root/sharing/query.php @ 17:fafb59c4e161

<?php
  require 'dbinfo.phi';
  require("config.php");

  $nl = "\n";
  $tab = "\t";
  $headers = apache_request_headers();

  function print_record($data)
  {
    $nl = "\n";
    $tab = "\t";
    $len = sizeof($data);

    for ($i = 0; $i < $len; ++$i)
    {
      if ($i > 0)
        echo $tab;

      echo $data[$i];
    }
    echo $nl;
  }

  function do_query($sql, $names)
  {
    $result= mysql_query($sql);

    print_record($names);

    if ($result)
    {
      while ($row = mysql_fetch_row($result))
      {
        print_record($row);
      }
    }
  }

  // escape string as SQL param
  function escape1($param)
  {
    return mysql_real_escape_string($param);
  }

  function execute_query($id, $param)
  {
    $sql = "unknown as yet";
    $names = array();

    switch ($id)
    {
      case "0":
        $sql = "SELECT DISTINCT host FROM site_info WHERE lasting_cookies <> 0";
        $names = array("host");
        break;

      case "1":
        $sql = "SELECT DISTINCT host FROM site_info WHERE session_cookies <> 0";
        $names = array("host");
        break;

      case "2":
        $sql = "SELECT host,flash_cookies,int_3rd_party_flash_cookies," .
        "ext_3rd_party_flash_cookies FROM site_info WHERE flash_cookies <> 0" .
        " OR int_3rd_party_flash_cookies <> 0 OR ext_3rd_party_flash_cookies <> 0";
        $names = array("host","direct","internal","external");
        break;

      case "3":
        $sql = "SELECT DISTINCT host FROM site_info WHERE dom_storage <> 0";
        $names = array("host");
        break;

      case "4":
        $sql = "SELECT host FROM site_info WHERE invisible_images <> 0";
        $names = array("host");
        break;

      case "5":
        $sql = "SELECT host FROM site_info WHERE html5_pings <> 0";
        $names = array("host");
        break;

      case "6":
        $sql = "SELECT host FROM site_info WHERE p3p <> 0";
        $names = array("host");
        break;

      case "7":
        $sql = "SELECT DISTINCT third_party FROM parties WHERE offsite <> 0";
        $names = array("3rd party");
        break;

      case "8":
        $sql = "SELECT DISTINCT page_host FROM parties WHERE offsite <> 0 " .
                   "AND third_party LIKE '%" . escape1($param) . "'";
        $names = array("host");
        break;

      case "9":

        $sql = "SELECT DISTINCT third_party FROM parties WHERE offsite = 1 " .
                   "AND page_host LIKE '%" . escape1($param) . "'";
        $names = array("3rd party");
        break;

      case "10":
        $sql = "SELECT DISTINCT third_party FROM parties WHERE offsite = 2 " .
                   "AND page_host LIKE '%" . escape1($param) . "'";
        $names = array("3rd party");
        break;

      case "11":
        $sql = "SELECT host,session_cookies,lasting_cookies,flash_cookies," .
        "int_3rd_party_session_cookies,int_3rd_party_lasting_cookies," .
        "int_3rd_party_flash_cookies,ext_3rd_party_session_cookies," .
        "ext_3rd_party_lasting_cookies,ext_3rd_party_flash_cookies" .
        " FROM site_info WHERE host LIKE '%" . escape1($param) . "'";
        $names = array("host","session","lasting","flash",
                       "int session", "int lasting", "int flash",
                       "ext session", "ext lasting", "ext flash");
        break;

      case "12":
        $sql = "SELECT host FROM site_info WHERE geo_permission <> 0";
        $names = array("host");
        break;

      default:
        break;
    }

    do_query($sql, $names);
  }

  header('Content-Type: text/plain');

  // $database, $username and $password set in config.php
  $db = mysql_connect($db_master, $username, $password);

  if (!$db)
  {
    header("HTTP/1.0 500 Internal Error");
    die("500 Internal Error - Couldn't open connection to MYSQL: ".mysql_error());
  }

  if (!mysql_select_db($database))
  {
    header("HTTP/1.0 500 Internal Error");
    die( "500 Internal Error - Unable to select database");
  }

  // get query from param
  $query_id = "0";
  $query_param = "";

  if (array_key_exists("query", $_GET))
    $query_id = $_GET["query"];

  if (array_key_exists("param", $_GET))
    $query_param = $_GET["param"];

  execute_query($query_id, $query_param);
 
  mysql_close($db);
?>