????
Your IP : 216.73.216.152
<?php
/* $Id: update.php,v 1.1 2004/08/25 22:34:31 akhan Exp $ */
include '../mysql.php';
// if a readme.txt file exists, display it to the user
if(!$read_me) {
if(file_exists('readme.txt')) {
$readme_file = 'readme.txt';
}
elseif(file_exists('README')) {
$readme_file = 'README';
}
elseif(file_exists('readme')) {
$readme_file = 'readme';
}
if($readme_file) {
$readme = file($readme_file);
print "<CENTER><TABLE BORDER=\"1\" WIDTH=\"75%\" CELLPADDING=\"2\" CELLSPACING=\"0\"><TR BGCOLOR=\"#e7e7cc\"><TD>\n";
print nl2br(htmlentities(implode($readme, ' ')));
print "<HR NOSHADE SIZE=\"1\"><CENTER><A HREF=\"update.php?read_me=1\"><B>Continue</B></A></CENTER>\n";
print "</TD></TR></TABLE>\n";
exit;
}
}
// list all sql files in this directory for the user to choose from
if(!$filename) {
print "<B>Select an SQL file to install.</B><UL>\n";
$files = dir('.');
while($f = $files->read()) {
if(substr($f, -4, 4) == '.sql') {
print "<LI><A HREF=\"update.php?read_me=1&filename=$f\">$f</A>";
$sql_file = file($f);
if(substr($sql_file[0], 0, 8) == '# Brief:') {
print " - " . htmlentities(substr($sql_file[0], 9));
}
print "</LI>\n";
}
}
print "</UL>";
}
// look like we've decided on a file
else {
// read in the sql file and parse it into a form
if(!$action) {
$sql_file = file($filename);
$sql_statements = array();
// create a new array containing just the lines we want.
foreach($sql_file as $k=>$v) {
// get rid of whitespace
$sql = trim($v);
// no comments, please
if(substr($sql, 0, 1) == '#') {
continue;
}
// no blank lines
if(!$sql) {
continue;
}
// insert the current sql line into a buffer
$cur_sql .= $sql . ' ';
// get the ending character. if it's a ';' then we have a full statement, otherwise keep appending until we do.
if(substr($sql, -1, 1) == ';') {
$sql_statements[] = substr(trim($cur_sql), 0, -1);
$cur_sql = '';
}
}
// ok, we got our new array 'sql_statements' containing a full sql statement per element
// now, let's display them in a form to allow modification before commiting
print "<B>Check over the following SQL statements and make sure they are correct for your server. If so, click the "Commit" button.</B><BR><BR>\n";
print "<FORM METHOD=\"post\" ACTION=\"update.php\">\n";
print "<INPUT TYPE=\"hidden\" NAME=\"action\" VALUE=\"commit\">\n";
print "<INPUT TYPE=\"hidden\" NAME=\"filename\" VALUE=\"$filename\">\n";
print "<INPUT TYPE=\"hidden\" NAME=\"read_me\" VALUE=\"1\">\n";
foreach($sql_statements as $k=>$v) {
print "<B>" . $k . ":</B> <TEXTAREA NAME=\"sql_statements[$k]\" ROWS=\"3\" COLS=\"40\" WRAP=\"soft\">" . htmlentities($v) . "</TEXTAREA><BR><BR>\n";
}
print "<INPUT TYPE=\"submit\" VALUE=\"Commit\">";
print "</FORM>";
}
// commit the changes to the database
else {
foreach($sql_statements as $k=>$v) {
$result = mysql_query(stripslashes($v));
if(!$result) {
print "<B>Error:</B> the following SQL statement didn't work.<BR>\n";
print mysql_error() . '<BR><BR>';
print "<BLOCKQUOTE>\n" . htmlentities(stripslashes($v)) . "\n</BLOCKQUOTE>";
print "<HR NOSHADE SIZE=\"1\">";
}
}
print "<H1 ALIGN=\"center\">SQL Database Updated!</H1>";
}
}
?>