Files

588 lines
19 KiB
Python
Raw Permalink Normal View History

2026-04-07 02:04:22 +05:30
#coding: utf-8
# +-------------------------------------------------------------------
# | YakPanel
# +-------------------------------------------------------------------
# | Copyright (c) 2015-2099 YakPanel(www.yakpanel.com) All rights reserved.
# +-------------------------------------------------------------------
# | Author: hwliang <hwl@yakpanel.com>
# +-------------------------------------------------------------------
import json
import os
import sys
import sqlite3
import re
os.chdir("/www/server/panel")
if not "class/" in sys.path:
sys.path.insert(0,"class/")
import public
class Sql():
#------------------------------
# 数据库操作类 For sqlite3
#------------------------------
__LOCK = "/dev/shm/sqlite_lock.pl"
__LAST_KEY = "YP-0x:"
__LEGACY_LAST_KEY = "BT-0x:"
__ENCRYPT_KEYS = ["password","salt","email","mysql_root","db_password"]
def _has_enc_prefix(self, s):
if not isinstance(s, str) or not s:
return False
return s.startswith(self.__LAST_KEY) or s.startswith(self.__LEGACY_LAST_KEY)
def _strip_enc_prefix(self, s):
for p in (self.__LAST_KEY, self.__LEGACY_LAST_KEY):
if s.startswith(p):
return s[len(p) :]
return s
__DEFAULT_DB_PATH = os.path.join(public.get_panel_path(), "data/db/default.db")
__DATABASES_PATH = os.path.join(public.get_panel_path(), "config/databases.json")
def __init__(self):
self.__DB_FILE = None # 数据库文件
self.__DB_CONN = None # 数据库连接对象
self.__DB_TABLE = "" # 被操作的表名称
self.__OPT_WHERE = "" # where条件
self.__OPT_LIMIT = "" # limit条件
self.__OPT_ORDER = "" # order条件
self.__OPT_FIELD = "*" # field条件
self.__OPT_PARAM = () # where值
self.__DB_NAME = "" # 数据库名称
self.__TB_INFO = {} # 表信息
def __enter__(self):
return self
def __exit__(self,exc_type,exc_value,exc_trackback):
self.close()
def __get_db_path(self):
if self.__DB_FILE is not None:
return
if self.__DB_NAME:
# 有指定数据库名称的情况
databases_dict = json.loads(public.readFile(self.__DATABASES_PATH))
for db_name, tb_dict in databases_dict.items():
if self.__DB_NAME in tb_dict:
self.__DB_FILE = os.path.join(public.get_panel_path(), "data/db", db_name)
self.__TB_INFO = tb_dict[self.__DB_NAME]
return
else:
# 未指定数据库名称的情况
if not self.__DB_TABLE:
self.__DB_FILE = self.__DEFAULT_DB_PATH
return
try:
databases_dict = json.loads(public.readFile(self.__DATABASES_PATH))
for db_name, tb_dict in databases_dict.items():
if self.__DB_TABLE in tb_dict:
self.__DB_FILE = os.path.join(public.get_panel_path(), "data/db", db_name)
self.__TB_INFO = tb_dict[self.__DB_TABLE]
return
except Exception as err:
pass
# 使用默认数据库
self.__DB_FILE = self.__DEFAULT_DB_PATH
return
def __GetConn(self):
#取数据库对象
self.__get_db_path()
try:
if self.__DB_CONN == None:
if os.path.exists(self.__DB_FILE) and os.path.getsize(self.__DB_FILE) == 0:
os.remove(self.__DB_FILE)
self.__DB_CONN = sqlite3.connect(self.__DB_FILE)
self.__DB_CONN.text_factory = str
if "sql" in self.__TB_INFO and self.__TB_INFO.get("sql"):
result = self.__DB_CONN.execute("SELECT count(*) FROM sqlite_master WHERE type='table' AND name=?;", (self.__DB_TABLE,))
if list(map(list,result))[0][0] == 0:
self.__DB_CONN.execute(self.__TB_INFO["sql"])
except Exception as ex:
return "error: " + str(ex)
def set_dbfile(self,path):
self.__DB_FILE = path
return self
def connect(self):
#连接数据库
self.__GetConn()
return self
def dbfile(self,name: str):
if not name.endswith(".db"): # 兼容老的
name += ".db"
#设置数据库文件
self.__DB_FILE = os.path.join(public.get_panel_path(), "data", name)
return self
def table(self,table):
#设置表名
self.__DB_TABLE = table
return self
def db(self,name):
# 设置数据库名称,用于判断数据库文件
self.__DB_NAME = name
return self
def where(self,where,param):
#WHERE条件
if where:
self.__OPT_WHERE = " WHERE " + where
self.__OPT_PARAM = self.__to_tuple(param)
return self
def __to_tuple(self,param):
#将参数转换为tuple
if type(param) != tuple:
if type(param) == list:
param = tuple(param)
else:
param = (param,)
return param
def order(self,order):
#ORDER条件
if len(order):
self.__OPT_ORDER = " ORDER BY "+order
return self
def limit(self,limit,offset = 0):
#LIMIT条件
if limit and not offset:
self.__OPT_LIMIT = " LIMIT {}".format(limit)
elif limit and offset:
self.__OPT_LIMIT = " LIMIT {},{}".format(offset,limit)
return self
def field(self,field):
#FIELD条件
if len(field):
self.__OPT_FIELD = field
return self
def query(self, sql, param=(), transfer_list=True):
# 执行SQL语句返回数据集
self.__GetConn()
try:
result = self.__DB_CONN.execute(sql, self.__to_tuple(param))
# self.log("result:" + str(result))
if transfer_list:
# 将元组转换成列表
data = list(map(list, result))
else:
data = result
return data
except Exception as ex:
return "error: " + str(ex)
def select(self, num=0):
# 查询数据集
self.__GetConn()
try:
self.__get_columns()
sql = "SELECT " + self.__OPT_FIELD + " FROM " + self.__DB_TABLE + self.__OPT_WHERE + self.__OPT_ORDER + self.__OPT_LIMIT
result = self.__DB_CONN.execute(sql, self.__OPT_PARAM)
data = result.fetchall()
# 构造字典系列
if self.__OPT_FIELD != "*":
fields = self.__format_field(self.__OPT_FIELD.split(','))
tmp = []
for row in data:
i = 0
tmp1 = {}
for key in fields:
tmp1[key.strip('`')] = row[i]
i += 1
tmp.append(tmp1)
del (tmp1)
data = tmp
del (tmp)
else:
# 将元组转换成列表
tmp = list(map(list, data))
data = tmp
del (tmp)
self._close()
data = self.de_crypt(data)
return data
except Exception as ex:
ex_str = str(ex)
re_column = re.compile(r"no such column:\s+(?P<column>\S+)")
res = re_column.search(ex_str)
if res:
column = res.group("column")
if self.__TB_INFO:
for i in self.__TB_INFO.get("fields", []):
if isinstance(i, list) and len(i) == 6 and i[1] == column:
# 处理字符串类型默认值
if i[2].lower() in ['text', 'varchar'] and i[4] == "":
i[4] = "''"
res = self.execute(
"ALTER TABLE {} ADD {} {} DEFAULT {}".format(self.__DB_TABLE, column, i[2], i[4]))
# 如果添加字段成功,且重试次数<3次则重新查询
if isinstance(res, int) and num < 3:
num += 1
return self.select(num)
if "disk I/O error" in ex_str:
return []
# 处理firewall_new表的异常
if ("malformed database schema" in ex_str or "file is encrypted or is not a database" in ex_str) and self.__DB_TABLE in ['firewall_new']:
bak_file = "{}.{}".format(self.__DB_FILE, public.format_date("%Y%m%d_%H%M%S"))
public.ExecShell("mv -f {} {}".format(self.__DB_FILE, bak_file))
return []
return []
def get(self):
self.__get_columns()
return self.select()
def __format_field(self,field):
import re
fields = []
for key in field:
s_as = re.search(r'\s+as\s+',key,flags=re.IGNORECASE)
if s_as:
as_tip = s_as.group()
key = key.split(as_tip)[1]
fields.append(key)
return fields
def __get_columns(self):
if self.__OPT_FIELD == '*':
tmp_cols = self.query('PRAGMA table_info('+self.__DB_TABLE+')',())
cols = []
for col in tmp_cols:
if len(col) > 2: cols.append('`' + col[1] + '`')
if len(cols) > 0: self.__OPT_FIELD = ','.join(cols)
def getField(self,keyName):
#取回指定字段
try:
result = self.limit("1").field(keyName).select()
if len(result) != 0:
return result[0][keyName]
return result
except: return None
def setField(self,keyName,keyValue):
#更新指定字段
return self.save(keyName,(keyValue,))
def find(self):
#取一行数据
try:
result = self.limit("1").select()
if len(result) == 1:
return result[0]
return result
except:return None
def count(self):
#取行数
key="COUNT(*)"
data = self.field(key).select()
try:
return int(data[0][key])
except:
return 0
def add(self,keys,param):
#插入数据
self.write_lock()
self.__GetConn()
self.__DB_CONN.text_factory = str
param = self.en_crypt(keys,param)
try:
values=""
for key in keys.split(','):
values += "?,"
values = values[0:len(values)-1]
sql = "INSERT INTO "+self.__DB_TABLE+"("+keys+") "+"VALUES("+values+")"
result = self.__DB_CONN.execute(sql,self.__to_tuple(param))
id = result.lastrowid
self._close()
self.__DB_CONN.commit()
self.rm_lock()
return id
except Exception as ex:
raise public.PanelError("数据库插入出错:" + "error: " + str(ex))
# return "error: " + str(ex)
#插入数据
def insert(self,pdata):
if not pdata: return False
keys,param = self.__format_pdata(pdata)
return self.add(keys,param)
#更新数据
def update(self,pdata):
if not pdata: return False
keys,param = self.__format_pdata(pdata)
return self.save(keys,param)
#构造数据
def __format_pdata(self,pdata):
keys = pdata.keys()
keys_str = ','.join(keys)
param = []
for k in keys: param.append(pdata[k])
return keys_str,tuple(param)
def addAll(self,keys,param):
#插入数据
self.write_lock()
self.__GetConn()
self.__DB_CONN.text_factory = str
param = self.en_crypt(keys,param)
try:
values=""
for key in keys.split(','):
values += "?,"
values = values[0:len(values)-1]
sql = "INSERT INTO "+self.__DB_TABLE+"("+keys+") "+"VALUES("+values+")"
result = self.__DB_CONN.execute(sql,self.__to_tuple(param))
self.rm_lock()
return True
except Exception as ex:
return "error: " + str(ex)
def commit(self):
self._close()
self.__DB_CONN.commit()
def _encrypt(self,data):
import PluginLoader
# 加密数据
if not isinstance(data,str): return data
if not data: return data
if self._has_enc_prefix(data):
return data
result = PluginLoader.db_encrypt(data)
if result['status'] == True:
return self.__LAST_KEY + result['msg']
return data
def _decrypt(self,data):
import PluginLoader
# 解密数据
if not isinstance(data,str): return data
if not data: return data
if self._has_enc_prefix(data):
res = PluginLoader.db_decrypt(self._strip_enc_prefix(data))['msg']
return res
return data
def en_crypt(self,keys,param):
# 加密指定字段
try:
if not param or not keys: return param
if not str(self.__DB_FILE).startswith(os.path.join(public.get_panel_path(), "data")): return param
new_param = []
keys_list = keys.split(',')
if isinstance(param,str): param = [param]
for i in range(len(keys_list)):
key = keys_list[i]
value = param[i]
if key in self.__ENCRYPT_KEYS:
value = self._encrypt(value)
new_param.append(value)
return tuple(new_param)
except:
return param
def de_crypt(self,data):
# 解密字段
try:
if not data: return data
if not str(self.__DB_FILE).startswith(os.path.join(public.get_panel_path(), "data")): return data
if isinstance(data,dict):
for key in data.keys():
if not isinstance(data[key],str): continue
if self._has_enc_prefix(data[key]):
data[key] = self._decrypt(data[key])
elif isinstance(data,list):
for i in range(len(data)):
for key in data[i].keys():
if not isinstance(data[i][key],str): continue
if self._has_enc_prefix(data[i][key]):
data[i][key] = self._decrypt(data[i][key])
elif isinstance(data,str):
if self._has_enc_prefix(data):
data = self._decrypt(data)
return data
except:
return data
def save(self,keys,param):
#更新数据
self.write_lock()
self.__GetConn()
self.__DB_CONN.text_factory = str
param = self.en_crypt(keys,param)
try:
opt = ""
for key in keys.split(','):
opt += key + "=?,"
opt = opt[0:len(opt)-1]
sql = "UPDATE " + self.__DB_TABLE + " SET " + opt+self.__OPT_WHERE
#处理拼接WHERE与UPDATE参数
tmp = list(self.__to_tuple(param))
for arg in self.__OPT_PARAM:
tmp.append(arg)
self.__OPT_PARAM = tuple(tmp)
result = self.__DB_CONN.execute(sql,self.__OPT_PARAM)
self._close()
self.__DB_CONN.commit()
self.rm_lock()
return result.rowcount
except Exception as ex:
raise public.PanelError("数据库保存出错:" + "error: " + str(ex))
# return "error: " + str(ex)
def delete(self,id=None):
#删除数据
self.write_lock()
self.__GetConn()
try:
if id:
self.__OPT_WHERE = " WHERE id=?"
self.__OPT_PARAM = (id,)
sql = "DELETE FROM " + self.__DB_TABLE + self.__OPT_WHERE
result = self.__DB_CONN.execute(sql,self.__OPT_PARAM)
self._close()
self.__DB_CONN.commit()
self.rm_lock()
return result.rowcount
except Exception as ex:
return "error: " + str(ex)
def execute(self,sql,param = ()):
#执行SQL语句返回受影响行
self.write_lock()
self.__GetConn()
try:
result = self.__DB_CONN.execute(sql,self.__to_tuple(param))
self.__DB_CONN.commit()
self.rm_lock()
return result.rowcount
except Exception as ex:
return "error: " + str(ex)
def executemany(self, sql, param: list):
# 执行SQL语句返回受影响行
self.write_lock()
self.__GetConn()
try:
result = self.__DB_CONN.executemany(sql, param)
self.__DB_CONN.commit()
self.rm_lock()
return result.rowcount
except Exception as ex:
return "error: " + str(ex)
#是否有锁
def is_lock(self):
return
# n = 0
# while os.path.exists(self.__LOCK):
# n+=1
# if n > 100:
# self.rm_lock()
# break
# time.sleep(0.01)
#写锁
def write_lock(self):
return
# self.is_lock()
# with open(self.__LOCK,'wb+') as f:
# f.close()
#解锁
def rm_lock(self):
return
# if os.path.exists(self.__LOCK):
# os.remove(self.__LOCK)
def query(self,sql,param = ()):
#执行SQL语句返回数据集
self.__GetConn()
try:
result = self.__DB_CONN.execute(sql,self.__to_tuple(param))
#将元组转换成列表
data = list(map(list,result))
return data
except Exception as ex:
return "error: " + str(ex)
def create(self,name):
#创建数据表
self.write_lock()
self.__GetConn()
script = public.readFile('data/' + name + '.sql')
result = self.__DB_CONN.executescript(script)
self.__DB_CONN.commit()
self.rm_lock()
return result.rowcount
def fofile(self,filename):
#执行脚本
self.write_lock()
self.__GetConn()
script = public.readFile(filename)
result = self.__DB_CONN.executescript(script)
self.__DB_CONN.commit()
self.rm_lock()
return result.rowcount
def _close(self):
#清理条件属性
self.__OPT_WHERE = ""
self.__OPT_FIELD = "*"
self.__OPT_ORDER = ""
self.__OPT_LIMIT = ""
self.__OPT_PARAM = ()
def is_connect(self):
#检查是否连接数据库
if not self.__DB_CONN:
return False
return True
def close(self):
#释放资源
try:
self.__DB_CONN.close()
self.__DB_CONN = None
except:
pass