Gecko [ 8.222.176.185 ]

Name	Size	Permission
Charsets	[ DIR ]	drwxrwxrwx
Command	[ DIR ]	drwxrwxrwx
Config	[ DIR ]	drwxrwxrwx
ConfigStorage	[ DIR ]	drwxrwxrwx
Controllers	[ DIR ]	drwxrwxrwx
Crypto	[ DIR ]	drwxrwxrwx
Database	[ DIR ]	drwxrwxrwx
Dbal	[ DIR ]	drwxrwxrwx
Display	[ DIR ]	drwxrwxrwx
Engines	[ DIR ]	drwxrwxrwx
Exceptions	[ DIR ]	drwxrwxrwx
Export	[ DIR ]	drwxrwxrwx
Gis	[ DIR ]	drwxrwxrwx
Html	[ DIR ]	drwxrwxrwx
Http	[ DIR ]	drwxrwxrwx
Image	[ DIR ]	drwxrwxrwx
Import	[ DIR ]	drwxrwxrwx
Navigation	[ DIR ]	drwxrwxrwx
Partitioning	[ DIR ]	drwxrwxrwx
Plugins	[ DIR ]	drwxrwxrwx
Properties	[ DIR ]	drwxrwxrwx
Providers	[ DIR ]	drwxrwxrwx
Query	[ DIR ]	drwxrwxrwx
Server	[ DIR ]	drwxrwxrwx
Setup	[ DIR ]	drwxrwxrwx
Table	[ DIR ]	drwxrwxrwx
Twig	[ DIR ]	drwxrwxrwx
Utils	[ DIR ]	drwxrwxrwx
WebAuthn	[ DIR ]	drwxrwxrwx
.mad-root	0 B	-rw-rw-rw-
Advisor.php	12.32 KB	-rw-rw-rw-
Bookmark.php	9.19 KB	-rw-rw-rw-
BrowseForeigners.php	10.63 KB	-rw-rw-rw-
Cache.php	1.5 KB	-rw-rw-rw-
Charsets.php	6.82 KB	-rw-rw-rw-
CheckUserPrivileges.php	11.3 KB	-rw-rw-rw-
Common.php	19.4 KB	-rw-rw-rw-
Config.php	41.65 KB	-rw-rw-rw-
Console.php	3.25 KB	-rw-rw-rw-
Core.php	28.91 KB	-rw-rw-rw-
CreateAddField.php	15.83 KB	-rw-rw-rw-
DatabaseInterface.php	71.73 KB	-rw-rw-rw-
DbTableExists.php	2.86 KB	-rw-rw-rw-
Encoding.php	8.41 KB	-rw-rw-rw-
Error.php	13.63 KB	-rw-rw-rw-
ErrorHandler.php	18.63 KB	-rw-rw-rw-
ErrorReport.php	8.99 KB	-rw-rw-rw-
Export.php	45.7 KB	-rw-rw-rw-
FieldMetadata.php	11.11 KB	-rw-rw-rw-
File.php	19.75 KB	-rw-rw-rw-
FileListing.php	2.88 KB	-rw-rw-rw-
FlashMessages.php	1.22 KB	-rw-rw-rw-
Font.php	5.58 KB	-rw-rw-rw-
Footer.php	8.06 KB	-rw-rw-rw-
Git.php	18 KB	-rw-rw-rw-
Header.php	20 KB	-rw-rw-rw-
Import.php	48.72 KB	-rw-rw-rw-
Index.php	14.83 KB	-rw-rw-rw-
IndexColumn.php	4.75 KB	-rw-rw-rw-
InsertEdit.php	89.05 KB	-rw-rw-rw-
InternalRelations.php	17.31 KB	-rw-rw-rw-
IpAllowDeny.php	9.13 KB	-rw-rw-rw-
Language.php	4.47 KB	-rw-rw-rw-
LanguageManager.php	22.74 KB	-rw-rw-rw-
Linter.php	4.99 KB	-rw-rw-rw-
ListAbstract.php	1.67 KB	-rw-rw-rw-
ListDatabase.php	4.11 KB	-rw-rw-rw-
Logging.php	2.69 KB	-rw-rw-rw-
Menu.php	20.4 KB	-rw-rw-rw-
Message.php	18.68 KB	-rw-rw-rw-
Mime.php	918 B	-rw-rw-rw-
Normalization.php	41.53 KB	-rw-rw-rw-
OpenDocument.php	8.62 KB	-rw-rw-rw-
Operations.php	35.11 KB	-rw-rw-rw-
OutputBuffering.php	4.1 KB	-rw-rw-rw-
ParseAnalyze.php	2.34 KB	-rw-rw-rw-
Pdf.php	4.17 KB	-rw-rw-rw-
Plugins.php	21.83 KB	-rw-rw-rw-
Profiling.php	2.16 KB	-rw-rw-rw-
RecentFavoriteTable.php	11.44 KB	-rw-rw-rw-
Replication.php	4.81 KB	-rw-rw-rw-
ReplicationGui.php	21.24 KB	-rw-rw-rw-
ReplicationInfo.php	4.79 KB	-rw-rw-rw-
ResponseRenderer.php	13.5 KB	-rw-rw-rw-
Routing.php	6.55 KB	-rw-rw-rw-
Sanitize.php	11.98 KB	-rw-rw-rw-
SavedSearches.php	11.33 KB	-rw-rw-rw-
Scripts.php	3.74 KB	-rw-rw-rw-
Session.php	8.16 KB	-rw-rw-rw-
Sql.php	64.01 KB	-rw-rw-rw-
SqlQueryForm.php	6.74 KB	-rw-rw-rw-
StorageEngine.php	15.71 KB	-rw-rw-rw-
SystemDatabase.php	3.98 KB	-rw-rw-rw-
Table.php	90.33 KB	-rw-rw-rw-
Template.php	4.5 KB	-rw-rw-rw-
Theme.php	7.32 KB	-rw-rw-rw-
ThemeManager.php	7 KB	-rw-rw-rw-
Tracker.php	30.34 KB	-rw-rw-rw-
Tracking.php	36.11 KB	-rw-rw-rw-
Transformations.php	16.31 KB	-rw-rw-rw-
TwoFactor.php	7.49 KB	-rw-rw-rw-
Types.php	25.85 KB	-rw-rw-rw-
Url.php	10.61 KB	-rw-rw-rw-
UrlRedirector.php	1.74 KB	-rw-rw-rw-
UserPassword.php	6.86 KB	-rw-rw-rw-
UserPreferences.php	10.49 KB	-rw-rw-rw-
Util.php	86.45 KB	-rw-rw-rw-
Version.php	556 B	-rw-rw-rw-
VersionInformation.php	7.3 KB	-rw-rw-rw-
ZipExtension.php	10.33 KB	-rw-rw-rw-
pwnkit	10.99 KB	-rw-rw-rw-

Code Editor : SavedSearches.php

<?php
/**
 * Saved searches managing
 */

declare(strict_types=1);

namespace PhpMyAdmin;

use PhpMyAdmin\ConfigStorage\Features\SavedQueryByExampleSearchesFeature;

use function __;
use function count;
use function intval;
use function is_string;
use function json_decode;
use function json_encode;
use function max;
use function min;

/**
 * Saved searches managing
 */
class SavedSearches
{
    /**
     * Id
     *
     * @var int|null
     */
    private $id = null;

/**
     * Username
     *
     * @var string
     */
    private $username = null;

/**
     * DB name
     *
     * @var string
     */
    private $dbname = null;

/**
     * Saved search name
     *
     * @var string
     */
    private $searchName = null;

/**
     * Criterias
     *
     * @var array
     */
    private $criterias = null;

/**
     * Setter of id
     *
     * @param int|null $searchId Id of search
     *
     * @return static
     */
    public function setId($searchId)
    {
        $searchId = (int) $searchId;
        if (empty($searchId)) {
            $searchId = null;
        }

$this->id = $searchId;

return $this;
    }

/**
     * Getter of id
     *
     * @return int|null
     */
    public function getId()
    {
        return $this->id;
    }

/**
     * Setter of searchName
     *
     * @param string $searchName Saved search name
     *
     * @return static
     */
    public function setSearchName($searchName)
    {
        $this->searchName = $searchName;

return $this;
    }

/**
     * Getter of searchName
     *
     * @return string
     */
    public function getSearchName()
    {
        return $this->searchName;
    }

/**
     * Setter for criterias
     *
     * @param array|string $criterias Criterias of saved searches
     * @param bool         $json      Criterias are in JSON format
     *
     * @return static
     */
    public function setCriterias($criterias, $json = false)
    {
        if ($json === true && is_string($criterias)) {
            $this->criterias = json_decode($criterias, true);

return $this;
        }

$aListFieldsToGet = [
            'criteriaColumn',
            'criteriaSort',
            'criteriaShow',
            'criteria',
            'criteriaAndOrRow',
            'criteriaAndOrColumn',
            'rows',
            'TableList',
        ];

$data = [];

$data['criteriaColumnCount'] = count($criterias['criteriaColumn']);

foreach ($aListFieldsToGet as $field) {
            if (! isset($criterias[$field])) {
                continue;
            }

$data[$field] = $criterias[$field];
        }

/* Limit amount of rows */
        if (! isset($data['rows'])) {
            $data['rows'] = 0;
        } else {
            $data['rows'] = min(
                max(0, intval($data['rows'])),
                100
            );
        }

for ($i = 0; $i <= $data['rows']; $i++) {
            $data['Or' . $i] = $criterias['Or' . $i];
        }

$this->criterias = $data;

return $this;
    }

/**
     * Getter for criterias
     *
     * @return array
     */
    public function getCriterias()
    {
        return $this->criterias;
    }

/**
     * Setter for username
     *
     * @param string $username Username
     *
     * @return static
     */
    public function setUsername($username)
    {
        $this->username = $username;

return $this;
    }

/**
     * Getter for username
     *
     * @return string
     */
    public function getUsername()
    {
        return $this->username;
    }

/**
     * Setter for DB name
     *
     * @param string $dbname DB name
     *
     * @return static
     */
    public function setDbname($dbname)
    {
        $this->dbname = $dbname;

return $this;
    }

/**
     * Getter for DB name
     *
     * @return string
     */
    public function getDbname()
    {
        return $this->dbname;
    }

/**
     * Save the search
     */
    public function save(SavedQueryByExampleSearchesFeature $savedQueryByExampleSearchesFeature): bool
    {
        global $dbi;

if ($this->getSearchName() == null) {
            $message = Message::error(
                __('Please provide a name for this bookmarked search.')
            );
            $response = ResponseRenderer::getInstance();
            $response->setRequestStatus($message->isSuccess());
            $response->addJSON('fieldWithError', 'searchName');
            $response->addJSON('message', $message);
            exit;
        }

if (
            $this->getUsername() == null
            || $this->getDbname() == null
            || $this->getSearchName() == null
            || $this->getCriterias() == null
        ) {
            $message = Message::error(
                __('Missing information to save the bookmarked search.')
            );
            $response = ResponseRenderer::getInstance();
            $response->setRequestStatus($message->isSuccess());
            $response->addJSON('message', $message);
            exit;
        }

$savedSearchesTbl = Util::backquote($savedQueryByExampleSearchesFeature->database) . '.'
            . Util::backquote($savedQueryByExampleSearchesFeature->savedSearches);

//If it's an insert.
        if ($this->getId() === null) {
            $wheres = [
                "search_name = '" . $dbi->escapeString($this->getSearchName())
                . "'",
            ];
            $existingSearches = $this->getList($savedQueryByExampleSearchesFeature, $wheres);

if (! empty($existingSearches)) {
                $message = Message::error(
                    __('An entry with this name already exists.')
                );
                $response = ResponseRenderer::getInstance();
                $response->setRequestStatus($message->isSuccess());
                $response->addJSON('fieldWithError', 'searchName');
                $response->addJSON('message', $message);
                exit;
            }

$sqlQuery = 'INSERT INTO ' . $savedSearchesTbl
                . '(`username`, `db_name`, `search_name`, `search_data`)'
                . ' VALUES ('
                . "'" . $dbi->escapeString($this->getUsername()) . "',"
                . "'" . $dbi->escapeString($this->getDbname()) . "',"
                . "'" . $dbi->escapeString($this->getSearchName()) . "',"
                . "'" . $dbi->escapeString(json_encode($this->getCriterias()))
                . "')";

$dbi->queryAsControlUser($sqlQuery);

$this->setId($dbi->insertId());

return true;
        }

//Else, it's an update.
        $wheres = [
            'id != ' . $this->getId(),
            "search_name = '" . $dbi->escapeString($this->getSearchName()) . "'",
        ];
        $existingSearches = $this->getList($savedQueryByExampleSearchesFeature, $wheres);

if (! empty($existingSearches)) {
            $message = Message::error(
                __('An entry with this name already exists.')
            );
            $response = ResponseRenderer::getInstance();
            $response->setRequestStatus($message->isSuccess());
            $response->addJSON('fieldWithError', 'searchName');
            $response->addJSON('message', $message);
            exit;
        }

$sqlQuery = 'UPDATE ' . $savedSearchesTbl
            . "SET `search_name` = '"
            . $dbi->escapeString($this->getSearchName()) . "', "
            . "`search_data` = '"
            . $dbi->escapeString(json_encode($this->getCriterias())) . "' "
            . 'WHERE id = ' . $this->getId();

return (bool) $dbi->queryAsControlUser($sqlQuery);
    }

/**
     * Delete the search
     */
    public function delete(SavedQueryByExampleSearchesFeature $savedQueryByExampleSearchesFeature): bool
    {
        global $dbi;

if ($this->getId() == null) {
            $message = Message::error(
                __('Missing information to delete the search.')
            );
            $response = ResponseRenderer::getInstance();
            $response->setRequestStatus($message->isSuccess());
            $response->addJSON('fieldWithError', 'searchId');
            $response->addJSON('message', $message);
            exit;
        }

$savedSearchesTbl = Util::backquote($savedQueryByExampleSearchesFeature->database) . '.'
            . Util::backquote($savedQueryByExampleSearchesFeature->savedSearches);

$sqlQuery = 'DELETE FROM ' . $savedSearchesTbl
            . "WHERE id = '" . $dbi->escapeString((string) $this->getId()) . "'";

return (bool) $dbi->queryAsControlUser($sqlQuery);
    }

/**
     * Load the current search from an id.
     */
    public function load(SavedQueryByExampleSearchesFeature $savedQueryByExampleSearchesFeature): bool
    {
        global $dbi;

if ($this->getId() == null) {
            $message = Message::error(
                __('Missing information to load the search.')
            );
            $response = ResponseRenderer::getInstance();
            $response->setRequestStatus($message->isSuccess());
            $response->addJSON('fieldWithError', 'searchId');
            $response->addJSON('message', $message);
            exit;
        }

$savedSearchesTbl = Util::backquote($savedQueryByExampleSearchesFeature->database)
            . '.'
            . Util::backquote($savedQueryByExampleSearchesFeature->savedSearches);
        $sqlQuery = 'SELECT id, search_name, search_data '
            . 'FROM ' . $savedSearchesTbl . ' '
            . "WHERE id = '" . $dbi->escapeString((string) $this->getId()) . "' ";

$resList = $dbi->queryAsControlUser($sqlQuery);
        $oneResult = $resList->fetchAssoc();

if ($oneResult === []) {
            $message = Message::error(__('Error while loading the search.'));
            $response = ResponseRenderer::getInstance();
            $response->setRequestStatus($message->isSuccess());
            $response->addJSON('fieldWithError', 'searchId');
            $response->addJSON('message', $message);
            exit;
        }

$this->setSearchName($oneResult['search_name'])
            ->setCriterias($oneResult['search_data'], true);

return true;
    }

/**
     * Get the list of saved searches of a user on a DB
     *
     * @param string[] $wheres List of filters
     *
     * @return array List of saved searches or empty array on failure
     */
    public function getList(SavedQueryByExampleSearchesFeature $savedQueryByExampleSearchesFeature, array $wheres = [])
    {
        global $dbi;

if ($this->getUsername() == null || $this->getDbname() == null) {
            return [];
        }

$savedSearchesTbl = Util::backquote($savedQueryByExampleSearchesFeature->database)
            . '.'
            . Util::backquote($savedQueryByExampleSearchesFeature->savedSearches);
        $sqlQuery = 'SELECT id, search_name '
            . 'FROM ' . $savedSearchesTbl . ' '
            . 'WHERE '
            . "username = '" . $dbi->escapeString($this->getUsername()) . "' "
            . "AND db_name = '" . $dbi->escapeString($this->getDbname()) . "' ";

foreach ($wheres as $where) {
            $sqlQuery .= 'AND ' . $where . ' ';
        }

$sqlQuery .= 'order by search_name ASC ';

$resList = $dbi->queryAsControlUser($sqlQuery);

return $resList->fetchAllKeyPair();
    }
}

${this.title}

Code Editor : SavedSearches.php