mirror of
https://github.com/Piwigo/Piwigo.git
synced 2025-05-06 00:02:23 +03:00
Feature_1255 :
- single quotes in queries - start using $conf['dblayer'] git-svn-id: http://piwigo.org/svn/trunk@4385 68402e56-0260-453c-a942-63ccdbb3a9ee
This commit is contained in:
parent
13ea9d50e3
commit
c96097529e
15 changed files with 101 additions and 24 deletions
|
@ -242,9 +242,9 @@ $template->assign(
|
||||||
'status_values' => array('public','private'),
|
'status_values' => array('public','private'),
|
||||||
|
|
||||||
'CAT_STATUS' => $category['status'],
|
'CAT_STATUS' => $category['status'],
|
||||||
'CAT_VISIBLE' => $category['visible'],
|
'CAT_VISIBLE' => boolean_to_string($category['visible']),
|
||||||
'CAT_COMMENTABLE' => $category['commentable'],
|
'CAT_COMMENTABLE' => boolean_to_string($category['commentable']),
|
||||||
'CAT_UPLOADABLE' => $category['uploadable'],
|
'CAT_UPLOADABLE' => boolean_to_string($category['uploadable']),
|
||||||
|
|
||||||
'IMG_ORDER_DEFAULT' => empty($category['image_order']) ?
|
'IMG_ORDER_DEFAULT' => empty($category['image_order']) ?
|
||||||
'checked="checked"' : '',
|
'checked="checked"' : '',
|
||||||
|
|
|
@ -38,12 +38,17 @@ class c13y_internal
|
||||||
*/
|
*/
|
||||||
function c13y_version($c13y)
|
function c13y_version($c13y)
|
||||||
{
|
{
|
||||||
|
global $conf;
|
||||||
|
|
||||||
$check_list = array();
|
$check_list = array();
|
||||||
|
|
||||||
$check_list[] = array('type' => 'PHP', 'current' => phpversion(), 'required' => REQUIRED_PHP_VERSION);
|
$check_list[] = array('type' => 'PHP', 'current' => phpversion(), 'required' => REQUIRED_PHP_VERSION);
|
||||||
|
|
||||||
$db_version = pwg_get_db_version();
|
$db_version = pwg_get_db_version();
|
||||||
$check_list[] = array('type' => 'MySQL', 'current' => $db_version, 'required' => REQUIRED_MYSQL_VERSION);
|
$check_list[] = array('type' => $conf['dblayer'],
|
||||||
|
'current' => $db_version,
|
||||||
|
'required' => constant('REQUIRED_'.strtoupper($conf['dblayer']).'_VERSION')
|
||||||
|
);
|
||||||
|
|
||||||
foreach ($check_list as $elem)
|
foreach ($check_list as $elem)
|
||||||
{
|
{
|
||||||
|
|
|
@ -416,7 +416,7 @@ function get_fs_directories($path, $recursive = true)
|
||||||
function update_global_rank()
|
function update_global_rank()
|
||||||
{
|
{
|
||||||
$query = '
|
$query = '
|
||||||
SELECT id, if(id_uppercat is null,\'\',id_uppercat) AS id_uppercat, uppercats, rank, global_rank
|
SELECT id, id_uppercat, uppercats, rank, global_rank
|
||||||
FROM '.CATEGORIES_TABLE.'
|
FROM '.CATEGORIES_TABLE.'
|
||||||
ORDER BY id_uppercat,rank,name';
|
ORDER BY id_uppercat,rank,name';
|
||||||
|
|
||||||
|
|
|
@ -80,8 +80,8 @@ class plugins
|
||||||
if (empty($errors))
|
if (empty($errors))
|
||||||
{
|
{
|
||||||
$query = '
|
$query = '
|
||||||
INSERT INTO ' . PLUGINS_TABLE . ' (id,version) VALUES ("'
|
INSERT INTO ' . PLUGINS_TABLE . ' (id,version) VALUES (\''
|
||||||
. $plugin_id . '","' . $this->fs_plugins[$plugin_id]['version'] . '"
|
. $plugin_id . '\',\'' . $this->fs_plugins[$plugin_id]['version'] . '\'
|
||||||
)';
|
)';
|
||||||
pwg_query($query);
|
pwg_query($query);
|
||||||
}
|
}
|
||||||
|
@ -110,8 +110,8 @@ INSERT INTO ' . PLUGINS_TABLE . ' (id,version) VALUES ("'
|
||||||
{
|
{
|
||||||
$query = '
|
$query = '
|
||||||
UPDATE ' . PLUGINS_TABLE . '
|
UPDATE ' . PLUGINS_TABLE . '
|
||||||
SET state="active", version="'.$this->fs_plugins[$plugin_id]['version'].'"
|
SET state=\'active\', version=\''.$this->fs_plugins[$plugin_id]['version'].'\'
|
||||||
WHERE id="' . $plugin_id . '"';
|
WHERE id=\'' . $plugin_id . '\'';
|
||||||
pwg_query($query);
|
pwg_query($query);
|
||||||
}
|
}
|
||||||
break;
|
break;
|
||||||
|
@ -126,7 +126,7 @@ WHERE id="' . $plugin_id . '"';
|
||||||
die('invalid current state ' . $crt_db_plugin['state']);
|
die('invalid current state ' . $crt_db_plugin['state']);
|
||||||
}
|
}
|
||||||
$query = '
|
$query = '
|
||||||
UPDATE ' . PLUGINS_TABLE . ' SET state="inactive" WHERE id="' . $plugin_id . '"';
|
UPDATE ' . PLUGINS_TABLE . ' SET state=\'inactive\' WHERE id=\'' . $plugin_id . '\'';
|
||||||
pwg_query($query);
|
pwg_query($query);
|
||||||
if (file_exists($file_to_include))
|
if (file_exists($file_to_include))
|
||||||
{
|
{
|
||||||
|
@ -144,7 +144,7 @@ UPDATE ' . PLUGINS_TABLE . ' SET state="inactive" WHERE id="' . $plugin_id . '"'
|
||||||
die ('CANNOT UNINSTALL - NOT INSTALLED');
|
die ('CANNOT UNINSTALL - NOT INSTALLED');
|
||||||
}
|
}
|
||||||
$query = '
|
$query = '
|
||||||
DELETE FROM ' . PLUGINS_TABLE . ' WHERE id="' . $plugin_id . '"';
|
DELETE FROM ' . PLUGINS_TABLE . ' WHERE id=\'' . $plugin_id . '\'';
|
||||||
pwg_query($query);
|
pwg_query($query);
|
||||||
if (file_exists($file_to_include))
|
if (file_exists($file_to_include))
|
||||||
{
|
{
|
||||||
|
|
|
@ -196,7 +196,7 @@ $template->assign(
|
||||||
'PWG_VERSION' => PHPWG_VERSION,
|
'PWG_VERSION' => PHPWG_VERSION,
|
||||||
'OS' => PHP_OS,
|
'OS' => PHP_OS,
|
||||||
'PHP_VERSION' => phpversion(),
|
'PHP_VERSION' => phpversion(),
|
||||||
'DB_ENGINE' => 'MySQL',
|
'DB_ENGINE' => $conf['dblayer'],
|
||||||
'DB_VERSION' => $db_version,
|
'DB_VERSION' => $db_version,
|
||||||
'DB_ELEMENTS' => l10n_dec('%d element', '%d elements', $nb_elements),
|
'DB_ELEMENTS' => l10n_dec('%d element', '%d elements', $nb_elements),
|
||||||
'DB_CATEGORIES' =>
|
'DB_CATEGORIES' =>
|
||||||
|
|
|
@ -321,7 +321,8 @@ SELECT com.id AS comment_id
|
||||||
ON u.'.$conf['user_fields']['id'].' = com.author_id
|
ON u.'.$conf['user_fields']['id'].' = com.author_id
|
||||||
WHERE '.implode('
|
WHERE '.implode('
|
||||||
AND ', $page['where_clauses']).'
|
AND ', $page['where_clauses']).'
|
||||||
GROUP BY comment_id
|
GROUP BY comment_id, com.image_id, ic.category_id, com.author,
|
||||||
|
com.author_id, com.date, com.content, com.validated
|
||||||
ORDER BY '.$page['sort_by'].' '.$page['sort_order'];
|
ORDER BY '.$page['sort_by'].' '.$page['sort_order'];
|
||||||
if ('all' != $page['items_number'])
|
if ('all' != $page['items_number'])
|
||||||
{
|
{
|
||||||
|
|
|
@ -92,7 +92,7 @@ foreach( array(
|
||||||
|
|
||||||
include(PHPWG_ROOT_PATH . 'include/config_default.inc.php');
|
include(PHPWG_ROOT_PATH . 'include/config_default.inc.php');
|
||||||
@include(PHPWG_ROOT_PATH. 'include/config_local.inc.php');
|
@include(PHPWG_ROOT_PATH. 'include/config_local.inc.php');
|
||||||
include(PHPWG_ROOT_PATH .'include/dblayer/functions_mysql.inc.php');
|
include(PHPWG_ROOT_PATH .'include/dblayer/functions_'.$conf['dblayer'].'.inc.php');
|
||||||
|
|
||||||
if(isset($conf['show_php_errors']) && !empty($conf['show_php_errors']))
|
if(isset($conf['show_php_errors']) && !empty($conf['show_php_errors']))
|
||||||
{
|
{
|
||||||
|
|
|
@ -538,6 +538,79 @@ function boolean_to_string($var)
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
/**
|
||||||
|
*
|
||||||
|
* interval and date functions
|
||||||
|
*
|
||||||
|
*/
|
||||||
|
|
||||||
|
|
||||||
|
function pwg_db_get_recent_period_expression($period, $date='CURRENT_DATE')
|
||||||
|
{
|
||||||
|
if ($date!='CURRENT_DATE')
|
||||||
|
{
|
||||||
|
$date = '\''.$date.'\'';
|
||||||
|
}
|
||||||
|
|
||||||
|
return 'SUBDATE('.$date.',INTERVAL '.$period.' DAY)';
|
||||||
|
}
|
||||||
|
|
||||||
|
function pwg_db_get_recent_period($period, $date='CURRENT_DATE')
|
||||||
|
{
|
||||||
|
$query = '
|
||||||
|
SELECT '.pwg_db_get_recent_period_expression($period);
|
||||||
|
list($d) = pwg_db_fetch_row(pwg_query($query));
|
||||||
|
|
||||||
|
return $d;
|
||||||
|
}
|
||||||
|
|
||||||
|
function pwg_db_get_date_YYYYMM($date)
|
||||||
|
{
|
||||||
|
return 'DATE_FORMAT('.$date.', \'%Y%m\')';
|
||||||
|
}
|
||||||
|
|
||||||
|
function pwg_db_get_date_MMDD($date)
|
||||||
|
{
|
||||||
|
return 'DATE_FORMAT('.$date.', \'%m%d\')';
|
||||||
|
}
|
||||||
|
|
||||||
|
function pwg_db_get_year($date)
|
||||||
|
{
|
||||||
|
return 'YEAR('.$date.')';
|
||||||
|
}
|
||||||
|
|
||||||
|
function pwg_db_get_month($date)
|
||||||
|
{
|
||||||
|
return 'MONTH('.$date.')';
|
||||||
|
}
|
||||||
|
|
||||||
|
function pwg_db_get_week($date, $mode=null)
|
||||||
|
{
|
||||||
|
if ($mode)
|
||||||
|
{
|
||||||
|
return 'WEEK('.$date.', '.$mode.')';
|
||||||
|
}
|
||||||
|
else
|
||||||
|
{
|
||||||
|
return 'WEEK('.$date.')';
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
function pwg_db_get_dayofmonth($date)
|
||||||
|
{
|
||||||
|
return 'DAYOFMONTH('.$date.')';
|
||||||
|
}
|
||||||
|
|
||||||
|
function pwg_db_get_dayofweek($date)
|
||||||
|
{
|
||||||
|
return 'DAYOFWEEK('.$date.')';
|
||||||
|
}
|
||||||
|
|
||||||
|
function pwg_db_get_weekday($date)
|
||||||
|
{
|
||||||
|
return 'WEEKDAY('.$date.')';
|
||||||
|
}
|
||||||
|
|
||||||
// my_error returns (or send to standard output) the message concerning the
|
// my_error returns (or send to standard output) the message concerning the
|
||||||
// error occured for the last mysql query.
|
// error occured for the last mysql query.
|
||||||
function my_error($header, $die)
|
function my_error($header, $die)
|
||||||
|
|
|
@ -258,7 +258,7 @@ WHERE id IN (' . implode(',',$page['items']) .')';
|
||||||
|
|
||||||
if ($must_show_list)
|
if ($must_show_list)
|
||||||
{
|
{
|
||||||
$query = 'SELECT DISTINCT(id)';
|
$query = 'SELECT id';
|
||||||
$query .= $calendar->inner_sql.'
|
$query .= $calendar->inner_sql.'
|
||||||
'.$calendar->get_date_where();
|
'.$calendar->get_date_where();
|
||||||
if ( isset($page['super_order_by']) )
|
if ( isset($page['super_order_by']) )
|
||||||
|
@ -288,5 +288,4 @@ WHERE id IN (' . implode(',',$page['items']) .')';
|
||||||
}
|
}
|
||||||
pwg_debug('end initialize_calendar');
|
pwg_debug('end initialize_calendar');
|
||||||
}
|
}
|
||||||
|
|
||||||
?>
|
?>
|
|
@ -642,7 +642,7 @@ FROM '.CATEGORIES_TABLE.' as c
|
||||||
}
|
}
|
||||||
|
|
||||||
$query.= '
|
$query.= '
|
||||||
GROUP BY c.id';
|
GROUP BY c.id, c.global_rank';
|
||||||
|
|
||||||
$result = pwg_query($query);
|
$result = pwg_query($query);
|
||||||
|
|
||||||
|
|
|
@ -122,6 +122,7 @@ if (script_basename() == 'picture') // basename without file extention
|
||||||
}
|
}
|
||||||
|
|
||||||
$page = array_merge( $page, parse_section_url( $tokens, $next_token) );
|
$page = array_merge( $page, parse_section_url( $tokens, $next_token) );
|
||||||
|
|
||||||
if ( !isset($page['section']) )
|
if ( !isset($page['section']) )
|
||||||
{
|
{
|
||||||
$page['section'] = 'categories';
|
$page['section'] = 'categories';
|
||||||
|
@ -156,10 +157,7 @@ if ( !isset($page['section']) )
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|
||||||
$page = array_merge( $page, parse_well_known_params_url( $tokens, $next_token) );
|
$page = array_merge( $page, parse_well_known_params_url( $tokens, $next_token) );
|
||||||
|
|
||||||
|
|
||||||
if ( script_basename()=='picture' and 'categories'==$page['section'] and
|
if ( script_basename()=='picture' and 'categories'==$page['section'] and
|
||||||
!isset($page['category']) and !isset($page['chronology_field']) )
|
!isset($page['category']) and !isset($page['chronology_field']) )
|
||||||
{ //access a picture only by id, file or id-file without given section
|
{ //access a picture only by id, file or id-file without given section
|
||||||
|
|
|
@ -292,6 +292,7 @@ if ( isset( $_POST['install'] ))
|
||||||
{
|
{
|
||||||
$step = 2;
|
$step = 2;
|
||||||
$file_content = '<?php
|
$file_content = '<?php
|
||||||
|
$conf[\'dblayer\'] = \'mysql\';
|
||||||
$conf[\'db_base\'] = \''.$dbname.'\';
|
$conf[\'db_base\'] = \''.$dbname.'\';
|
||||||
$conf[\'db_user\'] = \''.$dbuser.'\';
|
$conf[\'db_user\'] = \''.$dbuser.'\';
|
||||||
$conf[\'db_password\'] = \''.$dbpasswd.'\';
|
$conf[\'db_password\'] = \''.$dbpasswd.'\';
|
||||||
|
|
|
@ -38,7 +38,7 @@ check_status(ACCESS_GUEST);
|
||||||
// +-----------------------------------------------------------------------+
|
// +-----------------------------------------------------------------------+
|
||||||
|
|
||||||
$query = '
|
$query = '
|
||||||
SELECT DISTINCT(id)
|
SELECT id
|
||||||
FROM '.IMAGES_TABLE.'
|
FROM '.IMAGES_TABLE.'
|
||||||
INNER JOIN '.IMAGE_CATEGORY_TABLE.' AS ic ON id = ic.image_id
|
INNER JOIN '.IMAGE_CATEGORY_TABLE.' AS ic ON id = ic.image_id
|
||||||
'.get_sql_condition_FandF
|
'.get_sql_condition_FandF
|
||||||
|
|
|
@ -43,7 +43,7 @@ include_once(PHPWG_ROOT_PATH.'admin/include/functions_upgrade.php');
|
||||||
include(PHPWG_ROOT_PATH.'include/config_database.inc.php');
|
include(PHPWG_ROOT_PATH.'include/config_database.inc.php');
|
||||||
include(PHPWG_ROOT_PATH . 'include/config_default.inc.php');
|
include(PHPWG_ROOT_PATH . 'include/config_default.inc.php');
|
||||||
@include(PHPWG_ROOT_PATH. 'include/config_local.inc.php');
|
@include(PHPWG_ROOT_PATH. 'include/config_local.inc.php');
|
||||||
include(PHPWG_ROOT_PATH .'include/dblayer/functions_mysql.inc.php');
|
include(PHPWG_ROOT_PATH .'include/dblayer/functions_'.$conf['dblayer'].'.inc.php');
|
||||||
|
|
||||||
prepare_conf_upgrade();
|
prepare_conf_upgrade();
|
||||||
|
|
||||||
|
|
|
@ -35,7 +35,7 @@ include_once(PHPWG_ROOT_PATH.'admin/include/functions_upgrade.php');
|
||||||
include(PHPWG_ROOT_PATH.'include/config_database.inc.php');
|
include(PHPWG_ROOT_PATH.'include/config_database.inc.php');
|
||||||
include(PHPWG_ROOT_PATH . 'include/config_default.inc.php');
|
include(PHPWG_ROOT_PATH . 'include/config_default.inc.php');
|
||||||
@include(PHPWG_ROOT_PATH. 'include/config_local.inc.php');
|
@include(PHPWG_ROOT_PATH. 'include/config_local.inc.php');
|
||||||
include(PHPWG_ROOT_PATH .'include/dblayer/functions_mysql.inc.php');
|
include(PHPWG_ROOT_PATH .'include/dblayer/functions_'.$conf['dblayer'].'.inc.php');
|
||||||
|
|
||||||
// +-----------------------------------------------------------------------+
|
// +-----------------------------------------------------------------------+
|
||||||
// | Check Access and exit when it is not ok |
|
// | Check Access and exit when it is not ok |
|
||||||
|
|
Loading…
Add table
Add a link
Reference in a new issue