api de gestion de ticket, basé sur php-crud-api. Le but est de décorrélé les outils de gestion des données, afin
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

api.php 71KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975976977978979980981982983984985986987988989990991992993994995996997998999100010011002100310041005100610071008100910101011101210131014101510161017101810191020102110221023102410251026102710281029103010311032103310341035103610371038103910401041104210431044104510461047104810491050105110521053105410551056105710581059106010611062106310641065106610671068106910701071107210731074107510761077107810791080108110821083108410851086108710881089109010911092109310941095109610971098109911001101110211031104110511061107110811091110111111121113111411151116111711181119112011211122112311241125112611271128112911301131113211331134113511361137113811391140114111421143114411451146114711481149115011511152115311541155115611571158115911601161116211631164116511661167116811691170117111721173117411751176117711781179118011811182118311841185118611871188118911901191119211931194119511961197119811991200120112021203120412051206120712081209121012111212121312141215121612171218121912201221122212231224122512261227122812291230123112321233123412351236123712381239124012411242124312441245124612471248124912501251125212531254125512561257125812591260126112621263126412651266126712681269127012711272127312741275127612771278127912801281128212831284128512861287128812891290129112921293129412951296129712981299130013011302130313041305130613071308130913101311131213131314131513161317131813191320132113221323132413251326132713281329133013311332133313341335133613371338133913401341134213431344134513461347134813491350135113521353135413551356135713581359136013611362136313641365136613671368136913701371137213731374137513761377137813791380138113821383138413851386138713881389139013911392139313941395139613971398139914001401140214031404140514061407140814091410141114121413141414151416141714181419142014211422142314241425142614271428142914301431143214331434143514361437143814391440144114421443144414451446144714481449145014511452145314541455145614571458145914601461146214631464146514661467146814691470147114721473147414751476147714781479148014811482148314841485148614871488148914901491149214931494149514961497149814991500150115021503150415051506150715081509151015111512151315141515151615171518151915201521152215231524152515261527152815291530153115321533153415351536153715381539154015411542154315441545154615471548154915501551155215531554155515561557155815591560156115621563156415651566156715681569157015711572157315741575157615771578157915801581158215831584158515861587158815891590159115921593159415951596159715981599160016011602160316041605160616071608160916101611161216131614161516161617161816191620162116221623162416251626162716281629163016311632163316341635163616371638163916401641164216431644164516461647164816491650165116521653165416551656165716581659166016611662166316641665166616671668166916701671167216731674167516761677167816791680168116821683168416851686168716881689169016911692169316941695169616971698169917001701170217031704170517061707170817091710171117121713171417151716171717181719172017211722172317241725172617271728172917301731173217331734173517361737173817391740174117421743174417451746174717481749175017511752175317541755175617571758175917601761176217631764176517661767176817691770177117721773177417751776177717781779178017811782178317841785178617871788178917901791179217931794179517961797179817991800180118021803180418051806180718081809181018111812181318141815181618171818181918201821182218231824182518261827182818291830183118321833183418351836183718381839184018411842184318441845184618471848184918501851185218531854185518561857185818591860186118621863186418651866186718681869187018711872187318741875187618771878187918801881188218831884188518861887188818891890189118921893189418951896189718981899190019011902190319041905190619071908190919101911191219131914191519161917191819191920192119221923192419251926192719281929193019311932193319341935193619371938193919401941194219431944194519461947194819491950195119521953195419551956195719581959196019611962196319641965196619671968196919701971197219731974197519761977197819791980198119821983198419851986198719881989199019911992199319941995199619971998199920002001200220032004200520062007200820092010201120122013201420152016201720182019202020212022202320242025202620272028202920302031203220332034203520362037203820392040204120422043204420452046204720482049205020512052205320542055205620572058205920602061206220632064206520662067206820692070207120722073207420752076207720782079208020812082208320842085208620872088208920902091209220932094209520962097209820992100210121022103210421052106210721082109211021112112211321142115211621172118211921202121212221232124212521262127212821292130213121322133213421352136213721382139214021412142214321442145214621472148214921502151215221532154215521562157215821592160216121622163216421652166216721682169217021712172217321742175217621772178217921802181218221832184218521862187218821892190219121922193219421952196219721982199220022012202220322042205220622072208220922102211221222132214221522162217221822192220222122222223
  1. <?php
  2. //var_dump($_SERVER['REQUEST_METHOD'],$_SERVER['PATH_INFO']); die();
  3. interface DatabaseInterface {
  4. public function getSql($name);
  5. public function connect($hostname,$username,$password,$database,$port,$socket,$charset);
  6. public function query($sql,$params=array());
  7. public function fetchAssoc($result);
  8. public function fetchRow($result);
  9. public function insertId($result);
  10. public function affectedRows($result);
  11. public function close($result);
  12. public function fetchFields($table);
  13. public function addLimitToSql($sql,$limit,$offset);
  14. public function likeEscape($string);
  15. public function isBinaryType($field);
  16. public function isGeometryType($field);
  17. public function getDefaultCharset();
  18. public function beginTransaction();
  19. public function commitTransaction();
  20. public function rollbackTransaction();
  21. }
  22. class MySQL implements DatabaseInterface {
  23. protected $db;
  24. protected $queries;
  25. public function __construct() {
  26. $this->queries = array(
  27. 'list_tables'=>'SELECT
  28. "TABLE_NAME","TABLE_COMMENT"
  29. FROM
  30. "INFORMATION_SCHEMA"."TABLES"
  31. WHERE
  32. "TABLE_SCHEMA" = ?',
  33. 'reflect_table'=>'SELECT
  34. "TABLE_NAME"
  35. FROM
  36. "INFORMATION_SCHEMA"."TABLES"
  37. WHERE
  38. "TABLE_NAME" COLLATE \'utf8_bin\' = ? AND
  39. "TABLE_SCHEMA" = ?',
  40. 'reflect_pk'=>'SELECT
  41. "COLUMN_NAME"
  42. FROM
  43. "INFORMATION_SCHEMA"."COLUMNS"
  44. WHERE
  45. "COLUMN_KEY" = \'PRI\' AND
  46. "TABLE_NAME" = ? AND
  47. "TABLE_SCHEMA" = ?',
  48. 'reflect_belongs_to'=>'SELECT
  49. "TABLE_NAME","COLUMN_NAME",
  50. "REFERENCED_TABLE_NAME","REFERENCED_COLUMN_NAME"
  51. FROM
  52. "INFORMATION_SCHEMA"."KEY_COLUMN_USAGE"
  53. WHERE
  54. "TABLE_NAME" COLLATE \'utf8_bin\' = ? AND
  55. "REFERENCED_TABLE_NAME" COLLATE \'utf8_bin\' IN ? AND
  56. "TABLE_SCHEMA" = ? AND
  57. "REFERENCED_TABLE_SCHEMA" = ?',
  58. 'reflect_has_many'=>'SELECT
  59. "TABLE_NAME","COLUMN_NAME",
  60. "REFERENCED_TABLE_NAME","REFERENCED_COLUMN_NAME"
  61. FROM
  62. "INFORMATION_SCHEMA"."KEY_COLUMN_USAGE"
  63. WHERE
  64. "TABLE_NAME" COLLATE \'utf8_bin\' IN ? AND
  65. "REFERENCED_TABLE_NAME" COLLATE \'utf8_bin\' = ? AND
  66. "TABLE_SCHEMA" = ? AND
  67. "REFERENCED_TABLE_SCHEMA" = ?',
  68. 'reflect_habtm'=>'SELECT
  69. k1."TABLE_NAME", k1."COLUMN_NAME",
  70. k1."REFERENCED_TABLE_NAME", k1."REFERENCED_COLUMN_NAME",
  71. k2."TABLE_NAME", k2."COLUMN_NAME",
  72. k2."REFERENCED_TABLE_NAME", k2."REFERENCED_COLUMN_NAME"
  73. FROM
  74. "INFORMATION_SCHEMA"."KEY_COLUMN_USAGE" k1,
  75. "INFORMATION_SCHEMA"."KEY_COLUMN_USAGE" k2
  76. WHERE
  77. k1."TABLE_SCHEMA" = ? AND
  78. k2."TABLE_SCHEMA" = ? AND
  79. k1."REFERENCED_TABLE_SCHEMA" = ? AND
  80. k2."REFERENCED_TABLE_SCHEMA" = ? AND
  81. k1."TABLE_NAME" COLLATE \'utf8_bin\' = k2."TABLE_NAME" COLLATE \'utf8_bin\' AND
  82. k1."REFERENCED_TABLE_NAME" COLLATE \'utf8_bin\' = ? AND
  83. k2."REFERENCED_TABLE_NAME" COLLATE \'utf8_bin\' IN ?'
  84. );
  85. }
  86. public function getSql($name) {
  87. return isset($this->queries[$name])?$this->queries[$name]:false;
  88. }
  89. public function connect($hostname,$username,$password,$database,$port,$socket,$charset) {
  90. $db = mysqli_connect($hostname,$username,$password,$database,$port,$socket);
  91. if (mysqli_connect_errno()) {
  92. throw new \Exception('Connect failed. '.mysqli_connect_error());
  93. }
  94. if (!mysqli_set_charset($db,$charset)) {
  95. throw new \Exception('Error setting charset. '.mysqli_error($db));
  96. }
  97. if (!mysqli_query($db,'SET SESSION sql_mode = \'ANSI_QUOTES\';')) {
  98. throw new \Exception('Error setting ANSI quotes. '.mysqli_error($db));
  99. }
  100. $this->db = $db;
  101. }
  102. public function query($sql,$params=array()) {
  103. $db = $this->db;
  104. $sql = preg_replace_callback('/\!|\?/', function ($matches) use (&$db,&$params) {
  105. $param = array_shift($params);
  106. if ($matches[0]=='!') {
  107. $key = preg_replace('/[^a-zA-Z0-9\-_=<> ]/','',is_object($param)?$param->key:$param);
  108. if (is_object($param) && $param->type=='base64') {
  109. return "TO_BASE64(\"$key\") as \"$key\"";
  110. }
  111. if (is_object($param) && $param->type=='wkt') {
  112. return "ST_AsText(\"$key\") as \"$key\"";
  113. }
  114. return '"'.$key.'"';
  115. } else {
  116. if (is_array($param)) return '('.implode(',',array_map(function($v) use (&$db) {
  117. return "'".mysqli_real_escape_string($db,$v)."'";
  118. },$param)).')';
  119. if (is_object($param) && $param->type=='base64') {
  120. return "x'".bin2hex(base64_decode($param->value))."'";
  121. }
  122. if (is_object($param) && $param->type=='wkt') {
  123. return "ST_GeomFromText('".mysqli_real_escape_string($db,$param->value)."')";
  124. }
  125. if ($param===null) return 'NULL';
  126. return "'".mysqli_real_escape_string($db,$param)."'";
  127. }
  128. }, $sql);
  129. //if (!strpos($sql,'INFORMATION_SCHEMA')) echo "\n$sql\n";
  130. return mysqli_query($db,$sql);
  131. }
  132. public function fetchAssoc($result) {
  133. return mysqli_fetch_assoc($result);
  134. }
  135. public function fetchRow($result) {
  136. return mysqli_fetch_row($result);
  137. }
  138. public function insertId($result) {
  139. return mysqli_insert_id($this->db);
  140. }
  141. public function affectedRows($result) {
  142. return mysqli_affected_rows($this->db);
  143. }
  144. public function close($result) {
  145. return mysqli_free_result($result);
  146. }
  147. public function fetchFields($table) {
  148. $result = $this->query('SELECT * FROM ! WHERE 1=2;',array($table));
  149. return mysqli_fetch_fields($result);
  150. }
  151. public function addLimitToSql($sql,$limit,$offset) {
  152. return "$sql LIMIT $limit OFFSET $offset";
  153. }
  154. public function likeEscape($string) {
  155. return addcslashes($string,'%_');
  156. }
  157. public function convertFilter($field, $comparator, $value) {
  158. return false;
  159. }
  160. public function isBinaryType($field) {
  161. //echo "$field->name: $field->type ($field->flags)\n";
  162. return (($field->flags & 128) && ($field->type>=249) && ($field->type<=252));
  163. }
  164. public function isGeometryType($field) {
  165. return ($field->type==255);
  166. }
  167. public function getDefaultCharset() {
  168. return 'utf8';
  169. }
  170. public function beginTransaction() {
  171. return mysqli_begin_transaction($this->db);
  172. }
  173. public function commitTransaction() {
  174. return mysqli_commit($this->db);
  175. }
  176. public function rollbackTransaction() {
  177. return mysqli_rollback($this->db);
  178. }
  179. }
  180. class PostgreSQL implements DatabaseInterface {
  181. protected $db;
  182. protected $queries;
  183. public function __construct() {
  184. $this->queries = array(
  185. 'list_tables'=>'select
  186. "table_name","table_comment"
  187. from
  188. "information_schema"."tables"
  189. where
  190. "table_catalog" = ?',
  191. 'reflect_table'=>'select
  192. "table_name"
  193. from
  194. "information_schema"."tables"
  195. where
  196. "table_name" like ? and
  197. "table_catalog" = ?',
  198. 'reflect_pk'=>'select
  199. "column_name"
  200. from
  201. "information_schema"."table_constraints" tc,
  202. "information_schema"."key_column_usage" ku
  203. where
  204. tc."constraint_type" = \'PRIMARY KEY\' and
  205. tc."constraint_name" = ku."constraint_name" and
  206. ku."table_name" = ? and
  207. ku."table_catalog" = ?',
  208. 'reflect_belongs_to'=>'select
  209. cu1."table_name",cu1."column_name",
  210. cu2."table_name",cu2."column_name"
  211. from
  212. "information_schema".referential_constraints rc,
  213. "information_schema".key_column_usage cu1,
  214. "information_schema".key_column_usage cu2
  215. where
  216. cu1."constraint_name" = rc."constraint_name" and
  217. cu2."constraint_name" = rc."unique_constraint_name" and
  218. cu1."table_name" = ? and
  219. cu2."table_name" in ? and
  220. cu1."table_catalog" = ? and
  221. cu2."table_catalog" = ?',
  222. 'reflect_has_many'=>'select
  223. cu1."table_name",cu1."column_name",
  224. cu2."table_name",cu2."column_name"
  225. from
  226. "information_schema".referential_constraints rc,
  227. "information_schema".key_column_usage cu1,
  228. "information_schema".key_column_usage cu2
  229. where
  230. cu1."constraint_name" = rc."constraint_name" and
  231. cu2."constraint_name" = rc."unique_constraint_name" and
  232. cu1."table_name" in ? and
  233. cu2."table_name" = ? and
  234. cu1."table_catalog" = ? and
  235. cu2."table_catalog" = ?',
  236. 'reflect_habtm'=>'select
  237. cua1."table_name",cua1."column_name",
  238. cua2."table_name",cua2."column_name",
  239. cub1."table_name",cub1."column_name",
  240. cub2."table_name",cub2."column_name"
  241. from
  242. "information_schema".referential_constraints rca,
  243. "information_schema".referential_constraints rcb,
  244. "information_schema".key_column_usage cua1,
  245. "information_schema".key_column_usage cua2,
  246. "information_schema".key_column_usage cub1,
  247. "information_schema".key_column_usage cub2
  248. where
  249. cua1."constraint_name" = rca."constraint_name" and
  250. cua2."constraint_name" = rca."unique_constraint_name" and
  251. cub1."constraint_name" = rcb."constraint_name" and
  252. cub2."constraint_name" = rcb."unique_constraint_name" and
  253. cua1."table_catalog" = ? and
  254. cub1."table_catalog" = ? and
  255. cua2."table_catalog" = ? and
  256. cub2."table_catalog" = ? and
  257. cua1."table_name" = cub1."table_name" and
  258. cua2."table_name" = ? and
  259. cub2."table_name" in ?'
  260. );
  261. }
  262. public function getSql($name) {
  263. return isset($this->queries[$name])?$this->queries[$name]:false;
  264. }
  265. public function connect($hostname,$username,$password,$database,$port,$socket,$charset) {
  266. $e = function ($v) { return str_replace(array('\'','\\'),array('\\\'','\\\\'),$v); };
  267. $conn_string = '';
  268. if ($hostname || $socket) {
  269. if ($socket) $hostname = $e($socket);
  270. else $hostname = $e($hostname);
  271. $conn_string.= " host='$hostname'";
  272. }
  273. if ($port) {
  274. $port = ($port+0);
  275. $conn_string.= " port='$port'";
  276. }
  277. if ($database) {
  278. $database = $e($database);
  279. $conn_string.= " dbname='$database'";
  280. }
  281. if ($username) {
  282. $username = $e($username);
  283. $conn_string.= " user='$username'";
  284. }
  285. if ($password) {
  286. $password = $e($password);
  287. $conn_string.= " password='$password'";
  288. }
  289. if ($charset) {
  290. $charset = $e($charset);
  291. $conn_string.= " options='--client_encoding=$charset'";
  292. }
  293. $db = pg_connect($conn_string);
  294. $this->db = $db;
  295. }
  296. public function query($sql,$params=array()) {
  297. $db = $this->db;
  298. $sql = preg_replace_callback('/\!|\?/', function ($matches) use (&$db,&$params) {
  299. $param = array_shift($params);
  300. if ($matches[0]=='!') {
  301. $key = preg_replace('/[^a-zA-Z0-9\-_=<> ]/','',is_object($param)?$param->key:$param);
  302. if (is_object($param) && $param->type=='base64') {
  303. return "encode(\"$key\",'base64') as \"$key\"";
  304. }
  305. if (is_object($param) && $param->type=='wkt') {
  306. return "ST_AsText(\"$key\") as \"$key\"";
  307. }
  308. return '"'.$key.'"';
  309. } else {
  310. if (is_array($param)) return '('.implode(',',array_map(function($v) use (&$db) {
  311. return "'".pg_escape_string($db,$v)."'";
  312. },$param)).')';
  313. if (is_object($param) && $param->type=='base64') {
  314. return "'\x".bin2hex(base64_decode($param->value))."'";
  315. }
  316. if (is_object($param) && $param->type=='wkt') {
  317. return "ST_GeomFromText('".pg_escape_string($db,$param->value)."')";
  318. }
  319. if ($param===null) return 'NULL';
  320. return "'".pg_escape_string($db,$param)."'";
  321. }
  322. }, $sql);
  323. if (strtoupper(substr($sql,0,6))=='INSERT') {
  324. $sql .= ' RETURNING id;';
  325. }
  326. //echo "\n$sql\n";
  327. return @pg_query($db,$sql);
  328. }
  329. public function fetchAssoc($result) {
  330. return pg_fetch_assoc($result);
  331. }
  332. public function fetchRow($result) {
  333. return pg_fetch_row($result);
  334. }
  335. public function insertId($result) {
  336. list($id) = pg_fetch_row($result);
  337. return (int)$id;
  338. }
  339. public function affectedRows($result) {
  340. return pg_affected_rows($result);
  341. }
  342. public function close($result) {
  343. return pg_free_result($result);
  344. }
  345. public function fetchFields($table) {
  346. $result = $this->query('SELECT * FROM ! WHERE 1=2;',array($table));
  347. $keys = array();
  348. for($i=0;$i<pg_num_fields($result);$i++) {
  349. $field = array();
  350. $field['name'] = pg_field_name($result,$i);
  351. $field['type'] = pg_field_type($result,$i);
  352. $keys[$i] = (object)$field;
  353. }
  354. return $keys;
  355. }
  356. public function addLimitToSql($sql,$limit,$offset) {
  357. return "$sql LIMIT $limit OFFSET $offset";
  358. }
  359. public function likeEscape($string) {
  360. return addcslashes($string,'%_');
  361. }
  362. public function convertFilter($field, $comparator, $value) {
  363. return false;
  364. }
  365. public function isBinaryType($field) {
  366. return $field->type == 'bytea';
  367. }
  368. public function isGeometryType($field) {
  369. return $field->type == 'geometry';
  370. }
  371. public function getDefaultCharset() {
  372. return 'UTF8';
  373. }
  374. public function beginTransaction() {
  375. return $this->query('BEGIN');
  376. }
  377. public function commitTransaction() {
  378. return $this->query('COMMIT');
  379. }
  380. public function rollbackTransaction() {
  381. return $this->query('ROLLBACK');
  382. }
  383. }
  384. class SQLServer implements DatabaseInterface {
  385. protected $db;
  386. protected $queries;
  387. public function __construct() {
  388. $this->queries = array(
  389. 'list_tables'=>'SELECT
  390. "TABLE_NAME",\'\' as "TABLE_COMMENT"
  391. FROM
  392. "INFORMATION_SCHEMA"."TABLES"
  393. WHERE
  394. "TABLE_CATALOG" = ?',
  395. 'reflect_table'=>'SELECT
  396. "TABLE_NAME"
  397. FROM
  398. "INFORMATION_SCHEMA"."TABLES"
  399. WHERE
  400. "TABLE_NAME" LIKE ? AND
  401. "TABLE_CATALOG" = ?',
  402. 'reflect_pk'=>'SELECT
  403. "COLUMN_NAME"
  404. FROM
  405. "INFORMATION_SCHEMA"."TABLE_CONSTRAINTS" tc,
  406. "INFORMATION_SCHEMA"."KEY_COLUMN_USAGE" ku
  407. WHERE
  408. tc."CONSTRAINT_TYPE" = \'PRIMARY KEY\' AND
  409. tc."CONSTRAINT_NAME" = ku."CONSTRAINT_NAME" AND
  410. ku."TABLE_NAME" = ? AND
  411. ku."TABLE_CATALOG" = ?',
  412. 'reflect_belongs_to'=>'SELECT
  413. cu1."TABLE_NAME",cu1."COLUMN_NAME",
  414. cu2."TABLE_NAME",cu2."COLUMN_NAME"
  415. FROM
  416. "INFORMATION_SCHEMA".REFERENTIAL_CONSTRAINTS rc,
  417. "INFORMATION_SCHEMA".CONSTRAINT_COLUMN_USAGE cu1,
  418. "INFORMATION_SCHEMA".CONSTRAINT_COLUMN_USAGE cu2
  419. WHERE
  420. cu1."CONSTRAINT_NAME" = rc."CONSTRAINT_NAME" AND
  421. cu2."CONSTRAINT_NAME" = rc."UNIQUE_CONSTRAINT_NAME" AND
  422. cu1."TABLE_NAME" = ? AND
  423. cu2."TABLE_NAME" IN ? AND
  424. cu1."TABLE_CATALOG" = ? AND
  425. cu2."TABLE_CATALOG" = ?',
  426. 'reflect_has_many'=>'SELECT
  427. cu1."TABLE_NAME",cu1."COLUMN_NAME",
  428. cu2."TABLE_NAME",cu2."COLUMN_NAME"
  429. FROM
  430. "INFORMATION_SCHEMA".REFERENTIAL_CONSTRAINTS rc,
  431. "INFORMATION_SCHEMA".CONSTRAINT_COLUMN_USAGE cu1,
  432. "INFORMATION_SCHEMA".CONSTRAINT_COLUMN_USAGE cu2
  433. WHERE
  434. cu1."CONSTRAINT_NAME" = rc."CONSTRAINT_NAME" AND
  435. cu2."CONSTRAINT_NAME" = rc."UNIQUE_CONSTRAINT_NAME" AND
  436. cu1."TABLE_NAME" IN ? AND
  437. cu2."TABLE_NAME" = ? AND
  438. cu1."TABLE_CATALOG" = ? AND
  439. cu2."TABLE_CATALOG" = ?',
  440. 'reflect_habtm'=>'SELECT
  441. cua1."TABLE_NAME",cua1."COLUMN_NAME",
  442. cua2."TABLE_NAME",cua2."COLUMN_NAME",
  443. cub1."TABLE_NAME",cub1."COLUMN_NAME",
  444. cub2."TABLE_NAME",cub2."COLUMN_NAME"
  445. FROM
  446. "INFORMATION_SCHEMA".REFERENTIAL_CONSTRAINTS rca,
  447. "INFORMATION_SCHEMA".REFERENTIAL_CONSTRAINTS rcb,
  448. "INFORMATION_SCHEMA".CONSTRAINT_COLUMN_USAGE cua1,
  449. "INFORMATION_SCHEMA".CONSTRAINT_COLUMN_USAGE cua2,
  450. "INFORMATION_SCHEMA".CONSTRAINT_COLUMN_USAGE cub1,
  451. "INFORMATION_SCHEMA".CONSTRAINT_COLUMN_USAGE cub2
  452. WHERE
  453. cua1."CONSTRAINT_NAME" = rca."CONSTRAINT_NAME" AND
  454. cua2."CONSTRAINT_NAME" = rca."UNIQUE_CONSTRAINT_NAME" AND
  455. cub1."CONSTRAINT_NAME" = rcb."CONSTRAINT_NAME" AND
  456. cub2."CONSTRAINT_NAME" = rcb."UNIQUE_CONSTRAINT_NAME" AND
  457. cua1."TABLE_CATALOG" = ? AND
  458. cub1."TABLE_CATALOG" = ? AND
  459. cua2."TABLE_CATALOG" = ? AND
  460. cub2."TABLE_CATALOG" = ? AND
  461. cua1."TABLE_NAME" = cub1."TABLE_NAME" AND
  462. cua2."TABLE_NAME" = ? AND
  463. cub2."TABLE_NAME" IN ?'
  464. );
  465. }
  466. public function getSql($name) {
  467. return isset($this->queries[$name])?$this->queries[$name]:false;
  468. }
  469. public function connect($hostname,$username,$password,$database,$port,$socket,$charset) {
  470. $connectionInfo = array();
  471. if ($port) $hostname.=','.$port;
  472. if ($username) $connectionInfo['UID']=$username;
  473. if ($password) $connectionInfo['PWD']=$password;
  474. if ($database) $connectionInfo['Database']=$database;
  475. if ($charset) $connectionInfo['CharacterSet']=$charset;
  476. $connectionInfo['QuotedId']=1;
  477. $connectionInfo['ReturnDatesAsStrings']=1;
  478. $db = sqlsrv_connect($hostname, $connectionInfo);
  479. if (!$db) {
  480. throw new \Exception('Connect failed. '.print_r( sqlsrv_errors(), true));
  481. }
  482. if ($socket) {
  483. throw new \Exception('Socket connection is not supported.');
  484. }
  485. $this->db = $db;
  486. }
  487. public function query($sql,$params=array()) {
  488. $args = array();
  489. $db = $this->db;
  490. $sql = preg_replace_callback('/\!|\?/', function ($matches) use (&$db,&$params,&$args) {
  491. static $i=-1;
  492. $i++;
  493. $param = $params[$i];
  494. if ($matches[0]=='!') {
  495. $key = preg_replace('/[^a-zA-Z0-9\-_=<> ]/','',is_object($param)?$param->key:$param);
  496. if (is_object($param) && $param->type=='base64') {
  497. return "CAST(N'' AS XML).value('xs:base64Binary(xs:hexBinary(sql:column(\"$key\")))', 'VARCHAR(MAX)') as \"$key\"";
  498. }
  499. if (is_object($param) && $param->type=='wkt') {
  500. return "\"$key\".STAsText() as \"$key\"";
  501. }
  502. return '"'.$key.'"';
  503. } else {
  504. // This is workaround because SQLSRV cannot accept NULL in a param
  505. if ($matches[0]=='?' && is_null($param)) {
  506. return 'NULL';
  507. }
  508. if (is_array($param)) {
  509. $args = array_merge($args,$param);
  510. return '('.implode(',',str_split(str_repeat('?',count($param)))).')';
  511. }
  512. if (is_object($param) && $param->type=='base64') {
  513. $args[] = bin2hex(base64_decode($param->value));
  514. return 'CONVERT(VARBINARY(MAX),?,2)';
  515. }
  516. if (is_object($param) && $param->type=='wkt') {
  517. $args[] = $param->value;
  518. return 'geometry::STGeomFromText(?,0)';
  519. }
  520. $args[] = $param;
  521. return '?';
  522. }
  523. }, $sql);
  524. //var_dump($params);
  525. //echo "\n$sql\n";
  526. //var_dump($args);
  527. //file_put_contents('sql.txt',"\n$sql\n".var_export($args,true)."\n",FILE_APPEND);
  528. if (strtoupper(substr($sql,0,6))=='INSERT') {
  529. $sql .= ';SELECT SCOPE_IDENTITY()';
  530. }
  531. return sqlsrv_query($db,$sql,$args)?:null;
  532. }
  533. public function fetchAssoc($result) {
  534. $values = sqlsrv_fetch_array($result, SQLSRV_FETCH_ASSOC);
  535. if ($values) $values = array_map(function($v){ return is_null($v)?null:(string)$v; },$values);
  536. return $values;
  537. }
  538. public function fetchRow($result) {
  539. $values = sqlsrv_fetch_array($result, SQLSRV_FETCH_NUMERIC);
  540. if ($values) $values = array_map(function($v){ return is_null($v)?null:(string)$v; },$values);
  541. return $values;
  542. }
  543. public function insertId($result) {
  544. sqlsrv_next_result($result);
  545. sqlsrv_fetch($result);
  546. return (int)sqlsrv_get_field($result, 0);
  547. }
  548. public function affectedRows($result) {
  549. return sqlsrv_rows_affected($result);
  550. }
  551. public function close($result) {
  552. return sqlsrv_free_stmt($result);
  553. }
  554. public function fetchFields($table) {
  555. $result = $this->query('SELECT * FROM ! WHERE 1=2;',array($table));
  556. //var_dump(sqlsrv_field_metadata($result));
  557. return array_map(function($a){
  558. $p = array();
  559. foreach ($a as $k=>$v) {
  560. $p[strtolower($k)] = $v;
  561. }
  562. return (object)$p;
  563. },sqlsrv_field_metadata($result));
  564. }
  565. public function addLimitToSql($sql,$limit,$offset) {
  566. return "$sql OFFSET $offset ROWS FETCH NEXT $limit ROWS ONLY";
  567. }
  568. public function likeEscape($string) {
  569. return str_replace(array('%','_'),array('[%]','[_]'),$string);
  570. }
  571. public function convertFilter($field, $comparator, $value) {
  572. $comparator = strtolower($comparator);
  573. if ($comparator[0]!='n') {
  574. switch ($comparator) {
  575. case 'sco': return array('!.STContains(geometry::STGeomFromText(?,0))=1',$field,$value);
  576. case 'scr': return array('!.STCrosses(geometry::STGeomFromText(?,0))=1',$field,$value);
  577. case 'sdi': return array('!.STDisjoint(geometry::STGeomFromText(?,0))=1',$field,$value);
  578. case 'seq': return array('!.STEquals(geometry::STGeomFromText(?,0))=1',$field,$value);
  579. case 'sin': return array('!.STIntersects(geometry::STGeomFromText(?,0))=1',$field,$value);
  580. case 'sov': return array('!.STOverlaps(geometry::STGeomFromText(?,0))=1',$field,$value);
  581. case 'sto': return array('!.STTouches(geometry::STGeomFromText(?,0))=1',$field,$value);
  582. case 'swi': return array('!.STWithin(geometry::STGeomFromText(?,0))=1',$field,$value);
  583. case 'sic': return array('!.STIsClosed()=1',$field);
  584. case 'sis': return array('!.STIsSimple()=1',$field);
  585. case 'siv': return array('!.STIsValid()=1',$field);
  586. }
  587. } else {
  588. switch ($comparator) {
  589. case 'nsco': return array('!.STContains(geometry::STGeomFromText(?,0))=0',$field,$value);
  590. case 'nscr': return array('!.STCrosses(geometry::STGeomFromText(?,0))=0',$field,$value);
  591. case 'nsdi': return array('!.STDisjoint(geometry::STGeomFromText(?,0))=0',$field,$value);
  592. case 'nseq': return array('!.STEquals(geometry::STGeomFromText(?,0))=0',$field,$value);
  593. case 'nsin': return array('!.STIntersects(geometry::STGeomFromText(?,0))=0',$field,$value);
  594. case 'nsov': return array('!.STOverlaps(geometry::STGeomFromText(?,0))=0',$field,$value);
  595. case 'nsto': return array('!.STTouches(geometry::STGeomFromText(?,0))=0',$field,$value);
  596. case 'nswi': return array('!.STWithin(geometry::STGeomFromText(?,0))=0',$field,$value);
  597. case 'nsic': return array('!.STIsClosed()=0',$field);
  598. case 'nsis': return array('!.STIsSimple()=0',$field);
  599. case 'nsiv': return array('!.STIsValid()=0',$field);
  600. }
  601. }
  602. return false;
  603. }
  604. public function isBinaryType($field) {
  605. return ($field->type>=-4 && $field->type<=-2);
  606. }
  607. public function isGeometryType($field) {
  608. return ($field->type==-151);
  609. }
  610. public function getDefaultCharset() {
  611. return 'UTF-8';
  612. }
  613. public function beginTransaction() {
  614. return sqlsrv_begin_transaction($this->db);
  615. }
  616. public function commitTransaction() {
  617. return sqlsrv_commit($this->db);
  618. }
  619. public function rollbackTransaction() {
  620. return sqlsrv_rollback($this->db);
  621. }
  622. }
  623. class SQLite implements DatabaseInterface {
  624. protected $db;
  625. protected $queries;
  626. public function __construct() {
  627. $this->queries = array(
  628. 'list_tables'=>'SELECT
  629. "name", ""
  630. FROM
  631. "sys/tables"',
  632. 'reflect_table'=>'SELECT
  633. "name"
  634. FROM
  635. "sys/tables"
  636. WHERE
  637. "name"=?',
  638. 'reflect_pk'=>'SELECT
  639. "name"
  640. FROM
  641. "sys/columns"
  642. WHERE
  643. "pk"=1 AND
  644. "self"=?',
  645. 'reflect_belongs_to'=>'SELECT
  646. "self", "from",
  647. "table", "to"
  648. FROM
  649. "sys/foreign_keys"
  650. WHERE
  651. "self" = ? AND
  652. "table" IN ? AND
  653. ? like "%" AND
  654. ? like "%"',
  655. 'reflect_has_many'=>'SELECT
  656. "self", "from",
  657. "table", "to"
  658. FROM
  659. "sys/foreign_keys"
  660. WHERE
  661. "self" IN ? AND
  662. "table" = ? AND
  663. ? like "%" AND
  664. ? like "%"',
  665. 'reflect_habtm'=>'SELECT
  666. k1."self", k1."from",
  667. k1."table", k1."to",
  668. k2."self", k2."from",
  669. k2."table", k2."to"
  670. FROM
  671. "sys/foreign_keys" k1,
  672. "sys/foreign_keys" k2
  673. WHERE
  674. ? like "%" AND
  675. ? like "%" AND
  676. ? like "%" AND
  677. ? like "%" AND
  678. k1."self" = k2."self" AND
  679. k1."table" = ? AND
  680. k2."table" IN ?'
  681. );
  682. }
  683. public function getSql($name) {
  684. return isset($this->queries[$name])?$this->queries[$name]:false;
  685. }
  686. public function connect($hostname,$username,$password,$database,$port,$socket,$charset) {
  687. $this->db = new SQLite3($database);
  688. // optimizations
  689. $this->db->querySingle('PRAGMA synchronous = NORMAL');
  690. $this->db->querySingle('PRAGMA foreign_keys = on');
  691. $reflection = $this->db->querySingle('SELECT name FROM sqlite_master WHERE type = "table" and name like "sys/%"');
  692. if (!$reflection) {
  693. //create reflection tables
  694. $this->query('CREATE table "sys/version" ("version" integer)');
  695. $this->query('CREATE table "sys/tables" ("name" text)');
  696. $this->query('CREATE table "sys/columns" ("self" text,"cid" integer,"name" text,"type" integer,"notnull" integer,"dflt_value" integer,"pk" integer)');
  697. $this->query('CREATE table "sys/foreign_keys" ("self" text,"id" integer,"seq" integer,"table" text,"from" text,"to" text,"on_update" text,"on_delete" text,"match" text)');
  698. }
  699. $version = $this->db->querySingle('pragma schema_version');
  700. if ($version != $this->db->querySingle('SELECT "version" from "sys/version"')) {
  701. // reflection may take a while
  702. set_time_limit(3600);
  703. // update version data
  704. $this->query('DELETE FROM "sys/version"');
  705. $this->query('INSERT into "sys/version" ("version") VALUES (?)',array($version));
  706. // update tables data
  707. $this->query('DELETE FROM "sys/tables"');
  708. $result = $this->query('SELECT * FROM sqlite_master WHERE type = "table" and name not like "sys/%" and name<>"sqlite_sequence"');
  709. $tables = array();
  710. while ($row = $this->fetchAssoc($result)) {
  711. $tables[] = $row['name'];
  712. $this->query('INSERT into "sys/tables" ("name") VALUES (?)',array($row['name']));
  713. }
  714. // update columns and foreign_keys data
  715. $this->query('DELETE FROM "sys/columns"');
  716. $this->query('DELETE FROM "sys/foreign_keys"');
  717. foreach ($tables as $table) {
  718. $result = $this->query('pragma table_info(!)',array($table));
  719. while ($row = $this->fetchRow($result)) {
  720. array_unshift($row, $table);
  721. $this->query('INSERT into "sys/columns" ("self","cid","name","type","notnull","dflt_value","pk") VALUES (?,?,?,?,?,?,?)',$row);
  722. }
  723. $result = $this->query('pragma foreign_key_list(!)',array($table));
  724. while ($row = $this->fetchRow($result)) {
  725. array_unshift($row, $table);
  726. $this->query('INSERT into "sys/foreign_keys" ("self","id","seq","table","from","to","on_update","on_delete","match") VALUES (?,?,?,?,?,?,?,?,?)',$row);
  727. }
  728. }
  729. }
  730. }
  731. public function query($sql,$params=array()) {
  732. $db = $this->db;
  733. $sql = preg_replace_callback('/\!|\?/', function ($matches) use (&$db,&$params) {
  734. $param = array_shift($params);
  735. if ($matches[0]=='!') {
  736. $key = preg_replace('/[^a-zA-Z0-9\-_=<> ]/','',is_object($param)?$param->key:$param);
  737. return '"'.$key.'"';
  738. } else {
  739. if (is_array($param)) return '('.implode(',',array_map(function($v) use (&$db) {
  740. return "'".$db->escapeString($v)."'";
  741. },$param)).')';
  742. if (is_object($param) && $param->type=='base64') {
  743. return "'".$db->escapeString($param->value)."'";
  744. }
  745. if ($param===null) return 'NULL';
  746. return "'".$db->escapeString($param)."'";
  747. }
  748. }, $sql);
  749. //echo "\n$sql\n";
  750. try { $result=$db->query($sql); } catch(\Exception $e) { $result=null; }
  751. return $result;
  752. }
  753. public function fetchAssoc($result) {
  754. $values = $result->fetchArray(SQLITE3_ASSOC);
  755. if ($values) $values = array_map(function($v){ return is_null($v)?null:(string)$v; },$values);
  756. return $values;
  757. }
  758. public function fetchRow($result) {
  759. $values = $result->fetchArray(SQLITE3_NUM);
  760. if ($values) $values = array_map(function($v){ return is_null($v)?null:(string)$v; },$values);
  761. return $values;
  762. }
  763. public function insertId($result) {
  764. return $this->db->lastInsertRowID();
  765. }
  766. public function affectedRows($result) {
  767. return $this->db->changes();
  768. }
  769. public function close($result) {
  770. return $result->finalize();
  771. }
  772. public function fetchFields($table) {
  773. $result = $this->query('SELECT * FROM "sys/columns" WHERE "self"=?;',array($table));
  774. $fields = array();
  775. while ($row = $this->fetchAssoc($result)){
  776. $fields[strtolower($row['name'])] = (object)$row;
  777. }
  778. return $fields;
  779. }
  780. public function addLimitToSql($sql,$limit,$offset) {
  781. return "$sql LIMIT $limit OFFSET $offset";
  782. }
  783. public function likeEscape($string) {
  784. return addcslashes($string,'%_');
  785. }
  786. public function convertFilter($field, $comparator, $value) {
  787. return false;
  788. }
  789. public function isBinaryType($field) {
  790. return (substr($field->type,0,4)=='data');
  791. }
  792. public function isGeometryType($field) {
  793. return false;
  794. }
  795. public function getDefaultCharset() {
  796. return 'utf8';
  797. }
  798. public function beginTransaction() {
  799. return $this->query('BEGIN');
  800. }
  801. public function commitTransaction() {
  802. return $this->query('COMMIT');
  803. }
  804. public function rollbackTransaction() {
  805. return $this->query('ROLLBACK');
  806. }
  807. }
  808. class PHP_CRUD_API {
  809. protected $db;
  810. protected $settings;
  811. protected function mapMethodToAction($method,$key) {
  812. switch ($method) {
  813. case 'OPTIONS': return 'headers';
  814. case 'GET': return $key?'read':'list';
  815. case 'PUT': return 'update';
  816. case 'POST': return 'create';
  817. case 'DELETE': return 'delete';
  818. default: $this->exitWith404('method');
  819. }
  820. return false;
  821. }
  822. protected function parseRequestParameter(&$request,$characters) {
  823. if (!$request) return false;
  824. $pos = strpos($request,'/');
  825. $value = $pos?substr($request,0,$pos):$request;
  826. $request = $pos?substr($request,$pos+1):'';
  827. if (!$characters) return $value;
  828. return preg_replace("/[^$characters]/",'',$value);
  829. }
  830. protected function parseGetParameter($get,$name,$characters) {
  831. $value = isset($get[$name])?$get[$name]:false;
  832. return $characters?preg_replace("/[^$characters]/",'',$value):$value;
  833. }
  834. protected function parseGetParameterArray($get,$name,$characters) {
  835. $values = isset($get[$name])?$get[$name]:false;
  836. if (!is_array($values)) $values = array($values);
  837. if ($characters) {
  838. foreach ($values as &$value) {
  839. $value = preg_replace("/[^$characters]/",'',$value);
  840. }
  841. }
  842. return $values;
  843. }
  844. protected function applyTableAuthorizer($callback,$action,$database,&$tables) {
  845. if (is_callable($callback,true)) foreach ($tables as $i=>$table) {
  846. if (!$callback($action,$database,$table)) {
  847. unset($tables[$i]);
  848. }
  849. }
  850. }
  851. protected function applyRecordFilter($callback,$action,$database,$tables,&$filters) {
  852. if (is_callable($callback,true)) foreach ($tables as $i=>$table) {
  853. $f = $this->convertFilters($callback($action,$database,$table));
  854. if ($f) {
  855. if (!isset($filters[$table])) $filters[$table] = array();
  856. if (!isset($filters[$table]['and'])) $filters[$table]['and'] = array();
  857. $filters[$table]['and'] = array_merge($filters[$table]['and'],$f);
  858. }
  859. }
  860. }
  861. protected function applyTenancyFunction($callback,$action,$database,$fields,&$filters) {
  862. if (is_callable($callback,true)) foreach ($fields as $table=>$keys) {
  863. foreach ($keys as $field) {
  864. $v = $callback($action,$database,$table,$field->name);
  865. if ($v!==null) {
  866. if (!isset($filters[$table])) $filters[$table] = array();
  867. if (!isset($filters[$table]['and'])) $filters[$table]['and'] = array();
  868. if (is_array($v)) $filters[$table]['and'][] = $this->convertFilter($field->name,'in',implode(',',$v));
  869. else $filters[$table]['and'][] = $this->convertFilter($field->name,'eq',$v);
  870. }
  871. }
  872. }
  873. }
  874. protected function applyColumnAuthorizer($callback,$action,$database,&$fields) {
  875. if (is_callable($callback,true)) foreach ($fields as $table=>$keys) {
  876. foreach ($keys as $field) {
  877. if (!$callback($action,$database,$table,$field->name)) {
  878. unset($fields[$table][$field->name]);
  879. }
  880. }
  881. }
  882. }
  883. protected function applyInputTenancy($callback,$action,$database,$table,&$input,$keys) {
  884. if (is_callable($callback,true)) foreach ($keys as $key=>$field) {
  885. $v = $callback($action,$database,$table,$key);
  886. if ($v!==null && (isset($input->$key) || $action=='create')) {
  887. if (is_array($v)) {
  888. if (!count($v)) {
  889. $input->$key = null;
  890. } elseif (!isset($input->$key)) {
  891. $input->$key = $v[0];
  892. } elseif (!in_array($input->$key,$v)) {
  893. $input->$key = null;
  894. }
  895. } else {
  896. $input->$key = $v;
  897. }
  898. }
  899. }
  900. }
  901. protected function applyInputSanitizer($callback,$action,$database,$table,&$input,$keys) {
  902. if (is_callable($callback,true)) foreach ((array)$input as $key=>$value) {
  903. if (isset($keys[$key])) {
  904. $input->$key = $callback($action,$database,$table,$key,$keys[$key]->type,$value);
  905. }
  906. }
  907. }
  908. protected function applyInputValidator($callback,$action,$database,$table,$input,$keys,$context) {
  909. $errors = array();
  910. if (is_callable($callback,true)) foreach ((array)$input as $key=>$value) {
  911. if (isset($keys[$key])) {
  912. $error = $callback($action,$database,$table,$key,$keys[$key]->type,$value,$context);
  913. if ($error!==true && $error!==null) $errors[$key] = $error;
  914. }
  915. }
  916. if (!empty($errors)) $this->exitWith422($errors);
  917. }
  918. protected function processTableAndIncludeParameters($database,$table,$include,$action) {
  919. $blacklist = array('information_schema','mysql','sys','pg_catalog');
  920. if (in_array(strtolower($database), $blacklist)) return array();
  921. $table_list = array();
  922. if ($result = $this->db->query($this->db->getSql('reflect_table'),array($table,$database))) {
  923. while ($row = $this->db->fetchRow($result)) $table_list[] = $row[0];
  924. $this->db->close($result);
  925. }
  926. if (empty($table_list)) $this->exitWith404('entity');
  927. if ($action=='list') {
  928. foreach (explode(',',$include) as $table) {
  929. if ($result = $this->db->query($this->db->getSql('reflect_table'),array($table,$database))) {
  930. while ($row = $this->db->fetchRow($result)) $table_list[] = $row[0];
  931. $this->db->close($result);
  932. }
  933. }
  934. }
  935. return $table_list;
  936. }
  937. protected function exitWith404($type) {
  938. if (isset($_SERVER['REQUEST_METHOD'])) {
  939. header('Content-Type:',true,404);
  940. die("Not found ($type)");
  941. } else {
  942. throw new \Exception("Not found ($type)");
  943. }
  944. }
  945. protected function exitWith422($object) {
  946. if (isset($_SERVER['REQUEST_METHOD'])) {
  947. header('Content-Type:',true,422);
  948. die(json_encode($object));
  949. } else {
  950. throw new \Exception(json_encode($object));
  951. }
  952. }
  953. protected function headersCommand($parameters) {
  954. $headers = array();
  955. $headers[]='Access-Control-Allow-Headers: Content-Type';
  956. $headers[]='Access-Control-Allow-Methods: OPTIONS, GET, PUT, POST, DELETE';
  957. $headers[]='Access-Control-Allow-Credentials: true';
  958. $headers[]='Access-Control-Max-Age: 1728000';
  959. if (isset($_SERVER['REQUEST_METHOD'])) {
  960. foreach ($headers as $header) header($header);
  961. } else {
  962. echo json_encode($headers);
  963. }
  964. }
  965. protected function startOutput($callback) {
  966. if ($callback) {
  967. if (isset($_SERVER['REQUEST_METHOD'])) {
  968. header('Content-Type: application/javascript; charset=utf-8');
  969. }
  970. echo $callback.'(';
  971. } else {
  972. if (isset($_SERVER['REQUEST_METHOD'])) {
  973. header('Content-Type: application/json; charset=utf-8');
  974. }
  975. }
  976. }
  977. protected function endOutput($callback) {
  978. if ($callback) {
  979. echo ');';
  980. }
  981. }
  982. protected function findPrimaryKeys($table,$database) {
  983. $fields = array();
  984. if ($result = $this->db->query($this->db->getSql('reflect_pk'),array($table,$database))) {
  985. while ($row = $this->db->fetchRow($result)) {
  986. $fields[] = $row[0];
  987. }
  988. $this->db->close($result);
  989. }
  990. return $fields;
  991. }
  992. protected function processKeyParameter($key,$tables,$database) {
  993. if (!$key) return false;
  994. $fields = $this->findPrimaryKeys($tables[0],$database);
  995. if (count($fields)!=1) $this->exitWith404('1pk');
  996. return array($key,$fields[0]);
  997. }
  998. protected function processOrderParameter($order) {
  999. if (!$order) return false;
  1000. $order = explode(',',$order,2);
  1001. if (count($order)<2) $order[1]='ASC';
  1002. if (!strlen($order[0])) return false;
  1003. $order[1] = strtoupper($order[1])=='DESC'?'DESC':'ASC';
  1004. return $order;
  1005. }
  1006. protected function convertFilter($field, $comparator, $value) {
  1007. $result = $this->db->convertFilter($field,$comparator,$value);
  1008. if ($result) return $result;
  1009. // default behavior
  1010. $comparator = strtolower($comparator);
  1011. if ($comparator[0]!='n') {
  1012. if (strlen($comparator)==2) {
  1013. switch ($comparator) {
  1014. case 'cs': return array('! LIKE ?',$field,'%'.$this->db->likeEscape($value).'%');
  1015. case 'sw': return array('! LIKE ?',$field,$this->db->likeEscape($value).'%');
  1016. case 'ew': return array('! LIKE ?',$field,'%'.$this->db->likeEscape($value));
  1017. case 'eq': return array('! = ?',$field,$value);
  1018. case 'lt': return array('! < ?',$field,$value);
  1019. case 'le': return array('! <= ?',$field,$value);
  1020. case 'ge': return array('! >= ?',$field,$value);
  1021. case 'gt': return array('! > ?',$field,$value);
  1022. case 'bt': $v = explode(',',$value); if (count($v)<2) return false;
  1023. return array('! BETWEEN ? AND ?',$field,$v[0],$v[1]);
  1024. case 'in': return array('! IN ?',$field,explode(',',$value));
  1025. case 'is': return array('! IS NULL',$field);
  1026. }
  1027. } else {
  1028. switch ($comparator) {
  1029. case 'sco': return array('ST_Contains(!,ST_GeomFromText(?))=TRUE',$field,$value);
  1030. case 'scr': return array('ST_Crosses(!,ST_GeomFromText(?))=TRUE',$field,$value);
  1031. case 'sdi': return array('ST_Disjoint(!,ST_GeomFromText(?))=TRUE',$field,$value);
  1032. case 'seq': return array('ST_Equals(!,ST_GeomFromText(?))=TRUE',$field,$value);
  1033. case 'sin': return array('ST_Intersects(!,ST_GeomFromText(?))=TRUE',$field,$value);
  1034. case 'sov': return array('ST_Overlaps(!,ST_GeomFromText(?))=TRUE',$field,$value);
  1035. case 'sto': return array('ST_Touches(!,ST_GeomFromText(?))=TRUE',$field,$value);
  1036. case 'swi': return array('ST_Within(!,ST_GeomFromText(?))=TRUE',$field,$value);
  1037. case 'sic': return array('ST_IsClosed(!)=TRUE',$field);
  1038. case 'sis': return array('ST_IsSimple(!)=TRUE',$field);
  1039. case 'siv': return array('ST_IsValid(!)=TRUE',$field);
  1040. }
  1041. }
  1042. } else {
  1043. if (strlen($comparator)==2) {
  1044. switch ($comparator) {
  1045. case 'ne': return $this->convertFilter($field, 'neq', $value); // deprecated
  1046. case 'ni': return $this->convertFilter($field, 'nin', $value); // deprecated
  1047. case 'no': return $this->convertFilter($field, 'nis', $value); // deprecated
  1048. }
  1049. } elseif (strlen($comparator)==3) {
  1050. switch ($comparator) {
  1051. case 'ncs': return array('! NOT LIKE ?',$field,'%'.$this->db->likeEscape($value).'%');
  1052. case 'nsw': return array('! NOT LIKE ?',$field,$this->db->likeEscape($value).'%');
  1053. case 'new': return array('! NOT LIKE ?',$field,'%'.$this->db->likeEscape($value));
  1054. case 'neq': return array('! <> ?',$field,$value);
  1055. case 'nlt': return array('! >= ?',$field,$value);
  1056. case 'nle': return array('! > ?',$field,$value);
  1057. case 'nge': return array('! < ?',$field,$value);
  1058. case 'ngt': return array('! <= ?',$field,$value);
  1059. case 'nbt': $v = explode(',',$value); if (count($v)<2) return false;
  1060. return array('! NOT BETWEEN ? AND ?',$field,$v[0],$v[1]);
  1061. case 'nin': return array('! NOT IN ?',$field,explode(',',$value));
  1062. case 'nis': return array('! IS NOT NULL',$field);
  1063. }
  1064. } else {
  1065. switch ($comparator) {
  1066. case 'nsco': return array('ST_Contains(!,ST_GeomFromText(?))=FALSE',$field,$value);
  1067. case 'nscr': return array('ST_Crosses(!,ST_GeomFromText(?))=FALSE',$field,$value);
  1068. case 'nsdi': return array('ST_Disjoint(!,ST_GeomFromText(?))=FALSE',$field,$value);
  1069. case 'nseq': return array('ST_Equals(!,ST_GeomFromText(?))=FALSE',$field,$value);
  1070. case 'nsin': return array('ST_Intersects(!,ST_GeomFromText(?))=FALSE',$field,$value);
  1071. case 'nsov': return array('ST_Overlaps(!,ST_GeomFromText(?))=FALSE',$field,$value);
  1072. case 'nsto': return array('ST_Touches(!,ST_GeomFromText(?))=FALSE',$field,$value);
  1073. case 'nswi': return array('ST_Within(!,ST_GeomFromText(?))=FALSE',$field,$value);
  1074. case 'nsic': return array('ST_IsClosed(!)=FALSE',$field);
  1075. case 'nsis': return array('ST_IsSimple(!)=FALSE',$field);
  1076. case 'nsiv': return array('ST_IsValid(!)=FALSE',$field);
  1077. }
  1078. }
  1079. }
  1080. return false;
  1081. }
  1082. public function convertFilters($filters) {
  1083. $result = array();
  1084. if ($filters) {
  1085. for ($i=0;$i<count($filters);$i++) {
  1086. $parts = explode(',',$filters[$i],3);
  1087. if (count($parts)>=2) {
  1088. $field = $parts[0];
  1089. $comparator = $parts[1];
  1090. $value = isset($parts[2])?$parts[2]:null;
  1091. $filter = $this->convertFilter($field,$comparator,$value);
  1092. if ($filter) $result[] = $filter;
  1093. }
  1094. }
  1095. }
  1096. return $result;
  1097. }
  1098. protected function processFiltersParameter($tables,$satisfy,$filters) {
  1099. $result = $this->convertFilters($filters);
  1100. if (!$result) return array();
  1101. $and = ($satisfy && strtolower($satisfy)=='any')?'or':'and';
  1102. return array($tables[0]=>array($and=>$result));
  1103. }
  1104. protected function processPageParameter($page) {
  1105. if (!$page) return false;
  1106. $page = explode(',',$page,2);
  1107. if (count($page)<2) $page[1]=20;
  1108. $page[0] = ($page[0]-1)*$page[1];
  1109. return $page;
  1110. }
  1111. protected function retrieveObject($key,$fields,$filters,$tables) {
  1112. if (!$key) return false;
  1113. $table = $tables[0];
  1114. $params = array();
  1115. $sql = 'SELECT ';
  1116. $this->convertOutputs($sql,$params,$fields[$table]);
  1117. $sql .= ' FROM !';
  1118. $params[] = $table;
  1119. if (!isset($filters[$table])) $filters[$table] = array();
  1120. if (!isset($filters[$table]['or'])) $filters[$table]['or'] = array();
  1121. $filters[$table]['or'][] = $this->convertFilter($key[1],'eq',$key[0]);
  1122. $this->addWhereFromFilters($filters[$table],$sql,$params);
  1123. $object = null;
  1124. if ($result = $this->db->query($sql,$params)) {
  1125. $object = $this->db->fetchAssoc($result);
  1126. $this->db->close($result);
  1127. }
  1128. return $object;
  1129. }
  1130. protected function createObject($input,$tables) {
  1131. if (!$input) return false;
  1132. $input = (array)$input;
  1133. $keys = implode(',',str_split(str_repeat('!', count($input))));
  1134. $values = implode(',',str_split(str_repeat('?', count($input))));
  1135. $params = array_merge(array_keys($input),array_values($input));
  1136. array_unshift($params, $tables[0]);
  1137. $result = $this->db->query('INSERT INTO ! ('.$keys.') VALUES ('.$values.')',$params);
  1138. if (!$result) return null;
  1139. return $this->db->insertId($result);
  1140. }
  1141. protected function createObjects($inputs,$tables) {
  1142. if (!$inputs) return false;
  1143. $ids = array();
  1144. $this->db->beginTransaction();
  1145. foreach ($inputs as $input) {
  1146. $input = (array)$input;
  1147. $keys = implode(',',str_split(str_repeat('!', count($input))));
  1148. $values = implode(',',str_split(str_repeat('?', count($input))));
  1149. $params = array_merge(array_keys($input),array_values($input));
  1150. array_unshift($params, $tables[0]);
  1151. $result = $this->db->query('INSERT INTO ! ('.$keys.') VALUES ('.$values.')',$params);
  1152. if (!$result) {
  1153. $this->db->rollbackTransaction();
  1154. return null;
  1155. }
  1156. $ids[] = $this->db->insertId($result);
  1157. }
  1158. $this->db->commitTransaction();
  1159. return $ids;
  1160. }
  1161. protected function updateObject($key,$input,$filters,$tables) {
  1162. if (!$input) return false;
  1163. $input = (array)$input;
  1164. $table = $tables[0];
  1165. $sql = 'UPDATE ! SET ';
  1166. $params = array($table);
  1167. foreach (array_keys($input) as $i=>$k) {
  1168. if ($i) $sql .= ',';
  1169. $v = $input[$k];
  1170. $sql .= '!=?';
  1171. $params[] = $k;
  1172. $params[] = $v;
  1173. }
  1174. if (!isset($filters[$table])) $filters[$table] = array();
  1175. if (!isset($filters[$table]['or'])) $filters[$table]['or'] = array();
  1176. $filters[$table]['or'][] = $this->convertFilter($key[1],'eq',$key[0]);
  1177. $this->addWhereFromFilters($filters[$table],$sql,$params);
  1178. $result = $this->db->query($sql,$params);
  1179. if (!$result) return null;
  1180. return $this->db->affectedRows($result);
  1181. }
  1182. protected function deleteObject($key,$filters,$tables) {
  1183. $table = $tables[0];
  1184. $sql = 'DELETE FROM !';
  1185. $params = array($table);
  1186. if (!isset($filters[$table])) $filters[$table] = array();
  1187. if (!isset($filters[$table]['or'])) $filters[$table]['or'] = array();
  1188. $filters[$table]['or'][] = $this->convertFilter($key[1],'eq',$key[0]);
  1189. $this->addWhereFromFilters($filters[$table],$sql,$params);
  1190. $result = $this->db->query($sql,$params);
  1191. if (!$result) return null;
  1192. return $this->db->affectedRows($result);
  1193. }
  1194. protected function findRelations($tables,$database,$auto_include) {
  1195. $tableset = array();
  1196. $collect = array();
  1197. $select = array();
  1198. while (count($tables)>1) {
  1199. $table0 = array_shift($tables);
  1200. $tableset[] = $table0;
  1201. $result = $this->db->query($this->db->getSql('reflect_belongs_to'),array($table0,$tables,$database,$database));
  1202. while ($row = $this->db->fetchRow($result)) {
  1203. if (!$auto_include && !in_array($row[0],array_merge($tables,$tableset))) continue;
  1204. $collect[$row[0]][$row[1]]=array();
  1205. $select[$row[2]][$row[3]]=array($row[0],$row[1]);
  1206. if (!in_array($row[0],$tableset)) $tableset[] = $row[0];
  1207. }
  1208. $result = $this->db->query($this->db->getSql('reflect_has_many'),array($tables,$table0,$database,$database));
  1209. while ($row = $this->db->fetchRow($result)) {
  1210. if (!$auto_include && !in_array($row[2],array_merge($tables,$tableset))) continue;
  1211. $collect[$row[2]][$row[3]]=array();
  1212. $select[$row[0]][$row[1]]=array($row[2],$row[3]);
  1213. if (!in_array($row[2],$tableset)) $tableset[] = $row[2];
  1214. }
  1215. $result = $this->db->query($this->db->getSql('reflect_habtm'),array($database,$database,$database,$database,$table0,$tables));
  1216. while ($row = $this->db->fetchRow($result)) {
  1217. if (!$auto_include && !in_array($row[2],array_merge($tables,$tableset))) continue;
  1218. if (!$auto_include && !in_array($row[4],array_merge($tables,$tableset))) continue;
  1219. $collect[$row[2]][$row[3]]=array();
  1220. $select[$row[0]][$row[1]]=array($row[2],$row[3]);
  1221. $collect[$row[4]][$row[5]]=array();
  1222. $select[$row[6]][$row[7]]=array($row[4],$row[5]);
  1223. if (!in_array($row[2],$tableset)) $tableset[] = $row[2];
  1224. if (!in_array($row[4],$tableset)) $tableset[] = $row[4];
  1225. }
  1226. }
  1227. $tableset[] = array_shift($tables);
  1228. $tableset = array_unique($tableset);
  1229. return array($tableset,$collect,$select);
  1230. }
  1231. protected function retrieveInputs($data) {
  1232. $input = (object)array();
  1233. if (strlen($data)>0) {
  1234. if ($data[0]=='{' || $data[0]=='[') {
  1235. $input = json_decode($data);
  1236. } else {
  1237. parse_str($data, $input);
  1238. foreach ($input as $key => $value) {
  1239. if (substr($key,-9)=='__is_null') {
  1240. $input[substr($key,0,-9)] = null;
  1241. unset($input[$key]);
  1242. }
  1243. }
  1244. $input = (object)$input;
  1245. }
  1246. }
  1247. return is_array($input)?$input:array($input);
  1248. }
  1249. protected function addRelationColumns($columns,$select) {
  1250. if ($columns) {
  1251. foreach ($select as $table=>$keys) {
  1252. foreach ($keys as $key=>$other) {
  1253. $columns.=",$table.$key,".implode('.',$other);
  1254. }
  1255. }
  1256. }
  1257. return $columns;
  1258. }
  1259. protected function findFields($tables,$columns,$database) {
  1260. $fields = array();
  1261. foreach ($tables as $i=>$table) {
  1262. $fields[$table] = $this->findTableFields($table,$database);
  1263. $fields[$table] = $this->filterFieldsByColumns($fields[$table],$columns,$i==0,$table);
  1264. }
  1265. return $fields;
  1266. }
  1267. protected function filterFieldsByColumns($fields,$columns,$first,$table) {
  1268. if ($columns) {
  1269. $columns = explode(',',$columns);
  1270. foreach (array_keys($fields) as $key) {
  1271. $delete = true;
  1272. foreach ($columns as $column) {
  1273. if (strpos($column,'.')) {
  1274. if ($column=="$table.$key" || $column=="$table.*") {
  1275. $delete = false;
  1276. }
  1277. } elseif ($first) {
  1278. if ($column==$key || $column=="*") {
  1279. $delete = false;
  1280. }
  1281. }
  1282. }
  1283. if ($delete) unset($fields[$key]);
  1284. }
  1285. }
  1286. return $fields;
  1287. }
  1288. protected function findTableFields($table,$database) {
  1289. $fields = array();
  1290. foreach ($this->db->fetchFields($table) as $field) {
  1291. $fields[$field->name] = $field;
  1292. }
  1293. return $fields;
  1294. }
  1295. protected function filterInputByFields($input,$fields) {
  1296. if ($fields) foreach (array_keys((array)$input) as $key) {
  1297. if (!isset($fields[$key])) {
  1298. unset($input->$key);
  1299. }
  1300. }
  1301. return $input;
  1302. }
  1303. protected function convertInputs(&$input,$fields) {
  1304. foreach ($fields as $key=>$field) {
  1305. if (isset($input->$key) && $input->$key && $this->db->isBinaryType($field)) {
  1306. $value = $input->$key;
  1307. $value = str_pad(strtr($value, '-_', '+/'), ceil(strlen($value) / 4) * 4, '=', STR_PAD_RIGHT);
  1308. $input->$key = (object)array('type'=>'base64','value'=>$value);
  1309. }
  1310. if (isset($input->$key) && $input->$key && $this->db->isGeometryType($field)) {
  1311. $input->$key = (object)array('type'=>'wkt','value'=>$input->$key);
  1312. }
  1313. }
  1314. }
  1315. protected function convertOutputs(&$sql, &$params, $fields) {
  1316. $sql .= implode(',',str_split(str_repeat('!',count($fields))));
  1317. foreach ($fields as $key=>$field) {
  1318. if ($this->db->isBinaryType($field)) {
  1319. $params[] = (object)array('type'=>'base64','key'=>$key);
  1320. }
  1321. else if ($this->db->isGeometryType($field)) {
  1322. $params[] = (object)array('type'=>'wkt','key'=>$key);
  1323. }
  1324. else {
  1325. $params[] = $key;
  1326. }
  1327. }
  1328. }
  1329. protected function getParameters($settings) {
  1330. extract($settings);
  1331. $table = $this->parseRequestParameter($request, 'a-zA-Z0-9\-_');
  1332. $key = $this->parseRequestParameter($request, 'a-zA-Z0-9\-_'); // auto-increment or uuid
  1333. $action = $this->mapMethodToAction($method,$key);
  1334. $include = $this->parseGetParameter($get, 'include', 'a-zA-Z0-9\-_,');
  1335. $callback = $this->parseGetParameter($get, 'callback', 'a-zA-Z0-9\-_');
  1336. $page = $this->parseGetParameter($get, 'page', '0-9,');
  1337. $filters = $this->parseGetParameterArray($get, 'filter', false);
  1338. $satisfy = $this->parseGetParameter($get, 'satisfy', 'a-zA-Z');
  1339. $columns = $this->parseGetParameter($get, 'columns', 'a-zA-Z0-9\-_,.*');
  1340. $order = $this->parseGetParameter($get, 'order', 'a-zA-Z0-9\-_,');
  1341. $transform = $this->parseGetParameter($get, 'transform', 't1');
  1342. $tables = $this->processTableAndIncludeParameters($database,$table,$include,$action);
  1343. $key = $this->processKeyParameter($key,$tables,$database);
  1344. $filters = $this->processFiltersParameter($tables,$satisfy,$filters);
  1345. $page = $this->processPageParameter($page);
  1346. $order = $this->processOrderParameter($order);
  1347. // reflection
  1348. list($tables,$collect,$select) = $this->findRelations($tables,$database,$auto_include);
  1349. $columns = $this->addRelationColumns($columns,$select);
  1350. $fields = $this->findFields($tables,$columns,$database);
  1351. // permissions
  1352. if ($table_authorizer) $this->applyTableAuthorizer($table_authorizer,$action,$database,$tables);
  1353. if (!isset($tables[0])) $this->exitWith404('entity');
  1354. if ($record_filter) $this->applyRecordFilter($record_filter,$action,$database,$tables,$filters);
  1355. if ($tenancy_function) $this->applyTenancyFunction($tenancy_function,$action,$database,$fields,$filters);
  1356. if ($column_authorizer) $this->applyColumnAuthorizer($column_authorizer,$action,$database,$fields);
  1357. if (strlen($post)) {
  1358. // input
  1359. $contexts = $this->retrieveInputs($post);
  1360. $inputs = array();
  1361. foreach ($contexts as $context) {
  1362. $input = $this->filterInputByFields($context,$fields[$tables[0]]);
  1363. if ($tenancy_function) $this->applyInputTenancy($tenancy_function,$action,$database,$tables[0],$input,$fields[$tables[0]]);
  1364. if ($input_sanitizer) $this->applyInputSanitizer($input_sanitizer,$action,$database,$tables[0],$input,$fields[$tables[0]]);
  1365. if ($input_validator) $this->applyInputValidator($input_validator,$action,$database,$tables[0],$input,$fields[$tables[0]],$context);
  1366. $this->convertInputs($input,$fields[$tables[0]]);
  1367. $inputs[] = $input;
  1368. }
  1369. }
  1370. return compact('action','database','tables','key','callback','page','filters','fields','order','transform','inputs','collect','select');
  1371. }
  1372. protected function addWhereFromFilters($filters,&$sql,&$params) {
  1373. $first = true;
  1374. if (isset($filters['or'])) {
  1375. $first = false;
  1376. $sql .= ' WHERE (';
  1377. foreach ($filters['or'] as $i=>$filter) {
  1378. $sql .= $i==0?'':' OR ';
  1379. $sql .= $filter[0];
  1380. for ($i=1;$i<count($filter);$i++) {
  1381. $params[] = $filter[$i];
  1382. }
  1383. }
  1384. $sql .= ')';
  1385. }
  1386. if (isset($filters['and'])) {
  1387. foreach ($filters['and'] as $i=>$filter) {
  1388. $sql .= $first?' WHERE ':' AND ';
  1389. $sql .= $filter[0];
  1390. for ($i=1;$i<count($filter);$i++) {
  1391. $params[] = $filter[$i];
  1392. }
  1393. $first = false;
  1394. }
  1395. }
  1396. }
  1397. protected function listCommandInternal($parameters) {
  1398. extract($parameters);
  1399. echo '{';
  1400. $table = array_shift($tables);
  1401. // first table
  1402. $count = false;
  1403. echo '"'.$table.'":{';
  1404. if (is_array($order) && is_array($page)) {
  1405. $params = array();
  1406. $sql = 'SELECT COUNT(*) FROM !';
  1407. $params[] = $table;
  1408. if (isset($filters[$table])) {
  1409. $this->addWhereFromFilters($filters[$table],$sql,$params);
  1410. }
  1411. if ($result = $this->db->query($sql,$params)) {
  1412. while ($pages = $this->db->fetchRow($result)) {
  1413. $count = $pages[0];
  1414. }
  1415. }
  1416. }
  1417. $params = array();
  1418. $sql = 'SELECT ';
  1419. $this->convertOutputs($sql,$params,$fields[$table]);
  1420. $sql .= ' FROM !';
  1421. $params[] = $table;
  1422. if (isset($filters[$table])) {
  1423. $this->addWhereFromFilters($filters[$table],$sql,$params);
  1424. }
  1425. if (is_array($order)) {
  1426. $sql .= ' ORDER BY ! '.$order[1];
  1427. $params[] = $order[0];
  1428. }
  1429. if (is_array($order) && is_array($page)) {
  1430. $sql = $this->db->addLimitToSql($sql,$page[1],$page[0]);
  1431. }
  1432. if ($result = $this->db->query($sql,$params)) {
  1433. echo '"columns":';
  1434. $keys = array_keys($fields[$table]);
  1435. echo json_encode($keys);
  1436. $keys = array_flip($keys);
  1437. echo ',"records":[';
  1438. $first_row = true;
  1439. while ($row = $this->db->fetchRow($result)) {
  1440. if ($first_row) $first_row = false;
  1441. else echo ',';
  1442. if (isset($collect[$table])) {
  1443. foreach (array_keys($collect[$table]) as $field) {
  1444. $collect[$table][$field][] = $row[$keys[$field]];
  1445. }
  1446. }
  1447. echo json_encode($row);
  1448. }
  1449. $this->db->close($result);
  1450. echo ']';
  1451. if ($count) echo ',';
  1452. }
  1453. if ($count) echo '"results":'.$count;
  1454. echo '}';
  1455. // other tables
  1456. foreach ($tables as $t=>$table) {
  1457. echo ',';
  1458. echo '"'.$table.'":{';
  1459. $params = array();
  1460. $sql = 'SELECT ';
  1461. $this->convertOutputs($sql,$params,$fields[$table]);
  1462. $sql .= ' FROM !';
  1463. $params[] = $table;
  1464. if (isset($select[$table])) {
  1465. echo '"relations":{';
  1466. $first_row = true;
  1467. foreach ($select[$table] as $field => $path) {
  1468. $values = $collect[$path[0]][$path[1]];
  1469. if ($values) {
  1470. if (!isset($filters[$table])) $filters[$table] = array();
  1471. if (!isset($filters[$table]['or'])) $filters[$table]['or'] = array();
  1472. $filters[$table]['or'][] = $this->convertFilter($field,'in',implode(',',$values));
  1473. }
  1474. if ($first_row) $first_row = false;
  1475. else echo ',';
  1476. echo '"'.$field.'":"'.implode('.',$path).'"';
  1477. }
  1478. echo '}';
  1479. if (isset($filters[$table])) {
  1480. $this->addWhereFromFilters($filters[$table],$sql,$params);
  1481. }
  1482. }
  1483. if ($result = $this->db->query($sql,$params)) {
  1484. if (isset($select[$table])) echo ',';
  1485. echo '"columns":';
  1486. $keys = array_keys($fields[$table]);
  1487. echo json_encode($keys);
  1488. $keys = array_flip($keys);
  1489. echo ',"records":[';
  1490. $first_row = true;
  1491. while ($row = $this->db->fetchRow($result)) {
  1492. if ($first_row) $first_row = false;
  1493. else echo ',';
  1494. if (isset($collect[$table])) {
  1495. foreach (array_keys($collect[$table]) as $field) {
  1496. $collect[$table][$field][]=$row[$keys[$field]];
  1497. }
  1498. }
  1499. echo json_encode($row);
  1500. }
  1501. $this->db->close($result);
  1502. echo ']';
  1503. }
  1504. echo '}';
  1505. }
  1506. echo '}';
  1507. }
  1508. protected function readCommand($parameters) {
  1509. extract($parameters);
  1510. $object = $this->retrieveObject($key,$fields,$filters,$tables);
  1511. if (!$object) $this->exitWith404('object');
  1512. $this->startOutput($callback);
  1513. echo json_encode($object);
  1514. $this->endOutput($callback);
  1515. }
  1516. protected function createCommand($parameters) {
  1517. extract($parameters);
  1518. if (!$inputs || !$inputs[0]) $this->exitWith404('input');
  1519. $this->startOutput($callback);
  1520. if (count($inputs)==1) echo json_encode($this->createObject($inputs[0],$tables));
  1521. else echo json_encode($this->createObjects($inputs,$tables));
  1522. $this->endOutput($callback);
  1523. }
  1524. protected function updateCommand($parameters) {
  1525. extract($parameters);
  1526. if (!$inputs) $this->exitWith404('subject');
  1527. $this->startOutput($callback);
  1528. echo json_encode($this->updateObject($key,$inputs[0],$filters,$tables));
  1529. $this->endOutput($callback);
  1530. }
  1531. protected function deleteCommand($parameters) {
  1532. extract($parameters);
  1533. $this->startOutput($callback);
  1534. echo json_encode($this->deleteObject($key,$filters,$tables));
  1535. $this->endOutput($callback);
  1536. }
  1537. protected function listCommand($parameters) {
  1538. extract($parameters);
  1539. $this->startOutput($callback);
  1540. if ($transform) {
  1541. ob_start();
  1542. }
  1543. $this->listCommandInternal($parameters);
  1544. if ($transform) {
  1545. $content = ob_get_contents();
  1546. ob_end_clean();
  1547. $data = json_decode($content,true);
  1548. echo json_encode(self::php_crud_api_transform($data));
  1549. }
  1550. $this->endOutput($callback);
  1551. }
  1552. protected function retrievePostData() {
  1553. if ($_FILES) {
  1554. $files = array();
  1555. foreach ($_FILES as $name => $file) {
  1556. foreach ($file as $key => $value) {
  1557. switch ($key) {
  1558. case 'tmp_name': $files[$name] = base64_encode(file_get_contents($value)); break;
  1559. default: $files[$name.'_'.$key] = $value;
  1560. }
  1561. }
  1562. }
  1563. return http_build_query(array_merge($files,$_POST));
  1564. }
  1565. return file_get_contents('php://input');
  1566. }
  1567. public function __construct($config) {
  1568. extract($config);
  1569. // initialize
  1570. $dbengine = isset($dbengine)?$dbengine:null;
  1571. $hostname = isset($hostname)?$hostname:null;
  1572. $username = isset($username)?$username:null;
  1573. $password = isset($password)?$password:null;
  1574. $database = isset($database)?$database:null;
  1575. $port = isset($port)?$port:null;
  1576. $socket = isset($socket)?$socket:null;
  1577. $charset = isset($charset)?$charset:null;
  1578. $table_authorizer = isset($table_authorizer)?$table_authorizer:null;
  1579. $record_filter = isset($record_filter)?$record_filter:null;
  1580. $column_authorizer = isset($column_authorizer)?$column_authorizer:null;
  1581. $tenancy_function = isset($tenancy_function)?$tenancy_function:null;
  1582. $input_sanitizer = isset($input_sanitizer)?$input_sanitizer:null;
  1583. $input_validator = isset($input_validator)?$input_validator:null;
  1584. $extensions = isset($extensions)?$extensions:null;
  1585. $auto_include = isset($auto_include)?$auto_include:null;
  1586. $db = isset($db)?$db:null;
  1587. $method = isset($method)?$method:null;
  1588. $request = isset($request)?$request:null;
  1589. $get = isset($get)?$get:null;
  1590. $post = isset($post)?$post:null;
  1591. // defaults
  1592. if (!$dbengine) {
  1593. $dbengine = 'MySQL';
  1594. }
  1595. if (!$method) {
  1596. $method = $_SERVER['REQUEST_METHOD'];
  1597. }
  1598. if (!$request) {
  1599. $request = isset($_SERVER['PATH_INFO'])?$_SERVER['PATH_INFO']:'';
  1600. if (!$request) {
  1601. $request = isset($_SERVER['ORIG_PATH_INFO'])?$_SERVER['ORIG_PATH_INFO']:'';
  1602. }
  1603. }
  1604. if (!$get) {
  1605. $get = $_GET;
  1606. }
  1607. if (!$post) {
  1608. $post = $this->retrievePostData();
  1609. }
  1610. // connect
  1611. $request = trim($request,'/');
  1612. if (!$database) {
  1613. $database = $this->parseRequestParameter($request, 'a-zA-Z0-9\-_');
  1614. }
  1615. if (!$db) {
  1616. $db = new $dbengine();
  1617. if (!$charset) {
  1618. $charset = $db->getDefaultCharset();
  1619. }
  1620. $db->connect($hostname,$username,$password,$database,$port,$socket,$charset);
  1621. }
  1622. if ($extensions===null) {
  1623. $extensions = true;
  1624. }
  1625. if ($auto_include===null) {
  1626. $auto_include = true;
  1627. }
  1628. $this->db = $db;
  1629. $this->settings = compact('method', 'request', 'get', 'post', 'database', 'table_authorizer', 'record_filter', 'column_authorizer', 'tenancy_function', 'input_sanitizer', 'input_validator', 'extensions', 'auto_include');
  1630. }
  1631. public static function php_crud_api_transform(&$tables) {
  1632. $get_objects = function (&$tables,$table_name,$where_index=false,$match_value=false) use (&$get_objects) {
  1633. $objects = array();
  1634. if (isset($tables[$table_name]['records'])) {
  1635. foreach ($tables[$table_name]['records'] as $record) {
  1636. if ($where_index===false || $record[$where_index]==$match_value) {
  1637. $object = array();
  1638. foreach ($tables[$table_name]['columns'] as $index=>$column) {
  1639. $object[$column] = $record[$index];
  1640. foreach ($tables as $relation=>$reltable) {
  1641. if (isset($reltable['relations'])) {
  1642. foreach ($reltable['relations'] as $key=>$target) {
  1643. if ($target == "$table_name.$column") {
  1644. $column_indices = array_flip($reltable['columns']);
  1645. $object[$relation] = $get_objects($tables,$relation,$column_indices[$key],$record[$index]);
  1646. }
  1647. }
  1648. }
  1649. }
  1650. }
  1651. $objects[] = $object;
  1652. }
  1653. }
  1654. }
  1655. return $objects;
  1656. };
  1657. $tree = array();
  1658. foreach ($tables as $name=>$table) {
  1659. if (!isset($table['relations'])) {
  1660. $tree[$name] = $get_objects($tables,$name);
  1661. if (isset($table['results'])) {
  1662. $tree['_results'] = $table['results'];
  1663. }
  1664. }
  1665. }
  1666. return $tree;
  1667. }
  1668. protected function swagger($settings) {
  1669. extract($settings);
  1670. $tables = array();
  1671. if ($result = $this->db->query($this->db->getSql('list_tables'),array($database))) {
  1672. while ($row = $this->db->fetchRow($result)) {
  1673. $table = array(
  1674. 'name'=>$row[0],
  1675. 'comments'=>$row[1],
  1676. 'root_actions'=>array(
  1677. array('name'=>'list','method'=>'get'),
  1678. array('name'=>'create','method'=>'post'),
  1679. ),
  1680. 'id_actions'=>array(
  1681. array('name'=>'read','method'=>'get'),
  1682. array('name'=>'update','method'=>'put'),
  1683. array('name'=>'delete','method'=>'delete'),
  1684. ),
  1685. );
  1686. $tables[] = $table;
  1687. }
  1688. $this->db->close($result);
  1689. }
  1690. foreach ($tables as $t=>$table) {
  1691. $table_list = array($table['name']);
  1692. $table_fields = $this->findFields($table_list,false,$database);
  1693. $table_names = array_map(function($v){ return $v['name'];},$tables);
  1694. if ($extensions) {
  1695. $result = $this->db->query($this->db->getSql('reflect_belongs_to'),array($table_list[0],$table_names,$database,$database));
  1696. while ($row = $this->db->fetchRow($result)) {
  1697. $table_fields[$table['name']][$row[1]]->references=array($row[2],$row[3]);
  1698. }
  1699. $result = $this->db->query($this->db->getSql('reflect_has_many'),array($table_names,$table_list[0],$database,$database));
  1700. while ($row = $this->db->fetchRow($result)) {
  1701. $table_fields[$table['name']][$row[3]]->referenced[]=array($row[0],$row[1]);
  1702. }
  1703. $primaryKeys = $this->findPrimaryKeys($table_list[0],$database);
  1704. foreach ($primaryKeys as $primaryKey) {
  1705. $table_fields[$table['name']][$primaryKey]->primaryKey = true;
  1706. }
  1707. }
  1708. foreach (array('root_actions','id_actions') as $path) {
  1709. foreach ($table[$path] as $i=>$action) {
  1710. $table_list = array($table['name']);
  1711. $fields = $table_fields;
  1712. if ($table_authorizer) $this->applyTableAuthorizer($table_authorizer,$action['name'],$database,$table_list);
  1713. if ($column_authorizer) $this->applyColumnAuthorizer($column_authorizer,$action['name'],$database,$fields);
  1714. if (!$table_list || !$fields[$table['name']]) $tables[$t][$path][$i] = false;
  1715. else $tables[$t][$path][$i]['fields'] = $fields[$table['name']];
  1716. }
  1717. // remove unauthorized tables and tables without fields
  1718. $tables[$t][$path] = array_values(array_filter($tables[$t][$path]));
  1719. }
  1720. if (!$tables[$t]['root_actions']&&!$tables[$t]['id_actions']) $tables[$t] = false;
  1721. }
  1722. $tables = array_merge(array_filter($tables));
  1723. //var_dump($tables);die();
  1724. header('Content-Type: application/json; charset=utf-8');
  1725. echo '{"swagger":"2.0",';
  1726. echo '"info":{';
  1727. echo '"title":"'.$database.'",';
  1728. echo '"description":"API generated with [PHP-CRUD-API](https://github.com/mevdschee/php-crud-api)",';
  1729. echo '"version":"1.0.0"';
  1730. echo '},';
  1731. echo '"host":"'.$_SERVER['HTTP_HOST'].'",';
  1732. echo '"basePath":"'.$_SERVER['SCRIPT_NAME'].'",';
  1733. echo '"schemes":["http'.((!empty($_SERVER['HTTPS'])&&$_SERVER['HTTPS']!=='off')?'s':'').'"],';
  1734. echo '"consumes":["application/json"],';
  1735. echo '"produces":["application/json"],';
  1736. echo '"tags":[';
  1737. foreach ($tables as $i=>$table) {
  1738. if ($i>0) echo ',';
  1739. echo '{';
  1740. echo '"name":"'.$table['name'].'",';
  1741. echo '"description":"'.$table['comments'].'"';
  1742. echo '}';
  1743. }
  1744. echo '],';
  1745. echo '"paths":{';
  1746. foreach ($tables as $i=>$table) {
  1747. if ($table['root_actions']) {
  1748. if ($i>0) echo ',';
  1749. echo '"/'.$table['name'].'":{';
  1750. foreach ($table['root_actions'] as $j=>$action) {
  1751. if ($j>0) echo ',';
  1752. echo '"'.$action['method'].'":{';
  1753. echo '"tags":["'.$table['name'].'"],';
  1754. echo '"summary":"'.ucfirst($action['name']).'",';
  1755. if ($action['name']=='list') {
  1756. echo '"parameters":[';
  1757. echo '{';
  1758. echo '"name":"include",';
  1759. echo '"in":"query",';
  1760. echo '"description":"One or more related entities (comma separated).",';
  1761. echo '"required":false,';
  1762. echo '"type":"string"';
  1763. echo '},';
  1764. echo '{';
  1765. echo '"name":"order",';
  1766. echo '"in":"query",';
  1767. echo '"description":"Column you want to sort on and the sort direction (comma separated). Example: id,desc",';
  1768. echo '"required":false,';
  1769. echo '"type":"string"';
  1770. echo '},';
  1771. echo '{';
  1772. echo '"name":"page",';
  1773. echo '"in":"query",';
  1774. echo '"description":"Page number and page size (comma separated). NB: You cannot use \"page\" without \"order\"! Example: 1,10",';
  1775. echo '"required":false,';
  1776. echo '"type":"string"';
  1777. echo '},';
  1778. echo '{';
  1779. echo '"name":"transform",';
  1780. echo '"in":"query",';
  1781. echo '"description":"Transform the records to object format. NB: This can also be done client-side in JavaScript!",';
  1782. echo '"required":false,';
  1783. echo '"type":"boolean"';
  1784. echo '},';
  1785. echo '{';
  1786. echo '"name":"columns",';
  1787. echo '"in":"query",';
  1788. echo '"description":"The table columns you want to retrieve (comma separated). Example: posts.*,categories.name",';
  1789. echo '"required":false,';
  1790. echo '"type":"string"';
  1791. echo '},';
  1792. echo '{';
  1793. echo '"name":"filter[]",';
  1794. echo '"in":"query",';
  1795. echo '"description":"Filters to be applied. Each filter consists of a column, an operator and a value (comma separated). Example: id,eq,1",';
  1796. echo '"required":false,';
  1797. echo '"type":"array",';
  1798. echo '"collectionFormat":"multi",';
  1799. echo '"items":{"type":"string"}';
  1800. echo '},';
  1801. echo '{';
  1802. echo '"name":"satisfy",';
  1803. echo '"in":"query",';
  1804. echo '"description":"Should all filters match (default)? Or any?",';
  1805. echo '"required":false,';
  1806. echo '"type":"string",';
  1807. echo '"enum":["any"]';
  1808. echo '},';
  1809. echo '{';
  1810. echo '"name":"callback",';
  1811. echo '"in":"query",';
  1812. echo '"description":"JSONP callback function name",';
  1813. echo '"required":false,';
  1814. echo '"type":"string"';
  1815. echo '}';
  1816. echo '],';
  1817. echo '"responses":{';
  1818. echo '"200":{';
  1819. echo '"description":"An array of '.$table['name'].'",';
  1820. echo '"schema":{';
  1821. echo '"type":"array",';
  1822. echo '"items":{';
  1823. echo '"type": "object",';
  1824. echo '"properties": {';
  1825. foreach (array_keys($action['fields']) as $k=>$field) {
  1826. if ($k>0) echo ',';
  1827. echo '"'.$field.'": {';
  1828. echo '"type": "string"';
  1829. if (isset($action['fields'][$field]->referenced)) {
  1830. echo ',"x-referenced": '.json_encode($action['fields'][$field]->referenced);
  1831. }
  1832. if (isset($action['fields'][$field]->references)) {
  1833. echo ',"x-references": '.json_encode($action['fields'][$field]->references);
  1834. }
  1835. if (isset($action['fields'][$field]->primaryKey)) {
  1836. echo ',"x-primary-key": true';
  1837. }
  1838. echo '}';
  1839. }
  1840. echo '}'; //properties
  1841. echo '}'; //items
  1842. echo '}'; //schema
  1843. echo '}'; //200
  1844. echo '}'; //responses
  1845. }
  1846. if ($action['name']=='create') {
  1847. echo '"parameters":[{';
  1848. echo '"name":"item",';
  1849. echo '"in":"body",';
  1850. echo '"description":"Item to create.",';
  1851. echo '"required":false,';
  1852. echo '"schema":{';
  1853. echo '"type": "object",';
  1854. echo '"properties": {';
  1855. foreach (array_keys($action['fields']) as $k=>$field) {
  1856. if ($k>0) echo ',';
  1857. echo '"'.$field.'": {';
  1858. echo '"type": "string"';
  1859. if (isset($action['fields'][$field]->referenced)) {
  1860. echo ',"x-referenced": '.json_encode($action['fields'][$field]->referenced);
  1861. }
  1862. if (isset($action['fields'][$field]->references)) {
  1863. echo ',"x-references": '.json_encode($action['fields'][$field]->references);
  1864. }
  1865. if (isset($action['fields'][$field]->primaryKey)) {
  1866. echo ',"x-primary-key": true';
  1867. }
  1868. echo '}';
  1869. }
  1870. echo '}'; //properties
  1871. echo '}'; //schema
  1872. echo '}],';
  1873. echo '"responses":{';
  1874. echo '"200":{';
  1875. echo '"description":"Identifier of created item.",';
  1876. echo '"schema":{';
  1877. echo '"type":"integer"';
  1878. echo '}';//schema
  1879. echo '}';//200
  1880. echo '}';//responses
  1881. }
  1882. echo '}';//method
  1883. }
  1884. echo '}';
  1885. }
  1886. if ($table['id_actions']) {
  1887. if ($i>0 || $table['root_actions']) echo ',';
  1888. echo '"/'.$table['name'].'/{id}":{';
  1889. foreach ($table['id_actions'] as $j=>$action) {
  1890. if ($j>0) echo ',';
  1891. echo '"'.$action['method'].'":{';
  1892. echo '"tags":["'.$table['name'].'"],';
  1893. echo '"summary":"'.ucfirst($action['name']).'",';
  1894. echo '"parameters":[';
  1895. echo '{';
  1896. echo '"name":"id",';
  1897. echo '"in":"path",';
  1898. echo '"description":"Identifier for item.",';
  1899. echo '"required":true,';
  1900. echo '"type":"string"';
  1901. echo '}';
  1902. if ($action['name']=='update') {
  1903. echo ',{';
  1904. echo '"name":"item",';
  1905. echo '"in":"body",';
  1906. echo '"description":"Properties of item to update.",';
  1907. echo '"required":false,';
  1908. echo '"schema":{';
  1909. echo '"type": "object",';
  1910. echo '"properties": {';
  1911. foreach (array_keys($action['fields']) as $k=>$field) {
  1912. if ($k>0) echo ',';
  1913. echo '"'.$field.'": {';
  1914. echo '"type": "string"';
  1915. if (isset($action['fields'][$field]->referenced)) {
  1916. echo ',"x-referenced": '.json_encode($action['fields'][$field]->referenced);
  1917. }
  1918. if (isset($action['fields'][$field]->references)) {
  1919. echo ',"x-references": '.json_encode($action['fields'][$field]->references);
  1920. }
  1921. if (isset($action['fields'][$field]->primaryKey)) {
  1922. echo ',"x-primary-key": true';
  1923. }
  1924. echo '}';
  1925. }
  1926. echo '}'; //properties
  1927. echo '}'; //schema
  1928. echo '}';
  1929. }
  1930. echo '],';
  1931. if ($action['name']=='read') {
  1932. echo '"responses":{';
  1933. echo '"200":{';
  1934. echo '"description":"The requested item.",';
  1935. echo '"schema":{';
  1936. echo '"type": "object",';
  1937. echo '"properties": {';
  1938. foreach (array_keys($action['fields']) as $k=>$field) {
  1939. if ($k>0) echo ',';
  1940. echo '"'.$field.'": {';
  1941. echo '"type": "string"';
  1942. if (isset($action['fields'][$field]->referenced)) {
  1943. echo ',"x-referenced": '.json_encode($action['fields'][$field]->referenced);
  1944. }
  1945. if (isset($action['fields'][$field]->references)) {
  1946. echo ',"x-references": '.json_encode($action['fields'][$field]->references);
  1947. }
  1948. if (isset($action['fields'][$field]->primaryKey)) {
  1949. echo ',"x-primary-key": true';
  1950. }
  1951. echo '}';
  1952. }
  1953. echo '}'; //properties
  1954. echo '}'; //schema
  1955. echo '}';
  1956. echo '}';
  1957. } else {
  1958. echo '"responses":{';
  1959. echo '"200":{';
  1960. echo '"description":"Number of affected rows.",';
  1961. echo '"schema":{';
  1962. echo '"type":"integer"';
  1963. echo '}';
  1964. echo '}';
  1965. echo '}';
  1966. }
  1967. echo '}';
  1968. }
  1969. echo '}';
  1970. }
  1971. }
  1972. echo '}';
  1973. echo '}';
  1974. }
  1975. public function executeCommand() {
  1976. if (isset($_SERVER['REQUEST_METHOD'])) {
  1977. header('Access-Control-Allow-Origin: *');
  1978. }
  1979. if (!$this->settings['request']) {
  1980. $this->swagger($this->settings);
  1981. } else {
  1982. $parameters = $this->getParameters($this->settings);
  1983. switch($parameters['action']){
  1984. case 'list': $this->listCommand($parameters); break;
  1985. case 'read': $this->readCommand($parameters); break;
  1986. case 'create': $this->createCommand($parameters); break;
  1987. case 'update': $this->updateCommand($parameters); break;
  1988. case 'delete': $this->deleteCommand($parameters); break;
  1989. case 'headers': $this->headersCommand($parameters); break;
  1990. }
  1991. }
  1992. }
  1993. }
  1994. // require 'auth.php'; // from the PHP-API-AUTH project, see: https://github.com/mevdschee/php-api-auth
  1995. // uncomment the lines below for token+session based authentication (see "login_token.html" + "login_token.php"):
  1996. // $auth = new PHP_API_AUTH(array(
  1997. // 'secret'=>'someVeryLongPassPhraseChangeMe',
  1998. // ));
  1999. // $auth->executeCommand();
  2000. // if (empty($_SESSION['user'])) {
  2001. // header('HTTP/1.0 401 Unauthorized');
  2002. // exit(0);
  2003. // }
  2004. // uncomment the lines below for form+session based authentication (see "login.html"):
  2005. // $auth = new PHP_API_AUTH(array(
  2006. // 'authenticator'=>function($user,$pass){ $_SESSION['user']=($user=='admin' && $pass=='admin'); }
  2007. // ));
  2008. // $auth->executeCommand();
  2009. // if (empty($_SESSION['user'])) {
  2010. // header('HTTP/1.0 401 Unauthorized');
  2011. // exit(0);
  2012. // }
  2013. // uncomment the lines below when running in stand-alone mode:
  2014. // $api = new PHP_CRUD_API(array(
  2015. // 'dbengine'=>'MySQL',
  2016. // 'hostname'=>'localhost',
  2017. // 'username'=>'',
  2018. // 'password'=>'',
  2019. // 'database'=>'',
  2020. // 'charset'=>'utf8'
  2021. // ));
  2022. // $api->executeCommand();
  2023. // For Microsoft SQL Server 2012 use:
  2024. // $api = new PHP_CRUD_API(array(
  2025. // 'dbengine'=>'SQLServer',
  2026. // 'hostname'=>'(local)',
  2027. // 'username'=>'',
  2028. // 'password'=>'',
  2029. // 'database'=>'xxx',
  2030. // 'charset'=>'UTF-8'
  2031. // ));
  2032. // $api->executeCommand();
  2033. // For PostgreSQL 9 use:
  2034. // $api = new PHP_CRUD_API(array(
  2035. // 'dbengine'=>'PostgreSQL',
  2036. // 'hostname'=>'localhost',
  2037. // 'username'=>'xxx',
  2038. // 'password'=>'xxx',
  2039. // 'database'=>'xxx',
  2040. // 'charset'=>'UTF8'
  2041. // ));
  2042. // $api->executeCommand();
  2043. // For SQLite 3 use:
  2044. // $api = new PHP_CRUD_API(array(
  2045. // 'dbengine'=>'SQLite',
  2046. // 'database'=>'data/blog.db',
  2047. // ));
  2048. // $api->executeCommand();