79 lines
2.8 KiB
PHP
79 lines
2.8 KiB
PHP
<?php
|
|
// /var/www/html/db_view.php
|
|
require_once __DIR__ . '/db_init.php';
|
|
header('Content-Type: text/html; charset=UTF-8');
|
|
|
|
$tokenRec = require_valid_token();
|
|
|
|
$dbPath = QDB_PATH;
|
|
if (!file_exists($dbPath)) { http_response_code(404); echo "Database not found"; exit; }
|
|
$enc = file_get_contents($dbPath);
|
|
if ($enc === false) { http_response_code(500); echo "Read error"; exit; }
|
|
|
|
try {
|
|
$plain = aes256_cbc_decrypt_bytes($enc, get_master_key_bytes());
|
|
} catch (Throwable $e) {
|
|
http_response_code(500); echo "Decryption failed"; exit;
|
|
}
|
|
|
|
$tmp = tempnam(sys_get_temp_dir(), 'qdb_');
|
|
file_put_contents($tmp, $plain);
|
|
|
|
try {
|
|
$pdo = new PDO("sqlite:$tmp");
|
|
$pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
|
|
|
|
$tables = [];
|
|
$rs = $pdo->query("SELECT name FROM sqlite_master WHERE type='table' AND name NOT LIKE 'sqlite_%' ORDER BY name");
|
|
foreach ($rs as $row) $tables[] = $row['name'];
|
|
|
|
// Tables that should not be shown (auth data)
|
|
$hidden = ['users'];
|
|
|
|
echo "<style>h2{margin:24px 0 8px} table{border-collapse:collapse;width:100%} th,td{border:1px solid #ddd;padding:6px 8px;text-align:left} th{background:#f7f7f7}</style>";
|
|
echo "<p><b>Tables:</b> " . htmlspecialchars(implode(', ', array_diff($tables, $hidden))) . "</p>";
|
|
|
|
[$rbacClause, $rbacParams] = rbac_client_filter($tokenRec);
|
|
|
|
foreach ($tables as $t) {
|
|
if (in_array($t, $hidden, true)) continue;
|
|
|
|
echo "<h2>" . htmlspecialchars($t) . "</h2>";
|
|
$t_esc = preg_replace('/[^A-Za-z0-9_]/', '', $t);
|
|
|
|
$cols = [];
|
|
$cr = $pdo->query("PRAGMA table_info($t_esc)");
|
|
foreach ($cr as $c) $cols[] = $c['name'];
|
|
|
|
$clientScoped = in_array('clientCode', $cols, true);
|
|
|
|
if ($clientScoped && ($tokenRec['role'] ?? '') !== 'admin') {
|
|
$sql = "SELECT t.* FROM $t_esc t JOIN client ON client.clientCode = t.clientCode WHERE $rbacClause";
|
|
$stmt = $pdo->prepare($sql);
|
|
foreach ($rbacParams as $k => $v) $stmt->bindValue($k, $v);
|
|
$stmt->execute();
|
|
} else {
|
|
$stmt = $pdo->query("SELECT * FROM $t_esc");
|
|
}
|
|
|
|
echo "<table><thead><tr>";
|
|
foreach ($cols as $c) echo "<th>" . htmlspecialchars($c) . "</th>";
|
|
echo "</tr></thead><tbody>";
|
|
while ($row = $stmt->fetch(PDO::FETCH_ASSOC)) {
|
|
echo "<tr>";
|
|
foreach ($cols as $c) {
|
|
$val = $row[$c];
|
|
if ($val === null) { echo "<td><em>NULL</em></td>"; }
|
|
else { echo "<td>" . htmlspecialchars((string)$val) . "</td>"; }
|
|
}
|
|
echo "</tr>";
|
|
}
|
|
echo "</tbody></table>";
|
|
}
|
|
} catch (Throwable $e) {
|
|
error_log($e->getMessage());
|
|
http_response_code(500); echo "Server error";
|
|
} finally {
|
|
@unlink($tmp);
|
|
}
|