<?php

// Pandora FMS - http://pandorafms.com
// ==================================================
// Copyright (c) 2005-2021 Artica Soluciones Tecnologicas
// Please see http://pandorafms.org for full contribution list
// This program is free software; you can redistribute it and/or
// modify it under the terms of the  GNU Lesser General Public License
// as published by the Free Software Foundation; version 2
// This program is distributed in the hope that it will be useful,
// but WITHOUT ANY WARRANTY; without even the implied warranty of
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
// GNU General Public License for more details.


/**
 * Connect db
 *
 * @param string $host    Host.
 * @param string $db      Db.
 * @param string $user    User.
 * @param string $pass    Pass.
 * @param string $port    Port.
 * @param string $charset Charset.
 *
 * @return mysqli|false
 */
function mysql_connect_db(
    $host=null,
    $db=null,
    $user=null,
    $pass=null,
    $port=null,
    $charset=null
) {
    global $config;

    if ($host === null) {
        $host = $config['dbhost'];
    }

    if ($db === null) {
        $db = $config['dbname'];
    }

    if ($user === null) {
        $user = $config['dbuser'];
    }

    if ($pass === null) {
        $pass = $config['dbpass'];
    }

    if ($port === null) {
        $port = $config['dbport'];
    }

    // Check if mysqli is available
    if (!isset($config['mysqli'])) {
        $config['mysqli'] = extension_loaded(mysqli);
    }

    // Non-persistent connection: This will help to avoid mysql errors like "has gone away" or locking problems
    // If you want persistent connections change it to mysql_pconnect().
    if ($config['mysqli']) {
        $connect_id = mysqli_connect($host, $user, $pass, $db, $port);
        if (mysqli_connect_errno() > 0) {
            include 'general/mysqlerr.php';
            return false;
        }

        db_change_cache_id($db, $host);

        if (isset($charset)) {
            mysqli_set_charset($connect_id, $charset);
        }

        mysqli_select_db($connect_id, $db);
    } else {
        $connect_id = @mysql_connect($host.':'.$port, $user, $pass, true);
        if (! $connect_id) {
            return false;
        }

        db_change_cache_id($db, $host);

        if (isset($charset)) {
            @mysql_set_charset($connect_id, $charset);
        }

        mysql_select_db($db, $connect_id);
    }

    return $connect_id;
}


function mysql_db_get_all_rows_sql($sql, $search_history_db=false, $cache=true, $dbconnection=false)
{
    global $config;

    $history = [];

    if ($dbconnection === false) {
        $dbconnection = $config['dbconnection'];
    }

    // To disable globally SQL cache depending on global variable.
    // Used in several critical places like Metaconsole trans-server queries
    if (isset($config['dbcache'])) {
        $cache = $config['dbcache'];
    }

    // Read from the history DB if necessary
    if ($search_history_db && $config['history_db_enabled'] == 1) {
        $cache = false;
        $history = false;

        // Connect to the history DB
        if (! isset($config['history_db_connection']) || $config['history_db_connection'] === false) {
            $config['history_db_connection'] = db_connect($config['history_db_host'], $config['history_db_name'], $config['history_db_user'], io_output_password($config['history_db_pass']), $config['history_db_port'], false);
        }

        if ($config['history_db_connection'] !== false) {
            $history = mysql_db_process_sql($sql, 'affected_rows', $config['history_db_connection'], false);
        }

        if ($history === false) {
            $history = [];
        }
    }

    $return = mysql_db_process_sql(
        $sql,
        'affected_rows',
        $dbconnection,
        $cache
    );

    if ($return === false) {
        $return = [];
    }

    // Append result to the history DB data
    if (! empty($return)) {
        foreach ($return as $row) {
            array_push($history, $row);
        }
    }

    if (! empty($history)) {
        return $history;
    }

    // Return false, check with === or !==
    return false;
}


/**
 * Get the first value of the first row of a table in the database.
 *
 * @param string Field name to get
 * @param string Table to retrieve the data
 * @param string Field to filter elements
 * @param string Condition the field must have
 *
 * @return mixed Value of first column of the first row. False if there were no row.
 */
function mysql_db_get_value($field, $table, $field_search=1, $condition=1, $search_history_db=false)
{
    if (is_int($condition)) {
        $sql = sprintf(
            'SELECT %s FROM %s WHERE %s = %d LIMIT 1',
            $field,
            $table,
            $field_search,
            $condition
        );
    } else if (is_float($condition) || is_double($condition)) {
        $sql = sprintf(
            'SELECT %s FROM %s WHERE %s = %f LIMIT 1',
            $field,
            $table,
            $field_search,
            $condition
        );
    } else {
        $sql = sprintf(
            "SELECT %s FROM %s WHERE %s = '%s' LIMIT 1",
            $field,
            $table,
            $field_search,
            $condition
        );
    }

    $result = db_get_all_rows_sql($sql, $search_history_db);

    if ($result === false) {
        return false;
    }

    $row = array_shift($result);
    $value = array_shift($row);

    if ($value === null) {
        return false;
    }

    return $value;
}


/**
 * Get the first row of a database query into a table.
 *
 * The SQL statement executed would be something like:
 * "SELECT (*||$fields) FROM $table WHERE $field_search = $condition"
 *
 * @param string Table to get the row
 * @param string Field to filter elements
 * @param string Condition the field must have.
 * @param mixed Fields to select (array or string or false/empty for *)
 *
 * @return mixed The first row of a database query or false.
 */
function mysql_db_get_row($table, $field_search, $condition, $fields=false, $cache=true)
{
    if (empty($fields)) {
        $fields = '*';
    } else {
        if (is_array($fields)) {
            $fields = implode(',', $fields);
        } else if (! is_string($fields)) {
            return false;
        }
    }

    if (is_int($condition)) {
        $sql = sprintf(
            'SELECT %s FROM `%s` WHERE `%s` = %d LIMIT 1',
            $fields,
            $table,
            $field_search,
            $condition
        );
    } else if (is_float($condition) || is_double($condition)) {
        $sql = sprintf(
            'SELECT %s FROM `%s` WHERE `%s` = %f LIMIT 1',
            $fields,
            $table,
            $field_search,
            $condition
        );
    } else {
        $sql = sprintf(
            "SELECT %s FROM `%s` WHERE `%s` = '%s' LIMIT 1",
            $fields,
            $table,
            $field_search,
            $condition
        );
    }

    $result = db_get_all_rows_sql($sql, false, $cache);

    if ($result === false) {
        return false;
    }

    return $result[0];
}


/**
 * Get all the rows in a table of the database.
 *
 * @param string Database table name.
 * @param string Field to order by.
 * @param string                     $order The type of order, by default 'ASC'.
 *
 * @return mixed A matrix with all the values in the table
 */
function mysql_db_get_all_rows_in_table($table, $order_field='', $order='ASC')
{
    $sql = '
		SELECT *
		FROM `'.$table.'`';

    if (!empty($order_field)) {
        if (is_array($order_field)) {
            foreach ($order_field as $i => $o) {
                $order_field[$i] = $o.' '.$order;
            }

            $sql .= '
				ORDER BY '.implode(',', $order_field);
        } else {
            $sql .= '
				ORDER BY '.$order_field.' '.$order;
        }
    }

    return db_get_all_rows_sql($sql);
}


/**
 * Inserts strings into database
 *
 * The number of values should be the same or a positive integer multiple as the number of rows
 * If you have an associate array (eg. array ("row1" => "value1")) you can use this function with ($table, array_keys ($array), $array) in it's options
 * All arrays and values should have been cleaned before passing. It's not neccessary to add quotes.
 *
 * @param string Table to insert into
 * @param mixed A single value or array of values to insert (can be a multiple amount of rows)
 *
 * @return mixed False in case of error or invalid values passed. Affected rows otherwise
 */
function mysql_db_process_sql_insert($table, $values)
{
    // Empty rows or values not processed
    if (empty($values)) {
        return false;
    }

    $values = (array) $values;

    $query = sprintf('INSERT INTO `%s` ', $table);
    $fields = [];
    $values_str = '';
    $i = 1;
    $max = count($values);
    foreach ($values as $field => $value) {
        // Add the correct escaping to values
        if ($field[0] != '`') {
            $field = '`'.$field.'`';
        }

        array_push($fields, $field);

        if (is_null($value)) {
            $values_str .= 'NULL';
        } else if (is_int($value) || is_bool($value)) {
            $values_str .= sprintf('%d', $value);
        } else if (is_float($value) || is_double($value)) {
            $values_str .= sprintf('%f', $value);
        } else {
            $values_str .= sprintf("'%s'", $value);
        }

        if ($i < $max) {
            $values_str .= ',';
        }

        $i++;
    }

    $query .= '('.implode(', ', $fields).')';

    $query .= ' VALUES ('.$values_str.')';

    return db_process_sql($query, 'insert_id');
}


/**
 * This function comes back with an array in case of SELECT
 * in case of UPDATE, DELETE etc. with affected rows
 * an empty array in case of SELECT without results
 * Queries that return data will be cached so queries don't get repeated
 *
 * @param string SQL statement to execute
 *
 * @param string What type of info to return in case of INSERT/UPDATE.
 *        'affected_rows' will return mysql_affected_rows (default value)
 *        'insert_id' will return the ID of an autoincrement value
 *        'info' will return the full (debug) information of a query
 *
 * @return mixed An array with the rows, columns and values in a multidimensional array or false in error
 */
function mysql_db_process_sql($sql, $rettype='affected_rows', $dbconnection='', $cache=true)
{
    global $config;
    global $sql_cache;

    $retval = [];

    if ($sql == '') {
        return false;
    }

    if (isset($config['dbcache']) === true) {
        $cache = $config['dbcache'];
    }

    if ($cache && ! empty($sql_cache[$sql_cache['id']][$sql])) {
        $retval = $sql_cache[$sql_cache['id']][$sql];
        $sql_cache['saved'][$sql_cache['id']]++;
        db_add_database_debug_trace($sql);
    } else {
        $start = microtime(true);

        if ($dbconnection == '') {
            $dbconnection = $config['dbconnection'];
        }

        if ($config['mysqli'] === true) {
            $result = mysqli_query($dbconnection, $sql);
        } else {
            $result = mysql_query($sql, $dbconnection);
        }

        $time = (microtime(true) - $start);
        if ($result === false) {
            $backtrace = debug_backtrace();
            if ($config['mysqli'] === true) {
                $error = sprintf(
                    '%s (\'%s\') in <strong>%s</strong> on line %d',
                    mysqli_error($dbconnection),
                    $sql,
                    $backtrace[0]['file'],
                    $backtrace[0]['line']
                );
                db_add_database_debug_trace($sql, mysqli_error($dbconnection));
            } else {
                $error = sprintf(
                    '%s (\'%s\') in <strong>%s</strong> on line %d',
                    mysql_error(),
                    $sql,
                    $backtrace[0]['file'],
                    $backtrace[0]['line']
                );
                db_add_database_debug_trace($sql, mysql_error($dbconnection));
            }

            set_error_handler('db_sql_error_handler');
            trigger_error($error);
            restore_error_handler();
            return false;
        } else if ($result === true) {
            if ($config['mysqli'] === true) {
                if ($rettype == 'insert_id') {
                    $result = mysqli_insert_id($dbconnection);
                } else if ($rettype == 'info') {
                    $result = mysqli_info($dbconnection);
                } else {
                    $result = mysqli_affected_rows($dbconnection);
                }

                db_add_database_debug_trace(
                    $sql,
                    $result,
                    mysqli_affected_rows($dbconnection),
                    ['time' => $time]
                );
            } else {
                if ($rettype == 'insert_id') {
                    $result = mysql_insert_id($dbconnection);
                } else if ($rettype == 'info') {
                    $result = mysql_info($dbconnection);
                } else {
                    $result = mysql_affected_rows($dbconnection);
                }

                db_add_database_debug_trace(
                    $sql,
                    $result,
                    mysql_affected_rows($dbconnection),
                    ['time' => $time]
                );
            }

            return $result;
        } else {
            if ($config['mysqli'] === true) {
                db_add_database_debug_trace(
                    $sql,
                    0,
                    mysqli_affected_rows($dbconnection),
                    ['time' => $time]
                );
                while ($row = mysqli_fetch_assoc($result)) {
                    array_push($retval, $row);
                }

                if ($cache === true) {
                    $sql_cache[$sql_cache['id']][$sql] = $retval;
                }

                mysqli_free_result($result);
            } else {
                db_add_database_debug_trace(
                    $sql,
                    0,
                    mysql_affected_rows($dbconnection),
                    ['time' => $time]
                );
                while ($row = mysql_fetch_assoc($result)) {
                    array_push($retval, $row);
                }

                if ($cache === true) {
                    $sql_cache[$sql_cache['id']][$sql] = $retval;
                }

                mysql_free_result($result);
            }
        }
    }

    if (! empty($retval)) {
        return $retval;
    }

    // Return false, check with === or !==
    return false;
}


/**
 * Escape string to set it properly to use in sql queries
 *
 * @param string String to be cleaned.
 *
 * @return string String cleaned.
 */
function mysql_escape_string_sql($string)
{
    global $config;

    $dbconnection = $config['dbconnection'];
    if ($dbconnection == null) {
        $dbconnection = mysql_connect_db();
    }

    if ($config['mysqli'] === true) {
        $str = mysqli_real_escape_string($dbconnection, $string);
    } else {
        $str = mysql_real_escape_string($string);
    }

    return $str;
}


function mysql_encapsule_fields_with_same_name_to_instructions($field)
{
    $return = $field;

    if (is_string($return)) {
        if ($return[0] !== '`') {
            $return = '`'.$return.'`';
        }
    }

    return $return;
}


/**
 * Get the first value of the first row of a table in the database from an
 * array with filter conditions.
 *
 * Example:
 <code>
 db_get_value_filter ('name', 'talert_templates',
 array ('value' => 2, 'type' => 'equal'));
 // Equivalent to:
 // SELECT name FROM talert_templates WHERE value = 2 AND type = 'equal' LIMIT 1

 db_get_value_filter ('description', 'talert_templates',
 array ('name' => 'My alert', 'type' => 'regex'), 'OR');
 // Equivalent to:
 // SELECT description FROM talert_templates WHERE name = 'My alert' OR type = 'equal' LIMIT 1
 </code>
 *
 * @param string Field name to get
 * @param string Table to retrieve the data
 * @param array Conditions to filter the element. See db_format_array_where_clause_sql()
 * for the format
 * @param string Join operator for the elements in the filter.
 *
 * @return mixed Value of first column of the first row. False if there were no row.
 */
function mysql_db_get_value_filter($field, $table, $filter, $where_join='AND', $search_history_db=false)
{
    if (! is_array($filter) || empty($filter)) {
        return false;
    }

    // Avoid limit and offset if given
    unset($filter['limit']);
    unset($filter['offset']);

    $sql = sprintf(
        'SELECT %s FROM %s WHERE %s LIMIT 1',
        $field,
        $table,
        db_format_array_where_clause_sql($filter, $where_join)
    );

    $result = db_get_all_rows_sql($sql, $search_history_db);

    if ($result === false) {
        return false;
    }

    $row = array_shift($result);
    $value = array_shift($row);

    if ($value === null) {
        return false;
    }

    return $value;
}


/**
 * Formats an array of values into a SQL where clause string.
 *
 * This function is useful to generate a WHERE clause for a SQL sentence from
 * a list of values. Example code:
 <code>
 $values = array ();
 $values['name'] = "Name";
 $values['description'] = "Long description";
 $values['limit'] = $config['block_size']; // Assume it's 20
 $sql = 'SELECT * FROM table WHERE '.db_format_array_where_clause_sql ($values);
 echo $sql;
 </code>
 * Will return:
 * <code>
 * SELECT * FROM table WHERE `name` = "Name" AND `description` = "Long description" LIMIT 20
 * </code>
 *
 * @param array Values to be formatted in an array indexed by the field name.
 * There are special parameters such as 'limit' and 'offset' that will be used
 * as ORDER, LIMIT and OFFSET clauses respectively. Since LIMIT and OFFSET are
 * numerics, ORDER can receive a field name or a SQL function and a the ASC or
 * DESC clause. Examples:
 <code>
 $values = array ();
 $values['value'] = 10;
 $sql = 'SELECT * FROM table WHERE '.db_format_array_where_clause_sql ($values);
 // SELECT * FROM table WHERE VALUE = 10

 $values = array ();
 $values['value'] = 10;
 $values['order'] = 'name DESC';
 $sql = 'SELECT * FROM table WHERE '.db_format_array_where_clause_sql ($values);
 // SELECT * FROM table WHERE VALUE = 10 ORDER BY name DESC

 </code>
 * @param string Join operator. AND by default.
 * @param string A prefix to be added to the string. It's useful when limit and
 * offset could be given to avoid this cases:
 <code>
 $values = array ();
 $values['limit'] = 10;
 $values['offset'] = 20;
 $sql = 'SELECT * FROM table WHERE '.db_format_array_where_clause_sql ($values);
 // Wrong SQL: SELECT * FROM table WHERE LIMIT 10 OFFSET 20

 $values = array ();
 $values['limit'] = 10;
 $values['offset'] = 20;
 $sql = 'SELECT * FROM table WHERE '.db_format_array_where_clause_sql ($values, 'AND', 'WHERE');
 // Good SQL: SELECT * FROM table LIMIT 10 OFFSET 20

 $values = array ();
 $values['value'] = 5;
 $values['limit'] = 10;
 $values['offset'] = 20;
 $sql = 'SELECT * FROM table WHERE '.db_format_array_where_clause_sql ($values, 'AND', 'WHERE');
 // Good SQL: SELECT * FROM table WHERE value = 5 LIMIT 10 OFFSET 20
 </code>
 *
 * @return string Values joined into an SQL string that can fits into the WHERE
 * clause of an SQL sentence.
 */
function mysql_db_format_array_where_clause_sql($values, $join='AND', $prefix=false)
{
    $fields = [];

    if (! is_array($values)) {
        return '';
    }

    $query = '';
    $limit = '';
    $offset = '';
    $order = '';
    $group = '';
    if (isset($values['limit'])) {
        $limit = sprintf(' LIMIT %d', $values['limit']);
        unset($values['limit']);
    }

    if (isset($values['offset'])) {
        $offset = sprintf(' OFFSET %d', $values['offset']);
        unset($values['offset']);
    }

    if (isset($values['order'])) {
        if (is_array($values['order'])) {
            if (!isset($values['order']['order'])) {
                $orderTexts = [];
                foreach ($values['order'] as $orderItem) {
                    $orderTexts[] = $orderItem['field'].' '.$orderItem['order'];
                }

                $order = ' ORDER BY '.implode(', ', $orderTexts);
            } else {
                $order = sprintf(' ORDER BY %s %s', $values['order']['field'], $values['order']['order']);
            }
        } else {
            $order = sprintf(' ORDER BY %s', $values['order']);
        }

        unset($values['order']);
    }

    if (isset($values['group'])) {
        $group = sprintf(' GROUP BY %s', $values['group']);
        unset($values['group']);
    }

    $i = 1;
    $max = count($values);
    foreach ($values as $field => $value) {
        $negative = false;
        if (is_numeric($field)) {
            // User provide the exact operation to do
            $query .= $value;

            if ($i < $max) {
                $query .= ' '.$join.' ';
            }

            $i++;
            continue;
        }

        if ($field[0] == '!') {
            $negative = true;
            $field = substr($field, 1);
        }

        if ($field[0] != '`') {
            // If the field is as <table>.<field>, don't scape.
            if (strstr($field, '.') === false) {
                $field = '`'.$field.'`';
            }
        }

        if (is_null($value)) {
            $query .= sprintf('%s IS NULL', $field);
        } else if (is_int($value) || is_bool($value)) {
            $query .= sprintf('%s = %d', $field, $value);
        } else if (is_float($value) || is_double($value)) {
            $query .= sprintf('%s = %f', $field, $value);
        } else if (is_array($value)) {
            $not = $negative ? ' NOT ' : '';
            $query .= sprintf('%s %sIN ("%s")', $field, $not, implode('", "', $value));
        } else {
            if ($value === '') {
                // Search empty string
                $query .= sprintf("%s = ''", $field);
            } else if ($value[0] == '>') {
                $value = substr($value, 1, (strlen($value) - 1));
                $query .= sprintf("%s > '%s'", $field, $value);
            } else if ($value[0] == '<') {
                if ($value[1] == '>') {
                    $value = substr($value, 2, (strlen($value) - 2));
                    $query .= sprintf("%s <> '%s'", $field, $value);
                } else {
                    $value = substr($value, 1, (strlen($value) - 1));
                    $query .= sprintf("%s < '%s'", $field, $value);
                }
            } else if ($value[0] == '%') {
                $query .= sprintf("%s LIKE '%s'", $field, $value);
            } else {
                $query .= sprintf("%s = '%s'", $field, $value);
            }
        }

        if ($i < $max) {
            $query .= ' '.$join.' ';
        }

        $i++;
    }

    return (! empty($query) ? $prefix : '').$query.$group.$order.$limit.$offset;
}


/**
 * Get the first value of the first row of a table result from query.
 *
 * @param string SQL select statement to execute.
 *
 * @return the first value of the first row of a table result from query.
 */
function mysql_db_get_value_sql($sql, $dbconnection=false)
{
    $sql .= ' LIMIT 1';
    $result = mysql_db_get_all_rows_sql($sql, false, true, $dbconnection);

    if ($result === false) {
        return false;
    }

    $row = array_shift($result);
    $value = array_shift($row);

    if ($value === null) {
        return false;
    }

    return $value;
}


/**
 * Get the first row of an SQL database query.
 *
 * @param string SQL select statement to execute.
 *
 * @return mixed The first row of the result or false
 */
function mysql_db_get_row_sql($sql, $search_history_db=false)
{
    $sql .= ' LIMIT 1';
    $result = db_get_all_rows_sql($sql, $search_history_db);

    if ($result === false) {
        return false;
    }

    return $result[0];
}


/**
 * Get the row of a table in the database using a complex filter.
 *
 * @param string Table to retrieve the data (warning: not cleaned)
 * @param mixed Filters elements. It can be an indexed array
 * (keys would be the field name and value the expected value, and would be
 * joined with an AND operator) or a string, including any SQL clause (without
 * the WHERE keyword). Example:
 <code>
 Both are similars:
 db_get_row_filter ('table', array ('disabled', 0));
 db_get_row_filter ('table', 'disabled = 0');

 Both are similars:
 db_get_row_filter ('table', array ('disabled' => 0, 'history_data' => 0), 'name, description', 'OR');
 db_get_row_filter ('table', 'disabled = 0 OR history_data = 0', 'name, description');
 db_get_row_filter ('table', array ('disabled' => 0, 'history_data' => 0), array ('name', 'description'), 'OR');
 </code>
 * @param mixed Fields of the table to retrieve. Can be an array or a coma
 * separated string. All fields are retrieved by default
 * @param string Condition to join the filters (AND, OR).
 *
 * @return mixed Array of the row or false in case of error.
 */
function mysql_db_get_row_filter($table, $filter, $fields=false, $where_join='AND', $historydb=false)
{
    if (empty($fields)) {
        $fields = '*';
    } else {
        if (is_array($fields)) {
            $fields = implode(',', $fields);
        } else if (! is_string($fields)) {
            return false;
        }
    }

    if (is_array($filter)) {
        $filter = db_format_array_where_clause_sql($filter, $where_join, ' WHERE ');
    } else if (is_string($filter)) {
        $filter = 'WHERE '.$filter;
    } else {
        $filter = '';
    }

    $sql = sprintf('SELECT %s FROM %s %s', $fields, $table, $filter);

    return db_get_row_sql($sql, $historydb);
}


/**
 * Get all the rows of a table in the database that matches a filter.
 *
 * @param string Table to retrieve the data (warning: not cleaned)
 * @param mixed Filters elements. It can be an indexed array
 * (keys would be the field name and value the expected value, and would be
 * joined with an AND operator) or a string, including any SQL clause (without
 * the WHERE keyword). Example:
 * <code>
 * Both are similars:
 * db_get_all_rows_filter ('table', array ('disabled', 0));
 * db_get_all_rows_filter ('table', 'disabled = 0');
 *
 * Both are similars:
 * db_get_all_rows_filter ('table', array ('disabled' => 0, 'history_data' => 0), 'name', 'OR');
 * db_get_all_rows_filter ('table', 'disabled = 0 OR history_data = 0', 'name');
 * </code>
 * @param mixed Fields of the table to retrieve. Can be an array or a coma
 * separated string. All fields are retrieved by default
 * @param string Condition of the filter (AND, OR).
 * @param boolean                                                  $returnSQL Return a string with SQL instead the data, by default false.
 *
 * @return mixed Array of the row or false in case of error.
 */
function mysql_db_get_all_rows_filter($table, $filter=[], $fields=false, $where_join='AND', $search_history_db=false, $returnSQL=false)
{
    // TODO: Validate and clean fields
    if (empty($fields)) {
        $fields = '*';
    } else if (is_array($fields)) {
        $fields = implode(',', $fields);
    } else if (! is_string($fields)) {
        return false;
    }

    // TODO: Validate and clean filter options
    if (is_array($filter)) {
        $filter = db_format_array_where_clause_sql($filter, $where_join, ' WHERE ');
    } else if (is_string($filter)) {
        $filter = 'WHERE '.$filter;
    } else {
        $filter = '';
    }

    $sql = sprintf(
        'SELECT %s
		FROM %s %s',
        $fields,
        $table,
        $filter
    );

    if ($returnSQL) {
        return $sql;
    } else {
        return db_get_all_rows_sql($sql, $search_history_db);
    }
}


/**
 * Return the count of rows of query.
 *
 * @param  $sql
 * @return integer The count of rows of query.
 */
function mysql_db_get_num_rows($sql)
{
    global $config;

    if ($config['mysqli'] === true) {
        $result = mysqli_query($config['dbconnection'], $sql);

        if ($result) {
            return mysqli_num_rows($result);
        }
    } else {
        $result = mysql_query($sql, $config['dbconnection']);

        if ($result) {
            return mysql_num_rows($result);
        }
    }

    return 0;
}


/**
 * Get all the rows in a table of the databes filtering from a field.
 *
 * @param string Database table name.
 * @param string Field of the table.
 * @param string Condition the field must have to be selected.
 * @param string Field to order by.
 *
 * @return mixed A matrix with all the values in the table that matches the condition in the field or false
 */
function mysql_db_get_all_rows_field_filter($table, $field, $condition, $order_field='')
{
    if (is_int($condition) || is_bool($condition)) {
        $sql = sprintf('SELECT * FROM `%s` WHERE `%s` = %d', $table, $field, $condition);
    } else if (is_float($condition) || is_double($condition)) {
        $sql = sprintf('SELECT * FROM `%s` WHERE `%s` = %f', $table, $field, $condition);
    } else {
        $sql = sprintf("SELECT * FROM `%s` WHERE `%s` = '%s'", $table, $field, $condition);
    }

    if ($order_field != '') {
        $sql .= sprintf(' ORDER BY %s', $order_field);
    }

    return db_get_all_rows_sql($sql);
}


/**
 * Get all the rows in a table of the databes filtering from a field.
 *
 * @param string Database table name.
 * @param string Field of the table.
 *
 * @return mixed A matrix with all the values in the table that matches the condition in the field
 */
function mysql_db_get_all_fields_in_table($table, $field='', $condition='', $order_field='')
{
    $sql = sprintf('SELECT * FROM `%s`', $table);

    if ($condition != '') {
        $sql .= sprintf(" WHERE `%s` = '%s'", $field, $condition);
    }

    if ($order_field != '') {
        $sql .= sprintf(' ORDER BY %s', $order_field);
    }

    return db_get_all_rows_sql($sql);
}


/**
 * Formats an array of values into a SQL string.
 *
 * This function is useful to generate an UPDATE SQL sentence from a list of
 * values. Example code:
 *
 * <code>
 * $values = array ();
 * $values['name'] = "Name";
 * $values['description'] = "Long description";
 * $sql = 'UPDATE table SET '.format_array_to_update_sql ($values).' WHERE id=1';
 * echo $sql;
 * </code>
 * Will return:
 * <code>
 * UPDATE table SET `name` = "Name", `description` = "Long description" WHERE id=1
 * </code>
 *
 * @param array Values to be formatted in an array indexed by the field name.
 *
 * @return string Values joined into an SQL string that can fits into an UPDATE
 * sentence.
 */
function mysql_db_format_array_to_update_sql($values)
{
    $fields = [];

    foreach ($values as $field => $value) {
        if (is_numeric($field)) {
            array_push($fields, $value);
            continue;
        } else if ($field[0] == '`') {
            $field = str_replace('`', '', $field);
        }

        if ($value === null) {
            $sql = sprintf('`%s` = NULL', $field);
        } else if (is_int($value) || is_bool($value)) {
            $sql = sprintf('`%s` = %d', $field, $value);
        } else if (is_float($value) || is_double($value)) {
            $sql = sprintf('`%s` = %f', $field, $value);
        } else {
            // String
            if (isset($value[0]) && $value[0] == '`') {
                // Don't round with quotes if it references a field
                $sql = sprintf('`%s` = %s', $field, $value);
            } else {
                $sql = sprintf("`%s` = '%s'", $field, $value);
            }
        }

        array_push($fields, $sql);
    }

    return implode(', ', $fields);
}


/**
 * Updates a database record.
 *
 * All values should be cleaned before passing. Quoting isn't necessary.
 * Examples:
 *
 * <code>
 * db_process_sql_update ('table', array ('field' => 1), array ('id' => $id));
 * db_process_sql_update ('table', array ('field' => 1), array ('id' => $id, 'name' => $name));
 * db_process_sql_update ('table', array ('field' => 1), array ('id' => $id, 'name' => $name), 'OR');
 * db_process_sql_update ('table', array ('field' => 2), 'id in (1, 2, 3) OR id > 10');
 * </code>
 *
 * @param string Table to insert into
 * @param array An associative array of values to update
 * @param mixed An associative array of field and value matches. Will be joined
 * with operator specified by $where_join. A custom string can also be provided.
 * If nothing is provided, the update will affect all rows.
 * @param string When a                                         $where parameter is given, this will work as the glue
 *                                         between the fields. "AND" operator will be use by default. Other values might
 *                                         be "OR", "AND NOT", "XOR"
 *
 * @return mixed False in case of error or invalid values passed. Affected rows otherwise
 */
function mysql_db_process_sql_update($table, $values, $where=false, $where_join='AND')
{
    $query = sprintf(
        'UPDATE `%s` SET %s',
        $table,
        db_format_array_to_update_sql($values)
    );

    if ($where) {
        if (is_string($where)) {
            // No clean, the caller should make sure all input is clean, this is a raw function
            $query .= ' WHERE '.$where;
        } else if (is_array($where)) {
            $query .= db_format_array_where_clause_sql($where, $where_join, ' WHERE ');
        }
    }

    return db_process_sql($query);
}


/**
 * Delete database records.
 *
 * All values should be cleaned before passing. Quoting isn't necessary.
 * Examples:
 *
 * <code>
 * db_process_sql_delete ('table', array ('id' => 1));
 * // DELETE FROM table WHERE id = 1
 * db_process_sql_delete ('table', array ('id' => 1, 'name' => 'example'));
 * // DELETE FROM table WHERE id = 1 AND name = 'example'
 * db_process_sql_delete ('table', array ('id' => 1, 'name' => 'example'), 'OR');
 * // DELETE FROM table WHERE id = 1 OR name = 'example'
 * db_process_sql_delete ('table', 'id in (1, 2, 3) OR id > 10');
 * // DELETE FROM table WHERE id in (1, 2, 3) OR id > 10
 * </code>
 *
 * @param string Table to insert into
 * @param array An associative array of values to update
 * @param mixed An associative array of field and value matches. Will be joined
 * with operator specified by $where_join. A custom string can also be provided.
 * If nothing is provided, the update will affect all rows.
 * @param string When a                                         $where parameter is given, this will work as the glue
 *                                         between the fields. "AND" operator will be use by default. Other values might
 *                                         be "OR", "AND NOT", "XOR"
 *
 * @return mixed False in case of error or invalid values passed. Affected rows otherwise
 */
function mysql_db_process_sql_delete($table, $where, $where_join='AND')
{
    if (empty($where)) {
        // Should avoid any mistake that lead to deleting all data
        return false;
    }

    $query = sprintf('DELETE FROM `%s` WHERE ', $table);

    if ($where) {
        if (is_string($where)) {
            /*
                FIXME: Should we clean the string for sanity?
             Who cares if this is deleting data... */
            $query .= $where;
        } else if (is_array($where)) {
            $query .= db_format_array_where_clause_sql($where, $where_join);
        }
    }

    return db_process_sql($query);
}


/**
 * Get row by row the DB by SQL query. The first time pass the SQL query and
 * rest of times pass none for iterate in table and extract row by row, and
 * the end return false.
 *
 * @param  boolean  $new    Default true, if true start to query.
 * @param  resource $result The resource of mysql for access to query.
 * @param  string   $sql
 * @return mixed The row or false in error.
 */
function mysql_db_get_all_row_by_steps_sql($new=true, &$result, $sql=null)
{
    global $config;

    if ($config['mysqli'] === true) {
        if ($new == true) {
            $result = mysqli_query($config['dbconnection'], $sql);
        }

        if ($result) {
            return mysqli_fetch_assoc($result);
        }
    } else {
        if ($new == true) {
            $result = mysql_query($sql);
        }

        if ($result) {
            return mysql_fetch_assoc($result);
        }
    }

    return [];
}


/**
 * Starts a database transaction.
 */
function mysql_db_process_sql_begin()
{
    global $config;

    if ($config['mysqli']) {
        mysqli_query($config['dbconnection'], 'SET AUTOCOMMIT = 0');
        mysqli_query($config['dbconnection'], 'START TRANSACTION');
    } else {
        mysql_query('SET AUTOCOMMIT = 0');
        mysql_query('START TRANSACTION');
    }
}


/**
 * Commits a database transaction.
 */
function mysql_db_process_sql_commit()
{
    global $config;

    if ($config['mysqli']) {
        mysqli_query($config['dbconnection'], 'COMMIT');
        mysqli_query($config['dbconnection'], 'SET AUTOCOMMIT = 1');
    } else {
        mysql_query('COMMIT');
        mysql_query('SET AUTOCOMMIT = 1');
    }
}


/**
 * Rollbacks a database transaction.
 */
function mysql_db_process_sql_rollback()
{
    global $config;

    if ($config['mysqli']) {
        mysqli_query($config['dbconnection'], 'ROLLBACK ');
        mysqli_query($config['dbconnection'], 'SET AUTOCOMMIT = 1');
    } else {
        mysql_query('ROLLBACK ');
        mysql_query('SET AUTOCOMMIT = 1');
    }
}


/**
 * Put quotes if magic_quotes protection
 *
 * @param string Text string to be protected with quotes if magic_quotes protection is disabled
 */
function mysql_safe_sql_string($string)
{
    if (get_magic_quotes_gpc() == 0) {
        return $string;
    }

    global $config;

    return mysql_real_escape_string($config['dbconnection'], $string);
}


/**
 * Get last error.
 *
 * @return string Return the string error.
 */
function mysql_db_get_last_error()
{
    global $config;

    if ($config['mysqli']) {
        return mysqli_error();
    } else {
        return mysql_error();
    }
}


/**
 * This function gets the time from either system or sql based on preference and returns it
 *
 * @return integer Unix timestamp
 */
function mysql_get_system_time()
{
    global $config;

    static $time = 0;

    if ($time != 0) {
        return $time;
    }

    if ($config['timesource'] == 'sql') {
        $time = db_get_sql('SELECT UNIX_TIMESTAMP();');
        if (empty($time)) {
            return time();
        }

        return $time;
    } else {
        return time();
    }
}


/**
 * Get the type of field.
 *
 * @param string  $table The table to examine the type of field.
 * @param integer $field The field order in table.
 *
 * @return mixed Return the type name or False in error case.
 */
function mysql_db_get_type_field_table($table, $field)
{
    global $config;

    if ($config['mysqli']) {
        $result = mysqli_query($config['dbconnection'], 'SELECT parameters FROM '.$table);

        return mysqli_fetch_field_direct($result, $field);
    } else {
        $result = mysql_query('SELECT parameters FROM '.$table);

        return mysql_field_type($result, $field);
    }
}


function mysql_get_fields($table)
{
    global $config;

    return db_get_all_rows_sql('SHOW COLUMNS FROM '.$table);
}


/**
 * Process a file with an oracle schema sentences.
 * Based on the function which installs the pandoradb.sql schema.
 *
 * @param string  $path         File path.
 * @param boolean $handle_error Whether to handle the mysqli_query/mysql_query errors or throw an exception.
 *
 * @return boolean Return the final status of the operation.
 */
function mysql_db_process_file($path, $handle_error=true)
{
    global $config;

    if (file_exists($path)) {
        $file_content = file($path);
        $query = '';

        // Begin the transaction
        mysql_db_process_sql_begin();

        foreach ($file_content as $sql_line) {
            if (trim($sql_line) != '' && strpos($sql_line, '--') === false) {
                $query .= $sql_line;

                if (preg_match("/;[\040]*\$/", $sql_line)) {
                    if ($config['mysqli']) {
                        $query_result = mysqli_query($config['dbconnection'], $query);
                    } else {
                        $query_result = mysql_query($query);
                    }

                    if (!$result = $query_result) {
                        // Error. Rollback the transaction
                        mysql_db_process_sql_rollback();

                        if ($config['mysqli']) {
                            $error_message = mysqli_error($config['dbconnection']);
                        } else {
                            $error_message = mysql_error();
                        }

                        // Handle the error
                        if ($handle_error) {
                            $backtrace = debug_backtrace();
                            $error = sprintf(
                                '%s (\'%s\') in <strong>%s</strong> on line %d',
                                $error_message,
                                $query,
                                $backtrace[0]['file'],
                                $backtrace[0]['line']
                            );
                            db_add_database_debug_trace($query, $error_message);
                            set_error_handler('db_sql_error_handler');
                            trigger_error($error);
                            restore_error_handler();

                            return false;
                        }
                        // Throw an exception with the error message
                        else {
                            throw new Exception($error_message);
                        }
                    }

                    $query = '';
                }
            }
        }

        // No errors. Commit the transaction
        mysql_db_process_sql_commit();
        return true;
    } else {
        return false;
    }
}


// ---------------------------------------------------------------
// Initiates a transaction and run the queries of an sql file
// ---------------------------------------------------------------
function db_run_sql_file($location)
{
    global $config;

    // Load file
    $commands = file_get_contents($location);
    // Delete comments
    $lines = explode("\n", $commands);
    $commands = '';
    foreach ($lines as $line) {
        $line = trim($line);
        if ($line && !preg_match('/^--/', $line) && !preg_match('/^\/\*/', $line)) {
            $line = preg_replace('/;$/', '__;__', $line);
            $commands .= $line;
        }
    }

    // Convert to array
    $commands = explode('__;__', $commands);

    if ($config['mysqli']) {
        $mysqli = new mysqli($config['dbhost'], $config['dbuser'], $config['dbpass'], $config['dbname'], $config['dbport']);

        // Run commands
        $mysqli->query($config['dbconnection'], 'SET AUTOCOMMIT = 0');
        $mysqli->query($config['dbconnection'], 'START TRANSACTION');
    } else {
        // Run commands
        mysql_db_process_sql_begin();
        // Begin transaction
    }

    foreach ($commands as $command) {
        if (trim($command)) {
            $command .= ';';

            if ($config['mysqli']) {
                $result = $mysqli->query($command);
            } else {
                $result = mysql_query($command);
            }

            if (!$result) {
                break;
                // Error
            }
        }
    }

    if ($result) {
        if ($config['mysqli']) {
            $mysqli->query($config['dbconnection'], 'COMMIT');
            $mysqli->query($config['dbconnection'], 'SET AUTOCOMMIT = 1');
        } else {
            mysql_db_process_sql_commit();
            // Save results
        }

        return true;
    } else {
        if ($config['mysqli']) {
            $mysqli->query($config['dbconnection'], 'ROLLBACK ');
            $mysqli->query($config['dbconnection'], 'SET AUTOCOMMIT = 1');
        } else {
            mysql_db_process_sql_rollback();
            // Undo results
        }

        $config['db_run_sql_file_error'] = $mysqli->error;
        return false;
    }
}


/**
 * Inserts multiples strings into database.
 *
 * @param string  $table      Table to insert into.
 * @param mixed   $values     A single value or array of values to insert
 *      (can be a multiple amount of rows).
 * @param boolean $only_query Sql string.
 *
 * @return mixed False in case of error or invalid values passed.
 * Affected rows otherwise.
 */
function mysql_db_process_sql_insert_multiple($table, $values, $only_query)
{
    // Empty rows or values not processed.
    if (empty($values) === true || is_array($values) === false) {
        return false;
    }

    $query = sprintf('INSERT INTO `%s`', $table);

    $j = 1;
    $max_total = count($values);
    foreach ($values as $key => $value) {
        $fields = [];
        $values_str = '';
        $i = 1;
        $max = count($value);
        foreach ($value as $k => $v) {
            if ($j === 1) {
                // Add the correct escaping to values.
                $field = sprintf('`%s`', $k);
                array_push($fields, $field);
            }

            if (isset($v) === false) {
                $values_str .= 'NULL';
            } else if (is_int($v) || is_bool($v)) {
                $values_str .= sprintf('%d', $v);
            } else if (is_float($v) || is_double($v)) {
                $values_str .= sprintf('%f', $v);
            } else {
                $values_str .= sprintf("'%s'", $v);
            }

            if ($i < $max) {
                $values_str .= ',';
            }

            $i++;
        }

        if ($j === 1) {
            $query .= sprintf(' (%s) VALUES', implode(', ', $fields));
        }

        $query .= ' ('.$values_str.')';

        if ($j < $max_total) {
            $query .= ',';
        }

        $j++;
    }

    if ($only_query === true) {
        $result = $query;
    } else {
        $result = db_process_sql($query);
    }

    return $result;
}


/**
 * Updates multiples strings into database.
 *
 * @param string  $table      Table to update into.
 * @param mixed   $values     A single value or array of values to update
 *       (can be a multiple amount of rows).
 * @param boolean $only_query Sql string.
 *
 * @return mixed False in case of error or invalid values passed.
 * Affected rows otherwise.
 */
function mysql_db_process_sql_update_multiple($table, $values, $only_query)
{
    // Empty rows or values not processed.
    if (empty($values) === true || is_array($values) === false) {
        return false;
    }

    $res = [];
    foreach ($values as $field => $update) {
        $query = sprintf('UPDATE `%s` SET', $table);
        $query .= sprintf(' `%s` = CASE `%s`', $field, $field);
        foreach ($update as $where => $set) {
            $query .= sprintf(' WHEN "%s" THEN  "%s"', $where, $set);
        }

        $query .= sprintf(' ELSE `%s` END', $field);
        $query .= sprintf(' WHERE `%s` IN (%s)', $field, '"'.implode('","', array_keys($update)).'"');

        if ($only_query === true) {
            $res[] = $query;
        } else {
            $res['table'] = $table;
            $res['fields'][$field] = db_process_sql($query);
        }
    }

    return $res;
}