Update website

admin/phpMyAdmin/libraries/classes/Controllers/Import/SimulateDmlController.php

@@ -0,0 +1,93 @@
+<?php
+
+declare(strict_types=1);
+
+namespace PhpMyAdmin\Controllers\Import;
+
+use PhpMyAdmin\Controllers\AbstractController;
+use PhpMyAdmin\Import\SimulateDml;
+use PhpMyAdmin\Message;
+use PhpMyAdmin\ResponseRenderer;
+use PhpMyAdmin\SqlParser\Parser;
+use PhpMyAdmin\SqlParser\Statements\DeleteStatement;
+use PhpMyAdmin\SqlParser\Statements\UpdateStatement;
+use PhpMyAdmin\SqlParser\Utils\Query;
+use PhpMyAdmin\Template;
+
+use function __;
+use function count;
+use function explode;
+
+final class SimulateDmlController extends AbstractController
+{
+    /** @var SimulateDml */
+    private $simulateDml;
+
+    public function __construct(
+        ResponseRenderer $response,
+        Template $template,
+        SimulateDml $simulateDml
+    ) {
+        parent::__construct($response, $template);
+        $this->simulateDml = $simulateDml;
+    }
+
+    public function __invoke(): void
+    {
+        $error = '';
+        $errorMsg = __('Only single-table UPDATE and DELETE queries can be simulated.');
+        /** @var string $sqlDelimiter */
+        $sqlDelimiter = $_POST['sql_delimiter'];
+        $sqlData = [];
+        /** @var string[] $queries */
+        $queries = explode($sqlDelimiter, $GLOBALS['sql_query']);
+        foreach ($queries as $sqlQuery) {
+            if (empty($sqlQuery)) {
+                continue;
+            }
+
+            // Parsing the query.
+            $parser = new Parser($sqlQuery);
+
+            if (empty($parser->statements[0])) {
+                continue;
+            }
+
+            $statement = $parser->statements[0];
+
+            if (
+                ! ($statement instanceof UpdateStatement || $statement instanceof DeleteStatement)
+                || ! empty($statement->join)
+            ) {
+                $error = $errorMsg;
+                break;
+            }
+
+            $tables = Query::getTables($statement);
+            if (count($tables) > 1) {
+                $error = $errorMsg;
+                break;
+            }
+
+            // Get the matched rows for the query.
+            $result = $this->simulateDml->getMatchedRows($sqlQuery, $parser, $statement);
+            $error = $this->simulateDml->getError();
+
+            if ($error !== '') {
+                break;
+            }
+
+            $sqlData[] = $result;
+        }
+
+        if ($error) {
+            $message = Message::rawError($error);
+            $this->response->addJSON('message', $message);
+            $this->response->addJSON('sql_data', false);
+
+            return;
+        }
+
+        $this->response->addJSON('sql_data', $sqlData);
+    }
+}