wiki.techinc.nl/includes/SpecialAsksql.php

<?php
/**
 * If enabled through $wgAllowSysopQueries = true, this class
 * let users with sysop right the possibility to make sql queries
 * against the cur table.
 * Heavy queries could slow down the database specially for the
 * biggest wikis.
 *
 * @package MediaWiki
 * @subpackage SpecialPage
 */

/**
 *
 */
function wfSpecialAsksql() {
	global $wgUser, $wgOut, $wgRequest, $wgAllowSysopQueries;

	if( !$wgAllowSysopQueries ) {
		$wgOut->errorpage( "nosuchspecialpage", "nospecialpagetext" );
		return;
	}
	if( !$wgUser->isAllowed('asksql') ) {
		$wgOut->sysopRequired();
		return;
	}
	
	if( $wgRequest->wasPosted() ) {
		$query = $wgRequest->getVal( 'wpSqlQuery' );
		$action = $wgRequest->getVal( 'action' );
	} else {
		$query = "";
		$action = "";
	}
	$f = new SqlQueryForm( $query);

	if ( "submit" == $action ) {
		$f->doSubmit();
	} else {
		$f->showForm( '' );
	}
}

/**
 * @access private
 * @package MediaWiki
 * @subpackage SpecialPage
 */
class SqlQueryForm {
	var $query = '';
	
	function SqlQueryForm( $query ) {
		$this->query = $query;
	}
		
	function showForm( $err ) {
		global $wgOut, $wgUser, $wgLang;
		global $wgLogQueries;

		$wgOut->setPagetitle( wfMsg( "asksql" ) );
		$note = wfMsg( "asksqltext" );
		if($wgLogQueries)
			$note .= " " . wfMsg( "sqlislogged" );
		$wgOut->addWikiText( $note );

		if ( "" != $err ) {
			$wgOut->addHTML( "<p><font color='red' size='+1'>" . htmlspecialchars($err) . "</font>\n" );
		}
		if ( ! $this->query ) { $this->query = "SELECT ... FROM ... WHERE ..."; }
		$q = wfMsg( "sqlquery" );
		$qb = wfMsg( "querybtn" );
		$titleObj = Title::makeTitle( NS_SPECIAL, "Asksql" );
		$action = $titleObj->escapeLocalURL( "action=submit" );

		$wgOut->addHTML( "<p>
<form id=\"asksql\" method=\"post\" action=\"{$action}\">
<table border=0><tr>
<td align=right>{$q}:</td>
<td align=left>
<textarea name=\"wpSqlQuery\" cols=80 rows=4 wrap=\"virtual\">"
. htmlspecialchars($this->query) ."
</textarea>
</td>
</tr><tr>
<td>&nbsp;</td><td align=\"left\">
<input type=submit name=\"wpQueryBtn\" value=\"{$qb}\">
</td></tr></table>
</form>\n" );

	}

	function doSubmit() {
		global $wgOut, $wgUser, $wgServer, $wgScript, $wgArticlePath, $wgLang, $wgContLang;
		global $wgDBserver, $wgDBsqluser, $wgDBsqlpassword, $wgDBname, $wgSqlTimeout;

		# Use a limit, folks!
		$this->query = trim( $this->query );
		if( preg_match( "/^SELECT/i", $this->query )
			and !preg_match( "/LIMIT/i", $this->query ) ) {
			$this->query .= " LIMIT 100";
		}
		$conn = Database::newFromParams( $wgDBserver, $wgDBsqluser, $wgDBsqlpassword, $wgDBname );

		$this->logQuery( $this->query );

		# Start timer, will kill the DB thread in $wgSqlTimeout seconds
		$conn->startTimer( $wgSqlTimeout );
		$res = $conn->query( $this->query, "SpecialAsksql::doSubmit" );
		$conn->stopTimer();
		$this->logFinishedQuery();

		$n = 0;
		@$n = $conn->numFields( $res );
		$titleList = false;

		if ( $n ) {
			$k = array();
			for ( $x = 0; $x < $n; ++$x ) {
				array_push( $k, $conn->fieldName( $res, $x ) );
			}

			if ( $n == 2 && in_array( "cur_title", $k ) && in_array( "cur_namespace", $k ) ) {
				$titleList = true;
			}

			$a = array();
			while ( $s = $conn->fetchObject( $res ) ) {
				array_push( $a, $s );
			}
			$conn->freeResult( $res );

			if ( $titleList ) {
				$r = "";
				foreach ( $a as $y ) {
					$sTitle = htmlspecialchars( $y->cur_title );
					if ( $y->cur_namespace ) {
						$sNamespace = $wgContLang->getNsText( $y->cur_namespace );
						$link = "$sNamespace:$sTitle";
					} else {
						$link = "$sTitle";
					}
					$skin = $wgUser->getSkin();
					$link = $skin->makeLink( $link );
					$r .= "* [[$link]]<br>\n";	
				}
			} else {

				$r = "<table border=1 bordercolor=black cellspacing=0 " .
				  "cellpadding=2><tr>\n";
				foreach ( $k as $x ) $r .= "<th>" . htmlspecialchars( $x ) . "</th>";
				$r .= "</tr>\n";

				foreach ( $a as $y ) {
					$r .= "<tr>";
					foreach ( $k as $x ) {
						$o = $y->$x ;
						if ( $x == "cur_title" or $x == "old_title" or $x == "rc_title") {
							$namespace = 0;
							if( $x == "cur_title" && isset( $y->cur_namespace ) ) $namespace = $y->cur_namespace;
							if( $x == "old_title" && isset( $y->old_namespace ) ) $namespace = $y->old_namespace;
							if( $x == "rc_title" && isset( $y->rc_namespace ) ) $namespace = $y->rc_namespace;
							$title =& Title::makeTitle( $namespace, $o );
							$o = "<a href=\"" . $title->escapeLocalUrl() . "\" class='internal'>" .
							  htmlspecialchars( $y->$x ) . "</a>" ;
						} else {
							$o = htmlspecialchars( $o );
						}
						$r .= "<td>" . $o . "</td>\n";
					}
					$r .= "</tr>\n";
				}
				$r .= "</table>\n";
			}
		}
		$this->showForm( wfMsg( "querysuccessful" ) );
		$wgOut->addHTML( "<hr>{$r}\n" );
	}

	function logQuery( $q ) {
		global $wgSqlLogFile, $wgLogQueries, $wgUser;
		if(!$wgLogQueries) return;
		
		$f = fopen( $wgSqlLogFile, "a" );
		fputs( $f, "\n\n" . wfTimestampNow() .
			" query by " . $wgUser->getName() .
			":\n$q\n" );
		fclose( $f );
		$this->starttime = wfTime();
	}
	
	function logFinishedQuery() {
		global $wgSqlLogFile, $wgLogQueries;
		if(!$wgLogQueries) return;
		
		$interval = wfTime() - $this->starttime;
		
		$f = fopen( $wgSqlLogFile, "a" );
		fputs( $f, "finished at " . wfTimestampNow() . "; took $interval secs\n" );
		fclose( $f );
	}

}

?>