<?

//if (eregi("sql_layer.php",$PHP_SELF)) {
//    Header("Location: ../index.php");
//    die();
//}


// debug mukodese
// sqldebug($param) metodus meghivasa
// $param=1  -> idomero nelkul csak error
// $param=2  -> idomeros minden sql_query


if(!empty($sql_debug)){
	$sql_debug_detail=array();
	$sql_debug_error=array();
	$debug_time_all = 0;
}

$dbtype = "MySQL";


/* $dbtype = "mSQL"; */
/* $dbtype = "PostgreSQL"; */
/* $dbtype = "PostgreSQL_local";// When postmaster start without "-i" option. */
/* $dbtype = "ODBC"; */
/* $dbtype = "ODBC_Adabas"; */
/* $dbtype = "Interbase"; */
/* $dbtype = "Sybase"; */

/*
 * sql_connect($host, $user, $password, $db)
 * returns the connection ID
 */


class ResultSet {
	var $result;
	var $total_rows;
	var $fetched_rows;

	function set_result( $res ) {
		$this->result = $res;
	}

	function get_result() {
		return $this->result;
	}

	function set_total_rows( $rows ) {
		$this->total_rows = $rows;
	}

	function get_total_rows() {
		return $this->total_rows;
	}

	function set_fetched_rows( $rows ) {
		$this->fetched_rows = $rows;
	}

	function get_fetched_rows() {
		return $this->fetched_rows;
	}

	function increment_fetched_rows() {
		$this->fetched_rows = $this->fetched_rows + 1;
	}
}


function sql_connect($host, $user, $password, $db)
{
global $dbtype;
switch ($dbtype) {

    case "MySQL":
        $dbi=@mysql_connect($host, $user, $password);
        if (!mysql_select_db($db)) {
	    mysql_query("CREATE DATABASE $db");
	    mysql_select_db($db);
	    die();
	}
        return $dbi;
    break;;

    case "mSQL":
         $dbi=msql_connect($host);
         if (!msql_select_db($db)) {
	    msql_query("CREATE DATABASE $db");
	    msql_select_db($db);
//	    include("includes/install.php");
	    die();
         }
	 return $dbi;
    break;;


    case "PostgreSQL":
         $dbi=@pg_connect("host=$host user=$user password=$password port=5432 dbname=$db");
         return $dbi;
    break;;

    case "PostgreSQL_local":
         $dbi=@pg_connect("user=$user password=$password dbname=$db");
         return $dbi;
    break;;

    case "ODBC":
         $dbi=@odbc_connect($db,$user,$password);
         return $dbi;
    break;;

    case "ODBC_Adabas":
         $dbi=@odbc_connect($host.":".$db,$user,$password);
	 return $dbi;
    break;;

    case "Interbase":
         $dbi=@ibase_connect($host.":".$db,$user,$password);
         return $dbi;
    break;;

    case "Sybase":
        $dbi=@sybase_connect($host, $user, $password);
	if (!sybase_select_db($db,$dbi)) {
	    sybase_query("CREATE DATABASE $db",$dbi);
    	    sybase_select_db($db,$dbi);
    	    include("includes/install.php");
	    die();
	}
	return $dbi;
    break;;

    default:
    break;;
    }

}

function sql_logout($id)
{
global $dbtype;
switch ($dbtype) {

    case "MySQL":
        $dbi=@mysql_close($id);
        return $dbi;
    break;;

    case "mSQL":
         $dbi=@msql_close($id);
         return $dbi;
    break;;

    case "PostgreSQL":
    case "PostgreSQL_local":
         $dbi=@pg_close($id);
         return $dbi;
    break;;

    case "ODBC":
    case "ODBC_Adabas":
         $dbi=@odbc_close($id);
         return $dbi;
    break;;

    case "Interbase":
         $dbi=@ibase_close($id);
         return $dbi;
    break;;

    case "Sybase":
        $dbi=@sybase_close($id);
        return $dbi;
    break;;

    default:
    break;;
    }
}


/*
 * sql_query($query, $id)
 * executes an SQL statement, returns a result identifier
 */

function sql_query($query, $id)
{

global $dbtype,$sql_debug,$debug_time_all,$sql_debug_detail,$sql_debug_error;

if($sql_debug==2){
	$debug_time_in=debug_time();
}
switch ($dbtype) {

    case "MySQL":
        $res=@mysql_query($query, $id);
		if($sql_debug){
			if(mysql_error($id)){
				$err=mysql_error($id); //mysql_errno($id)
				$sql_debug_error[]=array(
					'sql'			=>str_replace(",",", ",$query),
					'error'			=>$err,
					'error_detail'	=>mysql_errno($id),
					'type'			=>'sql_query');
			}

		}
		if($sql_debug==2){
			$debug_time_out=debug_time();
			$time=$debug_time_out - $debug_time_in;
			$debug_time_all+=$time;
			$sql_debug_detail[]=array(
				'sql'			=>str_replace(",",", ",$query),
				'error'			=>$err,
				'res'			=>$res,
				'loading_time'	=>$time,
				'loading_time_cumulated'=>$debug_time_all
			);
		}
        return $res;
    break;;

    case "mSQL":
        $res=@msql_query($query, $id);
        return $res;
    break;;

    case "PostgreSQL":
    case "PostgreSQL_local":
	$res=pg_exec($id,$query);
	$result_set = new ResultSet;
	$result_set->set_result( $res );
	$result_set->set_total_rows( sql_num_rows( $result_set ) );
	$result_set->set_fetched_rows( 0 );
        return $result_set;
    break;;

    case "ODBC":
    case "ODBC_Adabas":
        $res=@odbc_exec($id,$query);
        return $res;
    break;;

    case "Interbase":
        $res=@ibase_query($id,$query);
        return $res;
    break;;

    case "Sybase":
        $res=@sybase_query($query, $id);
        return $res;
    break;;

    default:
    break;;

    }
}

/*
 * sql_num_rows($res)
 * given a result identifier, returns the number of affected rows
 */

function sql_num_rows($res)
{
global $dbtype,$dbi,$sql_debug,$dbi,$sql_debug_error,$sql_debug_detail;
	//if($res) {
		switch ($dbtype) {

	    case "MySQL":
	        $rows=@mysql_num_rows($res);
	        if($sql_debug) if(mysql_error($dbi)){
				$err=mysql_error($dbi); //mysql_errno($id)
				$sql_debug_error[]=array(
					'error'			=>$err,
					'error_detail'	=>mysql_errno($id),
					'type'			=>'sql_num_rows');
	        }
			if($sql_debug>2){
				$debug_time_out=debug_time();
				$time=$debug_time_out - $debug_time_in;
				$debug_time_all+=$time;
				$sql_debug_detail[]=array(
					'sql'=>'num_rows_muvelet_muvelet',
					'error'=>$err,
					'loading_time'=>$time,
					'loading_time_cumulated'=>$debug_time_all
				);
			}
	        return $rows;
	    break;;

	    case "mSQL":
	        $rows=msql_num_rows($res);
	        return $rows;
	    break;;

	    case "PostgreSQL":
	    case "PostgreSQL_local":
	        $rows=pg_numrows( $res->get_result() );
	        return $rows;
	    break;;

	    case "ODBC":
	    case "ODBC_Adabas":
	        $rows=odbc_num_rows($res);
	        return $rows;
	    break;;

	    case "Interbase":
		echo "<BR>Error! PHP dosen't support ibase_numrows!<BR>";
	        return $rows;
	    break;;

	    case "Sybase":
	        $rows=sybase_num_rows($res);
	        return $rows;
	    break;;

	    default:
	    break;;
	   }
	//} else {
	//	return null ;
	//}
}

/*
 * sql_fetch_row(&$res,$row)
 * given a result identifier, returns an array with the resulting row
 * Needs also a row number for compatibility with PostgreSQL
 */

function sql_fetch_row(&$res, $nr=0)
{
global $dbtype,$dbi,$sql_debug,$sql_debug_error,$sql_debug_detail;
switch ($dbtype) {

    case "MySQL":
        $row = mysql_fetch_row($res);
	        if($sql_debug) if(mysql_error($dbi)){
				$err=mysql_error($dbi);
				$sql_debug_error[]=array(
					'error'			=>$err,
					'error_detail'	=>mysql_errno($dbi),
					'type'			=>'sql_fetch_array');
	        }
			if($sql_debug>2){
				$debug_time_out=debug_time();
				$time=$debug_time_out - $debug_time_in;
				$debug_time_all+=$time;
				$sql_debug_detail[]=array(
					'sql'=>'fetch_row_muvelet',
					'error'=>$err,
					'loading_time'=>$time,
					'loading_time_cumulated'=>$debug_time_all
				);
			}
        return $row;
    break;;

    case "mSQL":
        $row = msql_fetch_row($res);
        return $row;
    break;;

    case "PostgreSQL":
    case "PostgreSQL_local":
	if ( $res->get_total_rows() > $res->get_fetched_rows() ) {
		$row = pg_fetch_row($res->get_result(), $res->get_fetched_rows() );
		$res->increment_fetched_rows();
		return $row;
	} else {
		return false;
	}
    break;;

    case "ODBC":
    case "ODBC_Adabas":
        $row = array();
        $cols = odbc_fetch_into($res, $nr, $row);
        return $row;
    break;;

    case "Interbase":
        $row = ibase_fetch_row($res);
        return $row;
    break;;

    case "Sybase":
        $row = sybase_fetch_row($res);
        return $row;
    break;;

    default:
    break;;
    }
}

/*
 * sql_fetch_assoc($res,$row)
 * given a result identifier, returns an associative array
 * with the resulting row using field names as keys.
 * Needs also a row number for compatibility with PostgreSQL.
 */

function sql_fetch_assoc(&$res, $nr=0)
{
global $dbtype,$sql_debug,$dbi,$sql_debug_detail,$sql_debug_error;
switch ($dbtype)
    {
    case "MySQL":
        $row = array();
        $row = @mysql_fetch_assoc($res);
        if($sql_debug) if($err=mysql_error($dbi)){
				$sql_debug_error[]=array(
					'error'			=>$err,
					'error_detail'	=>$err,
					'type'			=>'sql_fetch_assoc');
        }

		if($sql_debug>2){
			$debug_time_out=debug_time();
			$time=$debug_time_out - $debug_time_in;
			$debug_time_all+=$time;
			$sql_debug_detail[]=array(
				'sql'=>'fetch_assoc_muvelet',
				'error'=>$err,
				'loading_time'=>$time,
				'loading_time_cumulated'=>$debug_time_all
			);
		}
        return $row;
    break;
    }
}

/*
 * sql_fetch_array($res,$row)
 * given a result identifier, returns an associative array
 * with the resulting row using field names as keys.
 * Needs also a row number for compatibility with PostgreSQL.
 */

function sql_fetch_array(&$res, $nr=0)
{
global $dbtype,$dbi,$sql_debug,$sql_debug_detail,$sql_debug_error;
switch ($dbtype)
    {
    case "MySQL":
        $row = array();
        $row = mysql_fetch_array($res);
        if($sql_debug) if(mysql_error($dbi)){
				$err=mysql_error($dbi); //mysql_errno($id)
				$sql_debug_error[]=array(
					'error'			=>$err,
					'error_detail'	=>mysql_errno($id),
					'type'			=>'sql_fetch_array');
        }

		if($sql_debug>2){
			$debug_time_out=debug_time();
			$time=$debug_time_out - $debug_time_in;
			$debug_time_all+=$time;
			$sql_debug_detail[]=array(
				'sql'=>'fetch_array_muvelet',
				'error'=>$err,
				'loading_time'=>$time,
				'loading_time_cumulated'=>$debug_time_all
			);
		}
        return $row;
    break;;

    case "mSQL":
        $row = array();
        $row = msql_fetch_array($res);
        return $row;
    break;;

    case "PostgreSQL":
    case "PostgreSQL_local":
	if( $res->get_total_rows() > $res->get_fetched_rows() ) {
		$row = array();
		$row = pg_fetch_array($res->get_result(), $res->get_fetched_rows() );
		$res->increment_fetched_rows();
		return $row;
	} else {
		return false;
	}
    break;;

/*
 * ODBC doesn't have a native _fetch_array(), so we have to
 * use a trick. Beware: this might cause HUGE loads!
 */

    case "ODBC":
        $row = array();
        $result = array();
        $result = odbc_fetch_row($res, $nr);
	$nf = odbc_num_fields($res); /* Field numbering starts at 1 */
        for($count=1; $count < $nf+1; $count++)
	{
            $field_name = odbc_field_name($res, $count);
            $field_value = odbc_result($res, $field_name);
            $row[$field_name] = $field_value;
        }
        return $row;
    break;;

    case "ODBC_Adabas":
        $row = array();
        $result = array();
        $result = odbc_fetch_row($res, $nr);

        $nf = count($result)+2; /* Field numbering starts at 1 */
	for($count=1; $count < $nf; $count++) {
	    $field_name = odbc_field_name($res, $count);
	    $field_value = odbc_result($res, $field_name);
	    $row[$field_name] = $field_value;
	}
        return $row;
    break;;

    case "Interbase":
	$orow=ibase_fetch_object($res);
	$row=get_object_vars($orow);
        return $row;
    break;;

    case "Sybase":
        $row = sybase_fetch_array($res);
        return $row;
    break;;

    }
}

function sql_fetch_object(&$res, $nr=0)
{
global $dbtype;
switch ($dbtype)
    {
    case "MySQL":
        $row = mysql_fetch_object($res);
	if($row) return $row;
	else return false;
    break;;

    case "mSQL":
        $row = msql_fetch_object($res);
	if($row) return $row;
	else return false;
    break;;

    case "PostgreSQL":
    case "PostgreSQL_local":
	if( $res->get_total_rows() > $res->get_fetched_rows() ) {
		$row = pg_fetch_object( $res->get_result(), $res->get_fetched_rows() );
		$res->increment_fetched_rows();
		if($row) return $row;
		else return false;
	} else {
		return false;
	}
    break;;

    case "ODBC":
        $result = odbc_fetch_row($res, $nr);
	if(!$result) return false;
	$nf = odbc_num_fields($res); /* Field numbering starts at 1 */
        for($count=1; $count < $nf+1; $count++)
	{
            $field_name = odbc_field_name($res, $count);
            $field_value = odbc_result($res, $field_name);
            $row->$field_name = $field_value;
        }
        return $row;
    break;;

    case "ODBC_Adabas":
        $result = odbc_fetch_row($res, $nr);
	if(!$result) return false;

        $nf = count($result)+2; /* Field numbering starts at 1 */
	for($count=1; $count < $nf; $count++) {
	    $field_name = odbc_field_name($res, $count);
	    $field_value = odbc_result($res, $field_name);
	    $row->$field_name = $field_value;
	}
        return $row;
    break;;

    case "Interbase":
        $orow = ibase_fetch_object($res);
	if($orow)
	{
	    $arow=get_object_vars($orow);
	    while(list($name,$key)=each($arow))
	    {
		$name=strtolower($name);
		$row->$name=$key;
	    }
    	    return $row;
	}else return false;
    break;;

    case "Sybase":
        $row = sybase_fetch_object($res);
        return $row;
    break;;

    }
}

/*** Function Free Result for function free the memory ***/
function sql_free_result($res) {
global $dbtype;
switch ($dbtype) {

    case "MySQL":
        $row = mysql_free_result($res);
        return $row;
    break;;

	   case "mSQL":
        $row = msql_free_result($res);
        return $row;
    break;;


	    case "PostgreSQL":
    case "PostgreSQL_local":
        $rows=pg_FreeResult( $res->get_result() );
        return $rows;
    break;;

    case "ODBC":
    case "ODBC_Adabas":
        $rows=odbc_free_result($res);
        return $rows;
    break;;

    case "Interbase":
	echo "<BR>Error! PHP dosen't support ibase_numrows!<BR>";
        return $rows;
    break;;

    case "Sybase":
        $rows=sybase_free_result($res);
        return $rows;
    break;;
	}
}

function sql_check_table($tablename){

	global $dbtype;

	switch ($dbtype){
	    case "MySQL":
	   	 	$dbj=@mysql_connect(DB_HOST, DB_USER, DB_PASS);
        	mysql_select_db('information_schema');
	    	$sql="select count(*) from tables where table_schema='".DB_DB."' and TABLE_NAME='$tablename'";
        	$r=sql_query($sql,$dbj);
        	list($db)=sql_fetch_array($r,$dbj);
        	mysql_select_db(DB_DB);
        	if($db) return true;
        	else return false;
    	break;;
	}
}

function sql_check_field($tablename,$fieldname){

	global $dbtype;

	switch ($dbtype){
	    case "MySQL":
	   	 	$dbj=@mysql_connect(DB_HOST, DB_USER, DB_PASS);
        	mysql_select_db('information_schema');
	    	$sql="select count(*) from columns where table_schema='".DB_DB."' and TABLE_NAME='$tablename' and column_name='$fieldname'";
	    	$r=sql_query($sql,$dbj);
        	list($db)=sql_fetch_array($r,$dbj);
        	mysql_select_db(DB_DB);
        	if($db) return true;
        	else return false;
    	break;;
	}
}

function sql_checkSqlInjection($post_data){

	$injection=array(
		"='",'DELETE','INSERT','SELECT','FROM','ORDER','GROUP','UNION','DROP','TRUNCATE'
	);

	if(is_array($post_data)) $post_data=implode(' ',$post_data);
	$check=preg_split("/ / ",$post_data);
	if(is_array($check)) foreach($check as $item){
		if(in_array(strtoupper($item),$injection)) return 'possbile sql injection = '.$post_data;
	}else if(in_array(strtupper($post_data),$injection)){
		return 'possbile sql injection2 = '.$post_data;
	}else return false;
}

function sqldebug($mode){
	global $sql_debug;
	$sql_debug=$mode;
}

function debug_time()
{
    list($usec, $sec) = explode(" ", microtime());
    return ((float)$usec + (float)$sec);
}

?>