api de gestion de ticket, basé sur php-crud-api. Le but est de décorrélé les outils de gestion des données, afin
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

api.php 73KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495969798991001011021031041051061071081091101111121131141151161171181191201211221231241251261271281291301311321331341351361371381391401411421431441451461471481491501511521531541551561571581591601611621631641651661671681691701711721731741751761771781791801811821831841851861871881891901911921931941951961971981992002012022032042052062072082092102112122132142152162172182192202212222232242252262272282292302312322332342352362372382392402412422432442452462472482492502512522532542552562572582592602612622632642652662672682692702712722732742752762772782792802812822832842852862872882892902912922932942952962972982993003013023033043053063073083093103113123133143153163173183193203213223233243253263273283293303313323333343353363373383393403413423433443453463473483493503513523533543553563573583593603613623633643653663673683693703713723733743753763773783793803813823833843853863873883893903913923933943953963973983994004014024034044054064074084094104114124134144154164174184194204214224234244254264274284294304314324334344354364374384394404414424434444454464474484494504514524534544554564574584594604614624634644654664674684694704714724734744754764774784794804814824834844854864874884894904914924934944954964974984995005015025035045055065075085095105115125135145155165175185195205215225235245255265275285295305315325335345355365375385395405415425435445455465475485495505515525535545555565575585595605615625635645655665675685695705715725735745755765775785795805815825835845855865875885895905915925935945955965975985996006016026036046056066076086096106116126136146156166176186196206216226236246256266276286296306316326336346356366376386396406416426436446456466476486496506516526536546556566576586596606616626636646656666676686696706716726736746756766776786796806816826836846856866876886896906916926936946956966976986997007017027037047057067077087097107117127137147157167177187197207217227237247257267277287297307317327337347357367377387397407417427437447457467477487497507517527537547557567577587597607617627637647657667677687697707717727737747757767777787797807817827837847857867877887897907917927937947957967977987998008018028038048058068078088098108118128138148158168178188198208218228238248258268278288298308318328338348358368378388398408418428438448458468478488498508518528538548558568578588598608618628638648658668678688698708718728738748758768778788798808818828838848858868878888898908918928938948958968978988999009019029039049059069079089099109119129139149159169179189199209219229239249259269279289299309319329339349359369379389399409419429439449459469479489499509519529539549559569579589599609619629639649659669679689699709719729739749759769779789799809819829839849859869879889899909919929939949959969979989991000100110021003100410051006100710081009101010111012101310141015101610171018101910201021102210231024102510261027102810291030103110321033103410351036103710381039104010411042104310441045104610471048104910501051105210531054105510561057105810591060106110621063106410651066106710681069107010711072107310741075107610771078107910801081108210831084108510861087108810891090109110921093109410951096109710981099110011011102110311041105110611071108110911101111111211131114111511161117111811191120112111221123112411251126112711281129113011311132113311341135113611371138113911401141114211431144114511461147114811491150115111521153115411551156115711581159116011611162116311641165116611671168116911701171117211731174117511761177117811791180118111821183118411851186118711881189119011911192119311941195119611971198119912001201120212031204120512061207120812091210121112121213121412151216121712181219122012211222122312241225122612271228122912301231123212331234123512361237123812391240124112421243124412451246124712481249125012511252125312541255125612571258125912601261126212631264126512661267126812691270127112721273127412751276127712781279128012811282128312841285128612871288128912901291129212931294129512961297129812991300130113021303130413051306130713081309131013111312131313141315131613171318131913201321132213231324132513261327132813291330133113321333133413351336133713381339134013411342134313441345134613471348134913501351135213531354135513561357135813591360136113621363136413651366136713681369137013711372137313741375137613771378137913801381138213831384138513861387138813891390139113921393139413951396139713981399140014011402140314041405140614071408140914101411141214131414141514161417141814191420142114221423142414251426142714281429143014311432143314341435143614371438143914401441144214431444144514461447144814491450145114521453145414551456145714581459146014611462146314641465146614671468146914701471147214731474147514761477147814791480148114821483148414851486148714881489149014911492149314941495149614971498149915001501150215031504150515061507150815091510151115121513151415151516151715181519152015211522152315241525152615271528152915301531153215331534153515361537153815391540154115421543154415451546154715481549155015511552155315541555155615571558155915601561156215631564156515661567156815691570157115721573157415751576157715781579158015811582158315841585158615871588158915901591159215931594159515961597159815991600160116021603160416051606160716081609161016111612161316141615161616171618161916201621162216231624162516261627162816291630163116321633163416351636163716381639164016411642164316441645164616471648164916501651165216531654165516561657165816591660166116621663166416651666166716681669167016711672167316741675167616771678167916801681168216831684168516861687168816891690169116921693169416951696169716981699170017011702170317041705170617071708170917101711171217131714171517161717171817191720172117221723172417251726172717281729173017311732173317341735173617371738173917401741174217431744174517461747174817491750175117521753175417551756175717581759176017611762176317641765176617671768176917701771177217731774177517761777177817791780178117821783178417851786178717881789179017911792179317941795179617971798179918001801180218031804180518061807180818091810181118121813181418151816181718181819182018211822182318241825182618271828182918301831183218331834183518361837183818391840184118421843184418451846184718481849185018511852185318541855185618571858185918601861186218631864186518661867186818691870187118721873187418751876187718781879188018811882188318841885188618871888188918901891189218931894189518961897189818991900190119021903190419051906190719081909191019111912191319141915191619171918191919201921192219231924192519261927192819291930193119321933193419351936193719381939194019411942194319441945194619471948194919501951195219531954195519561957195819591960196119621963196419651966196719681969197019711972197319741975197619771978197919801981198219831984198519861987198819891990199119921993199419951996199719981999200020012002200320042005200620072008200920102011201220132014201520162017201820192020202120222023202420252026202720282029203020312032203320342035203620372038203920402041204220432044204520462047204820492050205120522053205420552056205720582059206020612062206320642065206620672068206920702071207220732074207520762077207820792080208120822083208420852086208720882089209020912092209320942095209620972098209921002101210221032104210521062107210821092110211121122113211421152116211721182119212021212122212321242125212621272128212921302131213221332134213521362137213821392140214121422143214421452146214721482149215021512152215321542155215621572158215921602161216221632164216521662167216821692170217121722173217421752176217721782179218021812182218321842185218621872188218921902191219221932194219521962197219821992200220122022203220422052206220722082209221022112212221322142215221622172218221922202221222222232224222522262227222822292230223122322233223422352236223722382239224022412242224322442245224622472248224922502251225222532254225522562257225822592260226122622263226422652266226722682269227022712272227322742275227622772278227922802281228222832284228522862287228822892290229122922293
  1. <?php
  2. //var_dump($_SERVER['REQUEST_METHOD'],$_SERVER['PATH_INFO']); die();
  3. interface DatabaseInterface {
  4. public function getSql($name);
  5. public function connect($hostname,$username,$password,$database,$port,$socket,$charset);
  6. public function query($sql,$params=array());
  7. public function fetchAssoc($result,$fields=false);
  8. public function fetchRow($result,$fields=false);
  9. public function insertId($result);
  10. public function affectedRows($result);
  11. public function close($result);
  12. public function fetchFields($table);
  13. public function addLimitToSql($sql,$limit,$offset);
  14. public function likeEscape($string);
  15. public function isBinaryType($field);
  16. public function isGeometryType($field);
  17. public function getDefaultCharset();
  18. public function beginTransaction();
  19. public function commitTransaction();
  20. public function rollbackTransaction();
  21. }
  22. class MySQL implements DatabaseInterface {
  23. protected $db;
  24. protected $queries;
  25. public function __construct() {
  26. $this->queries = array(
  27. 'list_tables'=>'SELECT
  28. "TABLE_NAME","TABLE_COMMENT"
  29. FROM
  30. "INFORMATION_SCHEMA"."TABLES"
  31. WHERE
  32. "TABLE_SCHEMA" = ?',
  33. 'reflect_table'=>'SELECT
  34. "TABLE_NAME"
  35. FROM
  36. "INFORMATION_SCHEMA"."TABLES"
  37. WHERE
  38. "TABLE_NAME" COLLATE \'utf8_bin\' = ? AND
  39. "TABLE_SCHEMA" = ?',
  40. 'reflect_pk'=>'SELECT
  41. "COLUMN_NAME"
  42. FROM
  43. "INFORMATION_SCHEMA"."COLUMNS"
  44. WHERE
  45. "COLUMN_KEY" = \'PRI\' AND
  46. "TABLE_NAME" = ? AND
  47. "TABLE_SCHEMA" = ?',
  48. 'reflect_belongs_to'=>'SELECT
  49. "TABLE_NAME","COLUMN_NAME",
  50. "REFERENCED_TABLE_NAME","REFERENCED_COLUMN_NAME"
  51. FROM
  52. "INFORMATION_SCHEMA"."KEY_COLUMN_USAGE"
  53. WHERE
  54. "TABLE_NAME" COLLATE \'utf8_bin\' = ? AND
  55. "REFERENCED_TABLE_NAME" COLLATE \'utf8_bin\' IN ? AND
  56. "TABLE_SCHEMA" = ? AND
  57. "REFERENCED_TABLE_SCHEMA" = ?',
  58. 'reflect_has_many'=>'SELECT
  59. "TABLE_NAME","COLUMN_NAME",
  60. "REFERENCED_TABLE_NAME","REFERENCED_COLUMN_NAME"
  61. FROM
  62. "INFORMATION_SCHEMA"."KEY_COLUMN_USAGE"
  63. WHERE
  64. "TABLE_NAME" COLLATE \'utf8_bin\' IN ? AND
  65. "REFERENCED_TABLE_NAME" COLLATE \'utf8_bin\' = ? AND
  66. "TABLE_SCHEMA" = ? AND
  67. "REFERENCED_TABLE_SCHEMA" = ?',
  68. 'reflect_habtm'=>'SELECT
  69. k1."TABLE_NAME", k1."COLUMN_NAME",
  70. k1."REFERENCED_TABLE_NAME", k1."REFERENCED_COLUMN_NAME",
  71. k2."TABLE_NAME", k2."COLUMN_NAME",
  72. k2."REFERENCED_TABLE_NAME", k2."REFERENCED_COLUMN_NAME"
  73. FROM
  74. "INFORMATION_SCHEMA"."KEY_COLUMN_USAGE" k1,
  75. "INFORMATION_SCHEMA"."KEY_COLUMN_USAGE" k2
  76. WHERE
  77. k1."TABLE_SCHEMA" = ? AND
  78. k2."TABLE_SCHEMA" = ? AND
  79. k1."REFERENCED_TABLE_SCHEMA" = ? AND
  80. k2."REFERENCED_TABLE_SCHEMA" = ? AND
  81. k1."TABLE_NAME" COLLATE \'utf8_bin\' = k2."TABLE_NAME" COLLATE \'utf8_bin\' AND
  82. k1."REFERENCED_TABLE_NAME" COLLATE \'utf8_bin\' = ? AND
  83. k2."REFERENCED_TABLE_NAME" COLLATE \'utf8_bin\' IN ?'
  84. );
  85. }
  86. public function getSql($name) {
  87. return isset($this->queries[$name])?$this->queries[$name]:false;
  88. }
  89. public function connect($hostname,$username,$password,$database,$port,$socket,$charset) {
  90. $db = mysqli_init();
  91. $success = mysqli_real_connect($db,$hostname,$username,$password,$database,$port,$socket,MYSQLI_CLIENT_FOUND_ROWS);
  92. if (!$success) {
  93. throw new \Exception('Connect failed. '.mysqli_connect_error());
  94. }
  95. if (!mysqli_set_charset($db,$charset)) {
  96. throw new \Exception('Error setting charset. '.mysqli_error($db));
  97. }
  98. if (!mysqli_query($db,'SET SESSION sql_mode = \'ANSI_QUOTES\';')) {
  99. throw new \Exception('Error setting ANSI quotes. '.mysqli_error($db));
  100. }
  101. if (!mysqli_options($db,MYSQLI_OPT_INT_AND_FLOAT_NATIVE,true)) {
  102. throw new \Exception('Error setting int and float native. '.mysqli_error($db));
  103. }
  104. $this->db = $db;
  105. }
  106. public function query($sql,$params=array()) {
  107. $db = $this->db;
  108. $sql = preg_replace_callback('/\!|\?/', function ($matches) use (&$db,&$params) {
  109. $param = array_shift($params);
  110. if ($matches[0]=='!') {
  111. $key = preg_replace('/[^a-zA-Z0-9\-_=<> ]/','',is_object($param)?$param->key:$param);
  112. if (is_object($param) && $param->type=='base64') {
  113. return "TO_BASE64(\"$key\") as \"$key\"";
  114. }
  115. if (is_object($param) && $param->type=='wkt') {
  116. return "ST_AsText(\"$key\") as \"$key\"";
  117. }
  118. return '"'.$key.'"';
  119. } else {
  120. if (is_array($param)) return '('.implode(',',array_map(function($v) use (&$db) {
  121. return "'".mysqli_real_escape_string($db,$v)."'";
  122. },$param)).')';
  123. if (is_object($param) && $param->type=='base64') {
  124. return "x'".bin2hex(base64_decode($param->value))."'";
  125. }
  126. if (is_object($param) && $param->type=='wkt') {
  127. return "ST_GeomFromText('".mysqli_real_escape_string($db,$param->value)."')";
  128. }
  129. if ($param===null) return 'NULL';
  130. return "'".mysqli_real_escape_string($db,$param)."'";
  131. }
  132. }, $sql);
  133. //if (!strpos($sql,'INFORMATION_SCHEMA')) echo "\n$sql\n";
  134. return mysqli_query($db,$sql);
  135. }
  136. public function fetchAssoc($result,$fields=false) {
  137. return mysqli_fetch_assoc($result);
  138. }
  139. public function fetchRow($result,$fields=false) {
  140. return mysqli_fetch_row($result);
  141. }
  142. public function insertId($result) {
  143. return mysqli_insert_id($this->db);
  144. }
  145. public function affectedRows($result) {
  146. return mysqli_affected_rows($this->db);
  147. }
  148. public function close($result) {
  149. return mysqli_free_result($result);
  150. }
  151. public function fetchFields($table) {
  152. $result = $this->query('SELECT * FROM ! WHERE 1=2;',array($table));
  153. return mysqli_fetch_fields($result);
  154. }
  155. public function addLimitToSql($sql,$limit,$offset) {
  156. return "$sql LIMIT $limit OFFSET $offset";
  157. }
  158. public function addOrderByDifferenceToSql($sql,$field,$direction) {
  159. if ($this->isGeometryType($field)) {
  160. return "$sql ORDER BY ST_Distance(!, ?) $direction";
  161. } else {
  162. return "$sql ORDER BY ABS(! - ?) $direction";
  163. }
  164. }
  165. public function likeEscape($string) {
  166. return addcslashes($string,'%_');
  167. }
  168. public function convertFilter($field, $comparator, $value) {
  169. return false;
  170. }
  171. public function isBinaryType($field) {
  172. //echo "$field->name: $field->type ($field->flags)\n";
  173. return (($field->flags & 128) && ($field->type>=249) && ($field->type<=252));
  174. }
  175. public function isGeometryType($field) {
  176. return ($field->type==255);
  177. }
  178. public function getDefaultCharset() {
  179. return 'utf8';
  180. }
  181. public function beginTransaction() {
  182. return mysqli_begin_transaction($this->db);
  183. }
  184. public function commitTransaction() {
  185. return mysqli_commit($this->db);
  186. }
  187. public function rollbackTransaction() {
  188. return mysqli_rollback($this->db);
  189. }
  190. }
  191. class PostgreSQL implements DatabaseInterface {
  192. protected $db;
  193. protected $queries;
  194. public function __construct() {
  195. $this->queries = array(
  196. 'list_tables'=>'select
  197. "table_name","table_comment"
  198. from
  199. "information_schema"."tables"
  200. where
  201. "table_catalog" = ?',
  202. 'reflect_table'=>'select
  203. "table_name"
  204. from
  205. "information_schema"."tables"
  206. where
  207. "table_name" like ? and
  208. "table_catalog" = ?',
  209. 'reflect_pk'=>'select
  210. "column_name"
  211. from
  212. "information_schema"."table_constraints" tc,
  213. "information_schema"."key_column_usage" ku
  214. where
  215. tc."constraint_type" = \'PRIMARY KEY\' and
  216. tc."constraint_name" = ku."constraint_name" and
  217. ku."table_name" = ? and
  218. ku."table_catalog" = ?',
  219. 'reflect_belongs_to'=>'select
  220. cu1."table_name",cu1."column_name",
  221. cu2."table_name",cu2."column_name"
  222. from
  223. "information_schema".referential_constraints rc,
  224. "information_schema".key_column_usage cu1,
  225. "information_schema".key_column_usage cu2
  226. where
  227. cu1."constraint_name" = rc."constraint_name" and
  228. cu2."constraint_name" = rc."unique_constraint_name" and
  229. cu1."table_name" = ? and
  230. cu2."table_name" in ? and
  231. cu1."table_catalog" = ? and
  232. cu2."table_catalog" = ?',
  233. 'reflect_has_many'=>'select
  234. cu1."table_name",cu1."column_name",
  235. cu2."table_name",cu2."column_name"
  236. from
  237. "information_schema".referential_constraints rc,
  238. "information_schema".key_column_usage cu1,
  239. "information_schema".key_column_usage cu2
  240. where
  241. cu1."constraint_name" = rc."constraint_name" and
  242. cu2."constraint_name" = rc."unique_constraint_name" and
  243. cu1."table_name" in ? and
  244. cu2."table_name" = ? and
  245. cu1."table_catalog" = ? and
  246. cu2."table_catalog" = ?',
  247. 'reflect_habtm'=>'select
  248. cua1."table_name",cua1."column_name",
  249. cua2."table_name",cua2."column_name",
  250. cub1."table_name",cub1."column_name",
  251. cub2."table_name",cub2."column_name"
  252. from
  253. "information_schema".referential_constraints rca,
  254. "information_schema".referential_constraints rcb,
  255. "information_schema".key_column_usage cua1,
  256. "information_schema".key_column_usage cua2,
  257. "information_schema".key_column_usage cub1,
  258. "information_schema".key_column_usage cub2
  259. where
  260. cua1."constraint_name" = rca."constraint_name" and
  261. cua2."constraint_name" = rca."unique_constraint_name" and
  262. cub1."constraint_name" = rcb."constraint_name" and
  263. cub2."constraint_name" = rcb."unique_constraint_name" and
  264. cua1."table_catalog" = ? and
  265. cub1."table_catalog" = ? and
  266. cua2."table_catalog" = ? and
  267. cub2."table_catalog" = ? and
  268. cua1."table_name" = cub1."table_name" and
  269. cua2."table_name" = ? and
  270. cub2."table_name" in ?'
  271. );
  272. }
  273. public function getSql($name) {
  274. return isset($this->queries[$name])?$this->queries[$name]:false;
  275. }
  276. public function connect($hostname,$username,$password,$database,$port,$socket,$charset) {
  277. $e = function ($v) { return str_replace(array('\'','\\'),array('\\\'','\\\\'),$v); };
  278. $conn_string = '';
  279. if ($hostname || $socket) {
  280. if ($socket) $hostname = $e($socket);
  281. else $hostname = $e($hostname);
  282. $conn_string.= " host='$hostname'";
  283. }
  284. if ($port) {
  285. $port = ($port+0);
  286. $conn_string.= " port='$port'";
  287. }
  288. if ($database) {
  289. $database = $e($database);
  290. $conn_string.= " dbname='$database'";
  291. }
  292. if ($username) {
  293. $username = $e($username);
  294. $conn_string.= " user='$username'";
  295. }
  296. if ($password) {
  297. $password = $e($password);
  298. $conn_string.= " password='$password'";
  299. }
  300. if ($charset) {
  301. $charset = $e($charset);
  302. $conn_string.= " options='--client_encoding=$charset'";
  303. }
  304. $db = pg_connect($conn_string);
  305. $this->db = $db;
  306. }
  307. public function query($sql,$params=array()) {
  308. $db = $this->db;
  309. $sql = preg_replace_callback('/\!|\?/', function ($matches) use (&$db,&$params) {
  310. $param = array_shift($params);
  311. if ($matches[0]=='!') {
  312. $key = preg_replace('/[^a-zA-Z0-9\-_=<> ]/','',is_object($param)?$param->key:$param);
  313. if (is_object($param) && $param->type=='base64') {
  314. return "encode(\"$key\",'base64') as \"$key\"";
  315. }
  316. if (is_object($param) && $param->type=='wkt') {
  317. return "ST_AsText(\"$key\") as \"$key\"";
  318. }
  319. return '"'.$key.'"';
  320. } else {
  321. if (is_array($param)) return '('.implode(',',array_map(function($v) use (&$db) {
  322. return "'".pg_escape_string($db,$v)."'";
  323. },$param)).')';
  324. if (is_object($param) && $param->type=='base64') {
  325. return "'\x".bin2hex(base64_decode($param->value))."'";
  326. }
  327. if (is_object($param) && $param->type=='wkt') {
  328. return "ST_GeomFromText('".pg_escape_string($db,$param->value)."')";
  329. }
  330. if ($param===null) return 'NULL';
  331. return "'".pg_escape_string($db,$param)."'";
  332. }
  333. }, $sql);
  334. if (strtoupper(substr($sql,0,6))=='INSERT') {
  335. $sql .= ' RETURNING id;';
  336. }
  337. //echo "\n$sql\n";
  338. return @pg_query($db,$sql);
  339. }
  340. protected function convertFloatAndInt($result,&$values, $fields) {
  341. array_walk($values, function(&$v,$i) use ($result,$fields){
  342. $t = $fields[$i]->type;
  343. if (is_string($v) && in_array($t,array('int2','int4','int8','float4','float8'))) {
  344. $v+=0;
  345. }
  346. });
  347. }
  348. public function fetchAssoc($result,$fields=false) {
  349. $values = pg_fetch_assoc($result);
  350. if ($values && $fields) {
  351. $this->convertFloatAndInt($result,$values,$fields);
  352. }
  353. return $values;
  354. }
  355. public function fetchRow($result,$fields=false) {
  356. $values = pg_fetch_row($result);
  357. if ($values && $fields) {
  358. $this->convertFloatAndInt($result,$values,array_values($fields));
  359. }
  360. return $values;
  361. }
  362. public function insertId($result) {
  363. list($id) = pg_fetch_row($result);
  364. return (int)$id;
  365. }
  366. public function affectedRows($result) {
  367. return pg_affected_rows($result);
  368. }
  369. public function close($result) {
  370. return pg_free_result($result);
  371. }
  372. public function fetchFields($table) {
  373. $result = $this->query('SELECT * FROM ! WHERE 1=2;',array($table));
  374. $keys = array();
  375. for($i=0;$i<pg_num_fields($result);$i++) {
  376. $field = array();
  377. $field['name'] = pg_field_name($result,$i);
  378. $field['type'] = pg_field_type($result,$i);
  379. $keys[$i] = (object)$field;
  380. }
  381. return $keys;
  382. }
  383. public function addLimitToSql($sql,$limit,$offset) {
  384. return "$sql LIMIT $limit OFFSET $offset";
  385. }
  386. public function likeEscape($string) {
  387. return addcslashes($string,'%_');
  388. }
  389. public function convertFilter($field, $comparator, $value) {
  390. return false;
  391. }
  392. public function isBinaryType($field) {
  393. return $field->type == 'bytea';
  394. }
  395. public function isGeometryType($field) {
  396. return $field->type == 'geometry';
  397. }
  398. public function getDefaultCharset() {
  399. return 'UTF8';
  400. }
  401. public function beginTransaction() {
  402. return $this->query('BEGIN');
  403. }
  404. public function commitTransaction() {
  405. return $this->query('COMMIT');
  406. }
  407. public function rollbackTransaction() {
  408. return $this->query('ROLLBACK');
  409. }
  410. }
  411. class SQLServer implements DatabaseInterface {
  412. protected $db;
  413. protected $queries;
  414. public function __construct() {
  415. $this->queries = array(
  416. 'list_tables'=>'SELECT
  417. "TABLE_NAME",\'\' as "TABLE_COMMENT"
  418. FROM
  419. "INFORMATION_SCHEMA"."TABLES"
  420. WHERE
  421. "TABLE_CATALOG" = ?',
  422. 'reflect_table'=>'SELECT
  423. "TABLE_NAME"
  424. FROM
  425. "INFORMATION_SCHEMA"."TABLES"
  426. WHERE
  427. "TABLE_NAME" LIKE ? AND
  428. "TABLE_CATALOG" = ?',
  429. 'reflect_pk'=>'SELECT
  430. "COLUMN_NAME"
  431. FROM
  432. "INFORMATION_SCHEMA"."TABLE_CONSTRAINTS" tc,
  433. "INFORMATION_SCHEMA"."KEY_COLUMN_USAGE" ku
  434. WHERE
  435. tc."CONSTRAINT_TYPE" = \'PRIMARY KEY\' AND
  436. tc."CONSTRAINT_NAME" = ku."CONSTRAINT_NAME" AND
  437. ku."TABLE_NAME" = ? AND
  438. ku."TABLE_CATALOG" = ?',
  439. 'reflect_belongs_to'=>'SELECT
  440. cu1."TABLE_NAME",cu1."COLUMN_NAME",
  441. cu2."TABLE_NAME",cu2."COLUMN_NAME"
  442. FROM
  443. "INFORMATION_SCHEMA".REFERENTIAL_CONSTRAINTS rc,
  444. "INFORMATION_SCHEMA".CONSTRAINT_COLUMN_USAGE cu1,
  445. "INFORMATION_SCHEMA".CONSTRAINT_COLUMN_USAGE cu2
  446. WHERE
  447. cu1."CONSTRAINT_NAME" = rc."CONSTRAINT_NAME" AND
  448. cu2."CONSTRAINT_NAME" = rc."UNIQUE_CONSTRAINT_NAME" AND
  449. cu1."TABLE_NAME" = ? AND
  450. cu2."TABLE_NAME" IN ? AND
  451. cu1."TABLE_CATALOG" = ? AND
  452. cu2."TABLE_CATALOG" = ?',
  453. 'reflect_has_many'=>'SELECT
  454. cu1."TABLE_NAME",cu1."COLUMN_NAME",
  455. cu2."TABLE_NAME",cu2."COLUMN_NAME"
  456. FROM
  457. "INFORMATION_SCHEMA".REFERENTIAL_CONSTRAINTS rc,
  458. "INFORMATION_SCHEMA".CONSTRAINT_COLUMN_USAGE cu1,
  459. "INFORMATION_SCHEMA".CONSTRAINT_COLUMN_USAGE cu2
  460. WHERE
  461. cu1."CONSTRAINT_NAME" = rc."CONSTRAINT_NAME" AND
  462. cu2."CONSTRAINT_NAME" = rc."UNIQUE_CONSTRAINT_NAME" AND
  463. cu1."TABLE_NAME" IN ? AND
  464. cu2."TABLE_NAME" = ? AND
  465. cu1."TABLE_CATALOG" = ? AND
  466. cu2."TABLE_CATALOG" = ?',
  467. 'reflect_habtm'=>'SELECT
  468. cua1."TABLE_NAME",cua1."COLUMN_NAME",
  469. cua2."TABLE_NAME",cua2."COLUMN_NAME",
  470. cub1."TABLE_NAME",cub1."COLUMN_NAME",
  471. cub2."TABLE_NAME",cub2."COLUMN_NAME"
  472. FROM
  473. "INFORMATION_SCHEMA".REFERENTIAL_CONSTRAINTS rca,
  474. "INFORMATION_SCHEMA".REFERENTIAL_CONSTRAINTS rcb,
  475. "INFORMATION_SCHEMA".CONSTRAINT_COLUMN_USAGE cua1,
  476. "INFORMATION_SCHEMA".CONSTRAINT_COLUMN_USAGE cua2,
  477. "INFORMATION_SCHEMA".CONSTRAINT_COLUMN_USAGE cub1,
  478. "INFORMATION_SCHEMA".CONSTRAINT_COLUMN_USAGE cub2
  479. WHERE
  480. cua1."CONSTRAINT_NAME" = rca."CONSTRAINT_NAME" AND
  481. cua2."CONSTRAINT_NAME" = rca."UNIQUE_CONSTRAINT_NAME" AND
  482. cub1."CONSTRAINT_NAME" = rcb."CONSTRAINT_NAME" AND
  483. cub2."CONSTRAINT_NAME" = rcb."UNIQUE_CONSTRAINT_NAME" AND
  484. cua1."TABLE_CATALOG" = ? AND
  485. cub1."TABLE_CATALOG" = ? AND
  486. cua2."TABLE_CATALOG" = ? AND
  487. cub2."TABLE_CATALOG" = ? AND
  488. cua1."TABLE_NAME" = cub1."TABLE_NAME" AND
  489. cua2."TABLE_NAME" = ? AND
  490. cub2."TABLE_NAME" IN ?'
  491. );
  492. }
  493. public function getSql($name) {
  494. return isset($this->queries[$name])?$this->queries[$name]:false;
  495. }
  496. public function connect($hostname,$username,$password,$database,$port,$socket,$charset) {
  497. $connectionInfo = array();
  498. if ($port) $hostname.=','.$port;
  499. if ($username) $connectionInfo['UID']=$username;
  500. if ($password) $connectionInfo['PWD']=$password;
  501. if ($database) $connectionInfo['Database']=$database;
  502. if ($charset) $connectionInfo['CharacterSet']=$charset;
  503. $connectionInfo['QuotedId']=1;
  504. $connectionInfo['ReturnDatesAsStrings']=1;
  505. $db = sqlsrv_connect($hostname, $connectionInfo);
  506. if (!$db) {
  507. throw new \Exception('Connect failed. '.print_r( sqlsrv_errors(), true));
  508. }
  509. if ($socket) {
  510. throw new \Exception('Socket connection is not supported.');
  511. }
  512. $this->db = $db;
  513. }
  514. public function query($sql,$params=array()) {
  515. $args = array();
  516. $db = $this->db;
  517. $sql = preg_replace_callback('/\!|\?/', function ($matches) use (&$db,&$params,&$args) {
  518. static $i=-1;
  519. $i++;
  520. $param = $params[$i];
  521. if ($matches[0]=='!') {
  522. $key = preg_replace('/[^a-zA-Z0-9\-_=<> ]/','',is_object($param)?$param->key:$param);
  523. if (is_object($param) && $param->type=='base64') {
  524. return "CAST(N'' AS XML).value('xs:base64Binary(xs:hexBinary(sql:column(\"$key\")))', 'VARCHAR(MAX)') as \"$key\"";
  525. }
  526. if (is_object($param) && $param->type=='wkt') {
  527. return "\"$key\".STAsText() as \"$key\"";
  528. }
  529. return '"'.$key.'"';
  530. } else {
  531. // This is workaround because SQLSRV cannot accept NULL in a param
  532. if ($matches[0]=='?' && is_null($param)) {
  533. return 'NULL';
  534. }
  535. if (is_array($param)) {
  536. $args = array_merge($args,$param);
  537. return '('.implode(',',str_split(str_repeat('?',count($param)))).')';
  538. }
  539. if (is_object($param) && $param->type=='base64') {
  540. $args[] = bin2hex(base64_decode($param->value));
  541. return 'CONVERT(VARBINARY(MAX),?,2)';
  542. }
  543. if (is_object($param) && $param->type=='wkt') {
  544. $args[] = $param->value;
  545. return 'geometry::STGeomFromText(?,0)';
  546. }
  547. $args[] = $param;
  548. return '?';
  549. }
  550. }, $sql);
  551. //var_dump($params);
  552. //echo "\n$sql\n";
  553. //var_dump($args);
  554. //file_put_contents('sql.txt',"\n$sql\n".var_export($args,true)."\n",FILE_APPEND);
  555. if (strtoupper(substr($sql,0,6))=='INSERT') {
  556. $sql .= ';SELECT SCOPE_IDENTITY()';
  557. }
  558. return sqlsrv_query($db,$sql,$args)?:null;
  559. }
  560. public function fetchAssoc($result,$fields=false) {
  561. return sqlsrv_fetch_array($result, SQLSRV_FETCH_ASSOC);
  562. }
  563. public function fetchRow($result,$fields=false) {
  564. return sqlsrv_fetch_array($result, SQLSRV_FETCH_NUMERIC);
  565. }
  566. public function insertId($result) {
  567. sqlsrv_next_result($result);
  568. sqlsrv_fetch($result);
  569. return (int)sqlsrv_get_field($result, 0);
  570. }
  571. public function affectedRows($result) {
  572. return sqlsrv_rows_affected($result);
  573. }
  574. public function close($result) {
  575. return sqlsrv_free_stmt($result);
  576. }
  577. public function fetchFields($table) {
  578. $result = $this->query('SELECT * FROM ! WHERE 1=2;',array($table));
  579. //var_dump(sqlsrv_field_metadata($result));
  580. return array_map(function($a){
  581. $p = array();
  582. foreach ($a as $k=>$v) {
  583. $p[strtolower($k)] = $v;
  584. }
  585. return (object)$p;
  586. },sqlsrv_field_metadata($result));
  587. }
  588. public function addLimitToSql($sql,$limit,$offset) {
  589. return "$sql OFFSET $offset ROWS FETCH NEXT $limit ROWS ONLY";
  590. }
  591. public function likeEscape($string) {
  592. return str_replace(array('%','_'),array('[%]','[_]'),$string);
  593. }
  594. public function convertFilter($field, $comparator, $value) {
  595. $comparator = strtolower($comparator);
  596. if ($comparator[0]!='n') {
  597. switch ($comparator) {
  598. case 'sco': return array('!.STContains(geometry::STGeomFromText(?,0))=1',$field,$value);
  599. case 'scr': return array('!.STCrosses(geometry::STGeomFromText(?,0))=1',$field,$value);
  600. case 'sdi': return array('!.STDisjoint(geometry::STGeomFromText(?,0))=1',$field,$value);
  601. case 'seq': return array('!.STEquals(geometry::STGeomFromText(?,0))=1',$field,$value);
  602. case 'sin': return array('!.STIntersects(geometry::STGeomFromText(?,0))=1',$field,$value);
  603. case 'sov': return array('!.STOverlaps(geometry::STGeomFromText(?,0))=1',$field,$value);
  604. case 'sto': return array('!.STTouches(geometry::STGeomFromText(?,0))=1',$field,$value);
  605. case 'swi': return array('!.STWithin(geometry::STGeomFromText(?,0))=1',$field,$value);
  606. case 'sic': return array('!.STIsClosed()=1',$field);
  607. case 'sis': return array('!.STIsSimple()=1',$field);
  608. case 'siv': return array('!.STIsValid()=1',$field);
  609. }
  610. } else {
  611. switch ($comparator) {
  612. case 'nsco': return array('!.STContains(geometry::STGeomFromText(?,0))=0',$field,$value);
  613. case 'nscr': return array('!.STCrosses(geometry::STGeomFromText(?,0))=0',$field,$value);
  614. case 'nsdi': return array('!.STDisjoint(geometry::STGeomFromText(?,0))=0',$field,$value);
  615. case 'nseq': return array('!.STEquals(geometry::STGeomFromText(?,0))=0',$field,$value);
  616. case 'nsin': return array('!.STIntersects(geometry::STGeomFromText(?,0))=0',$field,$value);
  617. case 'nsov': return array('!.STOverlaps(geometry::STGeomFromText(?,0))=0',$field,$value);
  618. case 'nsto': return array('!.STTouches(geometry::STGeomFromText(?,0))=0',$field,$value);
  619. case 'nswi': return array('!.STWithin(geometry::STGeomFromText(?,0))=0',$field,$value);
  620. case 'nsic': return array('!.STIsClosed()=0',$field);
  621. case 'nsis': return array('!.STIsSimple()=0',$field);
  622. case 'nsiv': return array('!.STIsValid()=0',$field);
  623. }
  624. }
  625. return false;
  626. }
  627. public function isBinaryType($field) {
  628. return ($field->type>=-4 && $field->type<=-2);
  629. }
  630. public function isGeometryType($field) {
  631. return ($field->type==-151);
  632. }
  633. public function getDefaultCharset() {
  634. return 'UTF-8';
  635. }
  636. public function beginTransaction() {
  637. return sqlsrv_begin_transaction($this->db);
  638. }
  639. public function commitTransaction() {
  640. return sqlsrv_commit($this->db);
  641. }
  642. public function rollbackTransaction() {
  643. return sqlsrv_rollback($this->db);
  644. }
  645. }
  646. class SQLite implements DatabaseInterface {
  647. protected $db;
  648. protected $queries;
  649. public function __construct() {
  650. $this->queries = array(
  651. 'list_tables'=>'SELECT
  652. "name", ""
  653. FROM
  654. "sys/tables"',
  655. 'reflect_table'=>'SELECT
  656. "name"
  657. FROM
  658. "sys/tables"
  659. WHERE
  660. "name"=?',
  661. 'reflect_pk'=>'SELECT
  662. "name"
  663. FROM
  664. "sys/columns"
  665. WHERE
  666. "pk"=1 AND
  667. "self"=?',
  668. 'reflect_belongs_to'=>'SELECT
  669. "self", "from",
  670. "table", "to"
  671. FROM
  672. "sys/foreign_keys"
  673. WHERE
  674. "self" = ? AND
  675. "table" IN ? AND
  676. ? like "%" AND
  677. ? like "%"',
  678. 'reflect_has_many'=>'SELECT
  679. "self", "from",
  680. "table", "to"
  681. FROM
  682. "sys/foreign_keys"
  683. WHERE
  684. "self" IN ? AND
  685. "table" = ? AND
  686. ? like "%" AND
  687. ? like "%"',
  688. 'reflect_habtm'=>'SELECT
  689. k1."self", k1."from",
  690. k1."table", k1."to",
  691. k2."self", k2."from",
  692. k2."table", k2."to"
  693. FROM
  694. "sys/foreign_keys" k1,
  695. "sys/foreign_keys" k2
  696. WHERE
  697. ? like "%" AND
  698. ? like "%" AND
  699. ? like "%" AND
  700. ? like "%" AND
  701. k1."self" = k2."self" AND
  702. k1."table" = ? AND
  703. k2."table" IN ?'
  704. );
  705. }
  706. public function getSql($name) {
  707. return isset($this->queries[$name])?$this->queries[$name]:false;
  708. }
  709. public function connect($hostname,$username,$password,$database,$port,$socket,$charset) {
  710. $this->db = new SQLite3($database);
  711. // optimizations
  712. $this->db->querySingle('PRAGMA synchronous = NORMAL');
  713. $this->db->querySingle('PRAGMA foreign_keys = on');
  714. $reflection = $this->db->querySingle('SELECT name FROM sqlite_master WHERE type = "table" and name like "sys/%"');
  715. if (!$reflection) {
  716. //create reflection tables
  717. $this->query('CREATE table "sys/version" ("version" integer)');
  718. $this->query('CREATE table "sys/tables" ("name" text)');
  719. $this->query('CREATE table "sys/columns" ("self" text,"cid" integer,"name" text,"type" integer,"notnull" integer,"dflt_value" integer,"pk" integer)');
  720. $this->query('CREATE table "sys/foreign_keys" ("self" text,"id" integer,"seq" integer,"table" text,"from" text,"to" text,"on_update" text,"on_delete" text,"match" text)');
  721. }
  722. $version = $this->db->querySingle('pragma schema_version');
  723. if ($version != $this->db->querySingle('SELECT "version" from "sys/version"')) {
  724. // reflection may take a while
  725. set_time_limit(3600);
  726. // update version data
  727. $this->query('DELETE FROM "sys/version"');
  728. $this->query('INSERT into "sys/version" ("version") VALUES (?)',array($version));
  729. // update tables data
  730. $this->query('DELETE FROM "sys/tables"');
  731. $result = $this->query('SELECT * FROM sqlite_master WHERE (type = "table" or type = "view") and name not like "sys/%" and name<>"sqlite_sequence"');
  732. $tables = array();
  733. while ($row = $this->fetchAssoc($result)) {
  734. $tables[] = $row['name'];
  735. $this->query('INSERT into "sys/tables" ("name") VALUES (?)',array($row['name']));
  736. }
  737. // update columns and foreign_keys data
  738. $this->query('DELETE FROM "sys/columns"');
  739. $this->query('DELETE FROM "sys/foreign_keys"');
  740. foreach ($tables as $table) {
  741. $result = $this->query('pragma table_info(!)',array($table));
  742. while ($row = $this->fetchRow($result)) {
  743. array_unshift($row, $table);
  744. $this->query('INSERT into "sys/columns" ("self","cid","name","type","notnull","dflt_value","pk") VALUES (?,?,?,?,?,?,?)',$row);
  745. }
  746. $result = $this->query('pragma foreign_key_list(!)',array($table));
  747. while ($row = $this->fetchRow($result)) {
  748. array_unshift($row, $table);
  749. $this->query('INSERT into "sys/foreign_keys" ("self","id","seq","table","from","to","on_update","on_delete","match") VALUES (?,?,?,?,?,?,?,?,?)',$row);
  750. }
  751. }
  752. }
  753. }
  754. public function query($sql,$params=array()) {
  755. $db = $this->db;
  756. $sql = preg_replace_callback('/\!|\?/', function ($matches) use (&$db,&$params) {
  757. $param = array_shift($params);
  758. if ($matches[0]=='!') {
  759. $key = preg_replace('/[^a-zA-Z0-9\-_=<> ]/','',is_object($param)?$param->key:$param);
  760. return '"'.$key.'"';
  761. } else {
  762. if (is_array($param)) return '('.implode(',',array_map(function($v) use (&$db) {
  763. return "'".$db->escapeString($v)."'";
  764. },$param)).')';
  765. if (is_object($param) && $param->type=='base64') {
  766. return "'".$db->escapeString($param->value)."'";
  767. }
  768. if ($param===null) return 'NULL';
  769. return "'".$db->escapeString($param)."'";
  770. }
  771. }, $sql);
  772. //echo "\n$sql\n";
  773. try { $result=$db->query($sql); } catch(\Exception $e) { $result=null; }
  774. return $result;
  775. }
  776. public function fetchAssoc($result,$fields=false) {
  777. return $result->fetchArray(SQLITE3_ASSOC);
  778. }
  779. public function fetchRow($result,$fields=false) {
  780. return $result->fetchArray(SQLITE3_NUM);
  781. }
  782. public function insertId($result) {
  783. return $this->db->lastInsertRowID();
  784. }
  785. public function affectedRows($result) {
  786. return $this->db->changes();
  787. }
  788. public function close($result) {
  789. return $result->finalize();
  790. }
  791. public function fetchFields($table) {
  792. $result = $this->query('SELECT * FROM "sys/columns" WHERE "self"=?;',array($table));
  793. $fields = array();
  794. while ($row = $this->fetchAssoc($result)){
  795. $fields[strtolower($row['name'])] = (object)$row;
  796. }
  797. return $fields;
  798. }
  799. public function addLimitToSql($sql,$limit,$offset) {
  800. return "$sql LIMIT $limit OFFSET $offset";
  801. }
  802. public function likeEscape($string) {
  803. return addcslashes($string,'%_');
  804. }
  805. public function convertFilter($field, $comparator, $value) {
  806. return false;
  807. }
  808. public function isBinaryType($field) {
  809. return (substr($field->type,0,4)=='data');
  810. }
  811. public function isGeometryType($field) {
  812. return false;
  813. }
  814. public function getDefaultCharset() {
  815. return 'utf8';
  816. }
  817. public function beginTransaction() {
  818. return $this->query('BEGIN');
  819. }
  820. public function commitTransaction() {
  821. return $this->query('COMMIT');
  822. }
  823. public function rollbackTransaction() {
  824. return $this->query('ROLLBACK');
  825. }
  826. }
  827. class PHP_CRUD_API {
  828. protected $db;
  829. protected $settings;
  830. protected function mapMethodToAction($method,$key) {
  831. switch ($method) {
  832. case 'OPTIONS': return 'headers';
  833. case 'GET': return $key?'read':'list';
  834. case 'PUT': return 'update';
  835. case 'POST': return 'create';
  836. case 'DELETE': return 'delete';
  837. default: $this->exitWith404('method');
  838. }
  839. return false;
  840. }
  841. protected function parseRequestParameter(&$request,$characters) {
  842. if (!$request) return false;
  843. $pos = strpos($request,'/');
  844. $value = $pos?substr($request,0,$pos):$request;
  845. $request = $pos?substr($request,$pos+1):'';
  846. if (!$characters) return $value;
  847. return preg_replace("/[^$characters]/",'',$value);
  848. }
  849. protected function parseGetParameter($get,$name,$characters) {
  850. $value = isset($get[$name])?$get[$name]:false;
  851. return $characters?preg_replace("/[^$characters]/",'',$value):$value;
  852. }
  853. protected function parseGetParameterArray($get,$name,$characters) {
  854. $values = isset($get[$name])?$get[$name]:false;
  855. if (!is_array($values)) $values = array($values);
  856. if ($characters) {
  857. foreach ($values as &$value) {
  858. $value = preg_replace("/[^$characters]/",'',$value);
  859. }
  860. }
  861. return $values;
  862. }
  863. protected function applyTableAuthorizer($callback,$action,$database,&$tables) {
  864. if (is_callable($callback,true)) foreach ($tables as $i=>$table) {
  865. if (!$callback($action,$database,$table)) {
  866. unset($tables[$i]);
  867. }
  868. }
  869. }
  870. protected function applyRecordFilter($callback,$action,$database,$tables,&$filters) {
  871. if (is_callable($callback,true)) foreach ($tables as $i=>$table) {
  872. $this->addFilters($filters,$table,array($table=>'and'),$callback($action,$database,$table));
  873. }
  874. }
  875. protected function applyTenancyFunction($callback,$action,$database,$fields,&$filters) {
  876. if (is_callable($callback,true)) foreach ($fields as $table=>$keys) {
  877. foreach ($keys as $field) {
  878. $v = $callback($action,$database,$table,$field->name);
  879. if ($v!==null) {
  880. if (is_array($v)) $this->addFilter($filters,$table,'and',$field->name,'in',implode(',',$v));
  881. else $this->addFilter($filters,$table,'and',$field->name,'eq',$v);
  882. }
  883. }
  884. }
  885. }
  886. protected function applyColumnAuthorizer($callback,$action,$database,&$fields) {
  887. if (is_callable($callback,true)) foreach ($fields as $table=>$keys) {
  888. foreach ($keys as $field) {
  889. if (!$callback($action,$database,$table,$field->name)) {
  890. unset($fields[$table][$field->name]);
  891. }
  892. }
  893. }
  894. }
  895. protected function applyInputTenancy($callback,$action,$database,$table,&$input,$keys) {
  896. if (is_callable($callback,true)) foreach ($keys as $key=>$field) {
  897. $v = $callback($action,$database,$table,$key);
  898. if ($v!==null && (isset($input->$key) || $action=='create')) {
  899. if (is_array($v)) {
  900. if (!count($v)) {
  901. $input->$key = null;
  902. } elseif (!isset($input->$key)) {
  903. $input->$key = $v[0];
  904. } elseif (!in_array($input->$key,$v)) {
  905. $input->$key = null;
  906. }
  907. } else {
  908. $input->$key = $v;
  909. }
  910. }
  911. }
  912. }
  913. protected function applyInputSanitizer($callback,$action,$database,$table,&$input,$keys) {
  914. if (is_callable($callback,true)) foreach ((array)$input as $key=>$value) {
  915. if (isset($keys[$key])) {
  916. $input->$key = $callback($action,$database,$table,$key,$keys[$key]->type,$value);
  917. }
  918. }
  919. }
  920. protected function applyInputValidator($callback,$action,$database,$table,$input,$keys,$context) {
  921. $errors = array();
  922. if (is_callable($callback,true)) foreach ((array)$input as $key=>$value) {
  923. if (isset($keys[$key])) {
  924. $error = $callback($action,$database,$table,$key,$keys[$key]->type,$value,$context);
  925. if ($error!==true && $error!==null) $errors[$key] = $error;
  926. }
  927. }
  928. if (!empty($errors)) $this->exitWith422($errors);
  929. }
  930. protected function processTableAndIncludeParameters($database,$table,$include,$action) {
  931. $blacklist = array('information_schema','mysql','sys','pg_catalog');
  932. if (in_array(strtolower($database), $blacklist)) return array();
  933. $table_list = array();
  934. if ($result = $this->db->query($this->db->getSql('reflect_table'),array($table,$database))) {
  935. while ($row = $this->db->fetchRow($result)) $table_list[] = $row[0];
  936. $this->db->close($result);
  937. }
  938. if (empty($table_list)) $this->exitWith404('entity');
  939. if ($action=='list') {
  940. foreach (explode(',',$include) as $table) {
  941. if ($result = $this->db->query($this->db->getSql('reflect_table'),array($table,$database))) {
  942. while ($row = $this->db->fetchRow($result)) $table_list[] = $row[0];
  943. $this->db->close($result);
  944. }
  945. }
  946. }
  947. return $table_list;
  948. }
  949. protected function exitWith404($type) {
  950. if (isset($_SERVER['REQUEST_METHOD'])) {
  951. header('Content-Type:',true,404);
  952. die("Not found ($type)");
  953. } else {
  954. throw new \Exception("Not found ($type)");
  955. }
  956. }
  957. protected function exitWith422($object) {
  958. if (isset($_SERVER['REQUEST_METHOD'])) {
  959. header('Content-Type:',true,422);
  960. die(json_encode($object));
  961. } else {
  962. throw new \Exception(json_encode($object));
  963. }
  964. }
  965. protected function headersCommand($parameters) {
  966. $headers = array();
  967. $headers[]='Access-Control-Allow-Headers: Content-Type';
  968. $headers[]='Access-Control-Allow-Methods: OPTIONS, GET, PUT, POST, DELETE';
  969. $headers[]='Access-Control-Allow-Credentials: true';
  970. $headers[]='Access-Control-Max-Age: 1728000';
  971. if (isset($_SERVER['REQUEST_METHOD'])) {
  972. foreach ($headers as $header) header($header);
  973. } else {
  974. echo json_encode($headers);
  975. }
  976. }
  977. protected function startOutput() {
  978. if (isset($_SERVER['REQUEST_METHOD'])) {
  979. header('Content-Type: application/json; charset=utf-8');
  980. }
  981. }
  982. protected function findPrimaryKeys($table,$database) {
  983. $fields = array();
  984. if ($result = $this->db->query($this->db->getSql('reflect_pk'),array($table,$database))) {
  985. while ($row = $this->db->fetchRow($result)) {
  986. $fields[] = $row[0];
  987. }
  988. $this->db->close($result);
  989. }
  990. return $fields;
  991. }
  992. protected function processKeyParameter($key,$tables,$database) {
  993. if (!$key) return false;
  994. $fields = $this->findPrimaryKeys($tables[0],$database);
  995. if (count($fields)!=1) $this->exitWith404('1pk');
  996. return array($key,$fields[0]);
  997. }
  998. protected function processOrderParameter($order) {
  999. if (!$order) return false;
  1000. $order = explode(',',$order,2);
  1001. if (count($order)<2) $order[1]='ASC';
  1002. if (!strlen($order[0])) return false;
  1003. $order[1] = strtoupper($order[1])=='DESC'?'DESC':'ASC';
  1004. return $order;
  1005. }
  1006. protected function convertFilter($field, $comparator, $value) {
  1007. $result = $this->db->convertFilter($field,$comparator,$value);
  1008. if ($result) return $result;
  1009. // default behavior
  1010. $comparator = strtolower($comparator);
  1011. if ($comparator[0]!='n') {
  1012. if (strlen($comparator)==2) {
  1013. switch ($comparator) {
  1014. case 'cs': return array('! LIKE ?',$field,'%'.$this->db->likeEscape($value).'%');
  1015. case 'sw': return array('! LIKE ?',$field,$this->db->likeEscape($value).'%');
  1016. case 'ew': return array('! LIKE ?',$field,'%'.$this->db->likeEscape($value));
  1017. case 'eq': return array('! = ?',$field,$value);
  1018. case 'lt': return array('! < ?',$field,$value);
  1019. case 'le': return array('! <= ?',$field,$value);
  1020. case 'ge': return array('! >= ?',$field,$value);
  1021. case 'gt': return array('! > ?',$field,$value);
  1022. case 'bt': $v = explode(',',$value); if (count($v)<2) return false;
  1023. return array('! BETWEEN ? AND ?',$field,$v[0],$v[1]);
  1024. case 'in': return array('! IN ?',$field,explode(',',$value));
  1025. case 'is': return array('! IS NULL',$field);
  1026. }
  1027. } else {
  1028. switch ($comparator) {
  1029. case 'sco': return array('ST_Contains(!,ST_GeomFromText(?))=TRUE',$field,$value);
  1030. case 'scr': return array('ST_Crosses(!,ST_GeomFromText(?))=TRUE',$field,$value);
  1031. case 'sdi': return array('ST_Disjoint(!,ST_GeomFromText(?))=TRUE',$field,$value);
  1032. case 'seq': return array('ST_Equals(!,ST_GeomFromText(?))=TRUE',$field,$value);
  1033. case 'sin': return array('ST_Intersects(!,ST_GeomFromText(?))=TRUE',$field,$value);
  1034. case 'sov': return array('ST_Overlaps(!,ST_GeomFromText(?))=TRUE',$field,$value);
  1035. case 'sto': return array('ST_Touches(!,ST_GeomFromText(?))=TRUE',$field,$value);
  1036. case 'swi': return array('ST_Within(!,ST_GeomFromText(?))=TRUE',$field,$value);
  1037. case 'sic': return array('ST_IsClosed(!)=TRUE',$field);
  1038. case 'sis': return array('ST_IsSimple(!)=TRUE',$field);
  1039. case 'siv': return array('ST_IsValid(!)=TRUE',$field);
  1040. }
  1041. }
  1042. } else {
  1043. if (strlen($comparator)==2) {
  1044. switch ($comparator) {
  1045. case 'ne': return $this->convertFilter($field, 'neq', $value); // deprecated
  1046. case 'ni': return $this->convertFilter($field, 'nin', $value); // deprecated
  1047. case 'no': return $this->convertFilter($field, 'nis', $value); // deprecated
  1048. }
  1049. } elseif (strlen($comparator)==3) {
  1050. switch ($comparator) {
  1051. case 'ncs': return array('! NOT LIKE ?',$field,'%'.$this->db->likeEscape($value).'%');
  1052. case 'nsw': return array('! NOT LIKE ?',$field,$this->db->likeEscape($value).'%');
  1053. case 'new': return array('! NOT LIKE ?',$field,'%'.$this->db->likeEscape($value));
  1054. case 'neq': return array('! <> ?',$field,$value);
  1055. case 'nlt': return array('! >= ?',$field,$value);
  1056. case 'nle': return array('! > ?',$field,$value);
  1057. case 'nge': return array('! < ?',$field,$value);
  1058. case 'ngt': return array('! <= ?',$field,$value);
  1059. case 'nbt': $v = explode(',',$value); if (count($v)<2) return false;
  1060. return array('! NOT BETWEEN ? AND ?',$field,$v[0],$v[1]);
  1061. case 'nin': return array('! NOT IN ?',$field,explode(',',$value));
  1062. case 'nis': return array('! IS NOT NULL',$field);
  1063. }
  1064. } else {
  1065. switch ($comparator) {
  1066. case 'nsco': return array('ST_Contains(!,ST_GeomFromText(?))=FALSE',$field,$value);
  1067. case 'nscr': return array('ST_Crosses(!,ST_GeomFromText(?))=FALSE',$field,$value);
  1068. case 'nsdi': return array('ST_Disjoint(!,ST_GeomFromText(?))=FALSE',$field,$value);
  1069. case 'nseq': return array('ST_Equals(!,ST_GeomFromText(?))=FALSE',$field,$value);
  1070. case 'nsin': return array('ST_Intersects(!,ST_GeomFromText(?))=FALSE',$field,$value);
  1071. case 'nsov': return array('ST_Overlaps(!,ST_GeomFromText(?))=FALSE',$field,$value);
  1072. case 'nsto': return array('ST_Touches(!,ST_GeomFromText(?))=FALSE',$field,$value);
  1073. case 'nswi': return array('ST_Within(!,ST_GeomFromText(?))=FALSE',$field,$value);
  1074. case 'nsic': return array('ST_IsClosed(!)=FALSE',$field);
  1075. case 'nsis': return array('ST_IsSimple(!)=FALSE',$field);
  1076. case 'nsiv': return array('ST_IsValid(!)=FALSE',$field);
  1077. }
  1078. }
  1079. }
  1080. return false;
  1081. }
  1082. public function addFilter(&$filters,$table,$and,$field,$comparator,$value) {
  1083. if (!isset($filters[$table])) $filters[$table] = array();
  1084. if (!isset($filters[$table][$and])) $filters[$table][$and] = array();
  1085. $filter = $this->convertFilter($field,$comparator,$value);
  1086. if ($filter) $filters[$table][$and][] = $filter;
  1087. }
  1088. public function addFilters(&$filters,$table,$satisfy,$filterStrings) {
  1089. if ($filterStrings) {
  1090. for ($i=0;$i<count($filterStrings);$i++) {
  1091. $parts = explode(',',$filterStrings[$i],3);
  1092. if (count($parts)>=2) {
  1093. if (strpos($parts[0],'.')) list($t,$f) = explode('.',$parts[0],2);
  1094. else list($t,$f) = array($table,$parts[0]);
  1095. $comparator = $parts[1];
  1096. $value = isset($parts[2])?$parts[2]:null;
  1097. $and = isset($satisfy[$t])?$satisfy[$t]:'and';
  1098. $this->addFilter($filters,$t,$and,$f,$comparator,$value);
  1099. }
  1100. }
  1101. }
  1102. }
  1103. protected function processSatisfyParameter($tables,$satisfyString) {
  1104. $satisfy = array();
  1105. foreach (explode(',',$satisfyString) as $str) {
  1106. if (strpos($str,'.')) list($t,$s) = explode('.',$str,2);
  1107. else list($t,$s) = array($tables[0],$str);
  1108. $and = ($s && strtolower($s)=='any')?'or':'and';
  1109. $satisfy[$t] = $and;
  1110. }
  1111. return $satisfy;
  1112. }
  1113. protected function processFiltersParameter($tables,$satisfy,$filterStrings) {
  1114. $filters = array();
  1115. $this->addFilters($filters,$tables[0],$satisfy,$filterStrings);
  1116. return $filters;
  1117. }
  1118. protected function processPageParameter($page) {
  1119. if (!$page) return false;
  1120. $page = explode(',',$page,2);
  1121. if (count($page)<2) $page[1]=20;
  1122. $page[0] = ($page[0]-1)*$page[1];
  1123. return $page;
  1124. }
  1125. protected function retrieveObject($key,$fields,$filters,$tables) {
  1126. if (!$key) return false;
  1127. $table = $tables[0];
  1128. $params = array();
  1129. $sql = 'SELECT ';
  1130. $this->convertOutputs($sql,$params,$fields[$table]);
  1131. $sql .= ' FROM !';
  1132. $params[] = $table;
  1133. $this->addFilter($filters,$table,'and',$key[1],'eq',$key[0]);
  1134. $this->addWhereFromFilters($filters[$table],$sql,$params);
  1135. $object = null;
  1136. if ($result = $this->db->query($sql,$params)) {
  1137. $object = $this->db->fetchAssoc($result,$fields[$table]);
  1138. $this->db->close($result);
  1139. }
  1140. return $object;
  1141. }
  1142. protected function retrieveObjects($key,$fields,$filters,$tables) {
  1143. $keyField = $key[1];
  1144. $keys = explode(',',$key[0]);
  1145. $rows = array();
  1146. foreach ($keys as $key) {
  1147. $result = $this->retrieveObject(array($key,$keyField),$fields,$filters,$tables);
  1148. if ($result===null) {
  1149. return null;
  1150. }
  1151. $rows[] = $result;
  1152. }
  1153. return $rows;
  1154. }
  1155. protected function createObject($input,$tables) {
  1156. if (!$input) return false;
  1157. $input = (array)$input;
  1158. $keys = implode(',',str_split(str_repeat('!', count($input))));
  1159. $values = implode(',',str_split(str_repeat('?', count($input))));
  1160. $params = array_merge(array_keys($input),array_values($input));
  1161. array_unshift($params, $tables[0]);
  1162. $result = $this->db->query('INSERT INTO ! ('.$keys.') VALUES ('.$values.')',$params);
  1163. if (!$result) return null;
  1164. return $this->db->insertId($result);
  1165. }
  1166. protected function createObjects($inputs,$tables) {
  1167. if (!$inputs) return false;
  1168. $ids = array();
  1169. $this->db->beginTransaction();
  1170. foreach ($inputs as $input) {
  1171. $result = $this->createObject($input,$tables);
  1172. if ($result===null) {
  1173. $this->db->rollbackTransaction();
  1174. return null;
  1175. }
  1176. $ids[] = $result;
  1177. }
  1178. $this->db->commitTransaction();
  1179. return $ids;
  1180. }
  1181. protected function updateObject($key,$input,$filters,$tables) {
  1182. if (!$input) return false;
  1183. $input = (array)$input;
  1184. $table = $tables[0];
  1185. $sql = 'UPDATE ! SET ';
  1186. $params = array($table);
  1187. foreach (array_keys($input) as $j=>$k) {
  1188. if ($j) $sql .= ',';
  1189. $v = $input[$k];
  1190. $sql .= '!=?';
  1191. $params[] = $k;
  1192. $params[] = $v;
  1193. }
  1194. $this->addFilter($filters,$table,'and',$key[1],'eq',$key[0]);
  1195. $this->addWhereFromFilters($filters[$table],$sql,$params);
  1196. $result = $this->db->query($sql,$params);
  1197. if (!$result) return null;
  1198. return $this->db->affectedRows($result);
  1199. }
  1200. protected function updateObjects($key,$inputs,$filters,$tables) {
  1201. if (!$inputs) return false;
  1202. $keyField = $key[1];
  1203. $keys = explode(',',$key[0]);
  1204. if (count($inputs)!=count($keys)) {
  1205. $this->exitWith404('subject');
  1206. }
  1207. $rows = array();
  1208. $this->db->beginTransaction();
  1209. foreach ($inputs as $i=>$input) {
  1210. $result = $this->updateObject(array($keys[$i],$keyField),$input,$filters,$tables);
  1211. if ($result===null) {
  1212. $this->db->rollbackTransaction();
  1213. return null;
  1214. }
  1215. $rows[] = $result;
  1216. }
  1217. $this->db->commitTransaction();
  1218. return $rows;
  1219. }
  1220. protected function deleteObject($key,$filters,$tables) {
  1221. $table = $tables[0];
  1222. $sql = 'DELETE FROM !';
  1223. $params = array($table);
  1224. $this->addFilter($filters,$table,'and',$key[1],'eq',$key[0]);
  1225. $this->addWhereFromFilters($filters[$table],$sql,$params);
  1226. $result = $this->db->query($sql,$params);
  1227. if (!$result) return null;
  1228. return $this->db->affectedRows($result);
  1229. }
  1230. protected function deleteObjects($key,$filters,$tables) {
  1231. $keyField = $key[1];
  1232. $keys = explode(',',$key[0]);
  1233. $rows = array();
  1234. $this->db->beginTransaction();
  1235. foreach ($keys as $key) {
  1236. $result = $this->deleteObject(array($key,$keyField),$filters,$tables);
  1237. if ($result===null) {
  1238. $this->db->rollbackTransaction();
  1239. return null;
  1240. }
  1241. $rows[] = $result;
  1242. }
  1243. $this->db->commitTransaction();
  1244. return $rows;
  1245. }
  1246. protected function findRelations($tables,$database,$auto_include) {
  1247. $tableset = array();
  1248. $collect = array();
  1249. $select = array();
  1250. while (count($tables)>1) {
  1251. $table0 = array_shift($tables);
  1252. $tableset[] = $table0;
  1253. $result = $this->db->query($this->db->getSql('reflect_belongs_to'),array($table0,$tables,$database,$database));
  1254. while ($row = $this->db->fetchRow($result)) {
  1255. if (!$auto_include && !in_array($row[0],array_merge($tables,$tableset))) continue;
  1256. $collect[$row[0]][$row[1]]=array();
  1257. $select[$row[2]][$row[3]]=array($row[0],$row[1]);
  1258. if (!in_array($row[0],$tableset)) $tableset[] = $row[0];
  1259. }
  1260. $result = $this->db->query($this->db->getSql('reflect_has_many'),array($tables,$table0,$database,$database));
  1261. while ($row = $this->db->fetchRow($result)) {
  1262. if (!$auto_include && !in_array($row[2],array_merge($tables,$tableset))) continue;
  1263. $collect[$row[2]][$row[3]]=array();
  1264. $select[$row[0]][$row[1]]=array($row[2],$row[3]);
  1265. if (!in_array($row[2],$tableset)) $tableset[] = $row[2];
  1266. }
  1267. $result = $this->db->query($this->db->getSql('reflect_habtm'),array($database,$database,$database,$database,$table0,$tables));
  1268. while ($row = $this->db->fetchRow($result)) {
  1269. if (!$auto_include && !in_array($row[2],array_merge($tables,$tableset))) continue;
  1270. if (!$auto_include && !in_array($row[4],array_merge($tables,$tableset))) continue;
  1271. $collect[$row[2]][$row[3]]=array();
  1272. $select[$row[0]][$row[1]]=array($row[2],$row[3]);
  1273. $collect[$row[4]][$row[5]]=array();
  1274. $select[$row[6]][$row[7]]=array($row[4],$row[5]);
  1275. if (!in_array($row[2],$tableset)) $tableset[] = $row[2];
  1276. if (!in_array($row[4],$tableset)) $tableset[] = $row[4];
  1277. }
  1278. }
  1279. $tableset[] = array_shift($tables);
  1280. $tableset = array_unique($tableset);
  1281. return array($tableset,$collect,$select);
  1282. }
  1283. protected function retrieveInputs($data) {
  1284. $input = (object)array();
  1285. if (strlen($data)>0) {
  1286. if ($data[0]=='{' || $data[0]=='[') {
  1287. $input = json_decode($data);
  1288. } else {
  1289. parse_str($data, $input);
  1290. foreach ($input as $key => $value) {
  1291. if (substr($key,-9)=='__is_null') {
  1292. $input[substr($key,0,-9)] = null;
  1293. unset($input[$key]);
  1294. }
  1295. }
  1296. $input = (object)$input;
  1297. }
  1298. }
  1299. return is_array($input)?$input:array($input);
  1300. }
  1301. protected function addRelationColumns($columns,$select) {
  1302. if ($columns) {
  1303. foreach ($select as $table=>$keys) {
  1304. foreach ($keys as $key=>$other) {
  1305. $columns.=",$table.$key,".implode('.',$other);
  1306. }
  1307. }
  1308. }
  1309. return $columns;
  1310. }
  1311. protected function findFields($tables,$columns,$database) {
  1312. $fields = array();
  1313. foreach ($tables as $i=>$table) {
  1314. $fields[$table] = $this->findTableFields($table,$database);
  1315. $fields[$table] = $this->filterFieldsByColumns($fields[$table],$columns,$i==0,$table);
  1316. }
  1317. return $fields;
  1318. }
  1319. protected function filterFieldsByColumns($fields,$columns,$first,$table) {
  1320. if ($columns) {
  1321. $columns = explode(',',$columns);
  1322. foreach (array_keys($fields) as $key) {
  1323. $delete = true;
  1324. foreach ($columns as $column) {
  1325. if (strpos($column,'.')) {
  1326. if ($column=="$table.$key" || $column=="$table.*") {
  1327. $delete = false;
  1328. }
  1329. } elseif ($first) {
  1330. if ($column==$key || $column=="*") {
  1331. $delete = false;
  1332. }
  1333. }
  1334. }
  1335. if ($delete) unset($fields[$key]);
  1336. }
  1337. }
  1338. return $fields;
  1339. }
  1340. protected function findTableFields($table,$database) {
  1341. $fields = array();
  1342. foreach ($this->db->fetchFields($table) as $field) {
  1343. $fields[$field->name] = $field;
  1344. }
  1345. return $fields;
  1346. }
  1347. protected function filterInputByFields($input,$fields) {
  1348. if ($fields) foreach (array_keys((array)$input) as $key) {
  1349. if (!isset($fields[$key])) {
  1350. unset($input->$key);
  1351. }
  1352. }
  1353. return $input;
  1354. }
  1355. protected function convertInputs(&$input,$fields) {
  1356. foreach ($fields as $key=>$field) {
  1357. if (isset($input->$key) && $input->$key && $this->db->isBinaryType($field)) {
  1358. $value = $input->$key;
  1359. $value = str_pad(strtr($value, '-_', '+/'), ceil(strlen($value) / 4) * 4, '=', STR_PAD_RIGHT);
  1360. $input->$key = (object)array('type'=>'base64','value'=>$value);
  1361. }
  1362. if (isset($input->$key) && $input->$key && $this->db->isGeometryType($field)) {
  1363. $input->$key = (object)array('type'=>'wkt','value'=>$input->$key);
  1364. }
  1365. }
  1366. }
  1367. protected function convertOutputs(&$sql, &$params, $fields) {
  1368. $sql .= implode(',',str_split(str_repeat('!',count($fields))));
  1369. foreach ($fields as $key=>$field) {
  1370. if ($this->db->isBinaryType($field)) {
  1371. $params[] = (object)array('type'=>'base64','key'=>$key);
  1372. }
  1373. else if ($this->db->isGeometryType($field)) {
  1374. $params[] = (object)array('type'=>'wkt','key'=>$key);
  1375. }
  1376. else {
  1377. $params[] = $key;
  1378. }
  1379. }
  1380. }
  1381. protected function getParameters($settings) {
  1382. extract($settings);
  1383. $table = $this->parseRequestParameter($request, 'a-zA-Z0-9\-_');
  1384. $key = $this->parseRequestParameter($request, 'a-zA-Z0-9\-_,'); // auto-increment or uuid
  1385. $action = $this->mapMethodToAction($method,$key);
  1386. $include = $this->parseGetParameter($get, 'include', 'a-zA-Z0-9\-_,');
  1387. $page = $this->parseGetParameter($get, 'page', '0-9,');
  1388. $filters = $this->parseGetParameterArray($get, 'filter', false);
  1389. $satisfy = $this->parseGetParameter($get, 'satisfy', 'a-zA-Z0-9\-_,.');
  1390. $columns = $this->parseGetParameter($get, 'columns', 'a-zA-Z0-9\-_,.*');
  1391. $order = $this->parseGetParameter($get, 'order', 'a-zA-Z0-9\-_,');
  1392. $transform = $this->parseGetParameter($get, 'transform', 't1');
  1393. $tables = $this->processTableAndIncludeParameters($database,$table,$include,$action);
  1394. $key = $this->processKeyParameter($key,$tables,$database);
  1395. $satisfy = $this->processSatisfyParameter($tables,$satisfy);
  1396. $filters = $this->processFiltersParameter($tables,$satisfy,$filters);
  1397. $page = $this->processPageParameter($page);
  1398. $order = $this->processOrderParameter($order);
  1399. // reflection
  1400. list($tables,$collect,$select) = $this->findRelations($tables,$database,$auto_include);
  1401. $columns = $this->addRelationColumns($columns,$select);
  1402. $fields = $this->findFields($tables,$columns,$database);
  1403. // permissions
  1404. if ($table_authorizer) $this->applyTableAuthorizer($table_authorizer,$action,$database,$tables);
  1405. if (!isset($tables[0])) $this->exitWith404('entity');
  1406. if ($record_filter) $this->applyRecordFilter($record_filter,$action,$database,$tables,$filters);
  1407. if ($tenancy_function) $this->applyTenancyFunction($tenancy_function,$action,$database,$fields,$filters);
  1408. if ($column_authorizer) $this->applyColumnAuthorizer($column_authorizer,$action,$database,$fields);
  1409. $multi = strpos($key[0],',')!==false;
  1410. if (strlen($post)) {
  1411. // input
  1412. $multi = $post[0]=='[';
  1413. $contexts = $this->retrieveInputs($post);
  1414. $inputs = array();
  1415. foreach ($contexts as $context) {
  1416. $input = $this->filterInputByFields($context,$fields[$tables[0]]);
  1417. if ($tenancy_function) $this->applyInputTenancy($tenancy_function,$action,$database,$tables[0],$input,$fields[$tables[0]]);
  1418. if ($input_sanitizer) $this->applyInputSanitizer($input_sanitizer,$action,$database,$tables[0],$input,$fields[$tables[0]]);
  1419. if ($input_validator) $this->applyInputValidator($input_validator,$action,$database,$tables[0],$input,$fields[$tables[0]],$context);
  1420. $this->convertInputs($input,$fields[$tables[0]]);
  1421. $inputs[] = $input;
  1422. }
  1423. }
  1424. return compact('action','database','tables','key','page','filters','fields','order','transform','multi','inputs','collect','select');
  1425. }
  1426. protected function addWhereFromFilters($filters,&$sql,&$params) {
  1427. $first = true;
  1428. if (isset($filters['or'])) {
  1429. $first = false;
  1430. $sql .= ' WHERE (';
  1431. foreach ($filters['or'] as $i=>$filter) {
  1432. $sql .= $i==0?'':' OR ';
  1433. $sql .= $filter[0];
  1434. for ($i=1;$i<count($filter);$i++) {
  1435. $params[] = $filter[$i];
  1436. }
  1437. }
  1438. $sql .= ')';
  1439. }
  1440. if (isset($filters['and'])) {
  1441. foreach ($filters['and'] as $i=>$filter) {
  1442. $sql .= $first?' WHERE ':' AND ';
  1443. $sql .= $filter[0];
  1444. for ($i=1;$i<count($filter);$i++) {
  1445. $params[] = $filter[$i];
  1446. }
  1447. $first = false;
  1448. }
  1449. }
  1450. }
  1451. protected function listCommandInternal($parameters) {
  1452. extract($parameters);
  1453. echo '{';
  1454. $table = array_shift($tables);
  1455. // first table
  1456. $count = false;
  1457. echo '"'.$table.'":{';
  1458. if (is_array($order) && is_array($page)) {
  1459. $params = array();
  1460. $sql = 'SELECT COUNT(*) FROM !';
  1461. $params[] = $table;
  1462. if (isset($filters[$table])) {
  1463. $this->addWhereFromFilters($filters[$table],$sql,$params);
  1464. }
  1465. if ($result = $this->db->query($sql,$params)) {
  1466. while ($pages = $this->db->fetchRow($result)) {
  1467. $count = $pages[0];
  1468. }
  1469. }
  1470. }
  1471. $params = array();
  1472. $sql = 'SELECT ';
  1473. $this->convertOutputs($sql,$params,$fields[$table]);
  1474. $sql .= ' FROM !';
  1475. $params[] = $table;
  1476. if (isset($filters[$table])) {
  1477. $this->addWhereFromFilters($filters[$table],$sql,$params);
  1478. }
  1479. if (is_array($order)) {
  1480. $sql .= ' ORDER BY ! '.$order[1];
  1481. $params[] = $order[0];
  1482. }
  1483. if (is_array($order) && is_array($page)) {
  1484. $sql = $this->db->addLimitToSql($sql,$page[1],$page[0]);
  1485. }
  1486. if ($result = $this->db->query($sql,$params)) {
  1487. echo '"columns":';
  1488. $keys = array_keys($fields[$table]);
  1489. echo json_encode($keys);
  1490. $keys = array_flip($keys);
  1491. echo ',"records":[';
  1492. $first_row = true;
  1493. while ($row = $this->db->fetchRow($result,$fields[$table])) {
  1494. if ($first_row) $first_row = false;
  1495. else echo ',';
  1496. if (isset($collect[$table])) {
  1497. foreach (array_keys($collect[$table]) as $field) {
  1498. $collect[$table][$field][] = $row[$keys[$field]];
  1499. }
  1500. }
  1501. echo json_encode($row);
  1502. }
  1503. $this->db->close($result);
  1504. echo ']';
  1505. if ($count) echo ',';
  1506. }
  1507. if ($count) echo '"results":'.$count;
  1508. echo '}';
  1509. // other tables
  1510. foreach ($tables as $t=>$table) {
  1511. echo ',';
  1512. echo '"'.$table.'":{';
  1513. $params = array();
  1514. $sql = 'SELECT ';
  1515. $this->convertOutputs($sql,$params,$fields[$table]);
  1516. $sql .= ' FROM !';
  1517. $params[] = $table;
  1518. if (isset($select[$table])) {
  1519. echo '"relations":{';
  1520. $first_row = true;
  1521. foreach ($select[$table] as $field => $path) {
  1522. $values = $collect[$path[0]][$path[1]];
  1523. if ($values) {
  1524. $this->addFilter($filters,$table,'and',$field,'in',implode(',',$values));
  1525. }
  1526. if ($first_row) $first_row = false;
  1527. else echo ',';
  1528. echo '"'.$field.'":"'.implode('.',$path).'"';
  1529. }
  1530. echo '}';
  1531. }
  1532. if (isset($filters[$table])) {
  1533. $this->addWhereFromFilters($filters[$table],$sql,$params);
  1534. }
  1535. if ($result = $this->db->query($sql,$params)) {
  1536. if (isset($select[$table])) echo ',';
  1537. echo '"columns":';
  1538. $keys = array_keys($fields[$table]);
  1539. echo json_encode($keys);
  1540. $keys = array_flip($keys);
  1541. echo ',"records":[';
  1542. $first_row = true;
  1543. while ($row = $this->db->fetchRow($result,$fields[$table])) {
  1544. if ($first_row) $first_row = false;
  1545. else echo ',';
  1546. if (isset($collect[$table])) {
  1547. foreach (array_keys($collect[$table]) as $field) {
  1548. $collect[$table][$field][]=$row[$keys[$field]];
  1549. }
  1550. }
  1551. echo json_encode($row);
  1552. }
  1553. $this->db->close($result);
  1554. echo ']';
  1555. }
  1556. echo '}';
  1557. }
  1558. echo '}';
  1559. }
  1560. protected function readCommand($parameters) {
  1561. extract($parameters);
  1562. if ($multi) $object = $this->retrieveObjects($key,$fields,$filters,$tables);
  1563. else $object = $this->retrieveObject($key,$fields,$filters,$tables);
  1564. if (!$object) $this->exitWith404('object');
  1565. $this->startOutput();
  1566. echo json_encode($object);
  1567. }
  1568. protected function createCommand($parameters) {
  1569. extract($parameters);
  1570. if (!$inputs || !$inputs[0]) $this->exitWith404('input');
  1571. $this->startOutput();
  1572. if ($multi) echo json_encode($this->createObjects($inputs,$tables));
  1573. else echo json_encode($this->createObject($inputs[0],$tables));
  1574. }
  1575. protected function updateCommand($parameters) {
  1576. extract($parameters);
  1577. if (!$inputs || !$inputs[0]) $this->exitWith404('subject');
  1578. $this->startOutput();
  1579. if ($multi) echo json_encode($this->updateObjects($key,$inputs,$filters,$tables));
  1580. else echo json_encode($this->updateObject($key,$inputs[0],$filters,$tables));
  1581. }
  1582. protected function deleteCommand($parameters) {
  1583. extract($parameters);
  1584. $this->startOutput();
  1585. if ($multi) echo json_encode($this->deleteObjects($key,$filters,$tables));
  1586. else echo json_encode($this->deleteObject($key,$filters,$tables));
  1587. }
  1588. protected function listCommand($parameters) {
  1589. extract($parameters);
  1590. $this->startOutput();
  1591. if ($transform) {
  1592. ob_start();
  1593. }
  1594. $this->listCommandInternal($parameters);
  1595. if ($transform) {
  1596. $content = ob_get_contents();
  1597. ob_end_clean();
  1598. $data = json_decode($content,true);
  1599. echo json_encode(self::php_crud_api_transform($data));
  1600. }
  1601. }
  1602. protected function retrievePostData() {
  1603. if ($_FILES) {
  1604. $files = array();
  1605. foreach ($_FILES as $name => $file) {
  1606. foreach ($file as $key => $value) {
  1607. switch ($key) {
  1608. case 'tmp_name': $files[$name] = $value?base64_encode(file_get_contents($value)):''; break;
  1609. default: $files[$name.'_'.$key] = $value;
  1610. }
  1611. }
  1612. }
  1613. return http_build_query(array_merge($files,$_POST));
  1614. }
  1615. return file_get_contents('php://input');
  1616. }
  1617. public function __construct($config) {
  1618. extract($config);
  1619. // initialize
  1620. $dbengine = isset($dbengine)?$dbengine:null;
  1621. $hostname = isset($hostname)?$hostname:null;
  1622. $username = isset($username)?$username:null;
  1623. $password = isset($password)?$password:null;
  1624. $database = isset($database)?$database:null;
  1625. $port = isset($port)?$port:null;
  1626. $socket = isset($socket)?$socket:null;
  1627. $charset = isset($charset)?$charset:null;
  1628. $table_authorizer = isset($table_authorizer)?$table_authorizer:null;
  1629. $record_filter = isset($record_filter)?$record_filter:null;
  1630. $column_authorizer = isset($column_authorizer)?$column_authorizer:null;
  1631. $tenancy_function = isset($tenancy_function)?$tenancy_function:null;
  1632. $input_sanitizer = isset($input_sanitizer)?$input_sanitizer:null;
  1633. $input_validator = isset($input_validator)?$input_validator:null;
  1634. $extensions = isset($extensions)?$extensions:null;
  1635. $auto_include = isset($auto_include)?$auto_include:null;
  1636. $allow_origin = isset($allow_origin)?$allow_origin:null;
  1637. $db = isset($db)?$db:null;
  1638. $method = isset($method)?$method:null;
  1639. $request = isset($request)?$request:null;
  1640. $get = isset($get)?$get:null;
  1641. $post = isset($post)?$post:null;
  1642. $origin = isset($origin)?$origin:null;
  1643. // defaults
  1644. if (!$dbengine) {
  1645. $dbengine = 'MySQL';
  1646. }
  1647. if (!$method) {
  1648. $method = $_SERVER['REQUEST_METHOD'];
  1649. }
  1650. if (!$request) {
  1651. $request = isset($_SERVER['PATH_INFO'])?$_SERVER['PATH_INFO']:'';
  1652. if (!$request) {
  1653. $request = isset($_SERVER['ORIG_PATH_INFO'])?$_SERVER['ORIG_PATH_INFO']:'';
  1654. }
  1655. }
  1656. if (!$get) {
  1657. $get = $_GET;
  1658. }
  1659. if (!$post) {
  1660. $post = $this->retrievePostData();
  1661. }
  1662. if (!$origin) {
  1663. $origin = isset($_SERVER['HTTP_ORIGIN'])?$_SERVER['HTTP_ORIGIN']:'';
  1664. }
  1665. // connect
  1666. $request = trim($request,'/');
  1667. if (!$database) {
  1668. $database = $this->parseRequestParameter($request, 'a-zA-Z0-9\-_');
  1669. }
  1670. if (!$db) {
  1671. $db = new $dbengine();
  1672. if (!$charset) {
  1673. $charset = $db->getDefaultCharset();
  1674. }
  1675. $db->connect($hostname,$username,$password,$database,$port,$socket,$charset);
  1676. }
  1677. if ($extensions===null) {
  1678. $extensions = true;
  1679. }
  1680. if ($auto_include===null) {
  1681. $auto_include = true;
  1682. }
  1683. if ($allow_origin===null) {
  1684. $allow_origin = '*';
  1685. }
  1686. $this->db = $db;
  1687. $this->settings = compact('method', 'request', 'get', 'post', 'origin', 'database', 'table_authorizer', 'record_filter', 'column_authorizer', 'tenancy_function', 'input_sanitizer', 'input_validator', 'extensions', 'auto_include', 'allow_origin');
  1688. }
  1689. public static function php_crud_api_transform(&$tables) {
  1690. $get_objects = function (&$tables,$table_name,$where_index=false,$match_value=false) use (&$get_objects) {
  1691. $objects = array();
  1692. if (isset($tables[$table_name]['records'])) {
  1693. foreach ($tables[$table_name]['records'] as $record) {
  1694. if ($where_index===false || $record[$where_index]==$match_value) {
  1695. $object = array();
  1696. foreach ($tables[$table_name]['columns'] as $index=>$column) {
  1697. $object[$column] = $record[$index];
  1698. foreach ($tables as $relation=>$reltable) {
  1699. if (isset($reltable['relations'])) {
  1700. foreach ($reltable['relations'] as $key=>$target) {
  1701. if ($target == "$table_name.$column") {
  1702. $column_indices = array_flip($reltable['columns']);
  1703. $object[$relation] = $get_objects($tables,$relation,$column_indices[$key],$record[$index]);
  1704. }
  1705. }
  1706. }
  1707. }
  1708. }
  1709. $objects[] = $object;
  1710. }
  1711. }
  1712. }
  1713. return $objects;
  1714. };
  1715. $tree = array();
  1716. foreach ($tables as $name=>$table) {
  1717. if (!isset($table['relations'])) {
  1718. $tree[$name] = $get_objects($tables,$name);
  1719. if (isset($table['results'])) {
  1720. $tree['_results'] = $table['results'];
  1721. }
  1722. }
  1723. }
  1724. return $tree;
  1725. }
  1726. protected function swagger($settings) {
  1727. extract($settings);
  1728. $tables = array();
  1729. if ($result = $this->db->query($this->db->getSql('list_tables'),array($database))) {
  1730. while ($row = $this->db->fetchRow($result)) {
  1731. $table = array(
  1732. 'name'=>$row[0],
  1733. 'comments'=>$row[1],
  1734. 'root_actions'=>array(
  1735. array('name'=>'list','method'=>'get'),
  1736. array('name'=>'create','method'=>'post'),
  1737. ),
  1738. 'id_actions'=>array(
  1739. array('name'=>'read','method'=>'get'),
  1740. array('name'=>'update','method'=>'put'),
  1741. array('name'=>'delete','method'=>'delete'),
  1742. ),
  1743. );
  1744. $tables[] = $table;
  1745. }
  1746. $this->db->close($result);
  1747. }
  1748. foreach ($tables as $t=>$table) {
  1749. $table_list = array($table['name']);
  1750. $table_fields = $this->findFields($table_list,false,$database);
  1751. $table_names = array_map(function($v){ return $v['name'];},$tables);
  1752. if ($extensions) {
  1753. $result = $this->db->query($this->db->getSql('reflect_belongs_to'),array($table_list[0],$table_names,$database,$database));
  1754. while ($row = $this->db->fetchRow($result)) {
  1755. $table_fields[$table['name']][$row[1]]->references=array($row[2],$row[3]);
  1756. }
  1757. $result = $this->db->query($this->db->getSql('reflect_has_many'),array($table_names,$table_list[0],$database,$database));
  1758. while ($row = $this->db->fetchRow($result)) {
  1759. $table_fields[$table['name']][$row[3]]->referenced[]=array($row[0],$row[1]);
  1760. }
  1761. $primaryKeys = $this->findPrimaryKeys($table_list[0],$database);
  1762. foreach ($primaryKeys as $primaryKey) {
  1763. $table_fields[$table['name']][$primaryKey]->primaryKey = true;
  1764. }
  1765. }
  1766. foreach (array('root_actions','id_actions') as $path) {
  1767. foreach ($table[$path] as $i=>$action) {
  1768. $table_list = array($table['name']);
  1769. $fields = $table_fields;
  1770. if ($table_authorizer) $this->applyTableAuthorizer($table_authorizer,$action['name'],$database,$table_list);
  1771. if ($column_authorizer) $this->applyColumnAuthorizer($column_authorizer,$action['name'],$database,$fields);
  1772. if (!$table_list || !$fields[$table['name']]) $tables[$t][$path][$i] = false;
  1773. else $tables[$t][$path][$i]['fields'] = $fields[$table['name']];
  1774. }
  1775. // remove unauthorized tables and tables without fields
  1776. $tables[$t][$path] = array_values(array_filter($tables[$t][$path]));
  1777. }
  1778. if (!$tables[$t]['root_actions']&&!$tables[$t]['id_actions']) $tables[$t] = false;
  1779. }
  1780. $tables = array_merge(array_filter($tables));
  1781. //var_dump($tables);die();
  1782. header('Content-Type: application/json; charset=utf-8');
  1783. echo '{"swagger":"2.0",';
  1784. echo '"info":{';
  1785. echo '"title":"'.$database.'",';
  1786. echo '"description":"API generated with [PHP-CRUD-API](https://github.com/mevdschee/php-crud-api)",';
  1787. echo '"version":"1.0.0"';
  1788. echo '},';
  1789. echo '"host":"'.$_SERVER['HTTP_HOST'].'",';
  1790. echo '"basePath":"'.$_SERVER['SCRIPT_NAME'].'",';
  1791. echo '"schemes":["http'.((!empty($_SERVER['HTTPS'])&&$_SERVER['HTTPS']!=='off')?'s':'').'"],';
  1792. echo '"consumes":["application/json"],';
  1793. echo '"produces":["application/json"],';
  1794. echo '"tags":[';
  1795. foreach ($tables as $i=>$table) {
  1796. if ($i>0) echo ',';
  1797. echo '{';
  1798. echo '"name":"'.$table['name'].'",';
  1799. echo '"description":"'.$table['comments'].'"';
  1800. echo '}';
  1801. }
  1802. echo '],';
  1803. echo '"paths":{';
  1804. foreach ($tables as $i=>$table) {
  1805. if ($table['root_actions']) {
  1806. if ($i>0) echo ',';
  1807. echo '"/'.$table['name'].'":{';
  1808. foreach ($table['root_actions'] as $j=>$action) {
  1809. if ($j>0) echo ',';
  1810. echo '"'.$action['method'].'":{';
  1811. echo '"tags":["'.$table['name'].'"],';
  1812. echo '"summary":"'.ucfirst($action['name']).'",';
  1813. if ($action['name']=='list') {
  1814. echo '"parameters":[';
  1815. echo '{';
  1816. echo '"name":"include",';
  1817. echo '"in":"query",';
  1818. echo '"description":"One or more related entities (comma separated).",';
  1819. echo '"required":false,';
  1820. echo '"type":"string"';
  1821. echo '},';
  1822. echo '{';
  1823. echo '"name":"order",';
  1824. echo '"in":"query",';
  1825. echo '"description":"Column you want to sort on and the sort direction (comma separated). Example: id,desc",';
  1826. echo '"required":false,';
  1827. echo '"type":"string"';
  1828. echo '},';
  1829. echo '{';
  1830. echo '"name":"page",';
  1831. echo '"in":"query",';
  1832. echo '"description":"Page number and page size (comma separated). NB: You cannot use \"page\" without \"order\"! Example: 1,10",';
  1833. echo '"required":false,';
  1834. echo '"type":"string"';
  1835. echo '},';
  1836. echo '{';
  1837. echo '"name":"transform",';
  1838. echo '"in":"query",';
  1839. echo '"description":"Transform the records to object format. NB: This can also be done client-side in JavaScript!",';
  1840. echo '"required":false,';
  1841. echo '"type":"boolean"';
  1842. echo '},';
  1843. echo '{';
  1844. echo '"name":"columns",';
  1845. echo '"in":"query",';
  1846. echo '"description":"The table columns you want to retrieve (comma separated). Example: posts.*,categories.name",';
  1847. echo '"required":false,';
  1848. echo '"type":"string"';
  1849. echo '},';
  1850. echo '{';
  1851. echo '"name":"filter[]",';
  1852. echo '"in":"query",';
  1853. echo '"description":"Filters to be applied. Each filter consists of a column, an operator and a value (comma separated). Example: id,eq,1",';
  1854. echo '"required":false,';
  1855. echo '"type":"array",';
  1856. echo '"collectionFormat":"multi",';
  1857. echo '"items":{"type":"string"}';
  1858. echo '},';
  1859. echo '{';
  1860. echo '"name":"satisfy",';
  1861. echo '"in":"query",';
  1862. echo '"description":"Should all filters match (default)? Or any?",';
  1863. echo '"required":false,';
  1864. echo '"type":"string",';
  1865. echo '"enum":["any"]';
  1866. echo '}';
  1867. echo '],';
  1868. echo '"responses":{';
  1869. echo '"200":{';
  1870. echo '"description":"An array of '.$table['name'].'",';
  1871. echo '"schema":{';
  1872. echo '"type":"array",';
  1873. echo '"items":{';
  1874. echo '"type": "object",';
  1875. echo '"properties": {';
  1876. foreach (array_keys($action['fields']) as $k=>$field) {
  1877. if ($k>0) echo ',';
  1878. echo '"'.$field.'": {';
  1879. echo '"type": "string"';
  1880. if (isset($action['fields'][$field]->referenced)) {
  1881. echo ',"x-referenced": '.json_encode($action['fields'][$field]->referenced);
  1882. }
  1883. if (isset($action['fields'][$field]->references)) {
  1884. echo ',"x-references": '.json_encode($action['fields'][$field]->references);
  1885. }
  1886. if (isset($action['fields'][$field]->primaryKey)) {
  1887. echo ',"x-primary-key": true';
  1888. }
  1889. echo '}';
  1890. }
  1891. echo '}'; //properties
  1892. echo '}'; //items
  1893. echo '}'; //schema
  1894. echo '}'; //200
  1895. echo '}'; //responses
  1896. }
  1897. if ($action['name']=='create') {
  1898. echo '"parameters":[{';
  1899. echo '"name":"item",';
  1900. echo '"in":"body",';
  1901. echo '"description":"Item to create.",';
  1902. echo '"required":false,';
  1903. echo '"schema":{';
  1904. echo '"type": "object",';
  1905. echo '"properties": {';
  1906. foreach (array_keys($action['fields']) as $k=>$field) {
  1907. if ($k>0) echo ',';
  1908. echo '"'.$field.'": {';
  1909. echo '"type": "string"';
  1910. if (isset($action['fields'][$field]->referenced)) {
  1911. echo ',"x-referenced": '.json_encode($action['fields'][$field]->referenced);
  1912. }
  1913. if (isset($action['fields'][$field]->references)) {
  1914. echo ',"x-references": '.json_encode($action['fields'][$field]->references);
  1915. }
  1916. if (isset($action['fields'][$field]->primaryKey)) {
  1917. echo ',"x-primary-key": true';
  1918. }
  1919. echo '}';
  1920. }
  1921. echo '}'; //properties
  1922. echo '}'; //schema
  1923. echo '}],';
  1924. echo '"responses":{';
  1925. echo '"200":{';
  1926. echo '"description":"Identifier of created item.",';
  1927. echo '"schema":{';
  1928. echo '"type":"integer"';
  1929. echo '}';//schema
  1930. echo '}';//200
  1931. echo '}';//responses
  1932. }
  1933. echo '}';//method
  1934. }
  1935. echo '}';
  1936. }
  1937. if ($table['id_actions']) {
  1938. if ($i>0 || $table['root_actions']) echo ',';
  1939. echo '"/'.$table['name'].'/{id}":{';
  1940. foreach ($table['id_actions'] as $j=>$action) {
  1941. if ($j>0) echo ',';
  1942. echo '"'.$action['method'].'":{';
  1943. echo '"tags":["'.$table['name'].'"],';
  1944. echo '"summary":"'.ucfirst($action['name']).'",';
  1945. echo '"parameters":[';
  1946. echo '{';
  1947. echo '"name":"id",';
  1948. echo '"in":"path",';
  1949. echo '"description":"Identifier for item.",';
  1950. echo '"required":true,';
  1951. echo '"type":"string"';
  1952. echo '}';
  1953. if ($action['name']=='update') {
  1954. echo ',{';
  1955. echo '"name":"item",';
  1956. echo '"in":"body",';
  1957. echo '"description":"Properties of item to update.",';
  1958. echo '"required":false,';
  1959. echo '"schema":{';
  1960. echo '"type": "object",';
  1961. echo '"properties": {';
  1962. foreach (array_keys($action['fields']) as $k=>$field) {
  1963. if ($k>0) echo ',';
  1964. echo '"'.$field.'": {';
  1965. echo '"type": "string"';
  1966. if (isset($action['fields'][$field]->referenced)) {
  1967. echo ',"x-referenced": '.json_encode($action['fields'][$field]->referenced);
  1968. }
  1969. if (isset($action['fields'][$field]->references)) {
  1970. echo ',"x-references": '.json_encode($action['fields'][$field]->references);
  1971. }
  1972. if (isset($action['fields'][$field]->primaryKey)) {
  1973. echo ',"x-primary-key": true';
  1974. }
  1975. echo '}';
  1976. }
  1977. echo '}'; //properties
  1978. echo '}'; //schema
  1979. echo '}';
  1980. }
  1981. echo '],';
  1982. if ($action['name']=='read') {
  1983. echo '"responses":{';
  1984. echo '"200":{';
  1985. echo '"description":"The requested item.",';
  1986. echo '"schema":{';
  1987. echo '"type": "object",';
  1988. echo '"properties": {';
  1989. foreach (array_keys($action['fields']) as $k=>$field) {
  1990. if ($k>0) echo ',';
  1991. echo '"'.$field.'": {';
  1992. echo '"type": "string"';
  1993. if (isset($action['fields'][$field]->referenced)) {
  1994. echo ',"x-referenced": '.json_encode($action['fields'][$field]->referenced);
  1995. }
  1996. if (isset($action['fields'][$field]->references)) {
  1997. echo ',"x-references": '.json_encode($action['fields'][$field]->references);
  1998. }
  1999. if (isset($action['fields'][$field]->primaryKey)) {
  2000. echo ',"x-primary-key": true';
  2001. }
  2002. echo '}';
  2003. }
  2004. echo '}'; //properties
  2005. echo '}'; //schema
  2006. echo '}';
  2007. echo '}';
  2008. } else {
  2009. echo '"responses":{';
  2010. echo '"200":{';
  2011. echo '"description":"Number of affected rows.",';
  2012. echo '"schema":{';
  2013. echo '"type":"integer"';
  2014. echo '}';
  2015. echo '}';
  2016. echo '}';
  2017. }
  2018. echo '}';
  2019. }
  2020. echo '}';
  2021. }
  2022. }
  2023. echo '}';
  2024. echo '}';
  2025. }
  2026. protected function allowOrigin($origin,$allowOrigins) {
  2027. if ($allowOrigins=='*') {
  2028. header('Access-Control-Allow-Origin: *');
  2029. } else {
  2030. if ($origin) foreach (explode(',',$allowOrigins) as $o) {
  2031. if (preg_match('/^'.str_replace('\*','.*',preg_quote(strtolower(trim($o)))).'$/',$origin)) {
  2032. header('Access-Control-Allow-Origin: '.$origin);
  2033. break;
  2034. }
  2035. }
  2036. }
  2037. }
  2038. public function executeCommand() {
  2039. if (isset($_SERVER['REQUEST_METHOD'])) {
  2040. $this->allowOrigin($this->settings['origin'],$this->settings['allow_origin']);
  2041. }
  2042. if (!$this->settings['request']) {
  2043. $this->swagger($this->settings);
  2044. } else {
  2045. $parameters = $this->getParameters($this->settings);
  2046. switch($parameters['action']){
  2047. case 'list': $this->listCommand($parameters); break;
  2048. case 'read': $this->readCommand($parameters); break;
  2049. case 'create': $this->createCommand($parameters); break;
  2050. case 'update': $this->updateCommand($parameters); break;
  2051. case 'delete': $this->deleteCommand($parameters); break;
  2052. case 'headers': $this->headersCommand($parameters); break;
  2053. }
  2054. }
  2055. }
  2056. }
  2057. // require 'auth.php'; // from the PHP-API-AUTH project, see: https://github.com/mevdschee/php-api-auth
  2058. // uncomment the lines below for token+session based authentication (see "login_token.html" + "login_token.php"):
  2059. // $auth = new PHP_API_AUTH(array(
  2060. // 'secret'=>'someVeryLongPassPhraseChangeMe',
  2061. // ));
  2062. // if ($auth->executeCommand()) exit(0);
  2063. // if (empty($_SESSION['user']) || $_GET['csrf']!=$_SESSION['csrf']) {
  2064. // header('HTTP/1.0 401 Unauthorized');
  2065. // exit(0);
  2066. // }
  2067. // uncomment the lines below for form+session based authentication (see "login.html"):
  2068. // $auth = new PHP_API_AUTH(array(
  2069. // 'authenticator'=>function($user,$pass){ $_SESSION['user']=($user=='admin' && $pass=='admin'); }
  2070. // ));
  2071. // if ($auth->executeCommand()) exit(0);
  2072. // if (empty($_SESSION['user']) || $_GET['csrf']!=$_SESSION['csrf']) {
  2073. // header('HTTP/1.0 401 Unauthorized');
  2074. // exit(0);
  2075. // }
  2076. // uncomment the lines below when running in stand-alone mode:
  2077. // $api = new PHP_CRUD_API(array(
  2078. // 'dbengine'=>'MySQL',
  2079. // 'hostname'=>'localhost',
  2080. // 'username'=>'',
  2081. // 'password'=>'',
  2082. // 'database'=>'',
  2083. // 'charset'=>'utf8'
  2084. // ));
  2085. // $api->executeCommand();
  2086. // For Microsoft SQL Server 2012 use:
  2087. // $api = new PHP_CRUD_API(array(
  2088. // 'dbengine'=>'SQLServer',
  2089. // 'hostname'=>'(local)',
  2090. // 'username'=>'',
  2091. // 'password'=>'',
  2092. // 'database'=>'xxx',
  2093. // 'charset'=>'UTF-8'
  2094. // ));
  2095. // $api->executeCommand();
  2096. // For PostgreSQL 9 use:
  2097. // $api = new PHP_CRUD_API(array(
  2098. // 'dbengine'=>'PostgreSQL',
  2099. // 'hostname'=>'localhost',
  2100. // 'username'=>'xxx',
  2101. // 'password'=>'xxx',
  2102. // 'database'=>'xxx',
  2103. // 'charset'=>'UTF8'
  2104. // ));
  2105. // $api->executeCommand();
  2106. // For SQLite 3 use:
  2107. // $api = new PHP_CRUD_API(array(
  2108. // 'dbengine'=>'SQLite',
  2109. // 'database'=>'data/blog.db',
  2110. // ));
  2111. // $api->executeCommand();