Accepts-a-database--hostname-from-a-user-and-then-HTTP-username


            and password
 
function bad_auth() 
 { 
 global $database; 
 Header( "WWW-authenticate: basic realm=\"Database ".$database. "\""); 
 Header( "HTTP/1.0 401 Unauthorized"); 
 $title = "Invalid login"; 
 echo "\n"; 
 echo " \n"; 
 echo " Authorization Required\n"; 
 echo " \n"; 
 echo " \n"; 
 echo " I need a username and password with which to access the database.\n"; 
 echo " \n"; 
 echo "\n"; 
 exit; 
 } 
$database=$HTTP_POST_VARS[ "DATABASE"]; 
$hostname=$HTTP_POST_VARS[ "HOSTNAME"]; 
if(!$database) 
 { 
?> 
 
  
 MySQL/PHP Interface 
  
  
 
 
  
 









    Hostname:    
 
    Database:    
 
      
  
 
 
 
  
 
 exit; 
 } 
if(!isset($PHP_AUTH_USER)) bad_auth(); 
$username = $PHP_AUTH_USER; 
$password = $PHP_AUTH_PW; 
$dblink = @mysql_pconnect($hostname,$username,$password); 
if(!$dblink) bad_auth(); 
?> 
 
  
  <?echo "$database@$hostname"?> 
  
  
  
  
 
$tableh = mysql_list_tables($database); 
if(!$tableh) 
 { 
?> 
 Could not read list of tables 
  
  
 
 exit; 
 } 
$tableno = mysql_num_rows($tableh); 
if(!$tableno) 
 { 
?> 
 MySQL claims this database is empty! 
  
  
 
 exit; 
 } 
for($i=0;$i<$tableno;$i++) 
 { 
 $table = mysql_tablename($tableh,$i); 
 $fieldh = mysql_list_fields($database,$table); 
 $fieldno = mysql_num_fields($fieldh); 
 for($j=0;$j<$fieldno;$j++) 
 { 
 $name = mysql_field_name($fieldh,$j); 
 $tables[$table][$name][ "type"] = mysql_field_type($fieldh,$j); 
 $tables[$table][$name][ "len"] = mysql_field_len($fieldh,$j); 
 } 
 mysql_free_result($fieldh); 
 } 
mysql_free_result($tableh); 
if($HTTP_POST_VARS[ "SELECT"]) $command = "SELECT"; 
if($HTTP_POST_VARS[ "INSERT"]) $command = "INSERT"; 
if($HTTP_POST_VARS[ "DELETE"]) $command = "DELETE"; 
if($command) 
 { 
 if(!mysql_select_db($database,$dblink)) 
 { 
 $error = mysql_error($dblink); 
?> 
 MySQL at  returned an error:
 
  
  
  
  
 
 
  
 
 exit; 
 } 
 $parts = $HTTP_POST_VARS[ "PARTS"]; 
 for($part=1;$part <= $parts;$part++) 
 { 
 $ftable = $HTTP_POST_VARS[ "TABLE".$part]; 
 $ffield = $HTTP_POST_VARS[ "FIELD".$part]; 
 $fdatum = $HTTP_POST_VARS[ "DATUM".$part]; 
 $faction = $HTTP_POST_VARS[ "ACTION".$part]; 
 if(strlen($fdatum)) 
 { 
 $qdata[$ftable][$ffield] = $fdatum; 
 $kludge[$ftable] = $ftable; 
 if(ereg( "^[$]]([^$]][^.]*).",$fdatum,$re) || ereg( "^[<>=~] *[$]]([^.]+).",$fdatum,$re)) 
 $kludge[$re[1]] = $re[1]; 
 } 
 $qaction[$ftable][$ffield] = $faction; 
 } 
 if($qdata) 
 { 
 $tablecount = count($kludge); 
 if($command == "SELECT") 
 { 
 for(reset($kludge);$stable = key($kludge);next($kludge)) 
 { 
 $sfields = $qaction[$stable]; 
 for(reset($sfields);$sfield = key($sfields);next($sfields)) 
 { 
 $action = $sfields[$sfield]; 
 if($tablecount > 1) $sfield = "$stable.$sfield"; 
 if($action != "IGNORE" && $select) $select .= ","; 
 if($action == "SELECT") $select .= $sfield; 
 if($action == "DISTINCT") $select .= "DISTINCT $sfield"; 
 if($action == "ORDERBY") 
 { 
 $select .= $sfield; 
 if($orderby) $orderby .= ","; 
 $orderby .= $sfield; 
 } 
 if($action == "SUM") $select .= "sum($sfield)"; 
 if($action == "COUNT") $select .= "count($sfield)"; 
 if($action == "AVG") $select .= "avg($sfield)"; 
 if($action == "MIN") $select .= "min($sfield)"; 
 if($action == "MAX") $select .= "max($sfield)"; 
 } 
 } 
 } 
 if($command == "SELECT" || $command == "DELETE") 
 { 
 for(reset($qdata);$qtable = key($qdata);next($qdata)) 
 { 
 if($command == "DELETE") 
 { 
 $from = $qtable; 
 $where = ""; 
 } 
 $qfields = $qdata[$qtable]; 
 for(reset($qfields);$qfield = key($qfields);next($qfields)) 
 { 
 $cmp = "="; 
 $qdatum = $qfields[$qfield]; 
# ereg_replace("''","''''",$qdatum); 
 if(ereg( "^([<>=~]) +(.*)",$qdatum,$re)) 
 { 
 $cmp = $re[1]; 
 if($cmp == "~") $cmp = "LIKE"; 
 $qdatum = $re[2]; 
 } 
 if($command == "SELECT" && ereg( "^[$]]([^$]].*)",$qdatum,$re)) 
 { 
 $qdatum = $re[1]; 
 if($tablecount > 1 && !ereg( "\.",$qdatum)) 
 $qdatum = "$qtable.$qdatum"; 
 } 
 else 
 if($tables[$qtable][$qfield][ "type"] != "int") 
 { 
 $qdatum = "'$qdatum'"; 
 } 
 if($tablecount > 1) $qfield = "$qtable.$qfield"; 
 if($where) $where .= "\n AND "; 
 $where .= "$qfield $cmp $qdatum"; 
 } 
 if($command == "DELETE") 
 $query .= "DELETE FROM $qtable WHERE $where\n\n"; 
 } 
 if($command == "SELECT") 
 { 
 $from = join($kludge, ","); 
 $query = "SELECT $select\nFROM $from\nWHERE $where\n"; 
 if($orderby) $query .= "ORDER BY $orderby\n"; 
 } 
 } 
 else if($command == "INSERT") 
 { 
 for(reset($qdata);$qtable = key($qdata);next($qdata)) 
 { 
 $qfields = $qdata[$qtable]; 
 for(reset($qfields);$qfield = key($qfields);next($qfields)) 
 { 
 $qdatum = $qfields[$qfield]; 
 if($tables[$qtable][$qfield][ "type"] != "int") 
 $qdatum = "'$qdatum'"; 
 if($columns) $columns .= ","; 
 $columns .= $qfield; 
 if($values) $values .= ","; 
 $values .= $qdatum; 
 } 
 $query .= "INSERT INTO $qtable ($columns)\nVALUES ($values)\n\n"; 
 } 
 } 
 echo "$query
\n"; 
 $start = microtime(); 
 $result = mysql_query($query,$dblink); 
 $end = microtime(); 
 $start = explode( " ",$start); 
 $end = explode( " ",$end); 
 $interval = round(0.5 + 1000*($end[1]-$start[1] + $end[0]-$start[0])); 
 if(!$result) 
 { 
 $error = mysql_error($dblink); 
?> 
 MySQL at  returned an error:
 
  
  
  
  
 
 
  
 
 exit; 
 } 
 if($command == "SELECT") 
 { 
 $colno = mysql_num_fields($result); 
 $rowno = mysql_num_rows($result); 
 if($rowno != 1) $s = "s"; 
 echo "\n \n"; 
 echo " \n"; 
 for($i=0;$i<$colno;$i++) 
 { 
 $name = mysql_field_name($result,$i); 
 echo " \n"; 
 } 
 echo " \n"; 
 while($rowno--) 
 { 
 echo " \n"; 
 $row = mysql_fetch_row($result); 
 for($i=0;$i<$colno;$i++) 
 { 
 $value = $row[$i]; 
 if(!$value) $value = "?"; 
 echo " \n"; 
 } 
 echo " \n"; 
 } 
 echo "
$rowno result$s, $interval msec
$name
$value
\n"; 
 } 
 else 
 { 
 if($command == "INSERT") $action = "added"; 
 if($command == "DELETE") $action = "deleted"; 
 $rows = mysql_affected_rows($dblink); 
 $s = "s"; 
 if($rows == 1) $s = ""; 
 echo "$rows row$s $action, $interval msec"; 
 } 
 } 
?> 
  
  
 
 exit; 
 } 
?> 
  
  
  
$parts = 0; 
for(reset($tables);$table = key($tables);next($tables)) 
 { 
 echo "
\n"; 
 echo "\n"; 
 echo " \n"; 
 echo " \n"; 
 echo " \n"; 
 $fields = $tables[$table]; 
 for(reset($fields); $field = key($fields); next($fields)) 
 { 
 $type = $fields[$field][ "type"]; 
 $len = $fields[$field][ "len"]; 
 $parts++; 
 echo " \n"; 
 echo " \n"; 
?> 

 if($type == "int" || $type == "real") 
 { 
 $size=10; 
 $maxlength=40; 
 } 
 else if($type == "string") 
 { 
 $size = $len; 
 if($size > 40) $size = 40; 
 $maxlength = $len; 
 $type .= "[".$len. "]"; 
 } 
 echo " \n"; 
 echo " \n"; 
 echo " \n"; 
 } 
 echo " $table
$field   
  
  \n"; 
 echo " \n"; 
 echo " \n"; 
 echo " \n"; 
 echo " (".$type. ")
\n"; 
 } 
?> 
 
 
 





          
  
 
  
 >
$table
$field		\n"; echo " \n"; echo " \n"; echo " \n"; echo "	(".$type. ")
MySQL Database Php

MySQL at returned an error:

MySQL at returned an error:
