Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

--TEST-- Charsets - covered by plugin prototype --SKIPIF-- <?php require_once('skipif.inc'..

Decoded Output download

--TEST--
Charsets - covered by plugin prototype
--SKIPIF--
<?php
require_once('skipif.inc');
require_once("connect.inc");
require_once("util.inc");

_skipif_check_extensions(array("mysqli"));

$settings = array(
	"myapp" => array(
		'master' => array($master_host),
		'slave' => array($slave_host),
	),
);
if ($error = mst_create_config("test_mysqlnd_ms_charsets.ini", $settings))
	die(sprintf("SKIP %s
", $error));

_skipif_connect($master_host_only, $user, $passwd, $db, $master_port, $master_socket);
_skipif_connect($slave_host_only, $user, $passwd, $db, $slave_port, $slave_socket);


$tmp = mst_mysqli_test_for_charset($master_host_only, $user, $passwd, $db, $master_port, $master_socket);
if ($tmp['error'] != '')
	die(sprintf("SKIP %s
", $tmp['error']));

$master_charset = $tmp['charset'];

$tmp = mst_mysqli_test_for_charset($slave_host_only, $user, $passwd, $db, $slave_port, $slave_socket);
if ($tmp['error'] != '')
	die(sprintf("SKIP %s
", $tmp['error']));

$slave_charset = $tmp['charset'];

if ($master_charset != $slave_charset) {
	die(sprintf("skip Master (%s) and slave (%s) must use the same default charset.", $master_charset, $slave_charset));
}
?>
--INI--
mysqlnd_ms.enable=1
mysqlnd_ms.config_file=test_mysqlnd_ms_charsets.ini
--FILE--
<?php
	require_once("connect.inc");
	require_once("util.inc");

	/*
	Charset changes made through the user API are applied to all
	connections. This is important and a security must because string
	escaping depends on the current charset. If the plugin would
	not take care of it, the following sequence would bear a security risk.

	INSERT - master, charset latin1
    $somestring = escape_string(link, "somestring") - would use latin1 from last used connection
    SELECT * FROM test WHERE column = $somestring - slave, slave may be using latin2, $somestring should have been escaped using latin2

	*/


	if (!($link = mst_mysqli_connect("myapp", $user, $passwd, $db, $port, $socket)))
		printf("[001] [%d] %s
", mysqli_connect_errno(), mysqli_connect_error());

	mst_mysqli_query(2, $link, "SET @myrole='master'", MYSQLND_MS_MASTER_SWITCH);
	mst_mysqli_query(3, $link, "SET @myrole='slave'", MYSQLND_MS_SLAVE_SWITCH);

	/* slave */
	if (!$res = mst_mysqli_query(4, $link, "SELECT @myrole AS _role, @@character_set_connection AS _charset", MYSQLND_MS_LAST_USED_SWITCH))
		printf("[005] [%d] %s
", $link->errno, $link->error);

	$row = $res->fetch_assoc();
	if ('slave' != $row['_role'])
		printf("[006] Expecting reply from slave not from '%s'
", $row['_role']);

	$current_charset = $row['_charset'];
	$new_charset = ('latin1' == $current_charset) ? 'latin2' : 'latin1';

	/* shall be run on *all* configured machines - all masters, all slaves */
	if (!$link->set_charset($new_charset))
		printf("[007] [%d] %s
", $link->errno, $link->error);

	/* slave */
	if (!$res = mst_mysqli_query(8, $link, "SELECT @myrole AS _role, @@character_set_connection AS _charset", MYSQLND_MS_LAST_USED_SWITCH))
		printf("[009] [%d] %s
", $link->errno, $link->error);

	$row = $res->fetch_assoc();
	if ('slave' != $row['_role'])
		printf("[010] Expecting reply from slave not from '%s'
", $row['_role']);

	$current_charset = $row['_charset'];
	if ($current_charset != $new_charset)
		printf("[011] Expecting charset '%s' got '%s'
", $new_charset, $current_charset);

	if ($link->character_set_name() != $new_charset)
		printf("[012] Expecting charset '%s' got '%s'
", $new_charset, $link->character_set_name());

	if (!$res = mst_mysqli_query(13, $link, "SELECT @myrole AS _role, @@character_set_connection AS _charset", MYSQLND_MS_MASTER_SWITCH))
		printf("[014] [%d] %s
", $link->errno, $link->error);

	$row = $res->fetch_assoc();
	if ('master' != $row['_role'])
		printf("[015] Expecting reply from master not from '%s'
", $row['_role']);

	$current_charset = $row['_charset'];
	if ($current_charset != $new_charset)
		printf("[016] Expecting charset '%s' got '%s'
", $new_charset, $current_charset);

	if ($link->character_set_name() != $new_charset)
		printf("[017] Expecting charset '%s' got '%s'
", $new_charset, $link->character_set_name);

	print "done!";

?>
--CLEAN--
<?php
	if (!unlink("test_mysqlnd_ms_charsets.ini"))
	  printf("[clean] Cannot unlink ini file 'test_mysqlnd_ms_charsets.ini'.
");
?>
--EXPECTF--
done!

Did this file decode correctly?

Original Code

--TEST--
Charsets - covered by plugin prototype
--SKIPIF--
<?php
require_once('skipif.inc');
require_once("connect.inc");
require_once("util.inc");

_skipif_check_extensions(array("mysqli"));

$settings = array(
	"myapp" => array(
		'master' => array($master_host),
		'slave' => array($slave_host),
	),
);
if ($error = mst_create_config("test_mysqlnd_ms_charsets.ini", $settings))
	die(sprintf("SKIP %s\n", $error));

_skipif_connect($master_host_only, $user, $passwd, $db, $master_port, $master_socket);
_skipif_connect($slave_host_only, $user, $passwd, $db, $slave_port, $slave_socket);


$tmp = mst_mysqli_test_for_charset($master_host_only, $user, $passwd, $db, $master_port, $master_socket);
if ($tmp['error'] != '')
	die(sprintf("SKIP %s\n", $tmp['error']));

$master_charset = $tmp['charset'];

$tmp = mst_mysqli_test_for_charset($slave_host_only, $user, $passwd, $db, $slave_port, $slave_socket);
if ($tmp['error'] != '')
	die(sprintf("SKIP %s\n", $tmp['error']));

$slave_charset = $tmp['charset'];

if ($master_charset != $slave_charset) {
	die(sprintf("skip Master (%s) and slave (%s) must use the same default charset.", $master_charset, $slave_charset));
}
?>
--INI--
mysqlnd_ms.enable=1
mysqlnd_ms.config_file=test_mysqlnd_ms_charsets.ini
--FILE--
<?php
	require_once("connect.inc");
	require_once("util.inc");

	/*
	Charset changes made through the user API are applied to all
	connections. This is important and a security must because string
	escaping depends on the current charset. If the plugin would
	not take care of it, the following sequence would bear a security risk.

	INSERT - master, charset latin1
    $somestring = escape_string(link, "somestring") - would use latin1 from last used connection
    SELECT * FROM test WHERE column = $somestring - slave, slave may be using latin2, $somestring should have been escaped using latin2

	*/


	if (!($link = mst_mysqli_connect("myapp", $user, $passwd, $db, $port, $socket)))
		printf("[001] [%d] %s\n", mysqli_connect_errno(), mysqli_connect_error());

	mst_mysqli_query(2, $link, "SET @myrole='master'", MYSQLND_MS_MASTER_SWITCH);
	mst_mysqli_query(3, $link, "SET @myrole='slave'", MYSQLND_MS_SLAVE_SWITCH);

	/* slave */
	if (!$res = mst_mysqli_query(4, $link, "SELECT @myrole AS _role, @@character_set_connection AS _charset", MYSQLND_MS_LAST_USED_SWITCH))
		printf("[005] [%d] %s\n", $link->errno, $link->error);

	$row = $res->fetch_assoc();
	if ('slave' != $row['_role'])
		printf("[006] Expecting reply from slave not from '%s'\n", $row['_role']);

	$current_charset = $row['_charset'];
	$new_charset = ('latin1' == $current_charset) ? 'latin2' : 'latin1';

	/* shall be run on *all* configured machines - all masters, all slaves */
	if (!$link->set_charset($new_charset))
		printf("[007] [%d] %s\n", $link->errno, $link->error);

	/* slave */
	if (!$res = mst_mysqli_query(8, $link, "SELECT @myrole AS _role, @@character_set_connection AS _charset", MYSQLND_MS_LAST_USED_SWITCH))
		printf("[009] [%d] %s\n", $link->errno, $link->error);

	$row = $res->fetch_assoc();
	if ('slave' != $row['_role'])
		printf("[010] Expecting reply from slave not from '%s'\n", $row['_role']);

	$current_charset = $row['_charset'];
	if ($current_charset != $new_charset)
		printf("[011] Expecting charset '%s' got '%s'\n", $new_charset, $current_charset);

	if ($link->character_set_name() != $new_charset)
		printf("[012] Expecting charset '%s' got '%s'\n", $new_charset, $link->character_set_name());

	if (!$res = mst_mysqli_query(13, $link, "SELECT @myrole AS _role, @@character_set_connection AS _charset", MYSQLND_MS_MASTER_SWITCH))
		printf("[014] [%d] %s\n", $link->errno, $link->error);

	$row = $res->fetch_assoc();
	if ('master' != $row['_role'])
		printf("[015] Expecting reply from master not from '%s'\n", $row['_role']);

	$current_charset = $row['_charset'];
	if ($current_charset != $new_charset)
		printf("[016] Expecting charset '%s' got '%s'\n", $new_charset, $current_charset);

	if ($link->character_set_name() != $new_charset)
		printf("[017] Expecting charset '%s' got '%s'\n", $new_charset, $link->character_set_name);

	print "done!";

?>
--CLEAN--
<?php
	if (!unlink("test_mysqlnd_ms_charsets.ini"))
	  printf("[clean] Cannot unlink ini file 'test_mysqlnd_ms_charsets.ini'.\n");
?>
--EXPECTF--
done!

Function Calls

None

Variables

None

Stats

MD5 e7428f92c6dbf86eb47859fc0156dd66
Eval Count 0
Decode Time 148 ms