File Manager - BorneoXploit

Editing: SimulateDmlController.php

<?php

declare(strict_types=1);

namespace PhpMyAdmin\Controllers\Import;

use PhpMyAdmin\Controllers\AbstractController;
use PhpMyAdmin\Import\SimulateDml;
use PhpMyAdmin\Message;
use PhpMyAdmin\ResponseRenderer;
use PhpMyAdmin\SqlParser\Parser;
use PhpMyAdmin\SqlParser\Statements\DeleteStatement;
use PhpMyAdmin\SqlParser\Statements\UpdateStatement;
use PhpMyAdmin\SqlParser\Utils\Query;
use PhpMyAdmin\Template;

use function __;
use function count;
use function explode;

final class SimulateDmlController extends AbstractController
{
    /** @var SimulateDml */
    private $simulateDml;

public function __construct(
        ResponseRenderer $response,
        Template $template,
        SimulateDml $simulateDml
    ) {
        parent::__construct($response, $template);
        $this->simulateDml = $simulateDml;
    }

public function __invoke(): void
    {
        $error = '';
        $errorMsg = __('Only single-table UPDATE and DELETE queries can be simulated.');
        /** @var string $sqlDelimiter */
        $sqlDelimiter = $_POST['sql_delimiter'];
        $sqlData = [];
        /** @var string[] $queries */
        $queries = explode($sqlDelimiter, $GLOBALS['sql_query']);
        foreach ($queries as $sqlQuery) {
            if (empty($sqlQuery)) {
                continue;
            }

// Parsing the query.
            $parser = new Parser($sqlQuery);

if (empty($parser->statements[0])) {
                continue;
            }

$statement = $parser->statements[0];

if (
                ! ($statement instanceof UpdateStatement || $statement instanceof DeleteStatement)
                || ! empty($statement->join)
            ) {
                $error = $errorMsg;
                break;
            }

$tables = Query::getTables($statement);
            if (count($tables) > 1) {
                $error = $errorMsg;
                break;
            }

// Get the matched rows for the query.
            $result = $this->simulateDml->getMatchedRows($sqlQuery, $parser, $statement);
            $error = $this->simulateDml->getError();

if ($error !== '') {
                break;
            }

$sqlData[] = $result;
        }

if ($error) {
            $message = Message::rawError($error);
            $this->response->addJSON('message', $message);
            $this->response->addJSON('sql_data', false);

return;
        }

$this->response->addJSON('sql_data', $sqlData);
    }
}

Cancel