init web ems all

phpMyAdmin/tbl_get_field.php

@@ -0,0 +1,71 @@
+<?php
+/* vim: set expandtab sw=4 ts=4 sts=4: */
+/**
+ * Provides download to a given field defined in parameters.
+ *
+ * @package PhpMyAdmin
+ */
+
+use PhpMyAdmin\Core;
+use PhpMyAdmin\Mime;
+use PhpMyAdmin\Response;
+
+/**
+ * Common functions.
+ */
+require_once 'libraries/common.inc.php';
+
+// we don't want the usual PhpMyAdmin\Response-generated HTML above the column's
+// data
+$response = Response::getInstance();
+$response->disable();
+
+/* Check parameters */
+PhpMyAdmin\Util::checkParameters(
+    array('db', 'table')
+);
+
+/* Select database */
+if (!$GLOBALS['dbi']->selectDb($db)) {
+    PhpMyAdmin\Util::mysqlDie(
+        sprintf(__('\'%s\' database does not exist.'), htmlspecialchars($db)),
+        '', false
+    );
+}
+
+/* Check if table exists */
+if (!$GLOBALS['dbi']->getColumns($db, $table)) {
+    PhpMyAdmin\Util::mysqlDie(__('Invalid table name'));
+}
+
+if (! isset($_GET['where_clause'])
+    || ! isset($_GET['where_clause_sign'])
+    || ! Core::checkSqlQuerySignature($_GET['where_clause'], $_GET['where_clause_sign'])
+) {
+/* l10n: In case a SQL query did not pass a security check  */
+    Core::fatalError(__('There is an issue with your request.'));
+    exit;
+}
+
+/* Grab data */
+$sql = 'SELECT ' . PhpMyAdmin\Util::backquote($_GET['transform_key'])
+    . ' FROM ' . PhpMyAdmin\Util::backquote($table)
+    . ' WHERE ' . $_GET['where_clause'] . ';';
+$result = $GLOBALS['dbi']->fetchValue($sql);
+
+/* Check return code */
+if ($result === false) {
+    PhpMyAdmin\Util::mysqlDie(
+        __('MySQL returned an empty result set (i.e. zero rows).'), $sql
+    );
+}
+
+/* Avoid corrupting data */
+ini_set('url_rewriter.tags', '');
+
+Core::downloadHeader(
+    $table . '-' .  $_GET['transform_key'] . '.bin',
+    Mime::detect($result),
+    strlen($result)
+);
+echo $result;