wfDB.php — Wordfence Security – Firewall, Malware Scan, and Login Security 3.2.4

wordfence / lib / wfDB.php

wordfence / lib Last commit date

wfDB.php

234 lines

1	<?php
2	class wfDB {
3	private $dbh = false;
4	private static $dbhCache = array();
5	private $dbhost = false;
6	private $dbpassword = false;
7	private $dbname = false;
8	private $dbuser = false;
9	private $createNewHandle = false;
10	public $errorMsg = false;
11	public function __construct($createNewHandle = false, $dbhost = false, $dbuser = false, $dbpassword = false, $dbname = false){
12	$this->createNewHandle = $createNewHandle;
13	if($dbhost && $dbuser && $dbpassword && $dbname){
14	$this->dbhost = $dbhost;
15	$this->dbuser = $dbuser;
16	$this->dbpassword = $dbpassword;
17	$this->dbname = $dbname;
18	} else {
19	global $wpdb;
20	if(! $wpdb){
21	self::criticalError("The WordPress variable wpdb is not defined. Wordfence can't function without this being defined as it is in all standard WordPress installs.");
22	return;
23	}
24	$sources = array(
25	array('dbhost', 'DB_HOST'),
26	array('dbuser', 'DB_USER'),
27	array('dbpassword', 'DB_PASSWORD'),
28	array('dbname', 'DB_NAME')
29	);
30	foreach($sources as $src){
31	$prop = $src[0];
32	if(isset($wpdb->$prop)){
33	$this->$prop = $wpdb->$prop;
34	} else if(defined($src[1])){
35	$this->$prop = constant($src[1]);
36	} else {
37	self::criticalError("Wordfence DB connect error. wpdb.$prop is not set and " . $src[1] . " is not defined.");
38	return;
39	}
40	}
41	}
42	$this->connectHandle();
43	}
44	private function connectHandle(){
45	//We tried reusing wpdb but got disconnection errors from many users.
46	$handleKey = md5($this->dbhost . $this->dbuser . $this->dbpassword . $this->dbname);
47	//Use a cached handle if it exists and is still connected
48	if( (! $this->createNewHandle) && isset(self::$dbhCache[$handleKey]) && mysql_ping(self::$dbhCache[$handleKey]) ){
49	$this->dbh = self::$dbhCache[$handleKey];
50	} else {
51	//This close call is to deal with versions of mysql prior to 5.0.3 which auto-recommend when callig ping. So the conditional above may have reconnected this handle, so we disconnect it before reconnecting, if it's connected.
52	if(isset(self::$dbhCache[$handleKey]) && mysql_ping(self::$dbhCache[$handleKey])){
53	mysql_close(self::$dbhCache[$handleKey]);
54	unset(self::$dbhCache[$handleKey]);
55	}
56	$dbh = mysql_connect($this->dbhost, $this->dbuser, $this->dbpassword, true );
57	mysql_select_db($this->dbname, $dbh);
58	if($this->createNewHandle){
59	$this->dbh = $dbh;
60	} else {
61	self::$dbhCache[$handleKey] = $dbh;
62	$this->dbh = self::$dbhCache[$handleKey];
63	}
64	$this->query("SET NAMES 'utf8'");
65	$this->queryIgnoreError("SET GLOBAL max_allowed_packet=25610241024");
66	//$this->queryIgnoreError("SET GLOBAL wait_timeout=28800");
67	$this->queryIgnoreError("SET @@wait_timeout=30800"); //Changing to session setting bc user may not have super privilege
68	}
69	}
70	public function reconnect(){
71	if((! $this->dbh) \|\| (! mysql_ping($this->dbh)) ){
72	$this->connectHandle();
73	}
74	}
75	public function querySingleRec(){
76	$this->reconnect();
77	$this->errorMsg = false;
78	$args = func_get_args();
79	if(sizeof($args) == 1){
80	$query = $args[0];
81	} else if(sizeof($args) > 1){
82	$query = call_user_func_array('sprintf', $args);
83	} else {
84	$this->handleError("No arguments passed to querySingle()");
85	}
86	$res = mysql_query($query, $this->dbh);
87	$this->handleError();
88	return mysql_fetch_assoc($res); //returns false if no rows found
89	}
90	public function handleError($err = false){
91	if(! $err){
92	$err = mysql_error();
93	}
94	if($err){
95	$trace=debug_backtrace();
96	$first=array_shift($trace);
97	$caller=array_shift($trace);
98	$msg = "Wordfence DB error in " . $caller['file'] . " line " . $caller['line'] . ": $err";
99	global $wpdb;
100	$statusTable = $wpdb->base_prefix . 'wfStatus';
101	$this->reconnect(); //Putting reconnect here so it doesn't mess with the mysql_error() call
102	mysql_query(sprintf("insert into " . $statusTable . " (ctime, level, type, msg) values (%s, %d, '%s', '%s')",
103	mysql_real_escape_string(sprintf('%.6f', microtime(true))),
104	mysql_real_escape_string(1),
105	mysql_real_escape_string('error'),
106	mysql_real_escape_string($msg)), $this->dbh);
107	error_log($msg);
108	return;
109	}
110	}
111	public function querySingle(){
112	$this->reconnect();
113	$this->errorMsg = false;
114	$args = func_get_args();
115	if(sizeof($args) == 1){
116	$query = $args[0];
117	} else if(sizeof($args) > 1){
118	for($i = 1; $i < sizeof($args); $i++){
119	$args[$i] = mysql_real_escape_string($args[$i]);
120	}
121	$query = call_user_func_array('sprintf', $args);
122	} else {
123	$this->handleError("No arguments passed to querySingle()");
124	}
125	$res = mysql_query($query, $this->dbh);
126	$this->handleError();
127	if(! $res){
128	return false;
129	}
130	$row = mysql_fetch_array($res, MYSQL_NUM);
131	if(! is_array($row)){ return false; }
132	return $row[0];
133	}
134	public function query(){ //sprintfString, arguments
135	$this->reconnect();
136	$this->errorMsg = false;
137	$args = func_get_args();
138	$isStatusQuery = false;
139	if(sizeof($args) == 1){
140	if(preg_match('/Wordfence DB error/i', $args[0])){
141	$isStatusQuery = true;
142	}
143	$res = mysql_query($args[0], $this->dbh);
144	} else if(sizeof($args) > 1){
145	for($i = 1; $i < sizeof($args); $i++){
146	if(preg_match('/Wordfence DB error/i', $args[$i])){
147	$isStatusQuery = true;
148	}
149	$args[$i] = mysql_real_escape_string($args[$i]);
150	}
151	$res = mysql_query(call_user_func_array('sprintf', $args), $this->dbh);
152	} else {
153	$this->handleError("No arguments passed to query()");
154	}
155	$this->handleError();
156	return $res;
157	}
158	public function queryIgnoreError(){ //sprintfString, arguments
159	$this->reconnect();
160	$this->errorMsg = false;
161	$args = func_get_args();
162	if(sizeof($args) == 1){
163	$res = mysql_query($args[0], $this->dbh);
164	} else if(sizeof($args) > 1){
165	for($i = 1; $i < sizeof($args); $i++){
166	$args[$i] = mysql_real_escape_string($args[$i]);
167	}
168	$res = mysql_query(call_user_func_array('sprintf', $args), $this->dbh);
169	} else {
170	$this->handleError("No arguments passed to query()");
171	}
172	return $res;
173	}
174
175	private static function criticalError($msg){
176	$msg = "Wordfence critical database error: $msg";
177	error_log($msg);
178	return;
179	}
180	public function columnExists($table, $col){
181	global $wpdb; $prefix = $wpdb->base_prefix;
182	$table = $prefix . $table;
183	$q = $this->query("desc $table");
184	while($row = mysql_fetch_assoc($q)){
185	if($row['Field'] == $col){
186	return true;
187	}
188	}
189	return false;
190	}
191	public function dropColumn($table, $col){
192	global $wpdb; $prefix = $wpdb->base_prefix;
193	$table = $prefix . $table;
194	$this->query("alter table $table drop column $col");
195	}
196	public function createKeyIfNotExists($table, $col, $keyName){
197	global $wpdb; $prefix = $wpdb->base_prefix;
198	$table = $prefix . $table;
199	$exists = $this->querySingle("show tables like '$table'");
200	$keyFound = false;
201	if($exists){
202	$q = $this->query("show keys from $table");
203	if($q){
204	while($row = mysql_fetch_assoc($q)){
205	if($row['Key_name'] == $keyName){
206	$keyFound = true;
207	}
208	}
209	}
210	}
211	if(! $keyFound){
212	$this->query("alter table $table add KEY $keyName($col)");
213	}
214	}
215	public function getDBH(){ return $this->dbh; }
216	public function getMaxAllowedPacketBytes(){
217	$rec = $this->querySingleRec("show variables like 'max_allowed_packet'");
218	return $rec['Value'];
219	}
220	public function prefix(){
221	global $wpdb;
222	return $wpdb->base_prefix;
223	}
224	public function getAffectedRows(){
225	return mysql_affected_rows($this->dbh);
226	}
227	public function truncate($table){ //Ensures everything is deleted if user is using MySQL >= 5.1.16 and does not have "drop" privileges
228	$this->query("truncate table $table");
229	$this->query("delete from $table");
230	}
231	}
232
233	?>
234