1297.17php,server_privileges.php

/* vim: set expandtab sw=4 ts=4 sts=4: */

/**

*

* @version $Id$

* @package phpMyAdmin

*/

/**

*

*/

require_once './libraries/common.inc.php';

/**

* Does the common work

*/

$GLOBALS['js_include'][] = 'server_privileges.js';

$GLOBALS['js_include'][] = 'functions.js';

require './libraries/server_common.inc.php';

/**

* Checks if a dropdown box has been used for selecting a database / table

*/

if (PMA_isValid($_REQUEST['pred_tablename'])) {

$tablename = $_REQUEST['pred_tablename'];

unset($pred_tablename);

} elseif (PMA_isValid($_REQUEST['tablename'])) {

$tablename = $_REQUEST['tablename'];

} else {

unset($tablename);

}

if (PMA_isValid($_REQUEST['pred_dbname'])) {

$dbname = $_REQUEST['pred_dbname'];

unset($pred_dbname);

} elseif (PMA_isValid($_REQUEST['dbname'])) {

$dbname = $_REQUEST['dbname'];

} else {

unset($dbname);

unset($tablename);

}

if (isset($dbname)) {

$db_and_table = PMA_backquote(PMA_unescape_mysql_wildcards($dbname)) . '.';

if (isset($tablename)) {

$db_and_table .= PMA_backquote($tablename);

} else {

$db_and_table .= '*';

}

} else {

$db_and_table = '*.*';

}

// check if given $dbname is a wildcard or not

if (isset($dbname)) {

//if (preg_match('/\\\\(?:_|%)/i', $dbname)) {

if (preg_match('/(?

$dbname_is_wildcard = true;

} else {

$dbname_is_wildcard = false;

}

}

/**

* Checks if the user is allowed to do what he tries to...

*/

if (!$is_superuser) {

require './libraries/server_links.inc.php';

echo '

' . "\n"

. PMA_getIcon('b_usrlist.png')

. $GLOBALS['strPrivileges'] . "\n"

. '' . "\n";

PMA_Message::error('strNoPrivileges')->display();

require_once './libraries/footer.inc.php';

}

/**

* Escapes wildcard in a database+table specification

* before using it in a GRANT statement.

*

* Escaping a wildcard character in a GRANT is only accepted at the global

* or database level, not at table level; this is why I remove

* the escaping character. Internally, in mysql.tables_priv.Db there are

* no escaping (for example test_db) but in mysql.db you'll see test\_db

* for a db-specific privilege.

*

* @param string $db_and_table

* @param string $dbname

* @param string $tablename

* @return string the escaped (if necessary) $db_and_table

*/

function PMA_WildcardEscapeForGrant($db_and_table, $dbname, $tablename) {

if (! strlen($dbname)) {

$db_and_table = '*.*';

} else {

if (strlen($tablename)) {

$db_and_table = PMA_backquote(PMA_unescape_mysql_wildcards($dbname)) . '.';

$db_and_table .= PMA_backquote($tablename);

} else {

$db_and_table = PMA_backquote($dbname) . '.';

$db_and_table .= '*';

}

}

return $db_and_table;

}

/**

* Generates a condition on the user name

*

* @param string the user's initial

* @return string the generated condition

*/

function PMA_RangeOfUsers($initial = '')

{

// strtolower() is used because the User field

// might be BINARY, so LIKE would be case sensitive

if (!empty($initial)) {

$ret = " WHERE `User` LIKE '" . $initial . "%'"

. " OR `User` LIKE '" . strtolower($initial) . "%'";

} else {

$ret = '';

}

return $ret;

} // end function

/**

* Extracts the privilege information of a priv table row

*

* @param array $row the row

* @param boolean $enableHTML add tag with tooltips

*

* @global ressource $user_link the database connection

*

* @return array

*/

function PMA_extractPrivInfo($row = '', $enableHTML = FALSE)

{

$grants = array(

array('Select_priv', 'SELECT', $GLOBALS['strPrivDescSelect']),

array('Insert_priv', 'INSERT', $GLOBALS['strPrivDescInsert']),

array('Update_priv', 'UPDATE', $GLOBALS['strPrivDescUpdate']),

array('Delete_priv', 'DELETE', $GLOBALS['strPrivDescDelete']),

array('Create_priv', 'CREATE', $GLOBALS['strPrivDescCreateDb']),

array('Drop_priv', 'DROP', $GLOBALS['strPrivDescDropDb']),

array('Reload_priv', 'RELOAD', $GLOBALS['strPrivDescReload']),

array('Shutdown_priv', 'SHUTDOWN', $GLOBALS['strPrivDescShutdown']),

array('Process_priv', 'PROCESS', $GLOBALS['strPrivDescProcess']),

array('File_priv', 'FILE', $GLOBALS['strPrivDescFile']),

array('References_priv', 'REFERENCES', $GLOBALS['strPrivDescReferences']),

array('Index_priv', 'INDEX', $GLOBALS['strPrivDescIndex']),

array('Alter_priv', 'ALTER', $GLOBALS['strPrivDescAlter']),

array('Show_db_priv', 'SHOW DATABASES', $GLOBALS['strPrivDescShowDb']),

array('Super_priv', 'SUPER', $GLOBALS['strPrivDescSuper']),

array('Create_tmp_table_priv', 'CREATE TEMPORARY TABLES', $GLOBALS['strPrivDescCreateTmpTable']),

array('Lock_tables_priv', 'LOCK TABLES', $GLOBALS['strPrivDescLockTables']),

array('Repl_slave_priv', 'REPLICATION SLAVE', $GLOBALS['strPrivDescReplSlave']),

array('Repl_client_priv', 'REPLICATION CLIENT', $GLOBALS['strPrivDescReplClient']),

array('Create_view_priv', 'CREATE VIEW', $GLOBALS['strPrivDescCreateView']),

array('Event_priv', 'EVENT', $GLOBALS['strPrivDescEvent']),

array('Trigger_priv', 'TRIGGER', $GLOBALS['strPrivDescTrigger']),

// for table privs:

array('Create View_priv', 'CREATE VIEW', $GLOBALS['strPrivDescCreateView']),

array('Show_view_priv', 'SHOW VIEW', $GLOBALS['strPrivDescShowView']),

// for table privs:

array('Show view_priv', 'SHOW VIEW', $GLOBALS['strPrivDescShowView']),

array('Create_routine_priv', 'CREATE ROUTINE', $GLOBALS['strPrivDescCreateRoutine']),

array('Alter_routine_priv', 'ALTER ROUTINE', $GLOBALS['strPrivDescAlterRoutine']),

array('Create_user_priv', 'CREATE USER', $GLOBALS['strPrivDescCreateUser']),

array('Execute_priv', 'EXECUTE', $GLOBALS['strPrivDescExecute5']),

);

if (!empty($row) && isset($row['Table_priv'])) {

$row1 = PMA_DBI_fetch_single_row(

'SHOW COLUMNS FROM `mysql`.`tables_priv` LIKE \'Table_priv\';',

'ASSOC', $GLOBALS['userlink']);

$av_grants = explode('\',\'', substr($row1['Type'], 5, strlen($row1['Type']) - 7));

unset($row1);

$users_grants = explode(',', $row['Table_priv']);

foreach ($av_grants as $current_grant) {

$row[$current_grant . '_priv'] = in_array($current_grant, $users_grants) ? 'Y' : 'N';

}

unset($current_grant);

unset($av_grants);

unset($users_grants);

}

$privs = array();

$allPrivileges = TRUE;

foreach ($grants as $current_grant) {

if ((!empty($row) && isset($row[$current_grant[0]]))

|| (empty($row) && isset($GLOBALS[$current_grant[0]]))) {

if ((!empty($row) && $row[$current_grant[0]] == 'Y')

|| (empty($row)

&& ($GLOBALS[$current_grant[0]] == 'Y'

|| (is_array($GLOBALS[$current_grant[0]])

&& count($GLOBALS[$current_grant[0]]) == $GLOBALS['column_count']

&& empty($GLOBALS[$current_grant[0] . '_none'])))))

{

if ($enableHTML) {

$privs[] = '' . $current_grant[1] . '';

} else {

$privs[] = $current_grant[1];

}

} elseif (!empty($GLOBALS[$current_grant[0]])

&& is_array($GLOBALS[$current_grant[0]])

&& empty($GLOBALS[$current_grant[0] . '_none'])) {

if ($enableHTML) {

$priv_string = '' . $current_grant[1] . '';

} else {

$priv_string = $current_grant[1];

}

$privs[] = $priv_string . ' (`' . join('`, `', $GLOBALS[$current_grant[0]]) . '`)';

} else {

$allPrivileges = FALSE;

}

}

}

if (empty($privs)) {

if ($enableHTML) {

$privs[] = 'USAGE';

} else {

$privs[] = 'USAGE';

}

} elseif ($allPrivileges && (!isset($GLOBALS['grant_count']) || count($privs) == $GLOBALS['grant_count'])) {

if ($enableHTML) {

$privs = array('ALL PRIVILEGES');

} else {

$privs = array('ALL PRIVILEGES');

}

}

return $privs;

} // end of the 'PMA_extractPrivInfo()' function

/**

* Displays on which column(s) a table-specific privilege is granted

*/

function PMA_display_column_privs($columns, $row, $name_for_select,

$priv_for_header, $name, $name_for_dfn, $name_for_current)

{

echo '

' . "\n"

. ' ' . "\n"

. ' '

. $priv_for_header . '' . "\n"

. '
' . "\n"

. ' ' . "\n";

foreach ($columns as $current_column => $current_column_privileges) {

echo '

if ($row[$name_for_select] == 'Y' || $current_column_privileges[$name_for_current]) {

echo ' selected="selected"';

}

echo '>' . htmlspecialchars($current_column) . '

' . "\n";

}

echo ' ' . "\n"

. ' ' . $GLOBALS['strOr'] . '' . "\n"

. '

. (empty($GLOBALS['checkall']) ? '' : ' checked="checked"')

. ' name="' . $name_for_select . '_none" id="checkbox_'

. $name_for_select . '_none" title="' . $GLOBALS['strNone'] . '" />'

. $GLOBALS['strNone'] . '

' . "\n"

. '

' . "\n";

} // end function

/**

* Displays the privileges form table

*

* @param string $db the database

* @param string $table the table

* @param boolean $submit wheather to display the submit button or not

* @global array $cfg the phpMyAdmin configuration

* @global ressource $user_link the database connection

*

* @return void

*/

function PMA_displayPrivTable($db = '*', $table = '*', $submit = TRUE)

{

if ($db == '*') {

$table = '*';

}

if (isset($GLOBALS['username'])) {

$username = $GLOBALS['username'];

$hostname = $GLOBALS['hostname'];

if ($db == '*') {

$sql_query =

"SELECT * FROM `mysql`.`user`"

." WHERE `User` = '" . PMA_sqlAddslashes($username) . "'"

." AND `Host` = '" . PMA_sqlAddslashes($hostname) . "';";

} elseif ($table == '*') {

$sql_query =

"SELECT * FROM `mysql`.`db`"

." WHERE `User` = '" . PMA_sqlAddslashes($username) . "'"

." AND `Host` = '" . PMA_sqlAddslashes($hostname) . "'"

." AND '" . PMA_unescape_mysql_wildcards($db) . "'"

." LIKE `Db`;";

} else {

$sql_query =

"SELECT `Table_priv`"

." FROM `mysql`.`tables_priv`"

." WHERE `User` = '" . PMA_sqlAddslashes($username) . "'"

." AND `Host` = '" . PMA_sqlAddslashes($hostname) . "'"

." AND `Db` = '" . PMA_unescape_mysql_wildcards($db) . "'"

." AND `Table_name` = '" . PMA_sqlAddslashes($table) . "';";

}

$row = PMA_DBI_fetch_single_row($sql_query);

}

if (empty($row)) {

if ($table == '*') {

if ($db == '*') {

$sql_query = 'SHOW COLUMNS FROM `mysql`.`user`;';

} elseif ($table == '*') {

$sql_query = 'SHOW COLUMNS FROM `mysql`.`db`;';

}

$res = PMA_DBI_query($sql_query);

while ($row1 = PMA_DBI_fetch_row($res)) {

if (substr($row1[0], 0, 4) == 'max_') {

$row[$row1[0]] = 0;

} else {

$row[$row1[0]] = 'N';

}

}

PMA_DBI_free_result($res);

} else {

$row = array('Table_priv' => '');

}

}

if (isset($row['Table_priv'])) {

$row1 = PMA_DBI_fetch_single_row(

'SHOW COLUMNS FROM `mysql`.`tables_priv` LIKE \'Table_priv\';',

'ASSOC', $GLOBALS['userlink']);

// note: in MySQL 5.0.3 we get "Create View', 'Show view';

// the View for Create is spelled with uppercase V

// the view for Show is spelled with lowercase v

// and there is a space between the words

$av_grants = explode('\',\'', substr($row1['Type'], strpos($row1['Type'], '(') + 2, strpos($row1['Type'], ')') - strpos($row1['Type'], '(') - 3));

unset($row1);

$users_grants = explode(',', $row['Table_priv']);

foreach ($av_grants as $current_grant) {

$row[$current_grant . '_priv'] = in_array($current_grant, $users_grants) ? 'Y' : 'N';

}

unset($row['Table_priv'], $current_grant, $av_grants, $users_grants);

// get collumns

$res = PMA_DBI_try_query('SHOW COLUMNS FROM ' . PMA_backquote(PMA_unescape_mysql_wildcards($db)) . '.' . PMA_backquote($table) . ';');

$columns = array();

if ($res) {

while ($row1 = PMA_DBI_fetch_row($res)) {

$columns[$row1[0]] = array(

'Select' => FALSE,

'Insert' => FALSE,

'Update' => FALSE,

'References' => FALSE

);

}

PMA_DBI_free_result($res);

}

unset($res, $row1);

}

// t a b l e - s p e c i f i c p r i v i l e g e s

if (! empty($columns)) {

$res = PMA_DBI_query(

'SELECT `Column_name`, `Column_priv`'

.' FROM `mysql`.`columns_priv`'

.' WHERE `User`'

.' = \'' . PMA_sqlAddslashes($username) . "'"

.' AND `Host`'

.' = \'' . PMA_sqlAddslashes($hostname) . "'"

.' AND `Db`'

.' = \'' . PMA_sqlAddslashes(PMA_unescape_mysql_wildcards($db)) . "'"

.' AND `Table_name`'

.' = \'' . PMA_sqlAddslashes($table) . '\';');

while ($row1 = PMA_DBI_fetch_row($res)) {

$row1[1] = explode(',', $row1[1]);

foreach ($row1[1] as $current) {

$columns[$row1[0]][$current] = TRUE;

}

}

PMA_DBI_free_result($res);

unset($res, $row1, $current);

echo '' . "\n"

. '' . "\n"

. '

' . "\n"

. ' ' . $GLOBALS['strTblPrivileges']

. PMA_showHint($GLOBALS['strEnglishPrivileges'])

. '' . "\n";

// privs that are attached to a specific column

PMA_display_column_privs($columns, $row, 'Select_priv',

'SELECT', 'select', $GLOBALS['strPrivDescSelect'], 'Select');

PMA_display_column_privs($columns, $row, 'Insert_priv',

'INSERT', 'insert', $GLOBALS['strPrivDescInsert'], 'Insert');

PMA_display_column_privs($columns, $row, 'Update_priv',

'UPDATE', 'update', $GLOBALS['strPrivDescUpdate'], 'Update');

PMA_display_column_privs($columns, $row, 'References_priv',

'REFERENCES', 'references', $GLOBALS['strPrivDescReferences'], 'References');

// privs that are not attached to a specific column

echo '

' . "\n";

foreach ($row as $current_grant => $current_grant_value) {

if (in_array(substr($current_grant, 0, (strlen($current_grant) - 5)),

array('Select', 'Insert', 'Update', 'References'))) {

continue;

}

// make a substitution to match the messages variables;

// also we must substitute the grant we get, because we can't generate

// a form variable containing blanks (those would get changed to

// an underscore when receiving the POST)

if ($current_grant == 'Create View_priv') {

$tmp_current_grant = 'CreateView_priv';

$current_grant = 'Create_view_priv';

} elseif ($current_grant == 'Show view_priv') {

$tmp_current_grant = 'ShowView_priv';

$current_grant = 'Show_view_priv';

} else {

$tmp_current_grant = $current_grant;

}

echo '

' . "\n"

. '

. (empty($GLOBALS['checkall']) ? '' : ' checked="checked"')

. ' name="' . $current_grant . '" id="checkbox_' . $current_grant

. '" value="Y" '

. ($current_grant_value == 'Y' ? 'checked="checked" ' : '')

. 'title="';

echo (isset($GLOBALS['strPrivDesc' . substr($tmp_current_grant, 0, (strlen($tmp_current_grant) - 5))])

? $GLOBALS['strPrivDesc' . substr($tmp_current_grant, 0, (strlen($tmp_current_grant) - 5))]

: $GLOBALS['strPrivDesc' . substr($tmp_current_grant, 0, (strlen($tmp_current_grant) - 5)) . 'Tbl']) . '"/>' . "\n";

echo ' ' . strtoupper(substr($current_grant, 0, strlen($current_grant) - 5)) . '' . "\n"

. '

' . "\n";

} // end foreach ()

echo '

' . "\n";

// for Safari 2.0.2

echo '

} else {

// g l o b a l o r d b - s p e c i f i c

//

// d a t a

$privTable[0] = array(

array('Select', 'SELECT', $GLOBALS['strPrivDescSelect']),

array('Insert', 'INSERT', $GLOBALS['strPrivDescInsert']),

array('Update', 'UPDATE', $GLOBALS['strPrivDescUpdate']),

array('Delete', 'DELETE', $GLOBALS['strPrivDescDelete'])

);

if ($db == '*') {

$privTable[0][] = array('File', 'FILE', $GLOBALS['strPrivDescFile']);

}

// s t r u c t u r e

$privTable[1] = array(

array('Create', 'CREATE', ($table == '*' ? $GLOBALS['strPrivDescCreateDb'] : $GLOBALS['strPrivDescCreateTbl'])),

array('Alter', 'ALTER', $GLOBALS['strPrivDescAlter']),

array('Index', 'INDEX', $GLOBALS['strPrivDescIndex']),

array('Drop', 'DROP', ($table == '*' ? $GLOBALS['strPrivDescDropDb'] : $GLOBALS['strPrivDescDropTbl'])),

array('Create_tmp_table', 'CREATE TEMPORARY TABLES', $GLOBALS['strPrivDescCreateTmpTable']),

array('Show_view', 'SHOW VIEW', $GLOBALS['strPrivDescShowView']),

array('Create_routine', 'CREATE ROUTINE', $GLOBALS['strPrivDescCreateRoutine']),

array('Alter_routine', 'ALTER ROUTINE', $GLOBALS['strPrivDescAlterRoutine']),

array('Execute', 'EXECUTE', $GLOBALS['strPrivDescExecute5']),

);

// this one is for a db-specific priv: Create_view_priv

if (isset($row['Create_view_priv'])) {

$privTable[1][] = array('Create_view', 'CREATE VIEW', $GLOBALS['strPrivDescCreateView']);

}

// this one is for a table-specific priv: Create View_priv

if (isset($row['Create View_priv'])) {

$privTable[1][] = array('Create View', 'CREATE VIEW', $GLOBALS['strPrivDescCreateView']);

}

if (isset($row['Event_priv'])) {

// MySQL 5.1.6

$privTable[1][] = array('Event', 'EVENT', $GLOBALS['strPrivDescEvent']);

$privTable[1][] = array('Trigger', 'TRIGGER', $GLOBALS['strPrivDescTrigger']);

}

// a d m i n i s t r a t i o n

$privTable[2] = array(

array('Grant', 'GRANT', $GLOBALS['strPrivDescGrant']),

);

if ($db == '*') {

$privTable[2][] = array('Super', 'SUPER', $GLOBALS['strPrivDescSuper']);

$privTable[2][] = array('Process', 'PROCESS', $GLOBALS['strPrivDescProcess']);

$privTable[2][] = array('Reload', 'RELOAD', $GLOBALS['strPrivDescReload']);

$privTable[2][] = array('Shutdown', 'SHUTDOWN', $GLOBALS['strPrivDescShutdown']);

$privTable[2][] = array('Show_db', 'SHOW DATABASES', $GLOBALS['strPrivDescShowDb']);

}

$privTable[2][] = array('Lock_tables', 'LOCK TABLES', $GLOBALS['strPrivDescLockTables']);

$privTable[2][] = array('References', 'REFERENCES', $GLOBALS['strPrivDescReferences']);

if ($db == '*') {

$privTable[2][] = array('Repl_client', 'REPLICATION CLIENT', $GLOBALS['strPrivDescReplClient']);

$privTable[2][] = array('Repl_slave', 'REPLICATION SLAVE', $GLOBALS['strPrivDescReplSlave']);

$privTable[2][] = array('Create_user', 'CREATE USER', $GLOBALS['strPrivDescCreateUser']);

}

echo '' . "\n"

. '

' . "\n"

. ' ' . "\n"

. ' '

. ($db == '*'

? $GLOBALS['strGlobalPrivileges']

: ($table == '*'

? $GLOBALS['strDbPrivileges']

: $GLOBALS['strTblPrivileges'])) . "\n"

. ' ('

. $GLOBALS['strCheckAll'] . ' /' . "\n"

. ' '

. $GLOBALS['strUncheckAll'] . ')' . "\n"

. ' ' . "\n"

. '

' . $GLOBALS['strEnglishPrivileges'] . '

' . "\n"

. '

' . "\n"

. ' ' . $GLOBALS['strData'] . '' . "\n";

foreach ($privTable[0] as $priv)

{

echo '

' . "\n"

. '

. (empty($GLOBALS['checkall']) ? '' : ' checked="checked"')

. ' name="' . $priv[0] . '_priv" id="checkbox_' . $priv[0]

. '_priv" value="Y" '

. ($row[$priv[0] . '_priv'] == 'Y' ? 'checked="checked" ' : '')

. 'title="' . $priv[2] . '"/>' . "\n"

. ' ' . $priv[1]

. '' . "\n"

. '

' . "\n";

}

echo '

' . "\n"

. '

' . "\n"

. ' ' . $GLOBALS['strStructure'] . '' . "\n";

foreach ($privTable[1] as $priv)

{

echo '

' . "\n"

. '

. (empty($GLOBALS['checkall']) ? '' : ' checked="checked"')

. ' name="' . $priv[0] . '_priv" id="checkbox_' . $priv[0]

. '_priv" value="Y" '

. ($row[$priv[0] . '_priv'] == 'Y' ? 'checked="checked" ' : '')

. 'title="' . $priv[2] . '"/>' . "\n"

. ' ' . $priv[1]

. '' . "\n"

. '

' . "\n";

}

echo '

' . "\n"

. '

' . "\n"

. ' ' . $GLOBALS['strAdministration'] . '' . "\n";

foreach ($privTable[2] as $priv)

{

echo '

' . "\n"

. '

. (empty($GLOBALS['checkall']) ? '' : ' checked="checked"')

. ' name="' . $priv[0] . '_priv" id="checkbox_' . $priv[0]

. '_priv" value="Y" '

. ($row[$priv[0] . '_priv'] == 'Y' ? 'checked="checked" ' : '')

. 'title="' . $priv[2] . '"/>' . "\n"

. ' ' . $priv[1]

. '' . "\n"

. '

' . "\n";

}

echo '

' . "\n";

// The "Resource limits" box is not displayed for db-specific privs

if ($db == '*') {

echo '

' . "\n"

. ' ' . $GLOBALS['strResourceLimits'] . '' . "\n"

. '

' . $GLOBALS['strZeroRemovesTheLimit'] . '

' . "\n"

. '

' . "\n"

. ' MAX QUERIES PER HOUR' . "\n"

. ' ' . "\n"

. '

' . "\n"

. '

' . "\n"

. ' MAX UPDATES PER HOUR' . "\n"

. ' ' . "\n"

. '

' . "\n"

. '

' . "\n"

. ' MAX CONNECTIONS PER HOUR' . "\n"

. ' ' . "\n"

. '

' . "\n"

. '

' . "\n"

. ' MAX USER_CONNECTIONS' . "\n"

. ' ' . "\n"

. '

' . "\n"

. '

' . "\n";

}

// for Safari 2.0.2

echo '

}

echo '

' . "\n";

if ($submit) {

echo '

' . "\n"

. ' ' . "\n"

. '

' . "\n";

}

} // end of the 'PMA_displayPrivTable()' function

/**

* Displays the fields used by the "new user" form as well as the

* "change login information / copy user" form.

*

* @param string $mode are we creating a new user or are we just

* changing one? (allowed values: 'new', 'change')

* @global array $cfg the phpMyAdmin configuration

* @global ressource $user_link the database connection

*

* @return void

*/

function PMA_displayLoginInformationFields($mode = 'new')

{

// Get user/host name lengths

$fields_info = PMA_DBI_get_fields('mysql', 'user');

$username_length = 16;

$hostname_length = 41;

foreach ($fields_info as $key => $val) {

if ($val['Field'] == 'User') {

strtok($val['Type'], '()');

$v = strtok('()');

if (is_int($v)) {

$username_length = $v;

}

} elseif ($val['Field'] == 'Host') {

strtok($val['Type'], '()');

$v = strtok('()');

if (is_int($v)) {

$hostname_length = $v;

}

}

}

unset($fields_info);

if (isset($GLOBALS['username']) && strlen($GLOBALS['username']) === 0) {

$GLOBALS['pred_username'] = 'any';

}

echo '

' . "\n"

. '' . $GLOBALS['strLoginInformation'] . '' . "\n"

. '

' . "\n"

. '' . "\n"

. ' ' . $GLOBALS['strUserName'] . ':' . "\n"

. '' . "\n"

. '' . "\n"

. '

. ' οnchange="if (this.value == \'any\') { username.value = \'\'; } else if (this.value == \'userdefined\') { username.focus(); username.select(); }">' . "\n"

. ' ' . $GLOBALS['strAnyUser'] . '' . "\n"

. ' ' . $GLOBALS['strUseTextField'] . ':' . "\n"

. '

' . "\n"

. '' . "\n"

. '

. (empty($GLOBALS['username'])

? ''

: ' value="' . htmlspecialchars(isset($GLOBALS['new_username'])

? $GLOBALS['new_username']

: $GLOBALS['username']) . '"')

. ' οnchange="pred_username.value = \'userdefined\';" />' . "\n"

. '

' . "\n"

. '

' . "\n"

. '' . "\n"

. ' ' . $GLOBALS['strHost'] . ':' . "\n"

. '' . "\n"

. '' . "\n"

. '

$_current_user = PMA_DBI_fetch_value('SELECT USER();');

if (! empty($_current_user)) {

$thishost = str_replace("'", '', substr($_current_user, (strrpos($_current_user, '@') + 1)));

if ($thishost == 'localhost' || $thishost == '127.0.0.1') {

unset($thishost);

}

}

echo ' οnchange="if (this.value == \'any\') { hostname.value = \'%\'; } else if (this.value == \'localhost\') { hostname.value = \'localhost\'; } '

. (empty($thishost) ? '' : 'else if (this.value == \'thishost\') { hostname.value = \'' . addslashes(htmlspecialchars($thishost)) . '\'; } ')

. 'else if (this.value == \'hosttable\') { hostname.value = \'\'; } else if (this.value == \'userdefined\') { hostname.focus(); hostname.select(); }">' . "\n";

unset($_current_user);

// when we start editing a user, $GLOBALS['pred_hostname'] is not defined

if (!isset($GLOBALS['pred_hostname']) && isset($GLOBALS['hostname'])) {

switch (strtolower($GLOBALS['hostname'])) {

case 'localhost':

case '127.0.0.1':

$GLOBALS['pred_hostname'] = 'localhost';

break;

case '%':

$GLOBALS['pred_hostname'] = 'any';

break;

default:

$GLOBALS['pred_hostname'] = 'userdefined';

break;

}

}

echo '

. ((isset($GLOBALS['pred_hostname']) && $GLOBALS['pred_hostname'] == 'any')

? ' selected="selected"' : '') . '>' . $GLOBALS['strAnyHost']

. '

' . "\n"

. '

. ((isset($GLOBALS['pred_hostname']) && $GLOBALS['pred_hostname'] == 'localhost')

? ' selected="selected"' : '') . '>' . $GLOBALS['strLocalhost']

. '

' . "\n";

if (!empty($thishost)) {

echo '

. ((isset($GLOBALS['pred_hostname']) && $GLOBALS['pred_hostname'] == 'thishost')

? ' selected="selected"' : '') . '>' . $GLOBALS['strThisHost']

. '

' . "\n";

}

unset($thishost);

echo '

. ((isset($GLOBALS['pred_hostname']) && $GLOBALS['pred_hostname'] == 'hosttable')

? ' selected="selected"' : '') . '>' . $GLOBALS['strUseHostTable']

. '

' . "\n"

. '

. ((isset($GLOBALS['pred_hostname']) && $GLOBALS['pred_hostname'] == 'userdefined')

? ' selected="selected"' : '')

. '>' . $GLOBALS['strUseTextField'] . ':

' . "\n"

. '

' . "\n"

. '' . "\n"

. '' . "\n"

. PMA_showHint($GLOBALS['strHostTableExplanation'])

. '

' . "\n"

. '

' . "\n"

. '' . "\n"

. ' ' . $GLOBALS['strPassword'] . ':' . "\n"

. '' . "\n"

. '' . "\n"

. '

. ' οnchange="if (this.value == \'none\') { pma_pw.value = \'\'; pma_pw2.value = \'\'; } else if (this.value == \'userdefined\') { pma_pw.focus(); pma_pw.select(); }">' . "\n"

. ($mode == 'change' ? ' ' . $GLOBALS['strKeepPass'] . '' . "\n" : '')

. '

if (isset($GLOBALS['username']) && $mode != 'change') {

echo ' selected="selected"';

}

echo '>' . $GLOBALS['strNoPassword'] . '

' . "\n"

. ' ' . $GLOBALS['strUseTextField'] . ':' . "\n"

. '

' . "\n"

. '' . "\n"

. '' . "\n"

. '

' . "\n"

. '

' . "\n"

. '' . "\n"

. ' ' . $GLOBALS['strReType'] . ':' . "\n"

. '' . "\n"

. ' ' . "\n"

. '' . "\n"

. '

' . "\n"

. '

' . "\n"

. '' . "\n"

. ' ' . $GLOBALS['strGeneratePassword'] . ':' . "\n"

. '' . "\n"

. '' . "\n"

. ' ' . "\n"

. '' . "\n"

. '' . "\n"

. '

' . "\n"

. '

' . "\n";

} // end of the 'PMA_displayUserAndHostFields()' function

/**

* Changes / copies a user, part I

*/

if (isset($_REQUEST['change_copy'])) {

$user_host_condition =

' WHERE `User`'

.' = \'' . PMA_sqlAddslashes($old_username) . "'"

.' AND `Host`'

.' = \'' . PMA_sqlAddslashes($old_hostname) . '\';';

$row = PMA_DBI_fetch_single_row('SELECT * FROM `mysql`.`user` ' . $user_host_condition);

if (! $row) {

PMA_Message::notice('strNoUsersFound')->display();

unset($_REQUEST['change_copy']);

} else {

extract($row, EXTR_OVERWRITE);

// Recent MySQL versions have the field "Password" in mysql.user,

// so the previous extract creates $Password but this script

// uses $password

if (!isset($password) && isset($Password)) {

$password = $Password;

}

$queries = array();

}

}

/**

* Adds a user

* (Changes / copies a user, part II)

*/

if (isset($_REQUEST['adduser_submit']) || isset($_REQUEST['change_copy'])) {

$sql_query = '';

if ($pred_username == 'any') {

$username = '';

}

switch ($pred_hostname) {

case 'any':

$hostname = '%';

break;

case 'localhost':

$hostname = 'localhost';

break;

case 'hosttable':

$hostname = '';

break;

case 'thishost':

$_user_name = PMA_DBI_fetch_value('SELECT USER()');

$hostname = substr($_user_name, (strrpos($_user_name, '@') + 1));

unset($_user_name);

break;

}

$sql = "SELECT '1' FROM `mysql`.`user`"

. " WHERE `User` = '" . PMA_sqlAddslashes($username) . "'"

. " AND `Host` = '" . PMA_sqlAddslashes($hostname) . "';";

if (PMA_DBI_fetch_value($sql) == 1) {

$message = PMA_Message::error('strUserAlreadyExists');

$message->addParam('[i]\'' . $username . '\'@\'' . $hostname . '\'[/i]');

$_REQUEST['adduser'] = true;

} else {

$create_user_real = 'CREATE USER \'' . PMA_sqlAddslashes($username) . '\'@\'' . PMA_sqlAddslashes($hostname) . '\'';

$real_sql_query =

'GRANT ' . join(', ', PMA_extractPrivInfo()) . ' ON *.* TO \''

. PMA_sqlAddslashes($username) . '\'@\'' . PMA_sqlAddslashes($hostname) . '\'';

if ($pred_password != 'none' && $pred_password != 'keep') {

$sql_query = $real_sql_query . ' IDENTIFIED BY \'***\'';

$real_sql_query .= ' IDENTIFIED BY \'' . PMA_sqlAddslashes($pma_pw) . '\'';

if (isset($create_user_real)) {

$create_user_show = $create_user_real . ' IDENTIFIED BY \'***\'';

$create_user_real .= ' IDENTIFIED BY \'' . PMA_sqlAddslashes($pma_pw) . '\'';

}

} else {

if ($pred_password == 'keep' && !empty($password)) {

$real_sql_query .= ' IDENTIFIED BY PASSWORD \'' . $password . '\'';

if (isset($create_user_real)) {

$create_user_real .= ' IDENTIFIED BY PASSWORD \'' . $password . '\'';

}

}

$sql_query = $real_sql_query;

if (isset($create_user_real)) {

$create_user_show = $create_user_real;

}

}

/**

* @todo similar code appears twice in this script

*/

if ((isset($Grant_priv) && $Grant_priv == 'Y')

|| (isset($max_questions) || isset($max_connections)

|| isset($max_updates) || isset($max_user_connections))) {

$real_sql_query .= ' WITH';

$sql_query .= ' WITH';

if (isset($Grant_priv) && $Grant_priv == 'Y') {

$real_sql_query .= ' GRANT OPTION';

$sql_query .= ' GRANT OPTION';

}

if (isset($max_questions)) {

// avoid negative values

$max_questions = max(0, (int)$max_questions);

$real_sql_query .= ' MAX_QUERIES_PER_HOUR ' . $max_questions;

$sql_query .= ' MAX_QUERIES_PER_HOUR ' . $max_questions;

}

if (isset($max_connections)) {

$max_connections = max(0, (int)$max_connections);

$real_sql_query .= ' MAX_CONNECTIONS_PER_HOUR ' . $max_connections;

$sql_query .= ' MAX_CONNECTIONS_PER_HOUR ' . $max_connections;

}

if (isset($max_updates)) {

$max_updates = max(0, (int)$max_updates);

$real_sql_query .= ' MAX_UPDATES_PER_HOUR ' . $max_updates;

$sql_query .= ' MAX_UPDATES_PER_HOUR ' . $max_updates;

}

if (isset($max_user_connections)) {

$max_user_connections = max(0, (int)$max_user_connections);

$real_sql_query .= ' MAX_USER_CONNECTIONS ' . $max_user_connections;

$sql_query .= ' MAX_USER_CONNECTIONS ' . $max_user_connections;

}

}

if (isset($create_user_real)) {

$create_user_real .= ';';

$create_user_show .= ';';

}

$real_sql_query .= ';';

$sql_query .= ';';

if (empty($_REQUEST['change_copy'])) {

$_error = false;

if (isset($create_user_real)) {

if (! PMA_DBI_try_query($create_user_real)) {

$_error = true;

}

$sql_query = $create_user_show . $sql_query;

}

if ($_error || ! PMA_DBI_try_query($real_sql_query)) {

$_REQUEST['createdb'] = false;

$message = PMA_Message::rawError(PMA_DBI_getError());

} else {

$message = PMA_Message::success('strAddUserMessage');

}

switch (PMA_ifSetOr($_REQUEST['createdb'], '0')) {

case '1' :

// Create database with same name and grant all privileges

$q = 'CREATE DATABASE IF NOT EXISTS '

. PMA_backquote(PMA_sqlAddslashes($username)) . ';';

$sql_query .= $q;

if (! PMA_DBI_try_query($q)) {

$message = PMA_Message::rawError(PMA_DBI_getError());

break;

}

$GLOBALS['reload'] = TRUE;

PMA_reloadNavigation();

$q = 'GRANT ALL PRIVILEGES ON '

. PMA_backquote(PMA_sqlAddslashes($username)) . '.* TO \''

. PMA_sqlAddslashes($username) . '\'@\'' . PMA_sqlAddslashes($hostname) . '\';';

$sql_query .= $q;

if (! PMA_DBI_try_query($q)) {

$message = PMA_Message::rawError(PMA_DBI_getError());

}

break;

case '2' :

// Grant all privileges on wildcard name (username\_%)

$q = 'GRANT ALL PRIVILEGES ON '

. PMA_backquote(PMA_sqlAddslashes($username) . '\_%') . '.* TO \''

. PMA_sqlAddslashes($username) . '\'@\'' . PMA_sqlAddslashes($hostname) . '\';';

$sql_query .= $q;

if (! PMA_DBI_try_query($q)) {

$message = PMA_Message::rawError(PMA_DBI_getError());

}

break;

case '3' :

// Grant all privileges on the specified database to the new user

$q = 'GRANT ALL PRIVILEGES ON '

. PMA_backquote(PMA_sqlAddslashes($dbname)) . '.* TO \''

. PMA_sqlAddslashes($username) . '\'@\'' . PMA_sqlAddslashes($hostname) . '\';';

$sql_query .= $q;

if (! PMA_DBI_try_query($q)) {

$message = PMA_Message::rawError(PMA_DBI_getError());

}

break;

case '0' :

default :

break;

}

} else {

if (isset($create_user_real)) {

$queries[] = $create_user_real;

}

$queries[] = $real_sql_query;

// we put the query containing the hidden password in

// $queries_for_display, at the same position occupied

// by the real query in $queries

$tmp_count = count($queries);

if (isset($create_user_real)) {

$queries_for_display[$tmp_count - 2] = $create_user_show;

}

$queries_for_display[$tmp_count - 1] = $sql_query;

}

unset($res, $real_sql_query);

}

}

/**

* Changes / copies a user, part III

*/

if (isset($_REQUEST['change_copy'])) {

$user_host_condition =

' WHERE `User`'

.' = \'' . PMA_sqlAddslashes($old_username) . "'"

.' AND `Host`'

.' = \'' . PMA_sqlAddslashes($old_hostname) . '\';';

$res = PMA_DBI_query('SELECT * FROM `mysql`.`db`' . $user_host_condition);

while ($row = PMA_DBI_fetch_assoc($res)) {

$queries[] =

'GRANT ' . join(', ', PMA_extractPrivInfo($row))

.' ON ' . PMA_backquote($row['Db']) . '.*'

.' TO \'' . PMA_sqlAddslashes($username) . '\'@\'' . PMA_sqlAddslashes($hostname) . '\''

. ($row['Grant_priv'] == 'Y' ? ' WITH GRANT OPTION;' : ';');

}

PMA_DBI_free_result($res);

$res = PMA_DBI_query(

'SELECT `Db`, `Table_name`, `Table_priv`'

.' FROM `mysql`.`tables_priv`' . $user_host_condition,

$GLOBALS['userlink'], PMA_DBI_QUERY_STORE);

while ($row = PMA_DBI_fetch_assoc($res)) {

$res2 = PMA_DBI_QUERY(

'SELECT `Column_name`, `Column_priv`'

.' FROM `mysql`.`columns_priv`'

.' WHERE `User`'

.' = \'' . PMA_sqlAddslashes($old_username) . "'"

.' AND `Host`'

.' = \'' . PMA_sqlAddslashes($old_hostname) . '\''

.' AND `Db`'

.' = \'' . PMA_sqlAddslashes($row['Db']) . "'"

.' AND `Table_name`'

.' = \'' . PMA_sqlAddslashes($row['Table_name']) . "'"

.';',

null, PMA_DBI_QUERY_STORE);

$tmp_privs1 = PMA_extractPrivInfo($row);

$tmp_privs2 = array(

'Select' => array(),

'Insert' => array(),

'Update' => array(),

'References' => array()

);

while ($row2 = PMA_DBI_fetch_assoc($res2)) {

$tmp_array = explode(',', $row2['Column_priv']);

if (in_array('Select', $tmp_array)) {

$tmp_privs2['Select'][] = $row2['Column_name'];

}

if (in_array('Insert', $tmp_array)) {

$tmp_privs2['Insert'][] = $row2['Column_name'];

}

if (in_array('Update', $tmp_array)) {

$tmp_privs2['Update'][] = $row2['Column_name'];

}

if (in_array('References', $tmp_array)) {

$tmp_privs2['References'][] = $row2['Column_name'];

}

unset($tmp_array);

}

if (count($tmp_privs2['Select']) > 0 && !in_array('SELECT', $tmp_privs1)) {

$tmp_privs1[] = 'SELECT (`' . join('`, `', $tmp_privs2['Select']) . '`)';

}

if (count($tmp_privs2['Insert']) > 0 && !in_array('INSERT', $tmp_privs1)) {

$tmp_privs1[] = 'INSERT (`' . join('`, `', $tmp_privs2['Insert']) . '`)';

}

if (count($tmp_privs2['Update']) > 0 && !in_array('UPDATE', $tmp_privs1)) {

$tmp_privs1[] = 'UPDATE (`' . join('`, `', $tmp_privs2['Update']) . '`)';

}

if (count($tmp_privs2['References']) > 0 && !in_array('REFERENCES', $tmp_privs1)) {

$tmp_privs1[] = 'REFERENCES (`' . join('`, `', $tmp_privs2['References']) . '`)';

}

unset($tmp_privs2);

$queries[] =

'GRANT ' . join(', ', $tmp_privs1)

. ' ON ' . PMA_backquote($row['Db']) . '.' . PMA_backquote($row['Table_name'])

. ' TO \'' . PMA_sqlAddslashes($username) . '\'@\'' . PMA_sqlAddslashes($hostname) . '\''

. (in_array('Grant', explode(',', $row['Table_priv'])) ? ' WITH GRANT OPTION;' : ';');

}

}

/**

* Updates privileges

*/

if (!empty($update_privs)) {

$db_and_table = PMA_WildcardEscapeForGrant($db_and_table, $dbname, (isset($tablename) ? $tablename : ''));

$sql_query0 =

'REVOKE ALL PRIVILEGES ON ' . $db_and_table

. ' FROM \'' . PMA_sqlAddslashes($username) . '\'@\'' . PMA_sqlAddslashes($hostname) . '\';';

if (!isset($Grant_priv) || $Grant_priv != 'Y') {

$sql_query1 =

'REVOKE GRANT OPTION ON ' . $db_and_table

. ' FROM \'' . PMA_sqlAddslashes($username) . '\'@\'' . PMA_sqlAddslashes($hostname) . '\';';

} else {

$sql_query1 = '';

}

// Should not do a GRANT USAGE for a table-specific privilege, it

// causes problems later (cannot revoke it)

if (! (isset($tablename) && 'USAGE' == implode('', PMA_extractPrivInfo()))) {

$sql_query2 =

'GRANT ' . join(', ', PMA_extractPrivInfo())

. ' ON ' . $db_and_table

. ' TO \'' . PMA_sqlAddslashes($username) . '\'@\'' . PMA_sqlAddslashes($hostname) . '\'';

/**

* @todo similar code appears twice in this script

*/

if ((isset($Grant_priv) && $Grant_priv == 'Y')

|| (! isset($dbname)

&& (isset($max_questions) || isset($max_connections)

|| isset($max_updates) || isset($max_user_connections))))

{

$sql_query2 .= 'WITH';

if (isset($Grant_priv) && $Grant_priv == 'Y') {

$sql_query2 .= ' GRANT OPTION';

}

if (isset($max_questions)) {

$max_questions = max(0, (int)$max_questions);

$sql_query2 .= ' MAX_QUERIES_PER_HOUR ' . $max_questions;

}

if (isset($max_connections)) {

$max_connections = max(0, (int)$max_connections);

$sql_query2 .= ' MAX_CONNECTIONS_PER_HOUR ' . $max_connections;

}

if (isset($max_updates)) {

$max_updates = max(0, (int)$max_updates);

$sql_query2 .= ' MAX_UPDATES_PER_HOUR ' . $max_updates;

}

if (isset($max_user_connections)) {

$max_user_connections = max(0, (int)$max_user_connections);

$sql_query2 .= ' MAX_USER_CONNECTIONS ' . $max_user_connections;

}

}

$sql_query2 .= ';';

}

if (! PMA_DBI_try_query($sql_query0)) {

// this query may fail, but this does not matter :o)

$sql_query0 = '';

}

if (isset($sql_query1) && !PMA_DBI_try_query($sql_query1)) {

// this one may fail, too...

$sql_query1 = '';

}

if (isset($sql_query2)) {

PMA_DBI_query($sql_query2);

} else {

$sql_query2 = '';

}

$sql_query = $sql_query0 . ' ' . $sql_query1 . ' ' . $sql_query2;

$message = PMA_Message::success('strUpdatePrivMessage');

$message->addParam('\'' . $username . '\'@\'' . $hostname . '\'');

}

/**

* Revokes Privileges

*/

if (isset($_REQUEST['revokeall'])) {

$db_and_table = PMA_WildcardEscapeForGrant($db_and_table, $dbname, isset($tablename) ? $tablename : '');

$sql_query0 =

'REVOKE ALL PRIVILEGES ON ' . $db_and_table

. ' FROM \'' . PMA_sqlAddslashes($username) . '\'@\'' . PMA_sqlAddslashes($hostname) . '\';';

$sql_query1 =

'REVOKE GRANT OPTION ON ' . $db_and_table

. ' FROM \'' . PMA_sqlAddslashes($username) . '\'@\'' . PMA_sqlAddslashes($hostname) . '\';';

PMA_DBI_query($sql_query0);

if (! PMA_DBI_try_query($sql_query1)) {

// this one may fail, too...

$sql_query1 = '';

}

$sql_query = $sql_query0 . ' ' . $sql_query1;

$message = PMA_Message::success('strRevokeMessage');

$message->addParam('\'' . $username . '\'@\'' . $hostname . '\'');

if (! isset($tablename)) {

unset($dbname);

} else {

unset($tablename);

}

}

/**

* Updates the password

*/

if (isset($_REQUEST['change_pw'])) {

// similar logic in user_password.php

$message = '';

if ($nopass == 0 && isset($pma_pw) && isset($pma_pw2)) {

if ($pma_pw != $pma_pw2) {

$message = PMA_Message::error('strPasswordNotSame');

} elseif (empty($pma_pw) || empty($pma_pw2)) {

$message = PMA_Message::error('strPasswordEmpty');

}

} // end if

// here $nopass could be == 1

if (empty($message)) {

$hashing_function = (!empty($pw_hash) && $pw_hash == 'old' ? 'OLD_' : '')

. 'PASSWORD';

// in $sql_query which will be displayed, hide the password

$sql_query = 'SET PASSWORD FOR \'' . PMA_sqlAddslashes($username) . '\'@\'' . PMA_sqlAddslashes($hostname) . '\' = ' . (($pma_pw == '') ? '\'\'' : $hashing_function . '(\'' . preg_replace('@.@s', '*', $pma_pw) . '\')');

$local_query = 'SET PASSWORD FOR \'' . PMA_sqlAddslashes($username) . '\'@\'' . PMA_sqlAddslashes($hostname) . '\' = ' . (($pma_pw == '') ? '\'\'' : $hashing_function . '(\'' . PMA_sqlAddslashes($pma_pw) . '\')');

PMA_DBI_try_query($local_query)

or PMA_mysqlDie(PMA_DBI_getError(), $sql_query, FALSE, $err_url);

$message = PMA_Message::success('strPasswordChanged');

$message->addParam('\'' . $username . '\'@\'' . $hostname . '\'');

}

}

/**

* Deletes users

* (Changes / copies a user, part IV)

*/

if (isset($_REQUEST['delete']) || (isset($_REQUEST['change_copy']) && $_REQUEST['mode'] < 4)) {

if (isset($_REQUEST['change_copy'])) {

$selected_usr = array($old_username . '&#27;' . $old_hostname);

} else {

$selected_usr = $_REQUEST['selected_usr'];

$queries = array();

}

foreach ($selected_usr as $each_user) {

list($this_user, $this_host) = explode('&#27;', $each_user);

$queries[] = '# ' . sprintf($GLOBALS['strDeleting'], '\'' . $this_user . '\'@\'' . $this_host . '\'') . ' ...';

$queries[] = 'DROP USER \'' . PMA_sqlAddslashes($this_user) . '\'@\'' . PMA_sqlAddslashes($this_host) . '\';';

if (isset($_REQUEST['drop_users_db'])) {

$queries[] = 'DROP DATABASE IF EXISTS ' . PMA_backquote($this_user) . ';';

$GLOBALS['reload'] = TRUE;

PMA_reloadNavigation();

}

}

if (empty($_REQUEST['change_copy'])) {

if (empty($queries)) {

$message = PMA_Message::error('strDeleteNoUsersSelected');

} else {

if ($_REQUEST['mode'] == 3) {

$queries[] = '# ' . $GLOBALS['strReloadingThePrivileges'] . ' ...';

$queries[] = 'FLUSH PRIVILEGES;';

}

$drop_user_error = '';

foreach ($queries as $sql_query) {

if ($sql_query{0} != '#') {

if (! PMA_DBI_try_query($sql_query, $GLOBALS['userlink'])) {

$drop_user_error .= PMA_DBI_getError() . "\n";

}

}

}

$sql_query = join("\n", $queries);

if (! empty($drop_user_error)) {

$message = PMA_Message::rawError($drop_user_error);

} else {

$message = PMA_Message::success('strUsersDeleted');

}

}

unset($queries);

}

}

/**

* Changes / copies a user, part V

*/

if (isset($_REQUEST['change_copy'])) {

$tmp_count = 0;

foreach ($queries as $sql_query) {

if ($sql_query{0} != '#') {

PMA_DBI_query($sql_query);

}

// when there is a query containing a hidden password, take it

// instead of the real query sent

if (isset($queries_for_display[$tmp_count])) {

$queries[$tmp_count] = $queries_for_display[$tmp_count];

}

$tmp_count++;

}

$message = PMA_Message::success();

$sql_query = join("\n", $queries);

}

/**

* Reloads the privilege tables into memory

*/

if (isset($_REQUEST['flush_privileges'])) {

$sql_query = 'FLUSH PRIVILEGES;';

PMA_DBI_query($sql_query);

$message = PMA_Message::success('strPrivilegesReloaded');

}

/**

* Displays the links

*/

if (isset($viewing_mode) && $viewing_mode == 'db') {

$db = $checkprivs;

$url_query .= '&goto=db_operations.php';

// Gets the database structure

$sub_part = '_structure';

require './libraries/db_info.inc.php';

echo "\n";

} else {

require './libraries/server_links.inc.php';

}

/**

* defines some standard links

*/

$link_edit = ''

. PMA_getIcon('b_usredit.png', $GLOBALS['strEditPrivileges'])

. '';

$link_revoke = ''

. PMA_getIcon('b_usrdrop.png', $GLOBALS['strRevoke'])

. '';

/**

* Displays the page

*/

if (empty($_REQUEST['adduser']) && (! isset($checkprivs) || ! strlen($checkprivs))) {

if (! isset($username)) {

// No username is given --> display the overview

echo '

' . "\n"

. PMA_getIcon('b_usrlist.png')

. $GLOBALS['strUserOverview'] . "\n"

. '' . "\n";

$sql_query =

'SELECT *,' .

" IF(`Password` = _latin1 '', 'N', 'Y') AS 'Password'" .

' FROM `mysql`.`user`';

$sql_query .= (isset($initial) ? PMA_RangeOfUsers($initial) : '');

$sql_query .= ' ORDER BY `User` ASC, `Host` ASC;';

$res = PMA_DBI_try_query($sql_query, null, PMA_DBI_QUERY_STORE);

if (! $res) {

// the query failed! This may have two reasons:

// - the user does not have enough privileges

// - the privilege tables use a structure of an earlier version.

// so let's try a more simple query

$sql_query = 'SELECT * FROM `mysql`.`user`';

$res = PMA_DBI_try_query($sql_query, null, PMA_DBI_QUERY_STORE);

if (!$res) {

PMA_Message::error('strNoPrivileges')->display();

PMA_DBI_free_result($res);

unset($res);

} else {

// rabus: This message is hardcoded because I will replace it by

// a automatic repair feature soon.

$raw = 'Your privilege table structure seems to be older than'

. ' this MySQL version!
'

. 'Please run the mysql_upgrade command'

. '(mysql_fix_privilege_tables on older systems)'

. ' that should be included in your MySQL server distribution'

. ' to solve this problem!';

PMA_Message::rawError($raw)->display();

}

} else {

// we also want users not in table `user` but in other table

$tables = PMA_DBI_fetch_result('SHOW TABLES FROM `mysql`;');

$tables_to_search_for_users = array(

'user', 'db', 'tables_priv', 'columns_priv', 'procs_priv',

);

$db_rights_sqls = array();

foreach ($tables_to_search_for_users as $table_search_in) {

if (in_array($table_search_in, $tables)) {

$db_rights_sqls[] = 'SELECT DISTINCT `User`, `Host` FROM `mysql`.`' . $table_search_in . '` ' . (isset($initial) ? PMA_RangeOfUsers($initial) : '');

}

}

$user_defaults = array(

'User' => '',

'Host' => '%',

'Password' => '?',

'Grant_priv' => 'N',

'privs' => array('USAGE'),

);

// for all initials, even non A-Z

$array_initials = array();

// for the rights

$db_rights = array();

$db_rights_sql = '(' . implode(') UNION (', $db_rights_sqls) . ')'

.' ORDER BY `User` ASC, `Host` ASC';

$db_rights_result = PMA_DBI_query($db_rights_sql);

while ($db_rights_row = PMA_DBI_fetch_assoc($db_rights_result)) {

$db_rights_row = array_merge($user_defaults, $db_rights_row);

$db_rights[$db_rights_row['User']][$db_rights_row['Host']] =

$db_rights_row;

}

PMA_DBI_free_result($db_rights_result);

unset($db_rights_sql, $db_rights_sqls, $db_rights_result, $db_rights_row);

ksort($db_rights);

/**

* Displays the initials

*/

// initialize to FALSE the letters A-Z

for ($letter_counter = 1; $letter_counter < 27; $letter_counter++) {

if (! isset($array_initials[chr($letter_counter + 64)])) {

$array_initials[chr($letter_counter + 64)] = FALSE;

}

}

$initials = PMA_DBI_try_query('SELECT DISTINCT UPPER(LEFT(`User`,1)) FROM `user` ORDER BY `User` ASC', null, PMA_DBI_QUERY_STORE);

while (list($tmp_initial) = PMA_DBI_fetch_row($initials)) {

$array_initials[$tmp_initial] = TRUE;

}

// Display the initials, which can be any characters, not

// just letters. For letters A-Z, we add the non-used letters

// as greyed out.

uksort($array_initials, "strnatcasecmp");

echo '

foreach ($array_initials as $tmp_initial => $initial_was_found) {

if ($initial_was_found) {

echo '

} else {

echo '

' . $tmp_initial . '';

}

}

echo '

[' . $GLOBALS['strShowAll'] . ']' . "\n";

echo '

';

/**

* Display the user overview

* (if less than 50 users, display them immediately)

*/

if (isset($initial) || isset($showall) || PMA_DBI_num_rows($res) < 50) {

while ($row = PMA_DBI_fetch_assoc($res)) {

$row['privs'] = PMA_extractPrivInfo($row, true);

$db_rights[$row['User']][$row['Host']] = $row;

}

@PMA_DBI_free_result($res);

unset($res);

echo '

' . "\n"

. PMA_generate_common_hidden_inputs('', '')

. '

. ' ' . "\n"

. '

' . "\n"

. '

' . $GLOBALS['strUser'] . '' . "\n"

. '

' . $GLOBALS['strHost'] . '' . "\n"

. '

' . $GLOBALS['strPassword'] . '' . "\n"

. '

' . $GLOBALS['strGlobalPrivileges'] . ' '

. PMA_showHint($GLOBALS['strEnglishPrivileges']) . '

' . "\n"

. '

' . $GLOBALS['strGrantOption'] . '' . "\n"

. '

' . $GLOBALS['strAction'] . '' . "\n";

echo '

' . "\n";

echo '

' . "\n";

echo '

' . "\n";

$odd_row = true;

$index_checkbox = -1;

foreach ($db_rights as $user) {

$index_checkbox++;

ksort($user);

foreach ($user as $host) {

$index_checkbox++;

echo '

' . "\n"

. '

. (empty($GLOBALS['checkall']) ? '' : ' checked="checked"')

. ' />

' . "\n"

. '

' . (empty($host['User']) ? ' ' . $GLOBALS['strAny'] . '' : htmlspecialchars($host['User'])) . '' . "\n"

. '

' . htmlspecialchars($host['Host']) . '' . "\n";

echo '

';

switch ($host['Password']) {

case 'Y':

echo $GLOBALS['strYes'];

break;

case 'N':

echo '' . $GLOBALS['strNo'] . '';

break;

// this happens if this is a definition not coming from mysql.user

default:

echo '--'; // in future version, replace by "not present"

break;

} // end switch

echo '

' . "\n"

. '

' . "\n"

. ' ' . implode(',' . "\n" . ' ', $host['privs']) . "\n"

. '

' . "\n"

. '

' . ($host['Grant_priv'] == 'Y' ? $GLOBALS['strYes'] : $GLOBALS['strNo']) . '' . "\n"

. '

';

printf($link_edit, urlencode($host['User']),

urlencode($host['Host']), '', '');

echo '

' . "\n"

. '

' . "\n";

$odd_row = ! $odd_row;

}

}

unset($user, $host, $odd_row);

echo '

' . "\n"

.'

.' src="' . $pmaThemeImage . 'arrow_' . $text_dir . '.png"'

.' width="38" height="22"'

.' alt="' . $GLOBALS['strWithChecked'] . '" />' . "\n"

.'

.' οnclick="if (markAllRows(\'usersForm\')) return false;">'

. $GLOBALS['strCheckAll'] . '

' . "\n"

.'/' . "\n"

.'

.' οnclick="if (unMarkAllRows(\'usersForm\')) return false;">'

. $GLOBALS['strUncheckAll'] . '

' . "\n";

// add/delete user fieldset

echo '

' . "\n"

. ' ' . "\n"

. PMA_getIcon('b_usradd.png')

. ' ' . $GLOBALS['strAddUser'] . '' . "\n"

. '

' . "\n"

. '

'

. ' ' . "\n"

. PMA_getIcon('b_usrdrop.png')

. ' ' . $GLOBALS['strRemoveSelectedUsers'] . '' . "\n"

. ' ' . "\n"

. ' ' . "\n"

. '(' . $GLOBALS['strRevokeAndDelete'] . ')
' . "\n"

. ' ' . "\n"

. ' ' . "\n"

. ' ' . $GLOBALS['strDropUsersDb'] . "\n"

. ' ' . "\n"

. '

' . "\n"

. '

' . "\n"

. ' ' . "\n"

. '

' . "\n"

. '

' . "\n";

} else {

unset ($row);

echo '

' . "\n"

. ' ' . "\n"

. PMA_getIcon('b_usradd.png')

. ' ' . $GLOBALS['strAddUser'] . '' . "\n"

. '

' . "\n";

} // end if (display overview)

$flushnote = new PMA_Message('strFlushPrivilegesNote', PMA_Message::NOTICE);

$flushnote->addParam('', false);

$flushnote->addParam('', false);

$flushnote->display();

}

} else {

// A user was selected -> display the user's properties

echo '

' . "\n"

. PMA_getIcon('b_usredit.png')

. $GLOBALS['strEditPrivileges'] . ': '

. $GLOBALS['strUser'] ;

if (isset($dbname)) {

echo ' \''

. htmlspecialchars($username) . '\'@\'' . htmlspecialchars($hostname)

. '\'' . "\n";

$url_dbname = urlencode(str_replace(array('\_', '\%'), array('_', '%'), $dbname));

echo ' - ' . ($dbname_is_wildcard ? $GLOBALS['strDatabases'] : $GLOBALS['strDatabase'] );

if (isset($tablename)) {

echo ' ' . htmlspecialchars($dbname) . '';

echo ' - ' . $GLOBALS['strTable'] . ' ' . htmlspecialchars($tablename) . '';

} else {

echo ' ' . htmlspecialchars($dbname) . '';

}

} else {

echo ' \'' . htmlspecialchars($username) . '\'@\'' . htmlspecialchars($hostname)

. '\'' . "\n";

}

echo '' . "\n";

$sql = "SELECT '1' FROM `mysql`.`user`"

. " WHERE `User` = '" . PMA_sqlAddslashes($username) . "'"

. " AND `Host` = '" . PMA_sqlAddslashes($hostname) . "';";

$user_does_not_exists = (bool) ! PMA_DBI_fetch_value($sql);

unset($sql);

if ($user_does_not_exists) {

PMA_Message::warning('strUserNotFound')->display();

PMA_displayLoginInformationFields();

//require_once './libraries/footer.inc.php';

}

echo '

' . "\n";

$_params = array(

'username' => $username,

'hostname' => $hostname,

);

if (isset($dbname)) {

$_params['dbname'] = $dbname;

if (isset($tablename)) {

$_params['tablename'] = $tablename;

}

}

echo PMA_generate_common_hidden_inputs($_params);

PMA_displayPrivTable(PMA_ifSetOr($dbname, '*', 'length'),

PMA_ifSetOr($tablename, '*', 'length'));

echo '

' . "\n";

if (! isset($tablename) && empty($dbname_is_wildcard)) {

// no table name was given, display all table specific rights

// but only if $dbname contains no wildcards

// table header

echo '

' . "\n"

. PMA_generate_common_hidden_inputs('', '')

. '' . "\n"

. '' . "\n"

. '

' . "\n"

. '' . (! isset($dbname) ? $GLOBALS['strDbPrivileges'] : $GLOBALS['strTblPrivileges']) . '' . "\n"

. '

. '' . "\n"

. '

' . (! isset($dbname) ? $GLOBALS['strDatabase'] : $GLOBALS['strTable']) . '' . "\n"

. '

' . $GLOBALS['strPrivileges'] . '' . "\n"

. '

' . $GLOBALS['strGrantOption'] . '' . "\n"

. '

' . (! isset($dbname) ? $GLOBALS['strTblPrivileges'] : $GLOBALS['strColumnPrivileges']) . '' . "\n"

. '

' . $GLOBALS['strAction'] . '' . "\n"

. '

' . "\n"

. '

' . "\n"

. '

' . "\n";

$user_host_condition =

' WHERE `User`'

. ' = \'' . PMA_sqlAddslashes($username) . "'"

. ' AND `Host`'

. ' = \'' . PMA_sqlAddslashes($hostname) . "'";

// table body

// get data

// we also want privielgs for this user not in table `db` but in other table

$tables = PMA_DBI_fetch_result('SHOW TABLES FROM `mysql`;');

if (! isset($dbname)) {

// no db name given, so we want all privs for the given user

$tables_to_search_for_users = array(

'tables_priv', 'columns_priv',

);

$db_rights_sqls = array();

foreach ($tables_to_search_for_users as $table_search_in) {

if (in_array($table_search_in, $tables)) {

$db_rights_sqls[] = '

SELECT DISTINCT `Db`

FROM `mysql`.' . PMA_backquote($table_search_in)

. $user_host_condition;

}

}

$user_defaults = array(

'Db' => '',

'Grant_priv' => 'N',

'privs' => array('USAGE'),

'Table_privs' => true,

);

// for the rights

$db_rights = array();

$db_rights_sql = '(' . implode(') UNION (', $db_rights_sqls) . ')'

.' ORDER BY `Db` ASC';

$db_rights_result = PMA_DBI_query($db_rights_sql);

while ($db_rights_row = PMA_DBI_fetch_assoc($db_rights_result)) {

$db_rights_row = array_merge($user_defaults, $db_rights_row);

// only Db names in the table `mysql`.`db` uses wildcards

// as we are in the db specific rights display we want

// all db names escaped, also from other sources

$db_rights_row['Db'] = PMA_escape_mysql_wildcards(

$db_rights_row['Db']);

$db_rights[$db_rights_row['Db']] = $db_rights_row;

}

PMA_DBI_free_result($db_rights_result);

unset($db_rights_sql, $db_rights_sqls, $db_rights_result, $db_rights_row);

$sql_query = 'SELECT * FROM `mysql`.`db`' . $user_host_condition . ' ORDER BY `Db` ASC';

$res = PMA_DBI_query($sql_query);

$sql_query = '';

while ($row = PMA_DBI_fetch_assoc($res)) {

if (isset($db_rights[$row['Db']])) {

$db_rights[$row['Db']] = array_merge($db_rights[$row['Db']], $row);

} else {

$db_rights[$row['Db']] = $row;

}

// there are db specific rights for this user

// so we can drop this db rights

$db_rights[$row['Db']]['can_delete'] = true;

}

PMA_DBI_free_result($res);

unset($row, $res);

} else {

// db name was given,

// so we want all user specific rights for this db

$user_host_condition .=

' AND `Db`'

.' LIKE \'' . PMA_sqlAddslashes($dbname) . "'";

$tables_to_search_for_users = array(

'columns_priv',

);

$db_rights_sqls = array();

foreach ($tables_to_search_for_users as $table_search_in) {

if (in_array($table_search_in, $tables)) {

$db_rights_sqls[] = '

SELECT DISTINCT `Table_name`

FROM `mysql`.' . PMA_backquote($table_search_in)

. $user_host_condition;

}

}

$user_defaults = array(

'Table_name' => '',

'Grant_priv' => 'N',

'privs' => array('USAGE'),

'Column_priv' => true,

);

// for the rights

$db_rights = array();

$db_rights_sql = '(' . implode(') UNION (', $db_rights_sqls) . ')'

.' ORDER BY `Table_name` ASC';

$db_rights_result = PMA_DBI_query($db_rights_sql);

while ($db_rights_row = PMA_DBI_fetch_assoc($db_rights_result)) {

$db_rights_row = array_merge($user_defaults, $db_rights_row);

$db_rights[$db_rights_row['Table_name']] = $db_rights_row;

}

PMA_DBI_free_result($db_rights_result);

unset($db_rights_sql, $db_rights_sqls, $db_rights_result, $db_rights_row);

$sql_query =

'SELECT `Table_name`,'

.' `Table_priv`,'

.' IF(`Column_priv` = _latin1 \'\', 0, 1)'

.' AS \'Column_priv\''

.' FROM `mysql`.`tables_priv`'

. $user_host_condition

.' ORDER BY `Table_name` ASC;';

$res = PMA_DBI_query($sql_query);

$sql_query = '';

while ($row = PMA_DBI_fetch_assoc($res)) {

if (isset($db_rights[$row['Table_name']])) {

$db_rights[$row['Table_name']] = array_merge($db_rights[$row['Table_name']], $row);

} else {

$db_rights[$row['Table_name']] = $row;

}

}

PMA_DBI_free_result($res);

unset($row, $res);

}

ksort($db_rights);

// display rows

if (count($db_rights) < 1) {

echo '

' . "\n"

. '

' . $GLOBALS['strNone'] . ' ' . "\n"

. '

' . "\n";

} else {

$odd_row = true;

$found_rows = array();

//while ($row = PMA_DBI_fetch_assoc($res)) {

foreach ($db_rights as $row) {

$found_rows[] = (! isset($dbname)) ? $row['Db'] : $row['Table_name'];

echo '

' . "\n"

. '

' . htmlspecialchars((! isset($dbname)) ? $row['Db'] : $row['Table_name']) . '' . "\n"

. '

' . "\n"

. ' ' . join(',' . "\n" . ' ', PMA_extractPrivInfo($row, TRUE)) . "\n"

. '

' . "\n"

. '

' . ((((! isset($dbname)) && $row['Grant_priv'] == 'Y') || (isset($dbname) && in_array('Grant', explode(',', $row['Table_priv'])))) ? $GLOBALS['strYes'] : $GLOBALS['strNo']) . '' . "\n"

. '

';

if (! empty($row['Table_privs']) || ! empty ($row['Column_priv'])) {

echo $GLOBALS['strYes'];

} else {

echo $GLOBALS['strNo'];

}

echo '

' . "\n"

. '

';

printf($link_edit, urlencode($username),

urlencode($hostname),

urlencode((! isset($dbname)) ? $row['Db'] : $dbname),

urlencode((! isset($dbname)) ? '' : $row['Table_name']));

echo '

' . "\n"

. '

';

if (! empty($row['can_delete']) || isset($row['Table_name']) && strlen($row['Table_name'])) {

printf($link_revoke, urlencode($username),

urlencode($hostname),

urlencode((! isset($dbname)) ? $row['Db'] : $dbname),

urlencode((! isset($dbname)) ? '' : $row['Table_name']));

}

echo '

' . "\n"

. '

' . "\n";

$odd_row = ! $odd_row;

} // end while

}

unset($row);

echo '

' . "\n"

. '

' . "\n";

if (! isset($dbname)) {

// no database name was given, display select db

$pred_db_array =PMA_DBI_fetch_result('SHOW DATABASES;');

echo ' ' . $GLOBALS['strAddPrivilegesOnDb'] . ':' . "\n";

if (!empty($pred_db_array)) {

echo ' ' . "\n"

. ' ' . $GLOBALS['strUseTextField'] . ':' . "\n";

foreach ($pred_db_array as $current_db) {

$current_db = PMA_escape_mysql_wildcards($current_db);

// cannot use array_diff() once, outside of the loop,

// because the list of databases has special characters

// already escaped in $found_rows,

// contrary to the output of SHOW DATABASES

if (empty($found_rows) || ! in_array($current_db, $found_rows)) {

echo ' '

. htmlspecialchars($current_db) . '' . "\n";

}

}

echo ' ' . "\n";

}

echo ' ' . "\n"

. PMA_showHint($GLOBALS['strEscapeWildcards']);

} else {

echo ' ' . "\n"

. ' ' . $GLOBALS['strAddPrivilegesOnTbl'] . ':' . "\n";

if ($res = @PMA_DBI_try_query('SHOW TABLES FROM ' . PMA_backquote($dbname) . ';', null, PMA_DBI_QUERY_STORE)) {

$pred_tbl_array = array();

while ($row = PMA_DBI_fetch_row($res)) {

if (!isset($found_rows) || !in_array($row[0], $found_rows)) {

$pred_tbl_array[] = $row[0];

}

}

PMA_DBI_free_result($res);

unset($res, $row);

if (!empty($pred_tbl_array)) {

echo ' ' . "\n"

. ' ' . $GLOBALS['strUseTextField'] . ':' . "\n";

foreach ($pred_tbl_array as $current_table) {

echo ' ' . htmlspecialchars($current_table) . '' . "\n";

}

echo ' ' . "\n";

}

} else {

unset($res);

}

echo ' ' . "\n";

}

echo '

' . "\n";

echo '

' . "\n"

. ' '

. '

' . "\n"

. '

' . "\n";

}

// Provide a line with links to the relevant database and table

if (isset($dbname) && empty($dbname_is_wildcard)) {

echo '[ ' . $GLOBALS['strDatabase']

. ' '

. htmlspecialchars($dbname) . ': ' . PMA_getTitleForTarget($GLOBALS['cfg']['DefaultTabDatabase']) . " ]\n";

if (isset($tablename)) {

echo ' [ ' . $GLOBALS['strTable'] . ' ' . htmlspecialchars($tablename) . ': '

. PMA_getTitleForTarget($GLOBALS['cfg']['DefaultTabTable'])

. " ]\n";

}

unset($url_dbname);

}

if (! isset($dbname) && ! $user_does_not_exists) {

require_once './libraries/display_change_password.lib.php';

echo '

' . "\n"

. PMA_generate_common_hidden_inputs('', '')

. '' . "\n"

. '' . "\n"

. '

' . "\n"

. ' ' . $GLOBALS['strChangeCopyUser'] . '' . "\n";

PMA_displayLoginInformationFields('change');

echo '

' . "\n"

. ' ' . $GLOBALS['strChangeCopyMode'] . '' . "\n";

$choices = array(

'4' => $GLOBALS['strChangeCopyModeCopy'],

'1' => $GLOBALS['strChangeCopyModeJustDelete'],

'2' => $GLOBALS['strChangeCopyModeRevoke'],

'3' => $GLOBALS['strChangeCopyModeDeleteAndReload']);

PMA_display_html_radio('mode', $choices, '4', true);

unset($choices);

echo '

' . "\n"

. '

' . "\n"

. '

' . "\n"

. ' ' . "\n"

. '

' . "\n"

. '

' . "\n";

}

}

} elseif (isset($_REQUEST['adduser'])) {

// Add a new user

$GLOBALS['url_query'] .= '&adduser=1';

echo '

' . "\n"

. PMA_getIcon('b_usradd.png') . $GLOBALS['strAddUser'] . "\n"

. '' . "\n"

. '

' . "\n"

. PMA_generate_common_hidden_inputs('', '');

PMA_displayLoginInformationFields('new');

echo '

' . "\n"

. '' . $GLOBALS['strCreateUserDatabase'] . '' . "\n";

$default_choice = 0;

$choices = array(

'0' => $GLOBALS['strCreateUserDatabaseNone'],

'1' => $GLOBALS['strCreateUserDatabaseName'],

'2' => $GLOBALS['strCreateUserDatabaseWildcard']);

if ( !empty($dbname) ) {

$choices['3'] = sprintf($GLOBALS['strCreateUserDatabasePrivileges'], htmlspecialchars($dbname));

$default_choice = 3;

echo '' . "\n";

}

// 4th parameter set to true to add line breaks

// 5th parameter set to false to avoid htmlspecialchars() escaping in the label

// since we have some HTML in some labels

PMA_display_html_radio('createdb', $choices, $default_choice, true, false);

unset($choices);

unset($default_choice);

echo '

' . "\n";

PMA_displayPrivTable('*', '*', FALSE);

echo '

' . "\n"

. ' ' . "\n"

. '

' . "\n"

. '

' . "\n";

} else {

// check the privileges for a particular database.

echo '

. '

' . "\n"

. PMA_getIcon('b_usrcheck.png')

. ' ' . sprintf($GLOBALS['strUsersHavingAccessToDb'], '' . htmlspecialchars($checkprivs) . '') . "\n"

. '

' . "\n"

. '' . "\n"

. '

' . $GLOBALS['strUser'] . '' . "\n"

. '

' . $GLOBALS['strHost'] . '' . "\n"

. '

' . $GLOBALS['strType'] . '' . "\n"

. '

' . $GLOBALS['strPrivileges'] . '' . "\n"

. '

' . $GLOBALS['strGrantOption'] . '' . "\n"

. '

' . $GLOBALS['strAction'] . '' . "\n"

. '

' . "\n"

. '

' . "\n"

. '

' . "\n";

$odd_row = TRUE;

unset($row, $row1, $row2);

// now, we build the table...

$list_of_privileges =

'`User`, '

. '`Host`, '

. '`Select_priv`, '

. '`Insert_priv`, '

. '`Update_priv`, '

. '`Delete_priv`, '

. '`Create_priv`, '

. '`Drop_priv`, '

. '`Grant_priv`, '

. '`Index_priv`, '

. '`Alter_priv`, '

. '`References_priv`, '

. '`Create_tmp_table_priv`, '

. '`Lock_tables_priv`, '

. '`Create_view_priv`, '

. '`Show_view_priv`, '

. '`Create_routine_priv`, '

. '`Alter_routine_priv`, '

. '`Execute_priv`';

$list_of_compared_privileges =

'`Select_priv` = \'N\''

. ' AND `Insert_priv` = \'N\''

. ' AND `Update_priv` = \'N\''

. ' AND `Delete_priv` = \'N\''

. ' AND `Create_priv` = \'N\''

. ' AND `Drop_priv` = \'N\''

. ' AND `Grant_priv` = \'N\''

. ' AND `References_priv` = \'N\''

. ' AND `Create_tmp_table_priv` = \'N\''

. ' AND `Lock_tables_priv` = \'N\''

. ' AND `Create_view_priv` = \'N\''

. ' AND `Show_view_priv` = \'N\''

. ' AND `Create_routine_priv` = \'N\''

. ' AND `Alter_routine_priv` = \'N\''

. ' AND `Execute_priv` = \'N\'';

if (PMA_MYSQL_INT_VERSION >= 50106) {

$list_of_privileges .=

', `Event_priv`, '

. '`Trigger_priv`';

$list_of_compared_privileges .=

' AND `Event_priv` = \'N\''

. ' AND `Trigger_priv` = \'N\'';

}

$sql_query =

'(SELECT ' . $list_of_privileges . ', `Db`'

.' FROM `mysql`.`db`'

.' WHERE \'' . PMA_sqlAddslashes($checkprivs) . "'"

.' LIKE `Db`'

.' AND NOT (' . $list_of_compared_privileges. ')) '

.'UNION '

.'(SELECT ' . $list_of_privileges . ', \'*\' AS `Db`'

.' FROM `mysql`.`user` '

.' WHERE NOT (' . $list_of_compared_privileges . ')) '

.' ORDER BY `User` ASC,'

.' `Host` ASC,'

.' `Db` ASC;';

$res = PMA_DBI_query($sql_query);

$row = PMA_DBI_fetch_assoc($res);

if ($row) {

$found = TRUE;

}

if ($found) {

while (TRUE) {

// prepare the current user

$current_privileges = array();

$current_user = $row['User'];

$current_host = $row['Host'];

while ($row && $current_user == $row['User'] && $current_host == $row['Host']) {

$current_privileges[] = $row;

$row = PMA_DBI_fetch_assoc($res);

}

echo '

' . "\n"

. '

if (count($current_privileges) > 1) {

echo ' rowspan="' . count($current_privileges) . '"';

}

echo '>' . (empty($current_user) ? '' . $GLOBALS['strAny'] . '' : htmlspecialchars($current_user)) . "\n"

. '

' . "\n"

. '

if (count($current_privileges) > 1) {

echo ' rowspan="' . count($current_privileges) . '"';

}

echo '>' . htmlspecialchars($current_host) . '

' . "\n";

foreach ($current_privileges as $current) {

echo '

' . "\n"

. ' ';

if (!isset($current['Db']) || $current['Db'] == '*') {

echo $GLOBALS['strGlobal'];

} elseif ($current['Db'] == PMA_escape_mysql_wildcards($checkprivs)) {

echo $GLOBALS['strDbSpecific'];

} else {

echo $GLOBALS['strWildcard'], ': ' . htmlspecialchars($current['Db']) . '';

}

echo "\n"

. '

' . "\n"

. '

' . "\n"

. ' ' . "\n"

. ' ' . join(',' . "\n" . ' ', PMA_extractPrivInfo($current, TRUE)) . "\n"

. ' ' . "\n"

. '

' . "\n"

. '

' . "\n"

. ' ' . ($current['Grant_priv'] == 'Y' ? $GLOBALS['strYes'] : $GLOBALS['strNo']) . "\n"

. '

' . "\n"

. '

' . "\n";

printf($link_edit, urlencode($current_user),

urlencode($current_host),

urlencode(! isset($current['Db']) || $current['Db'] == '*' ? '' : $current['Db']),

'');

echo '

' . "\n"

. '

' . "\n";

}

if (empty($row) && empty($row1) && empty($row2)) {

break;

}

$odd_row = ! $odd_row;

}

} else {

echo '

' . "\n"

. '

' . "\n"

. ' ' . $GLOBALS['strNoUsersFound'] . "\n"

. '

' . "\n"

. '

' . "\n";

}

echo '

' . "\n"

. '

' . "\n";

// Offer to create a new user for the current database

echo '

' . "\n"

. ' ' . "\n"

. PMA_getIcon('b_usradd.png')

. ' ' . $GLOBALS['strAddUser'] . '' . "\n"

. '

' . "\n";

} // end if (empty($_REQUEST['adduser']) && empty($checkprivs)) ... elseif ... else ...

/**

* Displays the footer

*/

echo "\n\n";

require_once './libraries/footer.inc.php';

?>

一键复制

编辑

Web IDE

原始数据

按行查看

历史