@@ -97,16 +97,16 @@ function linkDocumentReferences($mongo, $document)
97
97
98
98
$ refDb = isset ($ value ['$db ' ]) ? $ value ['$db ' ] : $ _REQUEST ['db ' ];
99
99
100
- $ document [$ key ]['$ref ' ] = '<a href=" ' .$ _SERVER ['PHP_SELF ' ].'?db= ' .$ refDb .'&collection= ' .$ value ['$ref ' ].'"> ' .$ value ['$ref ' ].'</a> ' ;
100
+ $ document [$ key ]['$ref ' ] = '<a href=" ' .$ _SERVER ['PHP_SELF ' ].'?db= ' .urlencode ( $ refDb) .'&collection= ' .$ value ['$ref ' ].'"> ' .$ value ['$ref ' ].'</a> ' ;
101
101
102
102
if ($ ref ['_id ' ] instanceof MongoId) {
103
- $ document [$ key ]['$id ' ] = '<a href=" ' .$ _SERVER ['PHP_SELF ' ].'?db= ' .$ refDb .'&collection= ' .$ value ['$ref ' ].'&id= ' .$ value ['$id ' ].'"> ' .$ value ['$id ' ].'</a> ' ;
103
+ $ document [$ key ]['$id ' ] = '<a href=" ' .$ _SERVER ['PHP_SELF ' ].'?db= ' .urlencode ( $ refDb) .'&collection= ' .$ value ['$ref ' ].'&id= ' .$ value ['$id ' ].'"> ' .$ value ['$id ' ].'</a> ' ;
104
104
} else {
105
- $ document [$ key ]['$id ' ] = '<a href=" ' .$ _SERVER ['PHP_SELF ' ].'?db= ' .$ refDb .'&collection= ' .$ value ['$ref ' ].'&id= ' .$ value ['$id ' ].'&custom_id=1"> ' .$ value ['$id ' ].'</a> ' ;
105
+ $ document [$ key ]['$id ' ] = '<a href=" ' .$ _SERVER ['PHP_SELF ' ].'?db= ' .urlencode ( $ refDb) .'&collection= ' .$ value ['$ref ' ].'&id= ' .$ value ['$id ' ].'&custom_id=1"> ' .$ value ['$id ' ].'</a> ' ;
106
106
}
107
107
108
108
if (isset ($ value ['$db ' ])) {
109
- $ document [$ key ]['$db ' ] = '<a href=" ' .$ _SERVER ['PHP_SELF ' ].'?db= ' .$ refDb .'"> ' .$ refDb .'</a> ' ;
109
+ $ document [$ key ]['$db ' ] = '<a href=" ' .$ _SERVER ['PHP_SELF ' ].'?db= ' .urlencode ( $ refDb) .'"> ' .$ refDb .'</a> ' ;
110
110
}
111
111
} else {
112
112
$ document [$ key ] = linkDocumentReferences ($ mongo , $ value );
@@ -223,7 +223,7 @@ function findMongoDbDocument($id, $db, $collection, $forceCustomId = false)
223
223
}
224
224
225
225
if (isset ($ document ['_id ' ])) {
226
- $ url = $ _SERVER ['PHP_SELF ' ] . '?db= ' . $ _REQUEST ['db ' ] . '&collection= ' . $ _REQUEST ['collection ' ] . '&id= ' . (string ) $ document ['_id ' ];
226
+ $ url = $ _SERVER ['PHP_SELF ' ] . '?db= ' . urlencode ( $ _REQUEST ['db ' ]) . '&collection= ' . $ _REQUEST ['collection ' ] . '&id= ' . (string ) $ document ['_id ' ];
227
227
228
228
if ($ customId ) {
229
229
header ('location: ' . $ url . '&custom_id=true ' );
@@ -248,7 +248,7 @@ function findMongoDbDocument($id, $db, $collection, $forceCustomId = false)
248
248
$ mongo ->selectDB ($ _REQUEST ['create_db ' ])->createCollection ('__tmp_collection_ ' );
249
249
$ mongo ->selectDB ($ _REQUEST ['create_db ' ])->dropCollection ('__tmp_collection_ ' );
250
250
251
- header ('location: ' . $ _SERVER ['PHP_SELF ' ] . '?db= ' . $ _REQUEST ['create_db ' ]);
251
+ header ('location: ' . $ _SERVER ['PHP_SELF ' ] . '?db= ' . urlencode ( $ _REQUEST ['create_db ' ]) );
252
252
exit ;
253
253
254
254
}
@@ -259,7 +259,7 @@ function findMongoDbDocument($id, $db, $collection, $forceCustomId = false)
259
259
->selectDB ($ _REQUEST ['db ' ])
260
260
->createCollection ($ _REQUEST ['create_collection ' ]);
261
261
262
- header ('location: ' . $ _SERVER ['PHP_SELF ' ] . '?db= ' . $ _REQUEST ['db ' ] . '&collection= ' . $ _REQUEST ['create_collection ' ]);
262
+ header ('location: ' . $ _SERVER ['PHP_SELF ' ] . '?db= ' . urlencode ( $ _REQUEST ['db ' ]) . '&collection= ' . $ _REQUEST ['create_collection ' ]);
263
263
exit ;
264
264
}
265
265
@@ -270,7 +270,7 @@ function findMongoDbDocument($id, $db, $collection, $forceCustomId = false)
270
270
->selectCollection ($ _REQUEST ['delete_collection ' ])
271
271
->drop ();
272
272
273
- header ('location: ' . $ _SERVER ['PHP_SELF ' ] . '?db= ' . $ _REQUEST ['db ' ]);
273
+ header ('location: ' . $ _SERVER ['PHP_SELF ' ] . '?db= ' . urlencode ( $ _REQUEST ['db ' ]) );
274
274
exit ;
275
275
}
276
276
@@ -284,7 +284,7 @@ function findMongoDbDocument($id, $db, $collection, $forceCustomId = false)
284
284
$ collection ->remove (array ('_id ' => new MongoId ($ _REQUEST ['delete_document ' ])));
285
285
}
286
286
287
- header ('location: ' . $ _SERVER ['PHP_SELF ' ] . '?db= ' . $ _REQUEST ['db ' ] . '&collection= ' . $ _REQUEST ['collection ' ]);
287
+ header ('location: ' . $ _SERVER ['PHP_SELF ' ] . '?db= ' . urlencode ( $ _REQUEST ['db ' ]) . '&collection= ' . $ _REQUEST ['collection ' ]);
288
288
exit ;
289
289
}
290
290
@@ -298,7 +298,7 @@ function findMongoDbDocument($id, $db, $collection, $forceCustomId = false)
298
298
unset($ document [$ _REQUEST ['delete_document_field ' ]]);
299
299
$ coll ->save ($ document );
300
300
301
- $ url = $ _SERVER ['PHP_SELF ' ] . '?db= ' . $ _REQUEST ['db ' ] . '&collection= ' . $ _REQUEST ['collection ' ] . '&id= ' . (string ) $ document ['_id ' ];
301
+ $ url = $ _SERVER ['PHP_SELF ' ] . '?db= ' . urlencode ( $ _REQUEST ['db ' ]) . '&collection= ' . $ _REQUEST ['collection ' ] . '&id= ' . (string ) $ document ['_id ' ];
302
302
header ('location: ' . $ url );
303
303
exit ;
304
304
}
@@ -311,7 +311,7 @@ function findMongoDbDocument($id, $db, $collection, $forceCustomId = false)
311
311
$ document = prepareValueForMongoDB ($ _REQUEST ['value ' ]);
312
312
$ collection ->save ($ document );
313
313
314
- $ url = $ _SERVER ['PHP_SELF ' ] . '?db= ' . $ _REQUEST ['db ' ] . '&collection= ' . $ _REQUEST ['collection ' ] . '&id= ' . (string ) $ document ['_id ' ];
314
+ $ url = $ _SERVER ['PHP_SELF ' ] . '?db= ' . urlencode ( $ _REQUEST ['db ' ]) . '&collection= ' . $ _REQUEST ['collection ' ] . '&id= ' . (string ) $ document ['_id ' ];
315
315
header ('location: ' . $ url . ($ customId ? '&custom_id=1 ' : null ));
316
316
exit ;
317
317
}
@@ -528,11 +528,11 @@ function findMongoDbDocument($id, $db, $collection, $forceCustomId = false)
528
528
<?php $ dbs = $ mongo ->listDBs () ?>
529
529
<?php foreach ($ dbs ['databases ' ] as $ db ): if ($ db ['name ' ] === 'local ' || $ db ['name ' ] === 'admin ' ) continue ; ?>
530
530
<tr>
531
- <td><a href="<?php echo $ _SERVER ['PHP_SELF ' ] . '?db= ' . $ db ['name ' ] ?> "><?php echo $ db ['name ' ] ?> </a></td>
531
+ <td><a href="<?php echo $ _SERVER ['PHP_SELF ' ] . '?db= ' . urlencode ( $ db ['name ' ]) ?> "><?php echo $ db ['name ' ] ?> </a></td>
532
532
<td><?php echo count ($ mongo ->selectDb ($ db ['name ' ])->listCollections ()) ?> </td>
533
533
534
534
<?php if ($ readOnly !== true ): ?>
535
- <td><a href="<?php echo $ _SERVER ['PHP_SELF ' ] ?> ?delete_db=<?php echo $ db ['name ' ] ?> " onClick="return confirm('Are you sure you want to delete this database?');">Delete</a></td>
535
+ <td><a href="<?php echo $ _SERVER ['PHP_SELF ' ] ?> ?delete_db=<?php echo urlencode ( $ db ['name ' ]) ?> " onClick="return confirm('Are you sure you want to delete this database?');">Delete</a></td>
536
536
<?php else : ?>
537
537
<td> </td>
538
538
<?php endif ; ?>
@@ -546,7 +546,7 @@ function findMongoDbDocument($id, $db, $collection, $forceCustomId = false)
546
546
547
547
<?php if ($ readOnly !== true ): ?>
548
548
<div id="create_form">
549
- <form action="<?php echo $ _SERVER ['PHP_SELF ' ] ?> ?db=<?php echo $ _REQUEST ['db ' ] ?> " method="POST">
549
+ <form action="<?php echo $ _SERVER ['PHP_SELF ' ] ?> ?db=<?php echo urlencode ( $ _REQUEST ['db ' ]) ?> " method="POST">
550
550
<label for="create_collection_field">Create Collection</label>
551
551
<input type="text" name="create_collection" id="create_collection_field" />
552
552
<input type="submit" name="create" value="Save" class="save_button" />
@@ -570,11 +570,11 @@ function findMongoDbDocument($id, $db, $collection, $forceCustomId = false)
570
570
<?php $ collections = $ mongo ->selectDB ($ _REQUEST ['db ' ])->listCollections () ?>
571
571
<?php foreach ($ collections as $ collection ): ?>
572
572
<tr>
573
- <td><a href="<?php echo $ _SERVER ['PHP_SELF ' ] . '?db= ' . $ _REQUEST ['db ' ] . '&collection= ' . $ collection ->getName () ?> "><?php echo $ collection ->getName () ?> </a></td>
573
+ <td><a href="<?php echo $ _SERVER ['PHP_SELF ' ] . '?db= ' . urlencode ( $ _REQUEST ['db ' ]) . '&collection= ' . $ collection ->getName () ?> "><?php echo $ collection ->getName () ?> </a></td>
574
574
<td><?php echo $ collection ->count (); ?> </td>
575
575
576
576
<?php if ($ readOnly !== true ): ?>
577
- <td><a href="<?php echo $ _SERVER ['PHP_SELF ' ] ?> ?db=<?php echo $ _REQUEST ['db ' ] ?> &delete_collection=<?php echo $ collection ->getName () ?> " onClick="return confirm('Are you sure you want to delete this collection?');">Delete</a></td>
577
+ <td><a href="<?php echo $ _SERVER ['PHP_SELF ' ] ?> ?db=<?php echo urlencode ( $ _REQUEST ['db ' ]) ?> &delete_collection=<?php echo $ collection ->getName () ?> " onClick="return confirm('Are you sure you want to delete this collection?');">Delete</a></td>
578
578
<?php else : ?>
579
579
<td> </td>
580
580
<?php endif ; ?>
@@ -621,14 +621,14 @@ function findMongoDbDocument($id, $db, $collection, $forceCustomId = false)
621
621
622
622
<h2>
623
623
<a href="<?php echo $ _SERVER ['PHP_SELF ' ] ?> ">Databases</a> >>
624
- <a href="<?php echo $ _SERVER ['PHP_SELF ' ] ?> ?db=<?php echo $ _REQUEST ['db ' ] ?> "><?php echo $ _REQUEST ['db ' ] ?> </a> >>
624
+ <a href="<?php echo $ _SERVER ['PHP_SELF ' ] ?> ?db=<?php echo urlencode ( $ _REQUEST ['db ' ]) ?> "><?php echo $ _REQUEST ['db ' ] ?> </a> >>
625
625
<?php echo $ _REQUEST ['collection ' ] ?> (<?php echo $ cursor ->count () ?> Documents)
626
626
</h2>
627
627
628
628
<?php if ($ pages > 1 ): ?>
629
629
<div id="pager">
630
630
<?php echo $ pages ?> pages. Go to page
631
- <input type="text" name="page" size="4" value="<?php echo $ page ?> " onChange="javascript: location.href = '<?php echo $ _SERVER ['PHP_SELF ' ] . '?db= ' . $ _REQUEST ['db ' ] . '&collection= ' . $ _REQUEST ['collection ' ] ?> <?php if (isset ($ _REQUEST ['search ' ])): ?> &search=<?php echo urlencode ($ _REQUEST ['search ' ]) ?> <?php endif ; ?> &page=' + this.value;" />
631
+ <input type="text" name="page" size="4" value="<?php echo $ page ?> " onChange="javascript: location.href = '<?php echo $ _SERVER ['PHP_SELF ' ] . '?db= ' . urlencode ( $ _REQUEST ['db ' ]) . '&collection= ' . $ _REQUEST ['collection ' ] ?> <?php if (isset ($ _REQUEST ['search ' ])): ?> &search=<?php echo urlencode ($ _REQUEST ['search ' ]) ?> <?php endif ; ?> &page=' + this.value;" />
632
632
<input type="button" name="go" value="Go" />
633
633
</div>
634
634
<?php endif ; ?>
@@ -651,9 +651,9 @@ function findMongoDbDocument($id, $db, $collection, $forceCustomId = false)
651
651
<?php foreach ($ cursor as $ document ): ?>
652
652
<tr>
653
653
<?php if (is_object ($ document ['_id ' ]) && $ document ['_id ' ] instanceof MongoId): ?>
654
- <td><a href="<?php echo $ _SERVER ['PHP_SELF ' ] . '?db= ' . $ _REQUEST ['db ' ] . '&collection= ' . $ _REQUEST ['collection ' ] ?> &id=<?php echo (string ) $ document ['_id ' ] ?> "><?php echo (string ) $ document ['_id ' ] ?> </a></td>
654
+ <td><a href="<?php echo $ _SERVER ['PHP_SELF ' ] . '?db= ' . urlencode ( $ _REQUEST ['db ' ]) . '&collection= ' . $ _REQUEST ['collection ' ] ?> &id=<?php echo (string ) $ document ['_id ' ] ?> "><?php echo (string ) $ document ['_id ' ] ?> </a></td>
655
655
<?php else : ?>
656
- <td><a href="<?php echo $ _SERVER ['PHP_SELF ' ] . '?db= ' . $ _REQUEST ['db ' ] . '&collection= ' . $ _REQUEST ['collection ' ] ?> &id=<?php echo (string ) $ document ['_id ' ] ?> &custom_id=1"><?php echo (string ) $ document ['_id ' ] ?> </a></td>
656
+ <td><a href="<?php echo $ _SERVER ['PHP_SELF ' ] . '?db= ' . urlencode ( $ _REQUEST ['db ' ]) . '&collection= ' . $ _REQUEST ['collection ' ] ?> &id=<?php echo (string ) $ document ['_id ' ] ?> &custom_id=1"><?php echo (string ) $ document ['_id ' ] ?> </a></td>
657
657
<?php endif ; ?>
658
658
<td>
659
659
<?php
@@ -686,9 +686,9 @@ function findMongoDbDocument($id, $db, $collection, $forceCustomId = false)
686
686
?>
687
687
</td>
688
688
<?php if (is_object ($ document ['_id ' ]) && $ document ['_id ' ] instanceof MongoId && $ readOnly !== true ): ?>
689
- <td><a href="<?php echo $ _SERVER ['PHP_SELF ' ] . '?db= ' . $ _REQUEST ['db ' ] . '&collection= ' . $ _REQUEST ['collection ' ] ?> &delete_document=<?php echo (string ) $ document ['_id ' ] ?> " onClick="return confirm('Are you sure you want to delete this document?');">Delete</a></td>
689
+ <td><a href="<?php echo $ _SERVER ['PHP_SELF ' ] . '?db= ' . urlencode ( $ _REQUEST ['db ' ]) . '&collection= ' . $ _REQUEST ['collection ' ] ?> &delete_document=<?php echo (string ) $ document ['_id ' ] ?> " onClick="return confirm('Are you sure you want to delete this document?');">Delete</a></td>
690
690
<?php elseif ($ readOnly !== true ): ?>
691
- <td><a href="<?php echo $ _SERVER ['PHP_SELF ' ] . '?db= ' . $ _REQUEST ['db ' ] . '&collection= ' . $ _REQUEST ['collection ' ] ?> &delete_document=<?php echo (string ) $ document ['_id ' ] ?> &custom_id=1" onClick="return confirm('Are you sure you want to delete this document?');">Delete</a></td>
691
+ <td><a href="<?php echo $ _SERVER ['PHP_SELF ' ] . '?db= ' . urlencode ( $ _REQUEST ['db ' ]) . '&collection= ' . $ _REQUEST ['collection ' ] ?> &delete_document=<?php echo (string ) $ document ['_id ' ] ?> &custom_id=1" onClick="return confirm('Are you sure you want to delete this document?');">Delete</a></td>
692
692
<?php endif ; ?>
693
693
</tr>
694
694
<?php endforeach ; ?>
@@ -721,8 +721,8 @@ function findMongoDbDocument($id, $db, $collection, $forceCustomId = false)
721
721
722
722
<h2>
723
723
<a href="<?php echo $ _SERVER ['PHP_SELF ' ] ?> ">Databases</a> >>
724
- <a href="<?php echo $ _SERVER ['PHP_SELF ' ] ?> ?db=<?php echo $ _REQUEST ['db ' ] ?> "><?php echo $ _REQUEST ['db ' ] ?> </a> >>
725
- <a href="<?php echo $ _SERVER ['PHP_SELF ' ] . '?db= ' . $ _REQUEST ['db ' ] . '&collection= ' . $ _REQUEST ['collection ' ] ?> "><?php echo $ _REQUEST ['collection ' ] ?> </a> >>
724
+ <a href="<?php echo $ _SERVER ['PHP_SELF ' ] ?> ?db=<?php echo urlencode ( $ _REQUEST ['db ' ]) ?> "><?php echo $ _REQUEST ['db ' ] ?> </a> >>
725
+ <a href="<?php echo $ _SERVER ['PHP_SELF ' ] . '?db= ' . urlencode ( $ _REQUEST ['db ' ]) . '&collection= ' . $ _REQUEST ['collection ' ] ?> "><?php echo $ _REQUEST ['collection ' ] ?> </a> >>
726
726
<?php echo $ _REQUEST ['id ' ] ?>
727
727
</h2>
728
728
<?php $ document = findMongoDbDocument ($ _REQUEST ['id ' ], $ _REQUEST ['db ' ], $ _REQUEST ['collection ' ]); ?>
@@ -747,9 +747,9 @@ function findMongoDbDocument($id, $db, $collection, $forceCustomId = false)
747
747
<?php endif ; ?>
748
748
<br/>
749
749
<?php if (is_object ($ document ['_id ' ]) && $ document ['_id ' ] instanceof MongoId && $ readOnly !== true ): ?>
750
- <a class="save_button" href="<?php echo $ _SERVER ['PHP_SELF ' ] . '?db= ' . $ _REQUEST ['db ' ] . '&collection= ' . $ _REQUEST ['collection ' ] ?> &delete_document=<?php echo (string ) $ document ['_id ' ] ?> " onClick="return confirm('Are you sure you want to delete this document?');">Delete</a>
750
+ <a class="save_button" href="<?php echo $ _SERVER ['PHP_SELF ' ] . '?db= ' . urlencode ( $ _REQUEST ['db ' ]) . '&collection= ' . $ _REQUEST ['collection ' ] ?> &delete_document=<?php echo (string ) $ document ['_id ' ] ?> " onClick="return confirm('Are you sure you want to delete this document?');">Delete</a>
751
751
<?php elseif ($ readOnly !== true ): ?>
752
- <a class="save_button" href="<?php echo $ _SERVER ['PHP_SELF ' ] . '?db= ' . $ _REQUEST ['db ' ] . '&collection= ' . $ _REQUEST ['collection ' ] ?> &delete_document=<?php echo (string ) $ document ['_id ' ] ?> &custom_id=1" onClick="return confirm('Are you sure you want to delete this document?');">Delete</a>
752
+ <a class="save_button" href="<?php echo $ _SERVER ['PHP_SELF ' ] . '?db= ' . urlencode ( $ _REQUEST ['db ' ]) . '&collection= ' . $ _REQUEST ['collection ' ] ?> &delete_document=<?php echo (string ) $ document ['_id ' ] ?> &custom_id=1" onClick="return confirm('Are you sure you want to delete this document?');">Delete</a>
753
753
<?php endif ; ?>
754
754
755
755
<?php endif ; ?>
0 commit comments