query("select db_servers.* from db_servers, membres where membres.uid= ? and membres.db_server_id=db_servers.id;", array($cuid));
if (!$db->next_record()) {
$msg->raise('Error', 'db_user', _("There are no databases in db_servers for this user. Please contact your administrator."));
die();
}
# Create the object
$this->HumanHostname = $db->f('name');
$this->Host = $db->f('host');
$this->User = $db->f('login');
$this->Password = $db->f('password');
$this->Client = $db->f('client');
$this->Database = "mysql";
parent::__construct("mysql", $db->f('host'), $db->f('login'), $db->f('password') );
}
}
class m_mysql {
var $dbus;
/* --------------------------------------------------------------------------- */
/** Constructor
* m_mysql([$mid]) Constructeur de la classe m_mysql, initialise le membre concerne
*/
function m_mysql() {
global $cuid;
if (!empty($cuid)) {
$this->dbus = new DB_users();
}
variable_get('sql_allow_users_backups', 1, 'Set 1 to allow users to configure backup of their databases, 0 if you want do disable this feature. Warning: it will not stop configured backup made by sqlbackup.sh');
}
function reload_dbus() {
$this->dbus = new DB_users();
}
function list_db_servers() {
global $db;
$db->query("select d.*, IFNULL(count(m.uid),0) as nb_users from db_servers d left join membres m on d.id = m.db_server_id group by d.id,m.db_server_id order by d.name,d.id;");
$c = array();
while ($db->next_record()) {
$c[] = $db->Record;
}
return $c;
}
function hook_menu() {
global $quota;
$q = $quota->getquota("mysql");
$obj = array(
'title' => _("MySQL"),
'ico' => 'images/mysql.png',
'link' => 'toggle',
'pos' => 100,
'links' => array(),
);
$obj['links'][] = array(
'txt' => _("Databases"),
'url' => "sql_list.php",
);
$obj['links'][] = array(
'txt' => _("MySQL Users"),
'url' => "sql_users_list.php",
);
if ($q["u"] > 0) {
$obj['links'][] = array(
'txt' => _("PhpMyAdmin"),
'url' => "sql_pma_sso.php",
'target' => '_blank',
);
}
return $obj;
}
/* ----------------------------------------------------------------- */
/**
* Password kind used in this class (hook for admin class)
*/
function alternc_password_policy() {
return array("mysql" => "MySQL users");
}
/* --------------------------------------------------------------------------- */
/** Get the list of the database for the current user.
* @return array returns an associative array as follow :
* "db" => database name "bck" => backup mode for this db
* "dir" => Backup folder.
* Returns an array (empty) if no databases
*/
function get_dblist() {
global $db, $msg, $bro, $cuid;
$msg->log("mysql", "get_dblist");
$db->free();
$db->query("SELECT login,pass,db, bck_mode, bck_dir FROM db WHERE uid= ? ORDER BY db;", array($cuid));
$c = array();
while ($db->next_record()) {
list($dbu, $dbn) = split_mysql_database_name($db->f("db"));
$c[] = array("db" => $db->f("db"), "name" => $db->f('db'), "bck" => $db->f("bck_mode"), "dir" => $db->f("bck_dir"), "login" => $db->f("login"), "pass" => $db->f("pass"));
}
return $c;
}
/* --------------------------------------------------------------------------- */
/** Get the login and password of the special user able to connect to phpmyadmin
* @return array returns an associative array with login and password
* Returns FALSE if error
*/
function php_myadmin_connect() {
global $db, $cuid, $msg;
$msg->log("mysql", "php_myadmin_connect");
$db->query("SELECT dbu.name,dbu.password, dbs.host FROM dbusers dbu, db_servers dbs, membres m WHERE dbu.uid= ? and enable='ADMIN' and dbs.id=m.db_server_id and m.uid= ? ;", array($cuid, $cuid));
if (!$db->num_rows()) {
$msg->raise('Error', "mysql", _("Cannot connect to PhpMyAdmin"));
return false;
}
$db->next_record();
$info = array(
"login" => $db->f("name"),
"pass" => $db->f("password"),
"host" => $db->f("host")
);
return $info;
}
/* --------------------------------------------------------------------------- */
/** Returns the details of a user's database.
* $dbn is the name of the database (after the _) or nothing for the database "$user"
* @return string returns an associative array as follow :
* "db" => Name of the database
* "bck" => Current bckup mode
* "dir" => Backup directory
* "size" => Size of the database (in bytes)
* "pass" => Password of the user
* "history" => Number of backup we keep
* "gzip" => Does we compress the dumps ?
* Returns FALSE if the user has no database of if the database does not exist.
*/
function get_mysql_details($dbn) {
global $db, $msg, $cuid;
$root = getuserpath();
$msg->log("mysql", "get_mysql_details");
$pos = strpos($dbn, '_');
if ($pos === false) {
$dbname = $dbn;
} else {
$dbncomp = explode('_', $dbn);
$dbname = $dbn;
$dbn = $dbncomp[1];
}
$size = $this->get_db_size($dbname);
$db->query("SELECT login,pass,db, bck_mode, bck_gzip, bck_dir, bck_history FROM db WHERE uid= ? AND db= ?;", array($cuid, $dbname));
if (!$db->num_rows()) {
$msg->raise('Error', "mysql", _("Database %s not found"), $dbn);
return array("enabled" => false);
}
$db->next_record();
list($dbu, $dbn) = split_mysql_database_name($db->f("db"));
return array("enabled" => true, "login" => $db->f("login"), "db" => $db->f("db"), "name" => $dbn, "bck" => $db->f("bck_mode"), "dir" => substr($db->f("bck_dir"), strlen($root)), "size" => $size, "pass" => $db->f("pass"), "history" => $db->f("bck_history"), "gzip" => $db->f("bck_gzip"));
}
/* --------------------------------------------------------------------------- */
/** Create a new database for the current user.
* @param $dbn string Database name ($user_$dbn is the mysql db name)
* @return boolean if the database $user_$db has been successfully created, or FALSE if
* an error occured, such as over quota user.
*/
function add_db($dbn) {
global $db, $msg, $quota, $cuid, $admin;
$msg->log("mysql", "add_db", $dbn);
$password_user = "";
if (!$quota->cancreate("mysql")) {
$msg->raise('Error', "mysql", _("Your databases quota is over. You cannot create more databases"));
return false;
}
$pos = strpos($dbn, '_');
if ($pos === false) {
$dbname = $dbn;
} else {
$dbncomp = explode('_', $dbn);
$dbname = $dbn;
$dbn = $dbncomp[1];
if (empty($dbn)) { // If nothing after the '_'
$msg->raise('Error', "mysql", _("Database can't have empty suffix"));
return false;
}
}
if (!preg_match("#^[0-9a-z]*$#", $dbn)) {
$msg->raise('Error', "mysql", _("Database name can contain only letters and numbers"));
return false;
}
$len=variable_get("sql_max_database_length", 64);
if (strlen($dbname) > $len) {
$msg->raise('Error', "mysql", _("Database name cannot exceed %d characters"), $len);
return false;
}
$db->query("SELECT * FROM db WHERE db= ? ;", array($dbname));
if ($db->num_rows()) {
$msg->raise('Error', "mysql", _("Database %s already exists"), $dbn);
return false;
}
// On empèche la création auto d'utilisateurs si la taille du nom de la db est plus grand que la taille max du nom d'utilisateur
$len=variable_get('sql_max_username_length', NULL);
if (strlen($dbname) <= $len) {
$db->query("SELECT name from dbusers where name= ? and enable='ACTIVATED' ;", array($dbname));
if (!$db->num_rows()) {
// On récupère la complexité du mdp qu'on doit générer que l'on va passer en paramètre de la fonction create_pass
$c=$admin->listPasswordPolicies();
$passwd_classcount = $c['mysql']['classcount'];
$password_user = create_pass(10, $passwd_classcount);
if ($this->add_user($dbn, $password_user, $password_user)) {
$msg->raise('Info', "mysql", "L'utilisateur '$dbname' a été créé et les droits sur cette base de données lui ont été attribué.");
} else {
$msg->raise('Alert', "mysql", "L'utilisateur '$dbname' n'a pas pu être créé.
Allez à la page 'Utilisateurs Mysql' pour en créer manuellement.
Et n'oubliez pas de lui donner les droits sur la base de données.");
}
}
} else {
$msg->raise('Alert', "mysql", "L'utilisateur '$dbname' n'a pas été automatiquement créé car il dépasse la limite de taille pour les utilisateurs qui est à $len
Allez à la page 'Utilisateurs Mysql' pour en créer un avec le nom que vous voulez.
Et n'oubliez pas de lui donner les droits sur la base de données.");
}
//checking for the phpmyadmin user
$db->query("SELECT * FROM dbusers WHERE uid= ? AND enable='ADMIN';", array($cuid));
if ($db->num_rows()) {
$db->next_record();
$myadm = $db->f("name");
$password = $db->f("password");
} else {
$msg->raise('Error', "mysql", _("There is a problem with the special PhpMyAdmin user. Contact the administrator"));
return false;
}
//Grant the special user every rights.
if ($this->dbus->exec("CREATE DATABASE $dbname;")) { // secured: dbname is checked against ^[0-9a-z]*$
$msg->log("mysql", "add_db_succes", $dbn);
// Ok, database does not exist, quota is ok and dbname is compliant. Let's proceed
$db->query("INSERT INTO db (uid,login,pass,db,bck_mode) VALUES (?, ?, ?, ? ,0)", array($cuid, $myadm, $password, $dbname));
$dbuser = $dbname;
$dbname = str_replace('_', '\_', $dbname);
$this->grant($dbname, $myadm, "ALL PRIVILEGES", $password);
if (!empty($password_user)) {
$this->grant($dbname, $dbuser, "ALL PRIVILEGES", $password_user);
}
$this->dbus->query("FLUSH PRIVILEGES;");
return true;
} else {
$msg->log("mysql", "add_db", $dbn);
$msg->raise('Error', "mysql", _("An error occured. The database could not be created"));
return false;
}
}
/* --------------------------------------------------------------------------- */
/** Delete a database for the current user.
* @param $dbname string Name of the database to delete. The db name is $user_$dbn
* @return boolean if the database $user_$db has been successfully deleted, or FALSE if
* an error occured, such as db does not exist.
*/
function del_db($dbname) {
global $db, $msg, $cuid;
$msg->log("mysql", "del_db", $dbname);
$db->query("SELECT uid FROM db WHERE db= ?;", array($dbname));
if (!$db->next_record()) {
$msg->raise('Error', "mysql", _("The database was not found. I can't delete it"));
return false;
}
// Ok, database exists and dbname is compliant. Let's proceed
$db->query("DELETE FROM size_db WHERE db ?;", array($dbname));
$db->query("DELETE FROM db WHERE uid= ? AND db= ? ;", array($cuid, $dbname));
$this->dbus->query("DROP DATABASE $dbname;");
$db_esc = str_replace('_', '\_', $dbname);
$this->dbus->query("DELETE FROM mysql.db WHERE Db= ? ;", array($db_esc));
#We test if the user created with the database is associated with more than 1 database.
$this->dbus->query("select User from mysql.db where User= ? ;", array($dbname));
if (($this->dbus->num_rows()) == 0) {
#If not we can delete it.
$this->del_user($dbname);
}
return true;
}
/* --------------------------------------------------------------------------- */
/** Set the backup parameters for the database $db
* @param $dbn string database name
* @param $bck_mode integer Backup mode (0 = none 1 = daily 2 = weekly)
* @param $bck_history integer How many backup should we keep ?
* @param $bck_gzip boolean shall we compress the backup ?
* @param $bck_dir string Directory relative to the user account where the backup will be stored
* @return boolean true if the backup parameters has been successfully changed, false if not.
*/
function put_mysql_backup($dbn, $bck_mode, $bck_history, $bck_gzip, $bck_dir) {
global $db, $msg, $bro, $cuid;
$msg->log("mysql", "put_mysql_backup");
if (!variable_get('sql_allow_users_backups')) {
$msg->raise('Error', "mysql", _("User aren't allowed to configure their backups"));
return false;
}
$pos = strpos($dbn, '_');
if ($pos === false) {
$dbname = $dbn;
} else {
$dbncomp = explode('_', $dbn);
$dbname = $dbn;
$dbn = $dbncomp[1];
}
if (!preg_match("#^[0-9a-z]*$#", $dbn)) {
$msg->raise('Error', "mysql", _("Database name can contain only letters and numbers"));
return false;
}
$db->query("SELECT * FROM db WHERE uid= ? AND db= ? ;", array($cuid, $dbname));
if (!$db->num_rows()) {
$msg->raise('Error', "mysql", _("Database %s not found"), $dbn);
return false;
}
$db->next_record();
$bck_mode = intval($bck_mode);
$bck_history = intval($bck_history);
if ($bck_gzip) {
$bck_gzip = "1";
} else {
$bck_gzip = "0";
}
if (!$bck_mode) {
$bck_mode = "0";
}
if (!$bck_history) {
$msg->raise('Alert', "mysql", _("You have to choose how many backups you want to keep"));
return false;
}
if (($bck_dir = $bro->convertabsolute($bck_dir, 0)) === false) { // return a full path or FALSE
$msg->raise('Error', "mysql", _("Directory does not exist"));
return false;
}
$db->query("UPDATE db SET bck_mode= ? , bck_history= ?, bck_gzip= ?, bck_dir= ? WHERE uid= ? AND db= ? ;", array($bck_mode, $bck_history, $bck_gzip, $bck_dir, $cuid, $dbname));
return true;
}
/* --------------------------------------------------------------------------- */
/** Change the password of the user in MySQL
* @param $password string new password (cleartext)
* @return boolean TRUE if the password has been successfully changed, FALSE else.
*/
function put_mysql_details($password) {
global $db, $msg, $cuid, $admin;
$msg->log("mysql", "put_mysql_details");
$db->query("SELECT * FROM db WHERE uid= ?;", array($cuid));
if (!$db->num_rows()) {
$msg->raise('Error', "mysql", _("Database not found"));
return false;
}
$db->next_record();
$login = $db->f("login");
if (!$password) {
$msg->raise('Error', "mysql", _("The password is mandatory"));
return false;
}
$len=variable_get("sql_max_username_length", 16);
if (strlen($password) > $len) {
$msg->raise('Error', "mysql", _("MySQL password cannot exceed %d characters"), $len);
return false;
}
// Check this password against the password policy using common API :
if (is_callable(array($admin, "checkPolicy"))) {
if (!$admin->checkPolicy("mysql", $login, $password)) {
return false; // The error has been raised by checkPolicy()
}
}
// Update all the "pass" fields for this user :
$db->query("UPDATE db SET pass= ? WHERE uid= ?;", array($password, $cuid));
$this->dbus->query("SET PASSWORD FOR " .$login . "@" . $this->dbus->Client . " = PASSWORD(?);", array($password));
return true;
}
/**
* Function used to grant SQL rights to users:
* @base :database
* @user : database user
* @rights : rights to apply ( optional, every rights apply given if missing
* @pass : user password ( optional, if not given the pass stays the same, else it takes the new value )
* @table : sql tables to apply rights
* */
function grant($base, $user, $rights = null, $pass = null, $table = '*') {
global $msg, $db;
$msg->log("mysql", "grant", $base . "-" . $rights . "-" . $user);
if (!preg_match("#^[0-9a-z_\\*\\\\]*$#", $base)) {
$msg->raise('Error', "mysql", _("Database name can contain only letters and numbers"));
return false;
} elseif (!$this->dbus->query("select db from db where db= ?;", array($base))) {
$msg->raise('Error', "mysql", _("Database not found"));
return false;
}
if ($rights == null) {
$rights = 'ALL PRIVILEGES';
} elseif (!preg_match("#^[a-zA-Z,\s]*$#", $rights)) {
$msg->raise('Error', "mysql", _("Databases rights are not correct"));
return false;
}
if (!preg_match("#^[0-9a-z]#", $user)) {
$msg->raise('Error', "mysql", _("The username can contain only letters and numbers."));
return false;
}
$db->query("select name from dbusers where name= ? ;", array($user));
if (!$db->num_rows()) {
$msg->raise('Error', "mysql", _("Database user not found"));
return false;
}
$grant = "grant " . $rights . " on `" . $base . "`." . $table . " to " . $db->quote($user) . "@" . $db->quote($this->dbus->Client);
if ($pass) {
$grant .= " identified by " . $db->quote($pass) . ";";
} else {
$grant .= ";";
}
if (!$this->dbus->query($grant)) {
$msg->raise('Error', "mysql", _("Could not grant rights"));
return false;
}
return true;
}
/* ----------------------------------------------------------------- */
/** Restore a sql database.
* @param $file string The filename, relative to the user root dir, which contains a sql dump
* @param $stdout boolean shall-we dump the error to stdout ?
* @param $id integer The ID of the database to dump to.
* @return boolean TRUE if the database has been restored, or FALSE if an error occurred
*/
function restore($file, $stdout, $id) {
global $msg, $bro;
if (empty($file)) {
$msg->raise('Error', "mysql", _("No file specified"));
return false;
}
if (!$r = $this->get_mysql_details($id)) {
return false;
}
if (!($fi = $bro->convertabsolute($file, 0))) {
$msg->raise('Error', "mysql", _("File not found"));
return false;
}
if (!file_exists($fi)) {
$msg->raise('Error', "mysql", _("File not found"));
return false;
}
if (substr($fi, -3) == ".gz") {
$exe = "/bin/gzip -d -c <" . escapeshellarg($fi) . " | /usr/bin/mysql -h" . escapeshellarg($this->dbus->Host) . " -u" . escapeshellarg($r["login"]) . " -p" . escapeshellarg($r["pass"]) . " " . escapeshellarg($r["db"]);
} elseif (substr($fi, -4) == ".bz2") {
$exe = "/usr/bin/bunzip2 -d -c <" . escapeshellarg($fi) . " | /usr/bin/mysql -h" . escapeshellarg($this->dbus->Host) . " -u" . escapeshellarg($r["login"]) . " -p" . escapeshellarg($r["pass"]) . " " . escapeshellarg($r["db"]);
} else {
$exe = "/usr/bin/mysql -h" . escapeshellarg($this->dbus->Host) . " -u" . escapeshellarg($r["login"]) . " -p" . escapeshellarg($r["pass"]) . " " . escapeshellarg($r["db"]) . " <" . escapeshellarg($fi);
}
$exe .= " 2>&1";
echo "";
$ret = 0;
if ($stdout) {
passthru($exe, $ret);
} else {
exec($exe, $ret);
}
echo "