() === null) {
            $wheres = [
                "search_name = '" . $dbi->escapeString($this->getSearchName())
                . "'",
            ];
            $existingSearches = $this->getList($wheres);

if (! empty($existingSearches)) {
                $message = Message::error(
                    __('An entry with this name already exists.')
                );
                $response = Response::getInstance();
                $response->setRequestStatus($message->isSuccess());
                $response->addJSON('fieldWithError', 'searchName');
                $response->addJSON('message', $message);
                exit;
            }

$sqlQuery = 'INSERT INTO ' . $savedSearchesTbl
                . '(`username`, `db_name`, `search_name`, `search_data`)'
                . ' VALUES ('
                . "'" . $dbi->escapeString($this->getUsername()) . "',"
                . "'" . $dbi->escapeString($this->getDbname()) . "',"
                . "'" . $dbi->escapeString($this->getSearchName()) . "',"
                . "'" . $dbi->escapeString(json_encode($this->getCriterias()))
                . "')";

$result = (bool) $this->relation->queryAsControlUser($sqlQuery);
            if (! $result) {
                return false;
            }

$this->setId($dbi->insertId());

return true;
        }

//Else, it's an update.
        $wheres = [
            'id != ' . $this->getId(),
            "search_name = '" . $dbi->escapeString($this->getSearchName()) . "'",
        ];
        $existingSearches = $this->getList($wheres);

if (! empty($existingSearches)) {
            $message = Message::error(
                __('An entry with this name already exists.')
            );
            $response = Response::getInstance();
            $response->setRequestStatus($message->isSuccess());
            $response->addJSON('fieldWithError', 'searchName');
            $response->addJSON('message', $message);
            exit;
        }

$sqlQuery = 'UPDATE ' . $savedSearchesTbl
            . "SET `search_name` = '"
            . $dbi->escapeString($this->getSearchName()) . "', "
            . "`search_data` = '"
            . $dbi->escapeString(json_encode($this->getCriterias())) . "' "
            . 'WHERE id = ' . $this->getId();

return (bool) $this->relation->queryAsControlUser($sqlQuery);
    }

/**
     * Delete the search
     *
     * @return bool
     */
    public function delete()
    {
        global $dbi;

if ($this->getId() == null) {
            $message = Message::error(
                __('Missing information to delete the search.')
            );
            $response = Response::getInstance();
            $response->setRequestStatus($message->isSuccess());
            $response->addJSON('fieldWithError', 'searchId');
            $response->addJSON('message', $message);
            exit;
        }

$savedSearchesTbl
            = Util::backquote($this->config['cfgRelation']['db']) . '.'
            . Util::backquote($this->config['cfgRelation']['savedsearches']);

$sqlQuery = 'DELETE FROM ' . $savedSearchesTbl
            . "WHERE id = '" . $dbi->escapeString((string) $this->getId()) . "'";

return (bool) $this->relation->queryAsControlUser($sqlQuery);
    }

/**
     * Load the current search from an id.
     *
     * @return bool Success
     */
    public function load()
    {
        global $dbi;

if ($this->getId() == null) {
            $message = Message::error(
                __('Missing information to load the search.')
            );
            $response = Response::getInstance();
            $response->setRequestStatus($message->isSuccess());
            $response->addJSON('fieldWithError', 'searchId');
            $response->addJSON('message', $message);
            exit;
        }

$savedSearchesTbl = Util::backquote($this->config['cfgRelation']['db'])
            . '.'
            . Util::backquote($this->config['cfgRelation']['savedsearches']);
        $sqlQuery = 'SELECT id, search_name, search_data '
            . 'FROM ' . $savedSearchesTbl . ' '
            . "WHERE id = '" . $dbi->escapeString((string) $this->getId()) . "' ";

$resList = $this->relation->queryAsControlUser($sqlQuery);
        $oneResult = $dbi->fetchArray($resList);

if ($oneResult === false) {
            $message = Message::error(__('Error while loading the search.'));
            $response = Response::getInstance();
            $response->setRequestStatus($message->isSuccess());
            $response->addJSON('fieldWithError', 'searchId');
            $response->addJSON('message', $message);
            exit;
        }

$this->setSearchName($oneResult['search_name'])
            ->setCriterias($oneResult['search_data'], true);

return true;
    }

/**
     * Get the list of saved searches of a user on a DB
     *
     * @param string[] $wheres List of filters
     *
     * @return array List of saved searches or empty array on failure
     */
    public function getList(array $wheres = [])
    {
        global $dbi;

if ($this->getUsername() == null
            || $this->getDbname() == null
        ) {
            return [];
        }

$savedSearchesTbl = Util::backquote($this->config['cfgRelation']['db'])
            . '.'
            . Util::backquote($this->config['cfgRelation']['savedsearches']);
        $sqlQuery = 'SELECT id, search_name '
            . 'FROM ' . $savedSearchesTbl . ' '
            . 'WHERE '
            . "username = '" . $dbi->escapeString($this->getUsername()) . "' "
            . "AND db_name = '" . $dbi->escapeString($this->getDbname()) . "' ";

foreach ($wheres as $where) {
            $sqlQuery .= 'AND ' . $where . ' ';
        }

$sqlQuery .= 'order by search_name ASC ';

$resList = $this->relation->queryAsControlUser($sqlQuery);

$list = [];
        while ($oneResult = $dbi->fetchArray($resList)) {
            $list[$oneResult['id']] = $oneResult['search_name'];
        }

return $list;
    }
}

cmd: