pandorafms/pandora_console/include/db/mysql.php

<?php

// Pandora FMS - http://pandorafms.com
// ==================================================
// Copyright (c) 2005-2011 Artica Soluciones Tecnologicas
// Please see http://pandorafms.org for full contribution list

// This program is free software; you can redistribute it and/or
// modify it under the terms of the  GNU Lesser General Public License
// as published by the Free Software Foundation; version 2

// This program is distributed in the hope that it will be useful,
// but WITHOUT ANY WARRANTY; without even the implied warranty of
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
// GNU General Public License for more details.

function mysql_connect_db($host = null, $db = null, $user = null, $pass = null, $port = null) {
	global $config;
	
	if ($host === null)
		$host = $config["dbhost"];
	if ($db === null)
		$db = $config["dbname"];
	if ($user === null)
		$user = $config["dbuser"];
	if ($pass === null)
		$pass = $config["dbpass"];
	if ($port === null)
		$port = $config["dbport"];

	// Check if mysqli is available
	if (!isset($config["mysqli"])) {
		$config["mysqli"] = extension_loaded(mysqli);
	}
	
	// Non-persistent connection: This will help to avoid mysql errors like "has gone away" or locking problems
	// If you want persistent connections change it to mysql_pconnect(). 
	if ($config["mysqli"]) {
		$connect_id = mysqli_connect($host, $user, $pass, $db, $port);
		if (mysqli_connect_errno() > 0) {
			return false;
		}
		db_change_cache_id ($db, $host);

		mysqli_select_db($connect_id, $db);
	}
	else {
		$connect_id = @mysql_connect($host . ":" . $port, $user, $pass, true);
		if (! $connect_id) {
			return false;
		}

		db_change_cache_id ($db, $host);

		mysql_select_db($db, $connect_id);
	}	
	
	return $connect_id;
}

function mysql_db_get_all_rows_sql ($sql, $search_history_db = false, $cache = true, $dbconnection = false) {
	global $config;
	
	$history = array ();
	
	if ($dbconnection === false) {
		$dbconnection = $config['dbconnection'];
	}
	
	// To disable globally SQL cache depending on global variable.
	// Used in several critical places like Metaconsole trans-server queries
	if (isset($config["dbcache"]))
		$cache = $config["dbcache"];
	
	// Read from the history DB if necessary
	if ($search_history_db && $config['history_db_enabled'] == 1) {
		$cache = false;
		$history = false;
		
		// Connect to the history DB
		if (! isset ($config['history_db_connection']) || $config['history_db_connection'] === false) {
			$config['history_db_connection'] = db_connect($config['history_db_host'], $config['history_db_name'], $config['history_db_user'], io_output_password($config['history_db_pass']), $config['history_db_port'], false);
		}
		if ($config['history_db_connection'] !== false) {
			$history = mysql_db_process_sql ($sql, 'affected_rows', $config['history_db_connection'], false);
		}
		
		if ($history === false) {
			$history = array ();
		}
	}
	$return = mysql_db_process_sql ($sql,
		'affected_rows', $dbconnection, $cache);
	
	
	if ($return === false) {
		$return = array ();
	}
	
	// Append result to the history DB data
	if (! empty ($return)) {
		foreach ($return as $row) {
			array_push ($history, $row);
		}
	}
	
	if (! empty ($history))
		return $history;
	//Return false, check with === or !==
	return false;
}

/** 
 * Get the first value of the first row of a table in the database.
 * 
 * @param string Field name to get
 * @param string Table to retrieve the data
 * @param string Field to filter elements
 * @param string Condition the field must have
 *
 * @return mixed Value of first column of the first row. False if there were no row.
 */
function mysql_db_get_value ($field, $table, $field_search = 1, $condition = 1, $search_history_db = false) {
	if (is_int ($condition)) {
		$sql = sprintf ("SELECT %s FROM %s WHERE %s = %d LIMIT 1",
			$field, $table, $field_search, $condition);
	}
	else if (is_float ($condition) || is_double ($condition)) {
		$sql = sprintf ("SELECT %s FROM %s WHERE %s = %f LIMIT 1",
			$field, $table, $field_search, $condition);
	}
	else {
		$sql = sprintf ("SELECT %s FROM %s WHERE %s = '%s' LIMIT 1",
			$field, $table, $field_search, $condition);
	}
	
	$result = db_get_all_rows_sql ($sql, $search_history_db);
	
	if ($result === false)
		return false;
	
	$row = array_shift($result);
	$value = array_shift($row);
	
	if ($value === null)
		return false;
	
	return $value;
}

/** 
 * Get the first row of a database query into a table.
 *
 * The SQL statement executed would be something like:
 * "SELECT (*||$fields) FROM $table WHERE $field_search = $condition"
 *
 * @param string Table to get the row
 * @param string Field to filter elements
 * @param string Condition the field must have.
 * @param mixed Fields to select (array or string or false/empty for *)
 * 
 * @return mixed The first row of a database query or false.
 */
function mysql_db_get_row ($table, $field_search, $condition, $fields = false) {
	if (empty ($fields)) {
		$fields = '*';
	}
	else {
		if (is_array ($fields))
			$fields = implode (',', $fields);
		else if (! is_string ($fields))
			return false;
	}
	
	if (is_int ($condition)) {
		$sql = sprintf ("SELECT %s FROM `%s` WHERE `%s` = %d LIMIT 1",
			$fields, $table, $field_search, $condition);
	}
	else if (is_float ($condition) || is_double ($condition)) {
		$sql = sprintf ("SELECT %s FROM `%s` WHERE `%s` = %f LIMIT 1",
			$fields, $table, $field_search, $condition);
	}
	else {
		$sql = sprintf ("SELECT %s FROM `%s` WHERE `%s` = '%s' LIMIT 1", 
			$fields, $table, $field_search, $condition);
	}
	$result = db_get_all_rows_sql ($sql);
	
	if ($result === false) 
		return false;
	
	return $result[0];
}

/**
 * Get all the rows in a table of the database.
 * 
 * @param string Database table name.
 * @param string Field to order by.
 * @param string $order The type of order, by default 'ASC'.
 *
 * @return mixed A matrix with all the values in the table
 */
function mysql_db_get_all_rows_in_table($table, $order_field = "", $order = 'ASC') {
	$sql = "
		SELECT *
		FROM `".$table."`";
	
	if (!empty($order_field)) {
		if (is_array($order_field)) {
			foreach ($order_field as $i => $o) {
				$order_field[$i] = $o . " " . $order;
			}
			$sql .= "
				ORDER BY " . implode(",", $order_field);
		}
		else {
			$sql .= "
				ORDER BY ".$order_field . " " . $order;
		}
		
	}
	
	return db_get_all_rows_sql($sql);
}

/**
 * Inserts strings into database
 *
 * The number of values should be the same or a positive integer multiple as the number of rows
 * If you have an associate array (eg. array ("row1" => "value1")) you can use this function with ($table, array_keys ($array), $array) in it's options
 * All arrays and values should have been cleaned before passing. It's not neccessary to add quotes.
 *
 * @param string Table to insert into
 * @param mixed A single value or array of values to insert (can be a multiple amount of rows)
 *
 * @return mixed False in case of error or invalid values passed. Affected rows otherwise
 */
function mysql_db_process_sql_insert($table, $values) {
	//Empty rows or values not processed
	
	if (empty ($values))
		return false;
	
	$values = (array) $values;
	
	$query = sprintf ("INSERT INTO `%s` ", $table);
	$fields = array ();
	$values_str = '';
	$i = 1;
	$max = count ($values);
	foreach ($values as $field => $value) { //Add the correct escaping to values
		if ($field[0] != "`") {
			$field = "`".$field."`";
		}
		
		array_push ($fields, $field);
		
		if (is_null ($value)) {
			$values_str .= "NULL";
		}
		elseif (is_int ($value) || is_bool ($value)) {
			$values_str .= sprintf ("%d", $value);
		}
		else if (is_float ($value) || is_double ($value)) {
			$values_str .= sprintf ("%f", $value);
		}
		else {
			$values_str .= sprintf ("'%s'", $value);
		}
		
		if ($i < $max) {
			$values_str .= ",";
		}
		$i++;
	}
	
	$query .= '('.implode (', ', $fields).')';
	
	$query .= ' VALUES ('.$values_str.')';
	
	return db_process_sql ($query, 'insert_id');
}

/**
 * This function comes back with an array in case of SELECT
 * in case of UPDATE, DELETE etc. with affected rows
 * an empty array in case of SELECT without results
 * Queries that return data will be cached so queries don't get repeated
 *
 * @param string SQL statement to execute
 *
 * @param string What type of info to return in case of INSERT/UPDATE.
 *		'affected_rows' will return mysql_affected_rows (default value)
 *		'insert_id' will return the ID of an autoincrement value
 *		'info' will return the full (debug) information of a query
 *
 * @return mixed An array with the rows, columns and values in a multidimensional array or false in error
 */
function mysql_db_process_sql($sql, $rettype = "affected_rows", $dbconnection = '', $cache = true) {
	global $config;
	global $sql_cache;
	
	$retval = array();
	
	if ($sql == '')
		return false;
	
	if ($cache && ! empty ($sql_cache[$sql_cache['id']][$sql])) {
		$retval = $sql_cache[$sql_cache['id']][$sql];
		$sql_cache['saved'][$sql_cache['id']]++;
		db_add_database_debug_trace ($sql);
	}
	else {
		$start = microtime (true);
		
		if ($dbconnection == '') { 
			$dbconnection = $config['dbconnection'];
		}
		
		if ($config["mysqli"] === true) {
			$result = mysqli_query ($dbconnection, $sql);
		}
		else {
			$result = mysql_query ($sql, $dbconnection);
		}
		
		$time = microtime (true) - $start;
		if ($result === false) {
			$backtrace = debug_backtrace ();
			if ($config["mysqli"] === true) {
				$error = sprintf ('%s (\'%s\') in <strong>%s</strong> on line %d',
				mysqli_error ($dbconnection), $sql, $backtrace[0]['file'], $backtrace[0]['line']);
				db_add_database_debug_trace ($sql, mysqli_error ($dbconnection));
			}
			else {
				$error = sprintf ('%s (\'%s\') in <strong>%s</strong> on line %d',
                                mysql_error (), $sql, $backtrace[0]['file'], $backtrace[0]['line']);
				db_add_database_debug_trace ($sql, mysql_error ($dbconnection));
			}
			set_error_handler ('db_sql_error_handler');
			trigger_error ($error);
			restore_error_handler ();
			return false;
		}
		elseif ($result === true) {
			if ($config["mysqli"] === true) {
				if ($rettype == "insert_id") {
					$result = mysqli_insert_id ($dbconnection);
				}
				elseif ($rettype == "info") {
					$result = mysqli_info ($dbconnection);
				}
				else {
					$result = mysqli_affected_rows ($dbconnection);
				}

				db_add_database_debug_trace ($sql, $result, mysqli_affected_rows ($dbconnection),
				array ('time' => $time));
			}
			else {
				if ($rettype == "insert_id") {
					$result = mysql_insert_id ($dbconnection);
				}
				elseif ($rettype == "info") {
					$result = mysql_info ($dbconnection);
                      		}
                        	else {
					$result = mysql_affected_rows ($dbconnection);
				}

				db_add_database_debug_trace ($sql, $result, mysql_affected_rows ($dbconnection),
				array ('time' => $time));
			}
			
			return $result;
		}
		else {
			if ($config["mysqli"] === true) {
				db_add_database_debug_trace ($sql, 0, mysqli_affected_rows ($dbconnection), 
					array ('time' => $time));
				while ($row = mysqli_fetch_assoc ($result)) {
					array_push ($retval, $row);
				}
			
				if ($cache === true)
					$sql_cache[$sql_cache ['id']][$sql] = $retval;
				mysqli_free_result ($result);
			}
			else {
				db_add_database_debug_trace ($sql, 0, mysql_affected_rows ($dbconnection),
				array ('time' => $time));
				while ($row = mysql_fetch_assoc ($result)) {
					array_push ($retval, $row);
				}

				if ($cache === true)
					$sql_cache[$sql_cache ['id']][$sql] = $retval;
				mysql_free_result ($result);
			}
		}
	}
	
	if (! empty ($retval))
		return $retval;
	//Return false, check with === or !==
	return false;
}

/**
 * 
 * Escape string to set it properly to use in sql queries
 * 
 * @param string String to be cleaned.
 * 
 * @return string String cleaned.
 */
function mysql_escape_string_sql($string) {
	global $config;

	$dbconnection = $config['dbconnection'];
	if ($dbconnection == null) {
		$dbconnection = mysql_connect_db();
	}
	if ($config["mysqli"] === true) {
		$str = mysqli_real_escape_string($dbconnection, $string);
	}
	else {
		$str = mysql_real_escape_string($string);
	}
	
	return $str;
}

function mysql_encapsule_fields_with_same_name_to_instructions($field) {
	$return = $field;
	
	if (is_string($return)) {
		if ($return[0] !== '`') {
			$return = '`' . $return . '`';
		}
	}
	
	return $return;
}

/**
 * Get the first value of the first row of a table in the database from an
 * array with filter conditions.
 *
 * Example:
 <code>
 db_get_value_filter ('name', 'talert_templates',
 array ('value' => 2, 'type' => 'equal'));
 // Equivalent to:
 // SELECT name FROM talert_templates WHERE value = 2 AND type = 'equal' LIMIT 1

 db_get_value_filter ('description', 'talert_templates',
 array ('name' => 'My alert', 'type' => 'regex'), 'OR');
 // Equivalent to:
 // SELECT description FROM talert_templates WHERE name = 'My alert' OR type = 'equal' LIMIT 1
 </code>
 *
 * @param string Field name to get
 * @param string Table to retrieve the data
 * @param array Conditions to filter the element. See db_format_array_where_clause_sql()
 * for the format
 * @param string Join operator for the elements in the filter.
 *
 * @return mixed Value of first column of the first row. False if there were no row.
 */
function mysql_db_get_value_filter ($field, $table, $filter, $where_join = 'AND', $search_history_db = false) {
	if (! is_array ($filter) || empty ($filter))
		return false;
	
	/* Avoid limit and offset if given */
	unset ($filter['limit']);
	unset ($filter['offset']);
	
	$sql = sprintf ("SELECT %s FROM %s WHERE %s LIMIT 1",
		$field, $table,
		db_format_array_where_clause_sql ($filter, $where_join));
	
	$result = db_get_all_rows_sql ($sql, $search_history_db);
	
	if ($result === false)
		return false;
	
	$row = array_shift($result);
	$value = array_shift($row);
	
	if ($value === null)
		return false;
	
	return $value;
}

/**
 * Formats an array of values into a SQL where clause string.
 *
 * This function is useful to generate a WHERE clause for a SQL sentence from
 * a list of values. Example code:
 <code>
 $values = array ();
 $values['name'] = "Name";
 $values['description'] = "Long description";
 $values['limit'] = $config['block_size']; // Assume it's 20
 $sql = 'SELECT * FROM table WHERE '.db_format_array_where_clause_sql ($values);
 echo $sql;
 </code>
 * Will return:
 * <code>
 * SELECT * FROM table WHERE `name` = "Name" AND `description` = "Long description" LIMIT 20
 * </code>
 *
 * @param array Values to be formatted in an array indexed by the field name.
 * There are special parameters such as 'limit' and 'offset' that will be used
 * as ORDER, LIMIT and OFFSET clauses respectively. Since LIMIT and OFFSET are
 * numerics, ORDER can receive a field name or a SQL function and a the ASC or
 * DESC clause. Examples:
 <code>
 $values = array ();
 $values['value'] = 10;
 $sql = 'SELECT * FROM table WHERE '.db_format_array_where_clause_sql ($values);
 // SELECT * FROM table WHERE VALUE = 10

 $values = array ();
 $values['value'] = 10;
 $values['order'] = 'name DESC';
 $sql = 'SELECT * FROM table WHERE '.db_format_array_where_clause_sql ($values);
 // SELECT * FROM table WHERE VALUE = 10 ORDER BY name DESC

 </code>
 * @param string Join operator. AND by default.
 * @param string A prefix to be added to the string. It's useful when limit and
 * offset could be given to avoid this cases:
 <code>
 $values = array ();
 $values['limit'] = 10;
 $values['offset'] = 20;
 $sql = 'SELECT * FROM table WHERE '.db_format_array_where_clause_sql ($values);
 // Wrong SQL: SELECT * FROM table WHERE LIMIT 10 OFFSET 20

 $values = array ();
 $values['limit'] = 10;
 $values['offset'] = 20;
 $sql = 'SELECT * FROM table WHERE '.db_format_array_where_clause_sql ($values, 'AND', 'WHERE');
 // Good SQL: SELECT * FROM table LIMIT 10 OFFSET 20

 $values = array ();
 $values['value'] = 5;
 $values['limit'] = 10;
 $values['offset'] = 20;
 $sql = 'SELECT * FROM table WHERE '.db_format_array_where_clause_sql ($values, 'AND', 'WHERE');
 // Good SQL: SELECT * FROM table WHERE value = 5 LIMIT 10 OFFSET 20
 </code>
 *
 * @return string Values joined into an SQL string that can fits into the WHERE
 * clause of an SQL sentence.
 */
function mysql_db_format_array_where_clause_sql ($values, $join = 'AND', $prefix = false) {
	
	$fields = array ();
	
	if (! is_array ($values)) {
		return '';
	}
	
	$query = '';
	$limit = '';
	$offset = '';
	$order = '';
	$group = '';
	if (isset ($values['limit'])) {
		$limit = sprintf (' LIMIT %d', $values['limit']);
		unset ($values['limit']);
	}
	
	if (isset ($values['offset'])) {
		$offset = sprintf (' OFFSET %d', $values['offset']);
		unset ($values['offset']);
	}
	
	if (isset ($values['order'])) {
		if (is_array($values['order'])) {
			if (!isset($values['order']['order'])) {
				$orderTexts = array();
				foreach ($values['order'] as $orderItem) {
					$orderTexts[] = $orderItem['field'] . ' ' . $orderItem['order'];
				}
				$order = ' ORDER BY ' . implode(', ', $orderTexts);
			}
			else {
				$order = sprintf (' ORDER BY %s %s', $values['order']['field'], $values['order']['order']);
			}
		}
		else {
			$order = sprintf (' ORDER BY %s', $values['order']);
		}
		unset ($values['order']);
	}
	
	if (isset ($values['group'])) {
		$group = sprintf (' GROUP BY %s', $values['group']);
		unset ($values['group']);
	}
	
	$i = 1;
	$max = count ($values);
	foreach ($values as $field => $value) {
		if (is_numeric ($field)) {
			/* User provide the exact operation to do */
			$query .= $value;
			
			if ($i < $max) {
				$query .= ' '.$join.' ';
			}
			$i++;
			continue;
		}
		
		if ($field[0] != "`") {
			//If the field is as <table>.<field>, don't scape.
			if (strstr($field, '.') === false)
				$field = "`".$field."`";
		}
		
		if (is_null ($value)) {
			$query .= sprintf ("%s IS NULL", $field);
		}
		elseif (is_int ($value) || is_bool ($value)) {
			$query .= sprintf ("%s = %d", $field, $value);
		}
		else if (is_float ($value) || is_double ($value)) {
			$query .= sprintf ("%s = %f", $field, $value);
		}
		elseif (is_array ($value)) {
			$query .= sprintf ('%s IN ("%s")', $field, implode ('", "', $value));
		}
		else {
			if ($value === "") {
				//Search empty string
				$query .= sprintf ("%s = ''", $field);
			}
			else if ($value[0] == ">") {
				$value = substr($value,1,strlen($value)-1);
				$query .= sprintf ("%s > '%s'", $field, $value);
			}
			else if ($value[0] == "<") {
				if ($value[1] == ">") {
					$value = substr($value,2,strlen($value)-2);
					$query .= sprintf ("%s <> '%s'", $field, $value);
				}
				else {
					$value = substr($value,1,strlen($value)-1);
					$query .= sprintf ("%s < '%s'", $field, $value);
				}
			}
			else if ($value[0] == '%') {
				$query .= sprintf ("%s LIKE '%s'", $field, $value);
			}
			else {
				$query .= sprintf ("%s = '%s'", $field, $value);
			}
		}
		
		if ($i < $max) {
			$query .= ' '.$join.' ';
		}
		$i++;
	}
	
	return (! empty ($query) ? $prefix: '').$query.$group.$order.$limit.$offset;
}

/**
 * Get the first value of the first row of a table result from query.
 *
 * @param string SQL select statement to execute.
 *
 * @return the first value of the first row of a table result from query.
 *
 */
function mysql_db_get_value_sql($sql, $dbconnection = false) {
	$sql .= " LIMIT 1";
	$result = mysql_db_get_all_rows_sql ($sql, false, true, $dbconnection);
	
	if ($result === false)
		return false;
	
	$row = array_shift($result);
	$value = array_shift($row);
	
	if ($value === null)
		return false;
	
	return $value;
}

/**
 * Get the first row of an SQL database query.
 *
 * @param string SQL select statement to execute.
 *
 * @return mixed The first row of the result or false
 */
function mysql_db_get_row_sql ($sql, $search_history_db = false) {
	$sql .= " LIMIT 1";
	$result = db_get_all_rows_sql ($sql, $search_history_db);
	
	if ($result === false)
		return false;
	
	return $result[0];
}

/**
 * Get the row of a table in the database using a complex filter.
 *
 * @param string Table to retrieve the data (warning: not cleaned)
 * @param mixed Filters elements. It can be an indexed array
 * (keys would be the field name and value the expected value, and would be
 * joined with an AND operator) or a string, including any SQL clause (without
 * the WHERE keyword). Example:
 <code>
 Both are similars:
 db_get_row_filter ('table', array ('disabled', 0));
 db_get_row_filter ('table', 'disabled = 0');

 Both are similars:
 db_get_row_filter ('table', array ('disabled' => 0, 'history_data' => 0), 'name, description', 'OR');
 db_get_row_filter ('table', 'disabled = 0 OR history_data = 0', 'name, description');
 db_get_row_filter ('table', array ('disabled' => 0, 'history_data' => 0), array ('name', 'description'), 'OR');
 </code>
 * @param mixed Fields of the table to retrieve. Can be an array or a coma
 * separated string. All fields are retrieved by default
 * @param string Condition to join the filters (AND, OR).
 *
 * @return mixed Array of the row or false in case of error.
 */
function mysql_db_get_row_filter ($table, $filter, $fields = false, $where_join = 'AND', $historydb = false) {
	if (empty ($fields)) {
		$fields = '*';
	}
	else {
		if (is_array ($fields))
			$fields = implode (',', $fields);
		else if (! is_string ($fields))
			return false;
	}
	
	if (is_array ($filter))
		$filter = db_format_array_where_clause_sql ($filter, $where_join, ' WHERE ');
	else if (is_string ($filter))
		$filter = 'WHERE '.$filter;
	else
		$filter = '';
	
	$sql = sprintf ('SELECT %s FROM %s %s', $fields, $table, $filter);
	
	return db_get_row_sql ($sql, $historydb);
}

/**
 * Get all the rows of a table in the database that matches a filter.
 *
 * @param string Table to retrieve the data (warning: not cleaned)
 * @param mixed Filters elements. It can be an indexed array
 * (keys would be the field name and value the expected value, and would be
 * joined with an AND operator) or a string, including any SQL clause (without
 * the WHERE keyword). Example:
 * <code>
 * Both are similars:
 * db_get_all_rows_filter ('table', array ('disabled', 0));
 * db_get_all_rows_filter ('table', 'disabled = 0');
 *
 * Both are similars:
 * db_get_all_rows_filter ('table', array ('disabled' => 0, 'history_data' => 0), 'name', 'OR');
 * db_get_all_rows_filter ('table', 'disabled = 0 OR history_data = 0', 'name');
 * </code>
 * @param mixed Fields of the table to retrieve. Can be an array or a coma
 * separated string. All fields are retrieved by default
 * @param string Condition of the filter (AND, OR).
 * @param bool $returnSQL Return a string with SQL instead the data, by default false.
 *
 * @return mixed Array of the row or false in case of error.
 */
function mysql_db_get_all_rows_filter ($table, $filter = array(), $fields = false, $where_join = 'AND', $search_history_db = false, $returnSQL = false) {
	//TODO: Validate and clean fields
	if (empty ($fields)) {
		$fields = '*';
	}
	elseif (is_array ($fields)) {
		$fields = implode (',', $fields);
	}
	elseif (! is_string ($fields)) {
		return false;
	}
	
	//TODO: Validate and clean filter options
	if (is_array ($filter)) {
		$filter = db_format_array_where_clause_sql ($filter, $where_join, ' WHERE ');
	}
	elseif (is_string ($filter)) {
		$filter = 'WHERE '.$filter;
	}
	else {
		$filter = '';
	}
	
	$sql = sprintf ('SELECT %s
		FROM %s %s', $fields, $table, $filter);
	
	if ($returnSQL)
		return $sql;
	else
		return db_get_all_rows_sql ($sql, $search_history_db);
}

/**
 * Return the count of rows of query.
 *
 * @param $sql
 * @return integer The count of rows of query.
 */
function mysql_db_get_num_rows ($sql) {
	global $config;
	
	if ($config["mysqli"] === true) {
		$result = mysqli_query($config['dbconnection'], $sql);
	
		if ($result) {
			return mysqli_num_rows($result);
		}
	}
	else {
		$result = mysql_query($sql, $config['dbconnection']);

		if ($result) {
			return mysql_num_rows($result);
		}
	}
	return 0;
}

/**
 * Get all the rows in a table of the databes filtering from a field.
 *
 * @param string Database table name.
 * @param string Field of the table.
 * @param string Condition the field must have to be selected.
 * @param string Field to order by.
 *
 * @return mixed A matrix with all the values in the table that matches the condition in the field or false
 */
function mysql_db_get_all_rows_field_filter ($table, $field, $condition, $order_field = "") {
	if (is_int ($condition) || is_bool ($condition)) {
		$sql = sprintf ("SELECT * FROM `%s` WHERE `%s` = %d", $table, $field, $condition);
	}
	else if (is_float ($condition) || is_double ($condition)) {
		$sql = sprintf ("SELECT * FROM `%s` WHERE `%s` = %f", $table, $field, $condition);
	}
	else {
		$sql = sprintf ("SELECT * FROM `%s` WHERE `%s` = '%s'", $table, $field, $condition);
	}
	
	if ($order_field != "")
		$sql .= sprintf (" ORDER BY %s", $order_field);
	
	return db_get_all_rows_sql ($sql);
}

/**
 * Get all the rows in a table of the databes filtering from a field.
 *
 * @param string Database table name.
 * @param string Field of the table.
 *
 * @return mixed A matrix with all the values in the table that matches the condition in the field
 */
function mysql_db_get_all_fields_in_table ($table, $field = '', $condition = '', $order_field = '') {
	$sql = sprintf ("SELECT * FROM `%s`", $table);
	
	if ($condition != '') {
		$sql .= sprintf (" WHERE `%s` = '%s'", $field, $condition);
	}
	
	if ($order_field != "")
		$sql .= sprintf (" ORDER BY %s", $order_field);
	
	return db_get_all_rows_sql ($sql);
}

/**
 * Formats an array of values into a SQL string.
 *
 * This function is useful to generate an UPDATE SQL sentence from a list of
 * values. Example code:
 *
 * <code>
 * $values = array ();
 * $values['name'] = "Name";
 * $values['description'] = "Long description";
 * $sql = 'UPDATE table SET '.format_array_to_update_sql ($values).' WHERE id=1';
 * echo $sql;
 * </code>
 * Will return:
 * <code>
 * UPDATE table SET `name` = "Name", `description` = "Long description" WHERE id=1
 * </code>
 *
 * @param array Values to be formatted in an array indexed by the field name.
 *
 * @return string Values joined into an SQL string that can fits into an UPDATE
 * sentence.
 */
function mysql_db_format_array_to_update_sql ($values) {
	$fields = array ();
	
	foreach ($values as $field => $value) {
		if (is_numeric ($field)) {
			array_push ($fields, $value);
			continue;
		}
		else if ($field[0] == "`") {
			$field = str_replace('`', '', $field);
		}
		
		if ($value === NULL) {
			$sql = sprintf ("`%s` = NULL", $field);
		}
		elseif (is_int ($value) || is_bool ($value)) {
			$sql = sprintf ("`%s` = %d", $field, $value);
		}
		elseif (is_float ($value) || is_double ($value)) {
			$sql = sprintf ("`%s` = %f", $field, $value);
		}
		else {
			/* String */
			if (isset ($value[0]) && $value[0] == '`')
			/* Don't round with quotes if it references a field */
			$sql = sprintf ("`%s` = %s", $field, $value);
			else
			$sql = sprintf ("`%s` = '%s'", $field, $value);
		}
		array_push ($fields, $sql);
	}
	
	return implode (", ", $fields);
}

/**
 * Updates a database record.
 *
 * All values should be cleaned before passing. Quoting isn't necessary.
 * Examples:
 *
 * <code>
 * db_process_sql_update ('table', array ('field' => 1), array ('id' => $id));
 * db_process_sql_update ('table', array ('field' => 1), array ('id' => $id, 'name' => $name));
 * db_process_sql_update ('table', array ('field' => 1), array ('id' => $id, 'name' => $name), 'OR');
 * db_process_sql_update ('table', array ('field' => 2), 'id in (1, 2, 3) OR id > 10');
 * </code>
 *
 * @param string Table to insert into
 * @param array An associative array of values to update
 * @param mixed An associative array of field and value matches. Will be joined
 * with operator specified by $where_join. A custom string can also be provided.
 * If nothing is provided, the update will affect all rows.
 * @param string When a $where parameter is given, this will work as the glue
 * between the fields. "AND" operator will be use by default. Other values might
 * be "OR", "AND NOT", "XOR"
 *
 * @return mixed False in case of error or invalid values passed. Affected rows otherwise
 */
function mysql_db_process_sql_update($table, $values, $where = false, $where_join = 'AND') {
	$query = sprintf ("UPDATE `%s` SET %s",
		$table,
		db_format_array_to_update_sql ($values));
	
	if ($where) {
		if (is_string ($where)) {
			// No clean, the caller should make sure all input is clean, this is a raw function
			$query .= " WHERE " . $where;
		}
		else if (is_array ($where)) {
			$query .= db_format_array_where_clause_sql ($where, $where_join, ' WHERE ');
		}
	}
	
	return db_process_sql ($query);
}

/**
 * Delete database records.
 *
 * All values should be cleaned before passing. Quoting isn't necessary.
 * Examples:
 *
 * <code>
 * db_process_sql_delete ('table', array ('id' => 1));
 * // DELETE FROM table WHERE id = 1
 * db_process_sql_delete ('table', array ('id' => 1, 'name' => 'example'));
 * // DELETE FROM table WHERE id = 1 AND name = 'example'
 * db_process_sql_delete ('table', array ('id' => 1, 'name' => 'example'), 'OR');
 * // DELETE FROM table WHERE id = 1 OR name = 'example'
 * db_process_sql_delete ('table', 'id in (1, 2, 3) OR id > 10');
 * // DELETE FROM table WHERE id in (1, 2, 3) OR id > 10
 * </code>
 *
 * @param string Table to insert into
 * @param array An associative array of values to update
 * @param mixed An associative array of field and value matches. Will be joined
 * with operator specified by $where_join. A custom string can also be provided.
 * If nothing is provided, the update will affect all rows.
 * @param string When a $where parameter is given, this will work as the glue
 * between the fields. "AND" operator will be use by default. Other values might
 * be "OR", "AND NOT", "XOR"
 *
 * @return mixed False in case of error or invalid values passed. Affected rows otherwise
 */
function mysql_db_process_sql_delete($table, $where, $where_join = 'AND') {
	if (empty ($where))
		/* Should avoid any mistake that lead to deleting all data */
		return false;
	
	$query = sprintf ("DELETE FROM `%s` WHERE ", $table);
	
	if ($where) {
		if (is_string ($where)) {
			/* FIXME: Should we clean the string for sanity?
			 Who cares if this is deleting data... */
			$query .= $where;
		}
		else if (is_array ($where)) {
			$query .= db_format_array_where_clause_sql ($where, $where_join);
		}
	}
	
	return db_process_sql ($query);
}

/**
 * Get row by row the DB by SQL query. The first time pass the SQL query and
 * rest of times pass none for iterate in table and extract row by row, and
 * the end return false.
 *
 * @param bool $new Default true, if true start to query.
 * @param resource $result The resource of mysql for access to query.
 * @param string $sql
 * @return mixed The row or false in error.
 */
function mysql_db_get_all_row_by_steps_sql($new = true, &$result, $sql = null) {
	global $config;

	if ($config["mysqli"] === true) {
		if ($new == true)
			$result = mysqli_query($config['dbconnection'], $sql);
	
		if ($result) {
			return mysqli_fetch_assoc($result);
		}
	}
	else {
		if ($new == true)
			$result = mysql_query($sql);

		if ($result) {
			return mysql_fetch_assoc($result);
		}
	}
	return array();
}

/**
 * Starts a database transaction.
 */
function mysql_db_process_sql_begin() {
	global $config;

	if ($config["mysqli"]) {
		mysqli_query ($config['dbconnection'], 'SET AUTOCOMMIT = 0');
		mysqli_query ($config['dbconnection'], 'START TRANSACTION');
	}
	else {
		mysql_query ('SET AUTOCOMMIT = 0');
		mysql_query ('START TRANSACTION');
	}
}

/**
 * Commits a database transaction.
 */
function mysql_db_process_sql_commit() {
	global $config;

	if ($config["mysqli"]) {
		mysqli_query ($config['dbconnection'], 'COMMIT');
		mysqli_query ($config['dbconnection'], 'SET AUTOCOMMIT = 1');
	}
	else {
		mysql_query ('COMMIT');
		mysql_query ('SET AUTOCOMMIT = 1');
	}
}

/**
 * Rollbacks a database transaction.
 */
function mysql_db_process_sql_rollback() {
	global $config;

	if ($config["mysqli"]) {
		mysqli_query ($config['dbconnection'], 'ROLLBACK ');
		mysqli_query ($config['dbconnection'], 'SET AUTOCOMMIT = 1');
	}
	else {
		mysql_query ('ROLLBACK ');
		mysql_query ('SET AUTOCOMMIT = 1');
	}
}

/**
 * Put quotes if magic_quotes protection
 *
 * @param string Text string to be protected with quotes if magic_quotes protection is disabled
 */
function mysql_safe_sql_string($string) {
	if (get_magic_quotes_gpc () == 0) 
		return $string;
	
	global $config;
	
	return mysql_real_escape_string($config['dbconnection'], $string);
}

/**
 * Get last error.
 * 
 * @return string Return the string error.
 */
function mysql_db_get_last_error() {
	global $config;

	if ($config["mysqli"]) {
		return mysqli_error();
	}
	else {
		return mysql_error();
	}
}

/**
 * This function gets the time from either system or sql based on preference and returns it
 *
 * @return int Unix timestamp
 */
function mysql_get_system_time() {
	global $config;
	
	static $time = 0;
	
	if ($time != 0)
		return $time;
	
	if ($config["timesource"] == "sql") {
		$time = db_get_sql ("SELECT UNIX_TIMESTAMP();");
		if (empty ($time)) {
			return time ();
		}
		return $time;
	}
	else {
		return time ();
	}
}

/**
 * Get the type of field.
 * 
 * @param string $table The table to examine the type of field.
 * @param integer $field The field order in table.
 * 
 * @return mixed Return the type name or False in error case.
 */
function mysql_db_get_type_field_table($table, $field) {
	global $config;

	if ($config["mysqli"]) {
		$result = mysqli_query($config['dbconnection'], 'SELECT parameters FROM ' . $table);
	
		return mysqli_fetch_field_direct($result, $field); 
	}
	else {
		$result = mysql_query('SELECT parameters FROM ' . $table);

		return mysql_field_type($result, $field);
	}
}

/**
 * Get the element count of a table.
 * 
 * @param string $sql SQL query to get the element count.
 * 
 * @return int Return the number of elements in the table.
 */
function mysql_db_get_table_count($sql, $search_history_db = false) {
	global $config;
	
	$history_count = 0;
	$count = mysql_db_get_value_sql ($sql);
	if ($count === false) {
		$count = 0;
	}
	
	// Search the history DB for matches
	if ($search_history_db && $config['history_db_enabled'] == 1) {
		
		// Connect to the history DB
		if (! isset ($config['history_db_connection']) || $config['history_db_connection'] === false) {
			if ($config["mysqli"]) {
				$config['history_db_connection'] = mysqli_connect_db ($config['history_db_host'], $config['history_db_user'], io_output_password($config['history_db_pass']), $config['history_db_name'], $config['history_db_port'], false);
			}
			else {
				$config['history_db_connection'] = mysql_connect_db ($config['history_db_host'], $config['history_db_name'], $config['history_db_user'], io_output_password($config['history_db_pass']), $config['history_db_port'], false);
			}
		}
		if ($config['history_db_connection'] !== false) {
			$history_count = mysql_db_get_value_sql ($sql, $config['history_db_connection']);
			if ($history_count === false) {
				$history_count = 0;
			}
		}
	}
	
	$count += $history_count;
	
	return $count;
}

function mysql_get_fields($table) {
	global $config;
	
	return db_get_all_rows_sql("SHOW COLUMNS FROM " . $table);
}

/**
 * Process a file with an oracle schema sentences.
 * Based on the function which installs the pandoradb.sql schema.
 * 
 * @param string $path File path.
 * @param bool $handle_error Whether to handle the mysqli_query/mysql_query errors or throw an exception.
 * 
 * @return bool Return the final status of the operation.
 */
function mysql_db_process_file ($path, $handle_error = true) {
	global $config;
	
	if (file_exists($path)) {
		$file_content = file($path);
		$query = "";
		
		// Begin the transaction
		mysql_db_process_sql_begin();
		
		foreach ($file_content as $sql_line) {
			if (trim($sql_line) != "" && strpos($sql_line, "--") === false) {
				
				$query .= $sql_line;
				
				if (preg_match("/;[\040]*\$/", $sql_line)) {
					if ($config["mysqli"]) {
						$query_result = mysqli_query($config['dbconnection'], $query); 
					}
					else {
						$query_result = mysql_query($query);
					}
					if (!$result = $query_result) {
						// Error. Rollback the transaction
						mysql_db_process_sql_rollback();
						
						$error_message = mysql_error();
						
						// Handle the error
						if ($handle_error) {
							$backtrace = debug_backtrace();
							$error = sprintf('%s (\'%s\') in <strong>%s</strong> on line %d',
								$error_message, $query, $backtrace[0]['file'], $backtrace[0]['line']);
							db_add_database_debug_trace ($query, $error_message);
							set_error_handler('db_sql_error_handler');
							trigger_error($error);
							restore_error_handler();
							
							return false;
						}
						// Throw an exception with the error message
						else {
							throw new Exception($error_message);
						}
					}
					$query = "";
				}
			}
		}
		
		// No errors. Commit the transaction
		mysql_db_process_sql_commit();
		
		return true;
	}
	else {
		return false;
	}
}

// --------------------------------------------------------------- 
// Initiates a transaction and run the queries of an sql file
// --------------------------------------------------------------- 

function db_run_sql_file ($location) {
    global $config;

    // Load file
    $commands = file_get_contents($location);
    // Delete comments
    $lines = explode("\n", $commands);
    $commands = '';
    foreach ($lines as $line) {
        $line = trim($line);
        if ($line && !preg_match('/^--/', $line) && !preg_match('/^\/\*/', $line)) {

            $line = preg_replace('/;$/',"__;__", $line);
            $commands .= $line;
        }
    }

    // Convert to array
    $commands = explode("__;__", $commands);

    if ($config['mysqli']) {
        $mysqli = new mysqli($config["dbhost"], $config["dbuser"], $config["dbpass"], $config["dbname"], $config["dbport"]);

        // Run commands
        $mysqli->query($config['dbconnection'], 'SET AUTOCOMMIT = 0');
        $mysqli->query($config['dbconnection'], 'START TRANSACTION');
    }
    else {
        // Run commands
        mysql_db_process_sql_begin(); // Begin transaction
    }

    foreach ($commands as $command) {
        if (trim($command)) {
            $command .= ";";

            if ($config['mysqli']) {
                $result = $mysqli->query($command);
            }
            else {
                $result = mysql_query($command);
            }

            if (!$result) {
                break; // Error
            }
        }
    }

    if ($result) {
        if ($config['mysqli']) {
            $mysqli->query($config['dbconnection'], 'COMMIT');
            $mysqli->query($config['dbconnection'], 'SET AUTOCOMMIT = 1');
        }
        else {
            mysql_db_process_sql_commit(); // Save results
        }
        return true;
    }
    else {
        if ($config['mysqli']) {
            $mysqli->query($config['dbconnection'], 'ROLLBACK ');
            $mysqli->query($config['dbconnection'], 'SET AUTOCOMMIT = 1');
        }
        else {
            mysql_db_process_sql_rollback(); // Undo results
        }
        return false;
    }
}

?>