Proyectos de Subversion Moodle

Rev

| Ultima modificación | Ver Log |

Rev Autor Línea Nro. Línea
1 efrain 1
<?php
2
/**
3
 * MSSQL Driver with auto-prepended "N" for correct unicode storage of SQL literal strings.
4
 *
5
 * Intended to be used with MSSQL drivers that are sending UCS-2 data to MSSQL
6
 * (FreeTDS and ODBTP) in order to get true cross-db compatibility from the
7
 * application point of view.
8
 *
9
 * This file is part of ADOdb, a Database Abstraction Layer library for PHP.
10
 *
11
 * @package ADOdb
12
 * @link https://adodb.org Project's web site and documentation
13
 * @link https://github.com/ADOdb/ADOdb Source code and issue tracker
14
 *
15
 * The ADOdb Library is dual-licensed, released under both the BSD 3-Clause
16
 * and the GNU Lesser General Public Licence (LGPL) v2.1 or, at your option,
17
 * any later version. This means you can use it in proprietary products.
18
 * See the LICENSE.md file distributed with this source code for details.
19
 * @license BSD-3-Clause
20
 * @license LGPL-2.1-or-later
21
 *
22
 * @copyright 2000-2013 John Lim
23
 * @copyright 2014 Damien Regad, Mark Newnham and the ADOdb community
24
 */
25
 
26
// security - hide paths
27
if (!defined('ADODB_DIR')) die();
28
 
29
// one useful constant
30
if (!defined('SINGLEQUOTE')) define('SINGLEQUOTE', "'");
31
 
32
include_once(ADODB_DIR.'/drivers/adodb-mssql.inc.php');
33
 
34
class ADODB_mssql_n extends ADODB_mssql {
35
	var $databaseType = "mssql_n";
36
 
37
	function _query($sql,$inputarr=false)
38
	{
39
        $sql = $this->_appendN($sql);
40
		return ADODB_mssql::_query($sql,$inputarr);
41
	}
42
 
43
	/**
44
     * This function will intercept all the literals used in the SQL, prepending the "N" char to them
45
     * in order to allow mssql to store properly data sent in the correct UCS-2 encoding (by freeTDS
46
     * and ODBTP) keeping SQL compatibility at ADOdb level (instead of hacking every project to add
47
     * the "N" notation when working against MSSQL.
48
     *
49
     * The original note indicated that this hack should only be used if ALL the char-based columns
50
     * in your DB are of type nchar, nvarchar and ntext, but testing seems to indicate that SQL server
51
     * doesn't seem to care if the statement is used against char etc fields.
52
     *
53
     * @todo This function should raise an ADOdb error if one of the transformations fail
54
     *
55
     * @param mixed $inboundData Either a string containing an SQL statement
56
     *                           or an array with resources from prepared statements
57
     *
58
     * @return mixed
59
     */
60
    function _appendN($inboundData) {
61
 
62
        $inboundIsArray  = false;
63
 
64
        if (is_array($inboundData))
65
        {
66
            $inboundIsArray = true;
67
            $inboundArray   = $inboundData;
68
        } else
69
            $inboundArray = (array)$inboundData;
70
 
71
        /*
72
         * All changes will be placed here
73
         */
74
        $outboundArray = $inboundArray;
75
 
76
        foreach($inboundArray as $inboundKey=>$inboundValue)
77
        {
78
 
79
            if (is_resource($inboundValue))
80
            {
81
                /*
82
                * Prepared statement resource
83
                */
84
                if ($this->debug)
85
                    ADOConnection::outp("{$this->databaseType} index $inboundKey value is resource, continue");
86
 
87
                continue;
88
            }
89
 
90
            if (strpos($inboundValue, SINGLEQUOTE) === false)
91
            {
92
                /*
93
                * Check we have something to manipulate
94
                */
95
                if ($this->debug)
96
                    ADOConnection::outp("{$this->databaseType} index $inboundKey value $inboundValue has no single quotes, continue");
97
                continue;
98
            }
99
 
100
            /*
101
            * Check we haven't an odd number of single quotes (this can cause problems below
102
            * and should be considered one wrong SQL). Exit with debug info.
103
            */
104
            if ((substr_count($inboundValue, SINGLEQUOTE) & 1))
105
            {
106
                if ($this->debug)
107
                    ADOConnection::outp("{$this->databaseType} internal transformation: not converted. Wrong number of quotes (odd)");
108
 
109
                break;
110
            }
111
 
112
            /*
113
            * Check we haven't any backslash + single quote combination. It should mean wrong
114
            *  backslashes use (bad magic_quotes_sybase?). Exit with debug info.
115
            */
116
            $regexp = '/(\\\\' . SINGLEQUOTE . '[^' . SINGLEQUOTE . '])/';
117
            if (preg_match($regexp, $inboundValue))
118
            {
119
                if ($this->debug)
120
                    ADOConnection::outp("{$this->databaseType} internal transformation: not converted. Found bad use of backslash + single quote");
121
 
122
                break;
123
            }
124
 
125
            /*
126
            * Remove pairs of single-quotes
127
            */
128
            $pairs = array();
129
            $regexp = '/(' . SINGLEQUOTE . SINGLEQUOTE . ')/';
130
            preg_match_all($regexp, $inboundValue, $list_of_pairs);
131
 
132
            if ($list_of_pairs)
133
            {
134
                foreach (array_unique($list_of_pairs[0]) as $key=>$value)
135
                    $pairs['<@#@#@PAIR-'.$key.'@#@#@>'] = $value;
136
 
137
 
138
                if (!empty($pairs))
139
                    $inboundValue = str_replace($pairs, array_keys($pairs), $inboundValue);
140
 
141
            }
142
 
143
            /*
144
            * Remove the rest of literals present in the query
145
            */
146
            $literals = array();
147
            $regexp = '/(N?' . SINGLEQUOTE . '.*?' . SINGLEQUOTE . ')/is';
148
            preg_match_all($regexp, $inboundValue, $list_of_literals);
149
 
150
           if ($list_of_literals)
151
           {
152
                foreach (array_unique($list_of_literals[0]) as $key=>$value)
153
                    $literals['<#@#@#LITERAL-'.$key.'#@#@#>'] = $value;
154
 
155
 
156
                if (!empty($literals))
157
                    $inboundValue = str_replace($literals, array_keys($literals), $inboundValue);
158
            }
159
 
160
            /*
161
            * Analyse literals to prepend the N char to them if their contents aren't numeric
162
            */
163
            if (!empty($literals))
164
            {
165
                foreach ($literals as $key=>$value) {
166
                    if (!is_numeric(trim($value, SINGLEQUOTE)))
167
                        /*
168
                        * Non numeric string, prepend our dear N, whilst
169
                        * Trimming potentially existing previous "N"
170
                        */
171
                        $literals[$key] = 'N' . trim($value, 'N');
172
 
173
                }
174
            }
175
 
176
            /*
177
            * Re-apply literals to the text
178
            */
179
            if (!empty($literals))
180
                $inboundValue = str_replace(array_keys($literals), $literals, $inboundValue);
181
 
182
 
183
            /*
184
            * Any pairs followed by N' must be switched to N' followed by those pairs
185
            * (or strings beginning with single quotes will fail)
186
            */
187
            $inboundValue = preg_replace("/((<@#@#@PAIR-(\d+)@#@#@>)+)N'/", "N'$1", $inboundValue);
188
 
189
            /*
190
            * Re-apply pairs of single-quotes to the text
191
            */
192
            if (!empty($pairs))
193
                $inboundValue = str_replace(array_keys($pairs), $pairs, $inboundValue);
194
 
195
 
196
            /*
197
            * Print transformation if debug = on
198
            */
199
            if (strcmp($inboundValue,$inboundArray[$inboundKey]) <> 0 && $this->debug)
200
                ADOConnection::outp("{$this->databaseType} internal transformation: {$inboundArray[$inboundKey]} to {$inboundValue}");
201
 
202
            if (strcmp($inboundValue,$inboundArray[$inboundKey]) <> 0)
203
                /*
204
                * Place the transformed value into the outbound array
205
                */
206
                $outboundArray[$inboundKey] = $inboundValue;
207
        }
208
 
209
        /*
210
         * Any transformations are in the $outboundArray
211
         */
212
        if ($inboundIsArray)
213
            return $outboundArray;
214
 
215
        /*
216
         * We passed a string in originally
217
         */
218
        return $outboundArray[0];
219
 
220
    }
221
 
222
}
223
 
224
class ADORecordset_mssql_n extends ADORecordset_mssql {
225
	var $databaseType = "mssql_n";
226
}