{{overview}}
phpLiteAdmin is released under the GNU GPL v3.
- Lightweight - consists of a single 150KB source file for portability
- Supports SQLite3 with backwards-compatibility for SQLite2
- Create and delete databases
- Add, delete, rename, empty, and drop tables
- Browse, add, edit, and delete records
- Add, delete, and edit table columns
- Manage table indexes
- Manage table triggers
- Import and export tables, structure, indexes, and data
- View data as bar, pie, and line charts
- Graphical search tool to find records based on specified field values
- Create and run your own custom SQL queries in the free-form query editor/builder
- Easily apply core SQLite functions to column values using the GUI
- Write your own PHP functions to be available to apply to column values
- Secure password-protected interface with login screen and cookies
- Specify and manage an unlimited number of databases
- Specify a directory and optionally its subdirectories to scan for databases
- Allows multiple installations on the same server, each with a different password
- Design your own theme using CSS or install a pre-made theme from the community
- All presented in an intuitive, easy-to-use GUI that allows non-technical, SQL-illiterate users to fully manage databases
'.$lang['add_allowed_extension']); } } } //- Scan a directory for databases if($directory!==false) { if($directory[strlen($directory)-1]==DIRECTORY_SEPARATOR) //if user has a trailing slash in the directory, remove it $directory = substr($directory, 0, strlen($directory)-1); if(is_dir($directory)) //make sure the directory is valid { if($subdirectories===true) $arr = dir_tree($directory); else $arr = scandir($directory); $databases = array(); $j = 0; for($i=0; $i
".$lang['not_dir']."
";
exit();
}
}
else
{
for($i=0; $i'.$lang['add_allowed_extension']); } } //- Export (download a dump) an existing database if(isset($_POST['export'])) { ob_end_clean(); $export_filename = str_replace(array("\r", "\n"), '',$_POST['filename']); // against http header injection (php < 5.1.2 only) if($_POST['export_type']=="sql") { header('Content-Type: text/sql'); header('Content-Disposition: attachment; filename="'.$export_filename.'.'.$_POST['export_type'].'";'); if(isset($_POST['tables'])) $tables = $_POST['tables']; else { $tables = array(); $tables[0] = $_POST['single_table']; } $drop = isset($_POST['drop']); $structure = isset($_POST['structure']); $data = isset($_POST['data']); $transaction = isset($_POST['transaction']); $comments = isset($_POST['comments']); $db = new Database($currentDB); echo $db->export_sql($tables, $drop, $structure, $data, $transaction, $comments); } else if($_POST['export_type']=="csv") { header("Content-type: application/csv"); header('Content-Disposition: attachment; filename="'.$export_filename.'.'.$_POST['export_type'].'";'); header("Pragma: no-cache"); header("Expires: 0"); if(isset($_POST['tables'])) $tables = $_POST['tables']; else { $tables = array(); $tables[0] = $_POST['single_table']; } $field_terminate = $_POST['export_csv_fieldsterminated']; $field_enclosed = $_POST['export_csv_fieldsenclosed']; $field_escaped = $_POST['export_csv_fieldsescaped']; $null = $_POST['export_csv_replacenull']; $crlf = isset($_POST['export_csv_crlf']); $fields_in_first_row = isset($_POST['export_csv_fieldnames']); $db = new Database($currentDB); echo $db->export_csv($tables, $field_terminate, $field_enclosed, $field_escaped, $null, $crlf, $fields_in_first_row); } exit(); } //- Import a file into an existing database if(isset($_POST['import'])) { $db = new Database($currentDB); $db->registerUserFunction($custom_functions); if($_POST['import_type']=="sql") { $data = file_get_contents($_FILES["file"]["tmp_name"]); $importSuccess = $db->import_sql($data); } else { $field_terminate = $_POST['import_csv_fieldsterminated']; $field_enclosed = $_POST['import_csv_fieldsenclosed']; $field_escaped = $_POST['import_csv_fieldsescaped']; $null = $_POST['import_csv_replacenull']; $fields_in_first_row = isset($_POST['import_csv_fieldnames']); if(isset($_POST['single_table']) && $_POST['single_table']!='') $table = $_POST['single_table']; else { $table = basename($_FILES["file"]["name"],".csv"); $i=""; while($db->getTypeOfTable($table.$i)!="") { if($i=="") $i=2; else $i++; } $table = $table.$i; } $importSuccess = $db->import_csv($_FILES["file"]["tmp_name"], $table, $field_terminate, $field_enclosed, $field_escaped, $null, $fields_in_first_row); } } //- Download (backup) a database file (as SQLite file, not as dump) if(isset($_GET['download']) && isManagedDB($_GET['download'])!==false) { ob_end_clean(); header("Content-type: application/octet-stream"); header('Content-Disposition: attachment; filename="'.basename($_GET['download']).'";'); header("Pragma: no-cache"); header("Expires: 0"); readfile($_GET['download']); exit; } //- Select database (from session or first available) if(!isset($currentDB) && count($databases)>0) { //set the current database to the first existing one in the array (default) $currentDB = reset($databases); $params->database = $currentDB['path']; } if(isset($currentDB)) { //- Open database (creates a Database object) $db = new Database($currentDB); //create the Database object $db->registerUserFunction($custom_functions); } // collect parameters early, just once $target_table = isset($_GET['table']) ? $_GET['table'] : null; // are we working on a view? let's check once here $target_table_type = !is_null($target_table) ? $db->getTypeOfTable($target_table) : null; if(is_null($target_table_type) && !is_null($target_table)) $params->redirect(array('table'=>null), $lang['err'].': '.sprintf($lang['tbl_inexistent'], htmlencode($target_table))); $params->table = $target_table; // initialize / change fulltexts and numrows parameter if(isset($_GET['fulltexts'])) $params->fulltexts = ($_GET['fulltexts'] ? 1 : 0); else $params->fulltexts = 0; if(isset($_GET['numRows']) && intval($_GET['numRows'])>0) $params->numRows = intval($_GET['numRows']); else $params->numRows = $rowsNum; //- Switch on $_GET['action'] for operations without output if(isset($_GET['action']) && isset($_GET['confirm'])) { switch($_GET['action']) { //- Table actions //- Create table (=table_create) case "table_create": $num = intval($_POST['rows']); $name = $_POST['tablename']; $primary_keys = array(); for($i=0; $i<$num; $i++) { if($_POST[$i.'_field']!="" && isset($_POST[$i.'_primarykey'])) { $primary_keys[] = $_POST[$i.'_field']; } } $query = "CREATE TABLE ".$db->quote($name)." ("; for($i=0; $i<$num; $i++) { if($_POST[$i.'_field']!="") { $query .= $db->quote($_POST[$i.'_field'])." "; $query .= $_POST[$i.'_type']." "; if(isset($_POST[$i.'_primarykey'])) { if(count($primary_keys)==1) { $query .= "PRIMARY KEY "; if(isset($_POST[$i.'_autoincrement']) && $db->getType() != "SQLiteDatabase") $query .= "AUTOINCREMENT "; } $query .= "NOT NULL "; } if(!isset($_POST[$i.'_primarykey']) && isset($_POST[$i.'_notnull'])) $query .= "NOT NULL "; if($_POST[$i.'_defaultoption']!='defined' && $_POST[$i.'_defaultoption']!='none' && $_POST[$i.'_defaultoption']!='expr') $query .= "DEFAULT ".$_POST[$i.'_defaultoption']." "; elseif($_POST[$i.'_defaultoption']=='expr') $query .= "DEFAULT (".$_POST[$i.'_defaultvalue'].") "; elseif(isset($_POST[$i.'_defaultvalue']) && $_POST[$i.'_defaultoption']=='defined') { $typeAffinity = get_type_affinity($_POST[$i.'_type']); if(($typeAffinity=="INTEGER" || $typeAffinity=="REAL" || $typeAffinity=="NUMERIC") && is_numeric($_POST[$i.'_defaultvalue'])) $query .= "DEFAULT ".$_POST[$i.'_defaultvalue']." "; else $query .= "DEFAULT ".$db->quote($_POST[$i.'_defaultvalue'])." "; } $query = substr($query, 0, -1); $query .= ", "; } } if (count($primary_keys)>1) { $compound_key = ""; foreach ($primary_keys as $primary_key) { $compound_key .= ($compound_key=="" ? "" : ", ") . $db->quote($primary_key); } $query .= "PRIMARY KEY (".$compound_key."), "; } $query = substr($query, 0, -2); $query .= ")"; $result = $db->query($query); if($result === false) $completed = $db->getError(true); else $completed = $lang['tbl']." '".htmlencode($_POST['tablename'])."' ".$lang['created'].".
".htmlencode($query).""; $params->redirect(($result===false ? array() : array('action'=>'column_view', 'table'=>$name) ), $completed); break; //- Empty table (=table_empty) case "table_empty": $query1 = "DELETE FROM ".$db->quote_id($_GET['table']).";"; $result1 = $db->query($query1); if($result1 === false) $completed = $db->getError(true); if(isset($_POST['vacuum']) && $_POST['vacuum']) { $query2 = "VACUUM;"; $result2 = $db->query($query2); } else $query2 = ""; if($result1 !== false) $completed = $lang['tbl']." '".htmlencode($_GET['table'])."' ".$lang['emptied'].".
".htmlencode($query1)."
".htmlencode($query2).""; $params->redirect(($result1===false ? array() : array('action'=>'row_view') ), $completed); break; //- Create view (=view_create) case "view_create": $query = "CREATE VIEW ".$db->quote($_POST['viewname'])." AS ".$_POST['select']; $result = $db->query($query); if($result === false) $completed = $db->getError(true); else $completed = $lang['view']." '".htmlencode($_POST['viewname'])."' ".$lang['created'].".
".htmlencode($query).""; $params->redirect(($result===false ? array() : array('action'=>'column_view', 'table'=>$_POST['viewname']) ), $completed); break; //- Drop table (=table_drop) case "table_drop": $query1 = "DROP TABLE ".$db->quote_id($_GET['table']).";"; $result1=$db->query($query1); if($result1 === false) $completed = $db->getError(true); if(isset($_POST['vacuum']) && $_POST['vacuum']) { $query2 = "VACUUM;"; $result2 = $db->query($query2); } else $query2 = ""; if($result1 !== false) { $target_table = null; $completed = $lang['tbl']." '".htmlencode($_GET['table'])."' ".$lang['dropped'].".
".htmlencode($query1)."
".htmlencode($query2)."";; } $params->redirect(array('table'=>null), $completed); break; //- Drop view (=view_drop) case "view_drop": $query = "DROP VIEW ".$db->quote_id($_POST['viewname']); $result=$db->query($query); if($result === false) $completed = $db->getError(true); else $completed = $lang['view']." '".htmlencode($_POST['viewname'])."' ".$lang['dropped'].".
".htmlencode($query).""; $params->redirect(array('table'=>null), $completed); break; //- Rename table (=table_rename) case "table_rename": $query = "ALTER TABLE ".$db->quote_id($_GET['table'])." RENAME TO ".$db->quote($_POST['newname']); $type = $db->getTypeOfTable($_GET['table']); if($db->getVersion()==3 && $type=='table' // SQLite 3 can rename tables, not views // In SQL(ite) table names are case-insensitve, so changing is not supported by SQLite. // But table names are stored and displayed case sensitive, so we use the workaround for case sensitive renaming. && !($_GET['table'] !== $_POST['newname'] && strtolower($_GET['table']) === strtolower($_POST['newname'])) ) $result = $db->query($query, true); else // Workaround can rename tables of sqlite2 and views of both sqlite versions. Can also do case sensitive renames. $result = $db->query($query, false); if($result === false) $completed = $db->getError(true); else { $completed = $lang['tbl']." '".htmlencode($_GET['table'])."' ".$lang['renamed']." '".htmlencode($_POST['newname'])."'.
".htmlencode($query).""; $target_table = $_POST['newname']; } $params->redirect(array('action'=>'row_view', 'table'=>$_POST['newname']), $completed); break; //- Search table (=table_search) case "table_search": $searchValues = array(); $searchOperators = array(); $tableInfo = $db->getTableInfo($target_table); $j = 0; $whereExpr = array(); for($i=0; $i
"; $z++; } } if($error) $completed = $db->getError(true); else $completed = $z." ".$lang['rows']." ".$lang['inserted'].".
".$completed; $params->redirect(array('action'=>'row_view'), $completed); break; //- Delete row (=row_delete) case "row_delete": $pks = json_decode($_GET['pk']); $query = "DELETE FROM ".$db->quote_id($target_table)." WHERE (".$db->wherePK($target_table,json_decode($pks[0])).")"; for($i=1; $i
".htmlencode($query).""; $params->redirect(array('action'=>'row_view'), $completed); break; //- Edit row (=row_edit) case "row_edit": $pks = json_decode($_GET['pk']); $z = 0; $tableInfo = $db->getTableInfo($target_table); if(isset($_POST['new_row'])) $completed = ""; else $completed = sizeof($pks)." ".$lang['rows']." ".$lang['affected'].".
"; for($i=0; $i
"; } if($error) $completed = $db->getError(true); elseif(isset($_POST['new_row'])) $completed = $z." ".$lang['rows']." ".$lang['inserted'].".
".$completed; $params->redirect(array('action'=>'row_view'), $completed); break; case "row_get_blob": $blobVal = $db->select("SELECT ".$db->quote_id($_GET['column'])." AS 'blob' FROM ".$db->quote_id($target_table)." WHERE ".$db->wherePK($target_table, json_decode($_GET['pk']))); $filename = 'download'; if(function_exists('getimagesizefromstring')) // introduced in PHP 5.4.0 $imagesize = getimagesizefromstring($blobVal['blob']); if(isset($imagesize) && $imagesize!==false && isset($imagesize['mime'])) $mimetype = $imagesize['mime']; elseif(class_exists('finfo')) // included since php 5.3.0, but might be disabled on Windows { $finfo = new finfo(FILEINFO_MIME); $mimetype = $finfo->buffer($blobVal['blob']); } else $mimetype = "application/octet-stream"; if(isset($imagesize) && $imagesize!==false && isset($imagesize[2])) $extension = image_type_to_extension($imagesize[2]); else $extension = '.blob'; ob_end_clean(); header('Content-Length: '.strlen($blobVal['blob'])); header("Content-type: ".$mimetype); if(isset($_GET['download_blob']) && $_GET['download_blob']) header('Content-Disposition: attachment; filename="'.$filename.$extension.'";'); header("Pragma: no-cache"); header("Expires: 0"); echo $blobVal['blob']; exit; break; //- Column actions //- Create column (=column_create) case "column_create": $num = intval($_POST['rows']); for($i=0; $i<$num; $i++) { if($_POST[$i.'_field']!="") { $query = "ALTER TABLE ".$db->quote_id($target_table)." ADD ".$db->quote($_POST[$i.'_field'])." "; $query .= $_POST[$i.'_type']." "; if(isset($_POST[$i.'_primarykey'])) $query .= "PRIMARY KEY "; if(isset($_POST[$i.'_notnull'])) $query .= "NOT NULL "; if($_POST[$i.'_defaultoption']!='defined' && $_POST[$i.'_defaultoption']!='none' && $_POST[$i.'_defaultoption']!='expr') $query .= "DEFAULT ".$_POST[$i.'_defaultoption']." "; elseif($_POST[$i.'_defaultoption']=='expr') $query .= "DEFAULT (".$_POST[$i.'_defaultvalue'].") "; elseif(isset($_POST[$i.'_defaultvalue']) && $_POST[$i.'_defaultoption']=='defined') { $typeAffinity = get_type_affinity($_POST[$i.'_type']); if(($typeAffinity=="INTEGER" || $typeAffinity=="REAL" || $typeAffinity=="NUMERIC") && is_numeric($_POST[$i.'_defaultvalue'])) $query .= "DEFAULT ".$_POST[$i.'_defaultvalue']." "; else $query .= "DEFAULT ".$db->quote($_POST[$i.'_defaultvalue'])." "; } if($db->getVersion()==3 && ($_POST[$i.'_defaultoption']=='defined' || $_POST[$i.'_defaultoption']=='none' || $_POST[$i.'_defaultoption']=='NULL') // Sqlite3 cannot add columns with default values that are not constant && !isset($_POST[$i.'_primarykey']) // sqlite3 cannot add primary key columns && (!isset($_POST[$i.'_notnull']) || $_POST[$i.'_defaultoption']!='none') // SQLite3 cannot add NOT NULL columns without DEFAULT even if the table is empty ) // use SQLITE3 ALTER TABLE ADD COLUMN $result = $db->query($query, true); else // use ALTER TABLE workaround $result = $db->query($query, false); if($result===false) $error = true; } } if($error) $completed = $db->getError(true); else $completed = $lang['tbl']." '".htmlencode($target_table)."' ".$lang['altered']."."; $params->redirect(array('action'=>'column_view'), $completed); break; //- Delete column (=column_delete) case "column_delete": $pks = explode(":", $_GET['pk']); $query = "ALTER TABLE ".$db->quote_id($target_table).' DROP '.$db->quote_id($pks[0]); for($i=1; $i
".htmlencode($query).""; $params->redirect(array('action'=>'column_view'), $completed); break; //- Delete index (=index_delete) case "index_delete": $query = "DROP INDEX ".$db->quote_id($_GET['pk']); $result = $db->query($query); if($result === false) $completed = $db->getError(true); else $completed = $lang['index']." '".htmlencode($_GET['pk'])."' ".$lang['deleted'].".
".htmlencode($query).""; $params->redirect(array('action'=>'column_view'), $completed); break; //- Create trigger (=trigger_create) case "trigger_create": $str = "CREATE TRIGGER ".$db->quote($_POST['trigger_name']); if($_POST['beforeafter']!="") $str .= " ".$_POST['beforeafter']; $str .= " ".$_POST['event']." ON ".$db->quote_id($target_table); if(isset($_POST['foreachrow'])) $str .= " FOR EACH ROW"; if($_POST['whenexpression']!="") $str .= " WHEN ".$_POST['whenexpression']; $str .= " BEGIN"; $str .= " ".$_POST['triggersteps']; $str .= " END"; $query = $str; $result = $db->query($query); if($result === false) $completed = $db->getError(true); else $completed = $lang['trigger']." ".$lang['created'].".
".htmlencode($query).""; $params->redirect(array('action'=>'column_view'), $completed); break; //- Create index (=index_create) case "index_create": $num = $_POST['num']; if($_POST['name']=="") { $completed = $lang['blank_index']; } else if($_POST['0_field']=="") { $completed = $lang['one_index']; } else { $str = "CREATE "; if($_POST['duplicate']=="no") $str .= "UNIQUE "; $str .= "INDEX ".$db->quote($_POST['name'])." ON ".$db->quote_id($target_table)." ("; $str .= $db->quote_id($_POST['0_field']).$_POST['0_order']; for($i=1; $i<$num; $i++) { if($_POST[$i.'_field']!="") $str .= ", ".$db->quote_id($_POST[$i.'_field']).$_POST[$i.'_order']; } $str .= ")"; if(isset($_POST['where']) && $_POST['where']!='') $str.=" WHERE ".$_POST['where']; $query = $str; $result = $db->query($query); if($result === false) $completed = $db->getError(true); else $completed = $lang['index']." ".$lang['created'].".
".htmlencode($query).""; } $params->redirect(array('action'=>'column_view'), $completed); break; } } } // if not in debug mode, destroy all output until here if($debug) $bufferedOutput = ob_get_contents(); ob_end_clean(); //- HTML: output starts here header('Content-Type: text/html; charset=utf-8'); ?>
";
echo "".PROJECT." v".VERSION." ".$lang['help_doc']."
"; foreach((array)$help as $key => $val) { echo "".$key."
"; } echo "
";
echo ""; foreach((array)$help as $key => $val) { echo "".$key."
"; } echo "
"; foreach((array)$help as $key => $val) { echo ""; } ?> isAuthorized()) { //- Javascript include ?> ".$lang['bad_php_directive'].""; echo "