<?php

/**
 * 会员管理程序
 */

define('IN_ECTOUCH', true);

require(dirname(__FILE__) . '/includes/init.php');

$_POST['sql'] = !empty($_POST['sql']) ? trim($_POST['sql']) : '';

if (!$_POST['sql']) {
    $_REQUEST['act'] = 'main';
}

/*------------------------------------------------------ */
//-- 用户帐号列表
/*------------------------------------------------------ */

if ($_REQUEST['act'] == 'main') {
    admin_priv('sql_query');
    assign_query_info();
    $smarty->assign('type', -1);
    $smarty->assign('ur_here', $_LANG['04_sql_query']);

    $smarty->display('sql.htm');
}

if ($_REQUEST['act'] == 'query') {
    admin_priv('sql_query');
    if (!empty($_POST['sql'])) {
        preg_match_all("/(SELECT)/i", $_POST['sql'], $matches);
        if (isset($matches[1]) && count($matches[1])>1) {
            sys_msg("this sql more than one SELECT ");
        }

        if (preg_match("/(UPDATE|DELETE|TRUNCATE|ALTER|DROP|FLUSH|INSERT|REPLACE|SET|CREATE|CONCAT)/i", $_POST['sql'])) {
            sys_msg("this sql May contain UPDATE,DELETE,TRUNCATE,ALTER,DROP,FLUSH,INSERT,REPLACE,SET,CREATE,CONCAT ");
        }
    }

    assign_sql($_POST['sql']);
    assign_query_info();
    $smarty->assign('ur_here', $_LANG['04_sql_query']);

    $smarty->display('sql.htm');
}

/**
 *
 *
 * @access  public
 * @param
 *
 * @return void
 */
function assign_sql($sql)
{
    global $db, $smarty, $_LANG;

    $sql = stripslashes($sql);
    $smarty->assign('sql', $sql);

    /* 解析查询项 */
    $sql = str_replace("\r", '', $sql);
    $query_items = explode(";\n", $sql);
    foreach ($query_items as $key=>$value) {
        if (empty($value)) {
            unset($query_items[$key]);
        }
    }
    /* 如果是多条语句，拆开来执行 */
    if (count($query_items) > 1) {
        foreach ($query_items as $key=>$value) {
            if ($db->query($value, 'SILENT')) {
                $smarty->assign('type', 1);
            } else {
                $smarty->assign('type', 0);
                $smarty->assign('error', $db->error());
                return;
            }
        }
        return; //退出函数
    }

    /* 单独一条sql语句处理 */
    if (preg_match("/^(?:UPDATE|DELETE|TRUNCATE|ALTER|DROP|FLUSH|INSERT|REPLACE|SET|CREATE)\\s+/i", $sql)) {
        if ($db->query($sql, 'SILENT')) {
            $smarty->assign('type', 1);
        } else {
            $smarty->assign('type', 0);
            $smarty->assign('error', $db->error());
        }
    } else {
        $data = $db->GetAll($sql);
        if ($data === false) {
            $smarty->assign('type', 0);
            $smarty->assign('error', $db->error());
        } else {
            $result = '';
            if (is_array($data) && isset($data[0]) === true) {
                $result = "<table> \n <tr>";
                $keys = array_keys($data[0]);
                for ($i = 0, $num = count($keys); $i < $num; $i++) {
                    $result .= "<th>" . $keys[$i] . "</th>\n";
                }
                $result .= "</tr> \n";
                foreach ($data as $data1) {
                    $result .= "<tr>\n";
                    foreach ($data1 as $value) {
                        $result .= "<td>" . $value . "</td>";
                    }
                    $result .= "</tr>\n";
                }
                $result .= "</table>\n";
            } else {
                $result ="<center><h3>" . $_LANG['no_data'] . "</h3></center>";
            }

            $smarty->assign('type', 2);
            $smarty->assign('result', $result);
        }
    }
}