관리-도구

편집 파일: sqlpatch.php

<?php
/**
 * @copyright Copyright 2003-2020 Zen Cart Development Team
 * @copyright Portions Copyright 2003 osCommerce
 * @license http://www.zen-cart.com/license/2_0.txt GNU Public License V2.0
 * @version $Id: DrByte 2020 May 08 Modified in v1.5.7 $
 */
require('includes/application_top.php');

if (!defined('DB_PREFIX')) {
  define('DB_PREFIX', '');
}
if (!defined('TABLE_UPGRADE_EXCEPTIONS')) {
  define('TABLE_UPGRADE_EXCEPTIONS', DB_PREFIX . 'upgrade_exceptions');
}

if (isset($_GET['debug']) && $_GET['debug'] == 'ON') {
  $debug = true;
}
if (!isset($debug)) {
  $debug = false;
}
if (!isset($_POST['debug'])) {
  $_POST['debug'] = '';
}
if (!isset($_POST['debug2'])) {
  $_POST['debug2'] = '';
}
if (!isset($_POST['debug3'])) {
  $_POST['debug3'] = '';
}
if (!isset($_GET['debug']) && !zen_not_null($_POST['debug']) && $debug != true) {
  define('ZC_UPG_DEBUG', false);
}
if (!isset($_GET['debug2']) && !zen_not_null($_POST['debug2']) && $debug != true) {
  define('ZC_UPG_DEBUG2', false);
}
if (!isset($_GET['debug3']) && !zen_not_null($_POST['debug3']) && $debug != true) {
  define('ZC_UPG_DEBUG3', false);
}

$keepslashes = (isset($_GET['keepslashes']) && ($_GET['keepslashes'] == '1' || $_GET['keepslashes'] == 'true')) ? true : false;

if (!isset($skip_stripslashes)) {
  $skip_stripslashes = false;
}

//NOTE: THIS IS INTENTIONALLY ON 2 LINES:
$linebreak = '
';

// NOTE: this line break is intentional!!!!

function executeSql($lines, $database, $table_prefix = '') {
  zen_set_time_limit(1200); 
  global $db, $debug, $messageStack;
  $sql_file = 'SQLPATCH';
  $newline = '';
  $saveline = '';
  $ignored_count = 0;
  $return_output = array();
  $errors = array();
  $lines_to_keep_together_counter = 0;
  $results = 0;
  $ignore_line = false;
  $string = '';
  $result = '';
  $complete_line = false;
  if (!isset($_GET['debug'])) {
    $_GET['debug'] = 'OFF';
  }

foreach ($lines as $line) {
    if ($_GET['debug'] == 'ON') {
      echo $line . '<br>';
    }

$line = trim($line);
    $line = str_replace('`', '', $line); //remove backquotes
    $line = $saveline . $line;
    $keep_together = 1; // count of number of lines to treat as a single command
    // split the line into words ... starts at $param[0] and so on.  Also remove the ';' from end of last param if exists
     $no_semi_line = rtrim($line, ';'); 
     $param = preg_split('/\s+/', $no_semi_line);

// The following command checks to see if we're asking for a block of commands to be run at once.
    // Syntax: #NEXT_X_ROWS_AS_ONE_COMMAND:6     for running the next 6 commands together (commands denoted by a ;)
    if (substr($line, 0, 28) == '#NEXT_X_ROWS_AS_ONE_COMMAND:') {
      $keep_together = substr($line, 28);
    }
    if (substr($line, 0, 1) != '#' && substr($line, 0, 1) != '-' && $line != '') {
//        if ($table_prefix != -1) {
//echo '*}'.$line.'<br>';

$line_upper = strtoupper($line);
      switch (true) {
        case (substr($line_upper, 0, 21) == 'DROP TABLE IF EXISTS '):
//            if (!$checkprivs = zen_check_database_privs('DROP')) return sprintf(REASON_NO_PRIVILEGES,'DROP');
          $line = 'DROP TABLE IF EXISTS ' . $table_prefix . ltrim(substr($line, 21));
          break;
        case (substr($line_upper, 0, 11) == 'DROP TABLE ' && $param[2] != 'IF'):
          if (!$checkprivs = zen_check_database_privs('DROP')) {
            $result = sprintf(REASON_NO_PRIVILEGES, 'DROP');
          }
          if (!zen_table_exists($param[2]) || zen_not_null($result)) {
            zen_write_to_upgrade_exceptions_table($line, (zen_not_null($result) ? $result : sprintf(REASON_TABLE_DOESNT_EXIST, $param[2])), $sql_file);
            $ignore_line = true;
            $result = (zen_not_null($result) ? $result : sprintf(REASON_TABLE_DOESNT_EXIST, $param[2])); //duplicated here for on-screen error-reporting
            break;
          } else {
            $line = 'DROP TABLE ' . $table_prefix . ltrim(substr($line, 11));
          }
          break;
        case (substr($line_upper, 0, 13) == 'CREATE TABLE '):
          // check to see if table exists
          $table = (strtoupper($param[2] . ' ' . $param[3] . ' ' . $param[4]) == 'IF NOT EXISTS') ? $param[5] : $param[2];
          $result = zen_table_exists($table);
          if ($result == true) {
            zen_write_to_upgrade_exceptions_table($line, sprintf(REASON_TABLE_ALREADY_EXISTS, $table), $sql_file);
            $ignore_line = true;
            $result = sprintf(REASON_TABLE_ALREADY_EXISTS, $table); //duplicated here for on-screen error-reporting
            break;
          } else {
            $line = (strtoupper($param[2] . ' ' . $param[3] . ' ' . $param[4]) == 'IF NOT EXISTS') ? 'CREATE TABLE IF NOT EXISTS ' . $table_prefix . ltrim(substr($line, 27)) : 'CREATE TABLE ' . $table_prefix . ltrim(substr($line, 13));
          }
          break;
        case (substr($line_upper, 0, 15) == 'TRUNCATE TABLE '):
          // check to see if TRUNCATE command may be safely executed
          if (!$tbl_exists = zen_table_exists($param[2])) {
            $result = sprintf(REASON_TABLE_NOT_FOUND, $param[2]) . ' CHECK PREFIXES!' . $param[2];
            zen_write_to_upgrade_exceptions_table($line, $result, $sql_file);
            $ignore_line = true;
            break;
          } else {
            $line = 'TRUNCATE TABLE ' . $table_prefix . ltrim(substr($line, 15));
          }
          break;
        case (substr($line_upper, 0, 13) == 'REPLACE INTO '):
          //check to see if table prefix is going to match
          if (!$tbl_exists = zen_table_exists($param[2])) {
            $result = sprintf(REASON_TABLE_NOT_FOUND, $param[2]) . ' CHECK PREFIXES!';
          }
          // check to see if INSERT command may be safely executed for "configuration" or "product_type_layout" tables
          if (($param[2] == 'configuration' && ($result = zen_check_config_key($line))) or ( $param[2] == 'product_type_layout' && ($result = zen_check_product_type_layout_key($line))) or ( !$tbl_exists)) {
            zen_write_to_upgrade_exceptions_table($line, $result, $sql_file);
            $ignore_line = true;
            break;
          } else {
            $line = 'REPLACE INTO ' . $table_prefix . ltrim(substr($line, 13));
          }
          break;
        case (substr($line_upper, 0, 12) == 'INSERT INTO '):
          //check to see if table prefix is going to match
          if (!$tbl_exists = zen_table_exists($param[2])) {
            $result = sprintf(REASON_TABLE_NOT_FOUND, $param[2]) . ' CHECK PREFIXES!';
          }
          // check to see if INSERT command may be safely executed for "configuration" or "product_type_layout" tables
          if (($param[2] == 'configuration' && ($result = zen_check_config_key($line))) or ( $param[2] == 'product_type_layout' && ($result = zen_check_product_type_layout_key($line))) or ( !$tbl_exists)) {
            zen_write_to_upgrade_exceptions_table($line, $result, $sql_file);
            $ignore_line = true;
            break;
          } else {
            $line = 'INSERT INTO ' . $table_prefix . ltrim(substr($line, 12));
          }
          break;
        case (substr($line_upper, 0, 19) == 'INSERT IGNORE INTO '):
          //check to see if table prefix is going to match
          if (!$tbl_exists = zen_table_exists($param[3])) {
            $result = sprintf(REASON_TABLE_NOT_FOUND, $param[3]) . ' CHECK PREFIXES!';
            zen_write_to_upgrade_exceptions_table($line, $result, $sql_file);
            $ignore_line = true;
            break;
          } else {
            $line = 'INSERT IGNORE INTO ' . $table_prefix . ltrim(substr($line, 19));
          }
          break;
        case (substr($line_upper, 0, 12) == 'ALTER TABLE '):
          // check to see if ALTER command may be safely executed
          if ($result = zen_check_alter_command($param)) {
            zen_write_to_upgrade_exceptions_table($line, $result, $sql_file);
            $ignore_line = true;
            break;
          } else {
            $line = 'ALTER TABLE ' . $table_prefix . ltrim(substr($line, 12));
          }
          break;
        case (substr($line_upper, 0, 13) == 'RENAME TABLE '):
          // RENAME TABLE command cannot be parsed to insert table prefixes, so skip if zen is using prefixes
          if (zen_not_null(DB_PREFIX)) {
            zen_write_to_upgrade_exceptions_table($line, 'RENAME TABLE command not supported by upgrader. Please use phpMyAdmin instead.', $sql_file);
            $messageStack->add(ERROR_RENAME_TABLE, 'caution');

$ignore_line = true;
          }
          break;
        case (substr($line_upper, 0, 7) == 'UPDATE '):
          //check to see if table prefix is going to match
          if (!$tbl_exists = zen_table_exists($param[1])) {
            zen_write_to_upgrade_exceptions_table($line, sprintf(REASON_TABLE_NOT_FOUND, $param[1]) . ' CHECK PREFIXES!', $sql_file);
            $result = sprintf(REASON_TABLE_NOT_FOUND, $param[1]) . ' CHECK PREFIXES!';
            $ignore_line = true;
            break;
          } else {
            $line = 'UPDATE ' . $table_prefix . ltrim(substr($line, 7));
          }
          break;
        case (substr($line_upper, 0, 14) == 'UPDATE IGNORE '):
          //check to see if table prefix is going to match
          if (!$tbl_exists = zen_table_exists($param[2])) {
            zen_write_to_upgrade_exceptions_table($line, sprintf(REASON_TABLE_NOT_FOUND, $param[2]) . ' CHECK PREFIXES!', $sql_file);
            $result = sprintf(REASON_TABLE_NOT_FOUND, $param[2]) . ' CHECK PREFIXES!';
            $ignore_line = true;
            break;
          } else {
            $line = 'UPDATE IGNORE ' . $table_prefix . ltrim(substr($line, 14));
          }
          break;
        case (substr($line_upper, 0, 12) == 'DELETE FROM '):
          $line = 'DELETE FROM ' . $table_prefix . ltrim(substr($line, 12));
          break;
        case (substr($line_upper, 0, 11) == 'DROP INDEX '):
          // check to see if DROP INDEX command may be safely executed
          if ($result = zen_drop_index_command($param)) {
            zen_write_to_upgrade_exceptions_table($line, $result, $sql_file);
            $ignore_line = true;
            break;
          } else {
            $line = 'DROP INDEX ' . $param[2] . ' ON ' . $table_prefix . $param[4];
          }
          break;
        case (substr($line_upper, 0, 13) == 'CREATE INDEX ' || (strtoupper($param[0]) == 'CREATE' && strtoupper($param[2]) == 'INDEX')):
          // check to see if CREATE INDEX command may be safely executed
          if ($result = zen_create_index_command($param)) {
            zen_write_to_upgrade_exceptions_table($line, $result, $sql_file);
            $ignore_line = true;
            break;
          } else {
            if (strtoupper($param[1]) == 'INDEX') {
              $line = trim('CREATE INDEX ' . $param[2] . ' ON ' . $table_prefix . implode(' ', array($param[4], $param[5], $param[6], $param[7], $param[8], $param[9], $param[10], $param[11], $param[12], $param[13]))) . ';'; // add the ';' back since it was removed from $param at start
            } else {
              $line = trim('CREATE ' . $param[1] . ' INDEX ' . $param[3] . ' ON ' . $table_prefix . implode(' ', array($param[5], $param[6], $param[7], $param[8], $param[9], $param[10], $param[11], $param[12], $param[13]))); // add the ';' back since it was removed from $param at start
            }
          }
          break;
        case (substr($line_upper, 0, 7) == 'SELECT ' && substr_count($line, 'FROM ') > 0):
          $line = str_replace('FROM ', 'FROM ' . $table_prefix, $line);
          break;
        case (substr($line_upper, 0, 10) == 'LEFT JOIN '):
          $line = 'LEFT JOIN ' . $table_prefix . ltrim(substr($line, 10));
          break;
        case (substr($line_upper, 0, 5) == 'FROM '):
          if (substr_count($line, ',') > 0) { // contains FROM and a comma, thus must parse for multiple tablenames
            $tbl_list = explode(',', ltrim(substr($line, 5)));
            $line = 'FROM ';
            foreach ($tbl_list as $val) {
              $line .= $table_prefix . ltrim($val) . ','; // add prefix and comma
            } //end foreach
            if (substr($line, -1) == ',') {
              $line = substr($line, 0, (strlen($line) - 1)); // remove trailing ','
            }
          } else { //didn't have a comma, but starts with "FROM ", so insert table prefix
            $line = str_replace('FROM ', 'FROM ' . $table_prefix, $line);
          }//endif substr_count(,)
          break;
        default:
          break;
      } //end switch
//        } // endif $table_prefix
      $newline .= $line . ' ';

if (substr($line, -1) == ';') {
        //found a semicolon, so treat it as a full command, incrementing counter of rows to process at once
        if (substr($newline, -1) == ' ') {
          $newline = substr($newline, 0, (strlen($newline) - 1));
        }
        $lines_to_keep_together_counter++;
        if ($lines_to_keep_together_counter == $keep_together) { // if all grouped rows have been loaded, go to execute.
          $complete_line = true;
          $lines_to_keep_together_counter = 0;
        } else {
          $complete_line = false;
        }
      } //endif found ';'
        else {
            $messageStack->add(ERROR_LINE_INCOMPLETE, 'error');
        }

if ($complete_line) {
        if ($debug == true) {
          echo ((!$ignore_line) ? '<br>About to execute.' : 'Ignoring statement. This command WILL NOT be executed.') . '<br>Debug info:<br>$ line=' . $line . '<br>$ complete_line=' . $complete_line . '<br>$ keep_together=' . $keep_together . '<br>SQL=' . $newline . '<br><br>';
        }
        $output = array();
        if (trim(str_replace(';', '', $newline)) != '' && !$ignore_line) {
          $output = $db->Execute($newline);
        }
        $results++;
        $string .= $newline . '<br>';
        $return_output[] = $output;
        if (zen_not_null($result)) {
          $errors[] = $result;
        }
        // reset var's
        $newline = '';
        $keep_together = 1;
        $complete_line = false;
        if ($ignore_line) {
          $ignored_count++;
        }
        $ignore_line = false;

// show progress bar
        global $zc_show_progress;
        if ($zc_show_progress == 'yes') {
          $counter++;
          if ($counter / 5 == (int)($counter / 5)) {
            echo '~ ';
          }
          if ($counter > 200) {
            echo '<br><br>';
            $counter = 0;
          }
          @ob_flush();
          @flush();
        }
      } //endif $complete_line
    } //endif ! # or -
  } // end foreach $lines
  zen_record_admin_activity('Admin SQL Patch tool executed a query.', 'notice');
  return array('queries' => $results, 'string' => $string, 'output' => $return_output, 'ignored' => ($ignored_count), 'errors' => $errors);
}

//end function

function zen_check_database_privs($priv = '', $table = '', $show_privs = false) {
  // bypass until future version
  return true;
  // end bypass
  global $zdb_server, $zdb_user, $zdb_name;
  if (isset($_GET['nogrants'])) {
    return true; // bypass if flag set
  }
  if (isset($_POST['nogrants'])) {
    return true; // bypass if flag set
  }

//Display permissions, or check for suitable permissions to carry out a particular task
  //possible outputs:
  //GRANT ALL PRIVILEGES ON *.* TO 'xyz'@'localhost' WITH GRANT OPTION
  //GRANT SELECT, INSERT, UPDATE, DELETE, CREATE, DROP, FILE, INDEX, ALTER ON *.* TO 'xyz'@'localhost' IDENTIFIED BY PASSWORD '2344'
  //GRANT SELECT, INSERT, UPDATE, DELETE, CREATE, DROP, INDEX, ALTER ON `db1`.* TO 'xyz'@'localhost'
  //GRANT SELECT (id) ON db1.tablename TO 'xyz'@'localhost
  global $db;
  global $db_test;
  $granted_privs_list = '';
  if (defined('ZC_UPG_DEBUG3') && ZC_UPG_DEBUG3 == true) {
    echo '<br>Checking for priv: [' . (zen_not_null($priv) ? $priv : 'none specified') . ']<br>';
  }
  if (!defined('DB_SERVER')) {
    define('DB_SERVER', $zdb_server);
  }
  if (!defined('DB_SERVER_USERNAME')) {
    define('DB_SERVER_USERNAME', $zdb_user);
  }
  if (!defined('DB_DATABASE')) {
    define('DB_DATABASE', $zdb_name);
  }
  $user = DB_SERVER_USERNAME . "@" . DB_SERVER;
  if ($user == 'DB_SERVER_USERNAME@DB_SERVER' || DB_DATABASE == 'DB_DATABASE') {
    return true; // bypass if constants not set properly
  }
  $sql = "SHOW GRANTS FOR " . $user;
  if (ZC_UPG_DEBUG3 == true) {
    echo $sql . '<br>';
  }
  $results = $db->Execute($sql);
  foreach ($results as $result) {
    if (ZC_UPG_DEBUG3 == true) {
      echo $result['Grants for ' . $user] . '<br>';
    }
    $grant_syntax = $result['Grants for ' . $user] . ' ';
    $granted_privs = str_replace('GRANT ', '', $grant_syntax); // remove "GRANT" keyword
    $granted_privs = substr($granted_privs, 0, strpos($granted_privs, ' TO ')); //remove anything after the "TO" keyword
    $granted_db = str_replace(array('`', '\\'), '', substr($granted_privs, strpos($granted_privs, ' ON ') + 4)); //remove backquote and find "ON" string
    if (ZC_UPG_DEBUG3 == true) {
      echo 'privs_list = ' . $granted_privs . '<br>';
    }
    if (ZC_UPG_DEBUG3 == true) {
      echo 'granted_db = ' . $granted_db . '<br>';
    }
    $db_priv_ok += ($granted_db == '*.*' || $granted_db == DB_DATABASE . '.*' || $granted_db == DB_DATABASE . '.' . $table) ? true : false;
    if (ZC_UPG_DEBUG3 == true) {
      echo 'db-priv-ok=' . $db_priv_ok . '<br>';
    }

if ($db_priv_ok) {  // if the privs list pertains to the current database, or is *.*, carry on
      $granted_privs = substr($granted_privs, 0, strpos($granted_privs, ' ON ')); //remove anything after the "ON" keyword
      $granted_privs_list .= ($granted_privs_list == '') ? $granted_privs : ', ' . $granted_privs;

$specific_priv_found = (zen_not_null($priv) && substr_count($granted_privs, $priv) == 1);
      if (ZC_UPG_DEBUG3 == true) {
        echo 'specific priv[' . $priv . '] found =' . $specific_priv_found . '<br>';
      }

if (ZC_UPG_DEBUG3 == true) {
        echo 'spec+db=' . ($specific_priv_found && $db_priv_ok == true) . ' ||| ';
      }
      if (ZC_UPG_DEBUG3 == true) {
        echo 'all+db=' . ($granted_privs == 'ALL PRIVILEGES' && $db_priv_ok == true) . '<br><br>';
      }

if (($specific_priv_found && $db_priv_ok == true) || ($granted_privs == 'ALL PRIVILEGES' && $db_priv_ok == true)) {
        return true; // privs found
      }
    } // endif $db_priv_ok
  }
  if ($show_privs) {
    if (ZC_UPG_DEBUG3 == true) {
      echo 'LIST OF PRIVS=' . $granted_privs_list . '<br>';
    }
    return $db_priv_ok . '|||' . $granted_privs_list;
  } else {
    return false; // if not found, return false
  }
}

function zen_check_config_key($line) {
  global $db;
  $values = array();
  $values = explode("'", $line);
  //INSERT INTO configuration blah blah blah VALUES ('title','key', blah blah blah);
  //[0]=INSERT INTO.....
  //[1]=title
  //[2]=,
  //[3]=key
  //[4]=blah blah
  $title = $values[1];
  $key = $values[3];
  $sql = "SELECT configuration_title FROM " . DB_PREFIX . "configuration WHERE configuration_key='" . zen_db_input($key) . "'";
  $result = $db->Execute($sql);
  if ($result->RecordCount() > 0) {
    return sprintf(REASON_CONFIG_KEY_ALREADY_EXISTS, $key);
  }
}

function zen_check_product_type_layout_key($line) {
  global $db;
  $values = array();
  $values = explode("'", $line);
  $title = $values[1];
  $key = $values[3];
  $sql = "SELECT configuration_title FROM " . DB_PREFIX . "product_type_layout WHERE configuration_key='" . zen_db_input($key) . "'";
  $result = $db->Execute($sql);
  if ($result->RecordCount() > 0) {
    return sprintf(REASON_PRODUCT_TYPE_LAYOUT_KEY_ALREADY_EXISTS, $key);
  }
}

function zen_write_to_upgrade_exceptions_table($line, $reason, $sql_file) {
  global $db;
  zen_create_exceptions_table();
  $sql = "INSERT INTO " . DB_PREFIX . TABLE_UPGRADE_EXCEPTIONS . " (sql_file, reason, errordate, sqlstatement) VALUES (:file:, :reason:, now(), :line:)";
  $sql = $db->bindVars($sql, ':file:', $sql_file, 'string');
  $sql = $db->bindVars($sql, ':reason:', $reason, 'string');
  $sql = $db->bindVars($sql, ':line:', $line, 'string');
  if (defined('ZC_UPG_DEBUG3') && ZC_UPG_DEBUG3 == true) {
    echo '<br>sql=' . $sql . '<br>';
  }
  $result = $db->Execute($sql);
  return $result;
}

function zen_purge_exceptions_table() {
  global $db;
  zen_create_exceptions_table();
  $result = $db->Execute("TRUNCATE TABLE " . DB_PREFIX . TABLE_UPGRADE_EXCEPTIONS);
  return $result;
}

function zen_create_exceptions_table() {
  global $db;
  if (!zen_table_exists(TABLE_UPGRADE_EXCEPTIONS)) {
    $result = $db->Execute("CREATE TABLE " . DB_PREFIX . TABLE_UPGRADE_EXCEPTIONS . " (
            upgrade_exception_id smallint(5) NOT NULL auto_increment,
            sql_file varchar(50) default NULL,
            reason varchar(200) default NULL,
            errordate datetime default '0001-01-01 00:00:00',
            sqlstatement text, PRIMARY KEY  (upgrade_exception_id)
          )");
    return $result;
  }
}

//------------------------------------------------------
// END FUNCTIONS LIST
//------------------------------------------------------

$debug = (isset($_GET['debug']) && $_GET['debug'] == 'ON');
$action = (isset($_GET['action']) ? $_GET['action'] : '');
if (zen_not_null($action)) {
  switch ($action) {
    case 'execute':
      if (isset($_POST['query_string']) && $_POST['query_string'] != '') {
        $query_string = $_POST['query_string'];
        if ($debug == true) {
          echo $query_string . '<br>';
        }
        $query_string = explode($linebreak, ($query_string));
        $query_results = executeSql($query_string, DB_DATABASE, DB_PREFIX);
        if ($query_results['queries'] > 0 && $query_results['queries'] != $query_results['ignored']) {
          $messageStack->add(sprintf(TEXT_EXECUTE_SUCCESS, (int)$query_results['queries']), 'success');
        } else {
          $messageStack->add(sprintf(ERROR_EXECUTE_FAILED, (int)$query_results['queries']), 'error');
        }
        if (zen_not_null($query_results['errors'])) {
          foreach ($query_results['errors'] as $value) {
            $messageStack->add('ERROR: ' . $value, 'error');
          }
        }
        if ($query_results['ignored'] != 0) {
          $messageStack->add(sprintf(ERROR_EXECUTE_IGNORED, (int)$query_results['ignored']), 'caution');
        }
        if (zen_not_null($query_results['output'])) {
          foreach ($query_results['output'] as $value) {
            if (zen_not_null($value)) {
              $messageStack->add('INFO: ' . $value, 'caution');
            }
          }
        }
      } else {
        $messageStack->add(ERROR_NOTHING_TO_DO, 'error');
      }
      break;
    case 'uploadquery':
      $query_string = '';
      if (isset($_FILES['sql_file']) && isset($_FILES['sql_file']['tmp_name']) && $_FILES['sql_file']['tmp_name'] != '') {
        $upload_query = file($_FILES['sql_file']['tmp_name']);
        $query_string = $upload_query;
      }
      if ($query_string != '') {
        $query_results = executeSql($query_string, DB_DATABASE, DB_PREFIX);
        if ($query_results['queries'] > 0 && $query_results['queries'] != $query_results['ignored']) {
          $messageStack->add(sprintf(TEXT_UPLOADQUERY_SUCCESS, (int)$query_results['queries']), 'success');
        } else {
          $messageStack->add(sprintf(ERROR_UPLOADQUERY_FAILED, (int)$query_results['queries']), 'error');
        }
        if (zen_not_null($query_results['errors'])) {
          foreach ($query_results['errors'] as $value) {
            $messageStack->add(ICON_ERROR . ': ' . $value, 'error');
          }
        }
        if ($query_results['ignored'] != 0) {
          $messageStack->add(ERROR_UPLOADQUERY_IGNORED, 'caution');
        }
        if (zen_not_null($query_results['output'])) {
          foreach ($query_results['output'] as $value) {
            if (zen_not_null($value)) {
              $messageStack->add('ERROR: ' . $value, 'error');
            }
          }
        }
      } else {
        $messageStack->add(ERROR_NOTHING_TO_DO, 'error');
      }
      break;
    case 'help':
      break;
    default:
      break;
  }
}
?>
<?php if ($action != 'help') { ?>
  <!doctype html>
  <html <?php echo HTML_PARAMS; ?>>
    <head>
      <meta charset="<?php echo CHARSET; ?>">
      <title><?php echo TITLE; ?></title>
      <link rel="stylesheet" href="includes/stylesheet.css">
      <link rel="stylesheet" href="includes/cssjsmenuhover.css" media="all" id="hoverJS">
      <script src="includes/menu.js"></script>
      <script>
        function popupHelpWindow(url) {
            window.open(url, 'popupImageWindow', 'toolbar=no,location=no,directories=no,status=no,menubar=no,scrollbars=no,resizable=yes,copyhistory=no,width=100,height=100,screenX=150,screenY=150,top=150,left=150')
        }
        function init() {
            cssjsmenu('navbar');
            if (document.getElementById) {
                var kill = document.getElementById('hoverJS');
                kill.disabled = true;
            }
        }
      </script>
    </head>
    <body onLoad="init()" >
      
      <?php require(DIR_WS_INCLUDES . 'header.php'); ?>
      
      <div class="container-fluid">

<h1 class="pageHeading"><?php echo HEADING_TITLE; ?></h1>
        <div class="row">
          <div class="col-sm-12 text-danger"><?php echo HEADING_WARNING; ?></div>
        </div>
        <div class="row">
          <div class="col-sm-12 text-danger"><strong><?php echo HEADING_WARNING2; ?></strong></div>
        </div>
        <?php
        if ($action == 'execute' && $_POST['query_string'] != '') {
          ?>
          <div class="row">
            <div class="col-sm-12 text-danger"><strong><?php echo TEXT_QUERY_RESULTS; ?></strong></div>
          </div>
          <div class="row">
            <div class="col-sm-12 text-danger"><?php echo nl2br(zen_output_string_protected(preg_replace('~<br[ /]*>~', "\n", $query_results['string']))); ?></div>
          </div>
          <?php
        }
        ?>
        <div class="row">&nbsp;</div>
        <?php echo zen_draw_form('getquery', FILENAME_SQLPATCH, 'action=execute' . (($debug == true) ? '&debug=ON' : '') . (($skip_stripslashes == true) ? '&keepslashes=1' : ''), 'post', 'class="form-horizontal"'); ?>
        <div class="form-group">
            <?php echo zen_draw_label(TEXT_ENTER_QUERY_STRING, 'query_string', 'class="control-label col-sm-3"'); ?>
          <div class="col-sm-9 col-md-6"><?php echo zen_draw_textarea_field('query_string', 'soft', '80', '10', '', 'id="query_string" class="form-control noEditor"', false); ?></div>
        </div>
        <div class="form-group">
          <div class="col-sm-12 text-right"><button type="submit" class="btn btn-primary"><?php echo IMAGE_SEND; ?></button></div>
        </div>
        <?php echo '</form>'; ?>

<div class="row">
          <div class="col-sm-12 text-right"><a href="<?php echo zen_href_link(FILENAME_SQLPATCH, 'action=help'); ?>" target="_blank" class="btn btn-info" role="button"><?php echo IMAGE_DETAILS; ?></a></div>
        </div>
        
      </div>
      
      
  <?php require(DIR_WS_INCLUDES . 'footer.php'); ?>
      
    </body>
  </html>
  <?php require(DIR_WS_INCLUDES . 'application_bottom.php'); ?>

<?php } elseif ($action == 'help') { ?>
  <!doctype html>
  <html  <?php echo HTML_PARAMS; ?>>
    <head>
      <meta charset="<?php echo CHARSET; ?>" />
      <title>HELP - <?php echo HEADING_TITLE; ?> - Zen Cart&reg;</title>
      <link rel="stylesheet" href="includes/stylesheet.css">
    </head>
    <body id="popup">
      <div class="container-fluid">
        <div id="popup_header">
          <h1><?php echo 'Zen Cart&reg; ' . HEADING_TITLE; ?></h1>
        </div>
        <div id="popup_content">
          <span style="color: #FF0000; font-weight: bold;"><?php echo HEADING_WARNING; ?></span><br>
          <?php
          echo SQLPATCH_HELP_TEXT;
          echo '<br><br>';
          ?>
          <span style="color: #FF0000; font-weight: bold;"><?php echo HEADING_WARNING; ?></span><br>
          <span style="color: #FF0000; font-weight: bold;"><?php echo HEADING_WARNING2; ?></span><br>
        </div>
        <div class="row text-center">
          <a href="javascript:window.close()"><?php echo TEXT_CLOSE_WINDOW; ?></a>
        </div>
      </div>
    </body>
  </html>
<?php } ?>