mirror of
https://github.com/php/php-src.git
synced 2026-10-28 17:56:50 +08:00
NickSdot
1da3a6398b
* ext/bz2: applied fixers to improve test robustness * ext/calendar: applied fixers to improve test robustness * ext/exif: applied fixers to improve test robustness * ext/fileinfo: applied fixers to improve test robustness * ext/filter: applied fixers to improve test robustness * ext/ftp: applied fixers to improve test robustness * ext/hash: applied fixers to improve test robustness * ext/iconv: applied fixers to improve test robustness * ext/ldap: applied fixers to improve test robustness * ext/pcre: applied fixers to improve test robustness * ext/posix: applied fixers to improve test robustness * ext/readline: applied fixers to improve test robustness * ext/shmop: applied fixers to improve test robustness * ext/snmp: applied fixers to improve test robustness * ext/sodium: applied fixers to improve test robustness * ext/sqlite3: applied fixers to improve test robustness * ext/sysvmsg: applied fixers to improve test robustness * ext/sysvsem: applied fixers to improve test robustness * ext/sysvshm: applied fixers to improve test robustness * ext/tidy: applied fixers to improve test robustness * ext/tokenizer: applied fixers to improve test robustness * ext/zend_test: applied fixers to improve test robustness * ext/zlib: applied fixers to improve test robustness
105 lines
2.6 KiB
PHP
105 lines
2.6 KiB
PHP
--TEST--
|
|
SQLite3 user authorizer callback
|
|
--EXTENSIONS--
|
|
sqlite3
|
|
--FILE--
|
|
<?php
|
|
|
|
$db = new SQLite3(':memory:');
|
|
$db->enableExceptions(true);
|
|
|
|
$db->setAuthorizer(function (int $action) {
|
|
if ($action == SQLite3::SELECT) {
|
|
return SQLite3::OK;
|
|
}
|
|
|
|
return SQLite3::DENY;
|
|
});
|
|
|
|
// This query should be accepted
|
|
var_dump($db->querySingle('SELECT 1;'));
|
|
|
|
try {
|
|
// This one should fail
|
|
var_dump($db->querySingle('CREATE TABLE test (a, b);'));
|
|
} catch (\Exception $e) {
|
|
echo $e::class, ': ', $e->getMessage(), "\n";
|
|
}
|
|
|
|
// Test disabling the authorizer
|
|
$db->setAuthorizer(null);
|
|
|
|
// This should now succeed
|
|
var_dump($db->exec('CREATE TABLE test (a); INSERT INTO test VALUES (42);'));
|
|
var_dump($db->querySingle('SELECT a FROM test;'));
|
|
|
|
// Test if we are getting the correct arguments
|
|
$db->setAuthorizer(function (int $action) {
|
|
$constants = (new ReflectionClass('SQLite3'))->getConstants();
|
|
$constants = array_flip($constants);
|
|
|
|
var_dump($constants[$action], implode(',', array_slice(func_get_args(), 1)));
|
|
return SQLITE3::OK;
|
|
});
|
|
|
|
var_dump($db->exec('SELECT * FROM test WHERE a = 42;'));
|
|
var_dump($db->exec('DROP TABLE test;'));
|
|
|
|
// Try to return something invalid from the authorizer
|
|
$db->setAuthorizer(function () {
|
|
return 'FAIL';
|
|
});
|
|
|
|
try {
|
|
var_dump($db->querySingle('SELECT 1;'));
|
|
} catch (\Exception $e) {
|
|
echo $e::class, ': ', $e->getMessage(), "\n";
|
|
echo $e->getPrevious()->getMessage() . "\n";
|
|
}
|
|
|
|
$db->setAuthorizer(function () {
|
|
return 4200;
|
|
});
|
|
|
|
try {
|
|
var_dump($db->querySingle('SELECT 1;'));
|
|
} catch (\Exception $e) {
|
|
echo $e::class, ': ', $e->getMessage(), "\n";
|
|
echo $e->getPrevious()->getMessage() . "\n";
|
|
}
|
|
|
|
?>
|
|
--EXPECT--
|
|
int(1)
|
|
SQLite3Exception: Unable to prepare statement: not authorized
|
|
bool(true)
|
|
int(42)
|
|
string(6) "SELECT"
|
|
string(3) ",,,"
|
|
string(4) "READ"
|
|
string(12) "test,a,main,"
|
|
string(4) "READ"
|
|
string(12) "test,a,main,"
|
|
bool(true)
|
|
string(6) "DELETE"
|
|
string(20) "sqlite_master,,main,"
|
|
string(10) "DROP_TABLE"
|
|
string(11) "test,,main,"
|
|
string(6) "DELETE"
|
|
string(11) "test,,main,"
|
|
string(6) "DELETE"
|
|
string(20) "sqlite_master,,main,"
|
|
string(4) "READ"
|
|
string(28) "sqlite_master,tbl_name,main,"
|
|
string(4) "READ"
|
|
string(24) "sqlite_master,type,main,"
|
|
string(6) "UPDATE"
|
|
string(28) "sqlite_master,rootpage,main,"
|
|
string(4) "READ"
|
|
string(28) "sqlite_master,rootpage,main,"
|
|
bool(true)
|
|
SQLite3Exception: Unable to prepare statement: not authorized
|
|
The authorizer callback returned an invalid type: expected int
|
|
SQLite3Exception: Unable to prepare statement: not authorized
|
|
The authorizer callback returned an invalid value: 4200
|