OwlCyberSecurity - MANAGER
Edit File: Parser.php
<?php namespace MailPoetVendor\Doctrine\DBAL\SQL; if (!defined('ABSPATH')) exit; use MailPoetVendor\Doctrine\DBAL\SQL\Parser\Exception; use MailPoetVendor\Doctrine\DBAL\SQL\Parser\Exception\RegularExpressionError; use MailPoetVendor\Doctrine\DBAL\SQL\Parser\Visitor; use function array_merge; use function assert; use function current; use function implode; use function key; use function next; use function preg_last_error; use function preg_match; use function reset; use function sprintf; use function strlen; use const PREG_NO_ERROR; final class Parser { private const SPECIAL_CHARS = ':\\?\'"`\\[\\-\\/'; private const BACKTICK_IDENTIFIER = '`[^`]*`'; private const BRACKET_IDENTIFIER = '(?<!\\b(?i:ARRAY))\\[(?:[^\\]])*\\]'; private const MULTICHAR = ':{2,}'; private const NAMED_PARAMETER = ':[a-zA-Z0-9_]+'; private const POSITIONAL_PARAMETER = '(?<!\\?)\\?(?!\\?)'; private const ONE_LINE_COMMENT = '--[^\\r\\n]*'; private const MULTI_LINE_COMMENT = '/\\*([^*]+|\\*+[^/*])*\\**\\*/'; private const SPECIAL = '[' . self::SPECIAL_CHARS . ']'; private const OTHER = '[^' . self::SPECIAL_CHARS . ']+'; private string $sqlPattern; public function __construct(bool $mySQLStringEscaping) { if ($mySQLStringEscaping) { $patterns = [$this->getMySQLStringLiteralPattern("'"), $this->getMySQLStringLiteralPattern('"')]; } else { $patterns = [$this->getAnsiSQLStringLiteralPattern("'"), $this->getAnsiSQLStringLiteralPattern('"')]; } $patterns = array_merge($patterns, [self::BACKTICK_IDENTIFIER, self::BRACKET_IDENTIFIER, self::MULTICHAR, self::ONE_LINE_COMMENT, self::MULTI_LINE_COMMENT, self::OTHER]); $this->sqlPattern = sprintf('(%s)', implode('|', $patterns)); } public function parse(string $sql, Visitor $visitor) : void { $patterns = [self::NAMED_PARAMETER => static function (string $sql) use($visitor) : void { $visitor->acceptNamedParameter($sql); }, self::POSITIONAL_PARAMETER => static function (string $sql) use($visitor) : void { $visitor->acceptPositionalParameter($sql); }, $this->sqlPattern => static function (string $sql) use($visitor) : void { $visitor->acceptOther($sql); }, self::SPECIAL => static function (string $sql) use($visitor) : void { $visitor->acceptOther($sql); }]; $offset = 0; while (($handler = current($patterns)) !== \false) { if (preg_match('~\\G' . key($patterns) . '~s', $sql, $matches, 0, $offset) === 1) { $handler($matches[0]); reset($patterns); $offset += strlen($matches[0]); } elseif (preg_last_error() !== PREG_NO_ERROR) { // @codeCoverageIgnoreStart throw RegularExpressionError::new(); // @codeCoverageIgnoreEnd } else { next($patterns); } } assert($offset === strlen($sql)); } private function getMySQLStringLiteralPattern(string $delimiter) : string { return $delimiter . '((\\\\.)|(?![' . $delimiter . '\\\\]).)*' . $delimiter; } private function getAnsiSQLStringLiteralPattern(string $delimiter) : string { return $delimiter . '[^' . $delimiter . ']*' . $delimiter; } }