[dbsrgits/SQL-Abstract.git] / lib / SQL / Abstract / Converter.pm

package SQL::Abstract::Converter;

use Carp ();
use List::Util ();
use Scalar::Util ();
use Data::Query::Constants qw(
  DQ_IDENTIFIER DQ_OPERATOR DQ_VALUE DQ_LITERAL DQ_JOIN DQ_SELECT DQ_ORDER
  DQ_WHERE DQ_DELETE DQ_UPDATE DQ_INSERT
);
use Data::Query::ExprHelpers;
use Moo;
use namespace::clean;

has renderer_will_quote => (
  is => 'ro'
);

has lower_case => (
  is => 'ro'
);

has default_logic => (
  is => 'ro', coerce => sub { uc($_[0]) }, default => sub { 'OR' }
);

has bind_meta => (
  is => 'ro', default => sub { 1 }
);

has cmp => (is => 'ro', default => sub { '=' });

has sqltrue => (is => 'ro', default => sub { '1=1' });
has sqlfalse => (is => 'ro', default => sub { '0=1' });

has special_ops => (is => 'ro', default => sub { [] });

# XXX documented but I don't current fail any tests not using it
has unary_ops => (is => 'ro', default => sub { [] });

has injection_guard => (
  is => 'ro',
  default => sub {
    qr/
      \;
        |
      ^ \s* go \s
    /xmi;
  }
);

has identifier_sep => (
  is => 'ro', default => sub { '.' },
);

has always_quote => (is => 'ro', default => sub { 1 });

has convert => (is => 'ro');

has array_datatypes => (is => 'ro');

sub _literal_to_dq {
  my ($self, $literal) = @_;
  my @bind;
  ($literal, @bind) = @$literal if ref($literal) eq 'ARRAY';
  Literal('SQL', $literal, [ $self->_bind_to_dq(@bind) ]);
}

sub _bind_to_dq {
  my ($self, @bind) = @_;
  return unless @bind;
  $self->bind_meta
    ? do {
        $self->_assert_bindval_matches_bindtype(@bind);
        map perl_scalar_value(reverse @$_), @bind
      }
    : map perl_scalar_value($_), @bind
}

sub _value_to_dq {
  my ($self, $value) = @_;
  $self->_maybe_convert_dq(perl_scalar_value($value, our $Cur_Col_Meta));
}

sub _ident_to_dq {
  my ($self, $ident) = @_;
  $self->_assert_pass_injection_guard($ident)
    unless $self->renderer_will_quote;
  $self->_maybe_convert_dq(Identifier(split /\Q${\$self->identifier_sep}/, $ident));
}

sub _maybe_convert_dq {
  my ($self, $dq) = @_;
  if (my $c = $self->{where_convert}) {
    Operator({ 'SQL.Naive' => 'apply' }, [
        { type => DQ_IDENTIFIER, elements => [ $self->_sqlcase($c) ] },
        $dq
      ]
    );
  } else {
    $dq;
  }
}

sub _op_to_dq {
  my ($self, $op, @args) = @_;
  $self->_assert_pass_injection_guard($op);
  Operator({ 'SQL.Naive' => $op }, \@args);
}

sub _assert_pass_injection_guard {
  if ($_[1] =~ $_[0]->{injection_guard}) {
    my $class = ref $_[0];
    die "Possible SQL injection attempt '$_[1]'. If this is indeed a part of the "
     . "desired SQL use literal SQL ( \'...' or \[ '...' ] ) or supply your own "
     . "{injection_guard} attribute to ${class}->new()"
  }
}

sub _insert_to_dq {
  my ($self, $table, $data, $options) = @_;
  my (@names, @values);
  if (ref($data) eq 'HASH') {
    @names = sort keys %$data;
    foreach my $k (@names) {
      local our $Cur_Col_Meta = $k;
      push @values, $self->_mutation_rhs_to_dq($data->{$k});
    }
  } elsif (ref($data) eq 'ARRAY') {
    local our $Cur_Col_Meta;
    @values = map $self->_mutation_rhs_to_dq($_), @$data;
  } else {
    die "Not handled yet";
  }
  my $returning;
  if (my $r_source = $options->{returning}) {
    $returning = [
      map +(ref($_) ? $self->_expr_to_dq($_) : $self->_ident_to_dq($_)),
        (ref($r_source) eq 'ARRAY' ? @$r_source : $r_source),
    ];
  }
  Insert(
    (@names ? ([ map $self->_ident_to_dq($_), @names ]) : undef),
    [ \@values ],
    $self->_table_to_dq($table),
    ($returning ? ($returning) : undef),
  );
}

sub _mutation_rhs_to_dq {
  my ($self, $v) = @_;
  if (ref($v) eq 'ARRAY') {
    if ($self->{array_datatypes}) {
      return $self->_value_to_dq($v);
    }
    $v = \do { my $x = $v };
  }
  if (ref($v) eq 'HASH') {
    my ($op, $arg, @rest) = %$v;

    die 'Operator calls in update/insert must be in the form { -op => $arg }'
      if (@rest or not $op =~ /^\-(.+)/);
  }
  return $self->_expr_to_dq($v);
}

sub _update_to_dq {
  my ($self, $table, $data, $where) = @_;

  die "Unsupported data type specified to \$sql->update"
    unless ref $data eq 'HASH';

  my @set;

  foreach my $k (sort keys %$data) {
    my $v = $data->{$k};
    local our $Cur_Col_Meta = $k;
    push @set, [ $self->_ident_to_dq($k), $self->_mutation_rhs_to_dq($v) ];
  }

  Update(
    \@set,
    $self->_where_to_dq($where),
    $self->_table_to_dq($table),
  );
}

sub _source_to_dq {
  my ($self, $table, undef, $where) = @_;

  my $source_dq = $self->_table_to_dq($table);

  if (my $where_dq = $self->_where_to_dq($where)) {
    $source_dq = Where($where_dq, $source_dq);
  }

  $source_dq;
}

sub _select_to_dq {
  my $self = shift;
  my ($table, $fields, $where, $order) = @_;

  my $source_dq = $self->_source_to_dq(@_);

  my $ordered_dq = do {
    if ($order) {
      $self->_order_by_to_dq($order, undef, $source_dq);
    } else {
      $source_dq
    }
  };

  return $self->_select_select_to_dq($fields, $ordered_dq);
}

sub _select_select_to_dq {
  my ($self, $fields, $from_dq) = @_;

  $fields ||= '*';

  Select(
    $self->_select_field_list_to_dq($fields),
    $from_dq,
  );
}

sub _select_field_list_to_dq {
  my ($self, $fields) = @_;
  [ map $self->_select_field_to_dq($_),
      ref($fields) eq 'ARRAY' ? @$fields : $fields ];
}

sub _select_field_to_dq {
  my ($self, $field) = @_;
  if (my $ref = ref($field)) {
    if ($ref eq 'REF' and ref($$field) eq 'HASH') {
      return $$field;
    } else {
      return $self->_literal_to_dq($$field);
    }
  }
  return $self->_ident_to_dq($field)
}

sub _delete_to_dq {
  my ($self, $table, $where) = @_;
  Delete(
    $self->_where_to_dq($where),
    $self->_table_to_dq($table),
  );
}

sub _where_to_dq {
  my ($self, $where, $logic) = @_;

  return undef unless defined($where);

  # if we're given a simple string assume it's a literal
  return $self->_literal_to_dq($where) if !ref($where);

  # turn the convert misfeature on - only used in WHERE clauses
  local $self->{where_convert} = $self->convert;

  return $self->_expr_to_dq($where, $logic);
}

sub _expr_to_dq {
  my ($self, $where, $logic) = @_;

  if (ref($where) eq 'ARRAY') {
    return $self->_expr_to_dq_ARRAYREF($where, $logic);
  } elsif (ref($where) eq 'HASH') {
    return $self->_expr_to_dq_HASHREF($where, $logic);
  } elsif (
    ref($where) eq 'SCALAR'
    or (ref($where) eq 'REF' and ref($$where) eq 'ARRAY')
  ) {
    return $self->_literal_to_dq($$where);
  } elsif (ref($where) eq 'REF' and ref($$where) eq 'HASH') {
    return $$where;
  } elsif (!ref($where) or Scalar::Util::blessed($where)) {
    return $self->_value_to_dq($where);
  }
  die "Can't handle $where";
}

sub _expr_to_dq_ARRAYREF {
  my ($self, $where, $logic) = @_;

  $logic = uc($logic || $self->default_logic || 'OR');
  $logic eq 'AND' or $logic eq 'OR' or die "unknown logic: $logic";

  return unless @$where;

  my ($first, @rest) = @$where;

  return $self->_expr_to_dq($first) unless @rest;

  my $first_dq = do {
    if (!ref($first)) {
      $self->_where_hashpair_to_dq($first => shift(@rest));
    } else {
      $self->_expr_to_dq($first);
    }
  };

  return $self->_expr_to_dq_ARRAYREF(\@rest, $logic) unless $first_dq;

  $self->_op_to_dq(
    $logic, $first_dq, $self->_expr_to_dq_ARRAYREF(\@rest, $logic)
  );
}

sub _expr_to_dq_HASHREF {
  my ($self, $where, $logic) = @_;

  $logic = uc($logic) if $logic;

  my @dq = map {
    $self->_where_hashpair_to_dq($_ => $where->{$_}, $logic)
  } sort keys %$where;

  return $dq[0] unless @dq > 1;

  my $final = pop(@dq);

  foreach my $dq (reverse @dq) {
    $final = $self->_op_to_dq($logic||'AND', $dq, $final);
  }

  return $final;
}

sub _where_to_dq_SCALAR {
  shift->_value_to_dq(@_);
}

sub _apply_to_dq {
  my ($self, $op, $v) = @_;
  my @args = map $self->_expr_to_dq($_), (ref($v) eq 'ARRAY' ? @$v : $v);

  # Ok. Welcome to stupid compat code land. An SQLA expr that would in the
  # absence of this piece of crazy render to:
  #
  #   A( B( C( x ) ) )
  #
  # such as
  #
  #   { -a => { -b => { -c => $x } } }
  #
  # actually needs to render to:
  #
  #   A( B( C x ) )
  #
  # because SQL sucks, and databases are hateful, and SQLA is Just That DWIM.
  #
  # However, we don't want to catch 'A(x)' and turn it into 'A x'
  #
  # So the way we deal with this is to go through all our arguments, and
  # then if the argument is -also- an apply, i.e. at least 'B', we check
  # its arguments - and if there's only one of them, and that isn't an apply,
  # then we convert to the bareword form. The end result should be:
  #
  # A( x )                   -> A( x )
  # A( B( x ) )              -> A( B x )
  # A( B( C( x ) ) )         -> A( B( C x ) )
  # A( B( x + y ) )          -> A( B( x + y ) )
  # A( B( x, y ) )           -> A( B( x, y ) )
  #
  # If this turns out not to be quite right, please add additional tests
  # to either 01generate.t or 02where.t *and* update this comment.

  foreach my $arg (@args) {
    if (
      $arg->{type} eq DQ_OPERATOR and $arg->{operator}{'SQL.Naive'} eq 'apply'
      and @{$arg->{args}} == 2 and $arg->{args}[1]{type} ne DQ_OPERATOR
    ) {
      $arg->{operator}{'SQL.Naive'} = (shift @{$arg->{args}})->{elements}->[0];
    }
  }
  $self->_assert_pass_injection_guard($op);
  return $self->_op_to_dq(
    apply => $self->_ident_to_dq($op), @args
  );
}

sub _where_hashpair_to_dq {
  my ($self, $k, $v, $logic) = @_;

  if ($k =~ /^-(.*)/s) {
    my $op = uc($1);
    if ($op eq 'AND' or $op eq 'OR') {
      return $self->_expr_to_dq($v, $op);
    } elsif ($op eq 'NEST') {
      return $self->_expr_to_dq($v);
    } elsif ($op eq 'NOT') {
      return $self->_op_to_dq(NOT => $self->_expr_to_dq($v));
    } elsif ($op eq 'BOOL') {
      return ref($v) ? $self->_expr_to_dq($v) : $self->_ident_to_dq($v);
    } elsif ($op eq 'NOT_BOOL') {
      return $self->_op_to_dq(
        NOT => ref($v) ? $self->_expr_to_dq($v) : $self->_ident_to_dq($v)
      );
    } elsif ($op eq 'IDENT') {
      return $self->_ident_to_dq($v);
    } elsif ($op eq 'VALUE') {
      return $self->_value_to_dq($v);
    } elsif ($op =~ /^(?:AND|OR|NEST)_?\d+/) {
      die "Use of [and|or|nest]_N modifiers is no longer supported";
    } else {
      return $self->_apply_to_dq($op, $v);
    }
  } else {
    local our $Cur_Col_Meta = $k;
    if (ref($v) eq 'ARRAY') {
      if (!@$v) {
        return $self->_literal_to_dq($self->{sqlfalse});
      } elsif (defined($v->[0]) && $v->[0] =~ /-(and|or)/i) {
        return $self->_expr_to_dq_ARRAYREF([
          map +{ $k => $_ }, @{$v}[1..$#$v]
        ], uc($1));
      }
      return $self->_expr_to_dq_ARRAYREF([
        map +{ $k => $_ }, @$v
      ], $logic);
    } elsif (ref($v) eq 'SCALAR' or (ref($v) eq 'REF' and ref($$v) eq 'ARRAY')) {
      return Literal('SQL', [ $self->_ident_to_dq($k), $self->_literal_to_dq($$v) ]);
    }
    my ($op, $rhs) = do {
      if (ref($v) eq 'HASH') {
        if (keys %$v > 1) {
          return $self->_expr_to_dq_ARRAYREF([
            map +{ $k => { $_ => $v->{$_} } }, sort keys %$v
          ], $logic||'AND');
        }
        my ($op, $value) = %$v;
        s/^-//, s/_/ /g for $op;
        if ($op =~ /^(and|or)$/i) {
          return $self->_expr_to_dq({ $k => $value }, $op);
        } elsif (
          my $special_op = List::Util::first {$op =~ $_->{regex}}
                             @{$self->{special_ops}}
        ) {
          return $self->_literal_to_dq(
            [ $special_op->{handler}->($k, $op, $value) ]
          );;
        } elsif ($op =~ /^(?:AND|OR|NEST)_?\d+$/i) {
          die "Use of [and|or|nest]_N modifiers is no longer supported";
        }
        (uc($op), $value);
      } else {
        ($self->{cmp}, $v);
      }
    };
    if ($op eq 'BETWEEN' or $op eq 'IN' or $op eq 'NOT IN' or $op eq 'NOT BETWEEN') {
      if (ref($rhs) ne 'ARRAY') {
        if ($op =~ /IN$/) {
          # have to add parens if none present because -in => \"SELECT ..."
          # got documented. mst hates everything.
          if (ref($rhs) eq 'SCALAR') {
            my $x = $$rhs;
            1 while ($x =~ s/\A\s*\((.*)\)\s*\Z/$1/s);
            $rhs = \$x;
          } else {
            my ($x, @rest) = @{$$rhs};
            1 while ($x =~ s/\A\s*\((.*)\)\s*\Z/$1/s);
            $rhs = \[ $x, @rest ];
          }
        }
        return $self->_op_to_dq(
          $op, $self->_ident_to_dq($k), $self->_literal_to_dq($$rhs)
        );
      }
      return $self->_literal_to_dq($self->{sqlfalse}) unless @$rhs;
      return $self->_op_to_dq(
        $op, $self->_ident_to_dq($k), map $self->_expr_to_dq($_), @$rhs
      )
    } elsif ($op =~ s/^NOT (?!LIKE)//) {
      return $self->_where_hashpair_to_dq(-not => { $k => { $op => $rhs } });
    } elsif ($op eq 'IDENT') {
      return $self->_op_to_dq(
        $self->{cmp}, $self->_ident_to_dq($k), $self->_ident_to_dq($rhs)
      );
    } elsif ($op eq 'VALUE') {
      return $self->_op_to_dq(
        $self->{cmp}, $self->_ident_to_dq($k), $self->_value_to_dq($rhs)
      );
    } elsif (!defined($rhs)) {
      my $null_op = do {
        if ($op eq '=' or $op eq 'LIKE') {
          'IS NULL'
        } elsif ($op eq '!=') {
          'IS NOT NULL'
        } else {
          die "Can't do undef -> NULL transform for operator ${op}";
        }
      };
      return $self->_op_to_dq($null_op, $self->_ident_to_dq($k));
    }
    if (ref($rhs) eq 'ARRAY') {
      if (!@$rhs) {
        return $self->_literal_to_dq(
          $op eq '!=' ? $self->{sqltrue} : $self->{sqlfalse}
        );
      } elsif (defined($rhs->[0]) and $rhs->[0] =~ /^-(and|or)$/i) {
        return $self->_expr_to_dq_ARRAYREF([
          map +{ $k => { $op => $_ } }, @{$rhs}[1..$#$rhs]
        ], uc($1));
      } elsif ($op =~ /^-(?:AND|OR|NEST)_?\d+/) {
        die "Use of [and|or|nest]_N modifiers is no longer supported";
      }
      return $self->_expr_to_dq_ARRAYREF([
        map +{ $k => { $op => $_ } }, @$rhs
      ]);
    }
    return $self->_op_to_dq(
      $op, $self->_ident_to_dq($k), $self->_expr_to_dq($rhs)
    );
  }
}

sub _order_by_to_dq {
  my ($self, $arg, $dir, $from) = @_;

  return unless $arg;

  my $dq = Order(
    undef,
    (defined($dir) ? (!!($dir =~ /desc/i)) : undef),
    ($from ? ($from) : undef),
  );

  if (!ref($arg)) {
    $dq->{by} = $self->_ident_to_dq($arg);
  } elsif (ref($arg) eq 'ARRAY') {
    return unless @$arg;
    local our $Order_Inner unless our $Order_Recursing;
    local $Order_Recursing = 1;
    my ($outer, $inner);
    foreach my $member (@$arg) {
      local $Order_Inner;
      my $next = $self->_order_by_to_dq($member, $dir, $from);
      $outer ||= $next;
      $inner->{from} = $next if $inner;
      $inner = $Order_Inner || $next;
    }
    $Order_Inner = $inner;
    return $outer;
  } elsif (ref($arg) eq 'REF' and ref($$arg) eq 'ARRAY') {
    $dq->{by} = $self->_literal_to_dq($$arg);
  } elsif (ref($arg) eq 'SCALAR') {

    # < mst> right, but if it doesn't match that, it goes "ok, right, not sure, 
    #        totally leaving this untouched as a literal"
    # < mst> so I -think- it's relatively robust
    # < ribasushi> right, it's relatively safe then
    # < ribasushi> is this regex centralized?
    # < mst> it only exists in _order_by_to_dq in SQL::Abstract::Converter
    # < mst> it only exists because you were kind enough to support new 
    #        dbihacks crack combined with old literal order_by crack
    # < ribasushi> heh :)

    if (my ($ident, $dir) = $$arg =~ /^(\w+)(?:\s+(desc|asc))?$/i) {
      $dq->{by} = $self->_ident_to_dq($ident);
      $dq->{reverse} = 1 if $dir and lc($dir) eq 'desc';
    } else {
      $dq->{by} = $self->_literal_to_dq($$arg);
    }
  } elsif (ref($arg) eq 'HASH') {
    my ($key, $val, @rest) = %$arg;

    return unless $key;

    if (@rest or not $key =~ /^-(desc|asc)/i) {
      die "hash passed to _order_by must have exactly one key (-desc or -asc)";
    }
    my $dir = uc $1;
    return $self->_order_by_to_dq($val, $dir, $from);
  } else {
    die "Can't handle $arg in _order_by_to_dq";
  }
  return $dq;
}

sub _table_to_dq {
  my ($self, $from) = @_;
  if (ref($from) eq 'ARRAY') {
    die "Empty FROM list" unless my @f = @$from;
    my $dq = $self->_table_to_dq(shift @f);
    while (my $x = shift @f) {
      $dq = Join(
        $dq,
        $self->_table_to_dq($x),
      );
    }
    $dq;
  } elsif (ref($from) eq 'SCALAR' or (ref($from) eq 'REF')) {
    $self->_literal_to_dq($$from);
  } else {
    $self->_ident_to_dq($from);
  }
}

# And bindtype
sub _bindtype (@) {
  #my ($self, $col, @vals) = @_;

  #LDNOTE : changed original implementation below because it did not make
  # sense when bindtype eq 'columns' and @vals > 1.
#  return $self->{bindtype} eq 'columns' ? [ $col, @vals ] : @vals;

  # called often - tighten code
  return $_[0]->bind_meta
    ? map {[$_[1], $_]} @_[2 .. $#_]
    : @_[2 .. $#_]
  ;
}

# Dies if any element of @bind is not in [colname => value] format
# if bindtype is 'columns'.
sub _assert_bindval_matches_bindtype {
#  my ($self, @bind) = @_;
  my $self = shift;
  if ($self->bind_meta) {
    for (@_) {
      if (!defined $_ || ref($_) ne 'ARRAY' || @$_ != 2) {
        die "bindtype 'columns' selected, you need to pass: [column_name => bind_value]"
      }
    }
  }
}

# Fix SQL case, if so requested
sub _sqlcase {
  return $_[0]->lower_case ? $_[1] : uc($_[1]);
}

1;
Commit	Line	Data
a82e41dc	1	package SQL::Abstract::Converter;
	2
	3	use Carp ();
	4	use List::Util ();
	5	use Scalar::Util ();
	6	use Data::Query::Constants qw(
	7	DQ_IDENTIFIER DQ_OPERATOR DQ_VALUE DQ_LITERAL DQ_JOIN DQ_SELECT DQ_ORDER
	8	DQ_WHERE DQ_DELETE DQ_UPDATE DQ_INSERT
	9	);
4caa4620	10	use Data::Query::ExprHelpers;
a82e41dc	11	use Moo;
8b9b83ae	12	use namespace::clean;
a82e41dc	13
	14	has renderer_will_quote => (
	15	is => 'ro'
	16	);
	17
	18	has lower_case => (
4caa4620	19	is => 'ro'
a82e41dc	20	);
	21
	22	has default_logic => (
	23	is => 'ro', coerce => sub { uc($_[0]) }, default => sub { 'OR' }
	24	);
	25
	26	has bind_meta => (
	27	is => 'ro', default => sub { 1 }
	28	);
	29
	30	has cmp => (is => 'ro', default => sub { '=' });
	31
	32	has sqltrue => (is => 'ro', default => sub { '1=1' });
	33	has sqlfalse => (is => 'ro', default => sub { '0=1' });
	34
	35	has special_ops => (is => 'ro', default => sub { [] });
	36
	37	# XXX documented but I don't current fail any tests not using it
	38	has unary_ops => (is => 'ro', default => sub { [] });
	39
	40	has injection_guard => (
	41	is => 'ro',
	42	default => sub {
	43	qr/
	44	\;
	45	\|
	46	^ \s* go \s
	47	/xmi;
	48	}
	49	);
	50
	51	has identifier_sep => (
	52	is => 'ro', default => sub { '.' },
	53	);
	54
	55	has always_quote => (is => 'ro', default => sub { 1 });
	56
	57	has convert => (is => 'ro');
	58
	59	has array_datatypes => (is => 'ro');
	60
	61	sub _literal_to_dq {
	62	my ($self, $literal) = @_;
	63	my @bind;
	64	($literal, @bind) = @$literal if ref($literal) eq 'ARRAY';
3ed3c560	65	Literal('SQL', $literal, [ $self->_bind_to_dq(@bind) ]);
a82e41dc	66	}
	67
	68	sub _bind_to_dq {
	69	my ($self, @bind) = @_;
	70	return unless @bind;
	71	$self->bind_meta
	72	? do {
	73	$self->_assert_bindval_matches_bindtype(@bind);
	74	map perl_scalar_value(reverse @$_), @bind
	75	}
	76	: map perl_scalar_value($_), @bind
	77	}
	78
	79	sub _value_to_dq {
	80	my ($self, $value) = @_;
	81	$self->_maybe_convert_dq(perl_scalar_value($value, our $Cur_Col_Meta));
	82	}
	83
	84	sub _ident_to_dq {
	85	my ($self, $ident) = @_;
	86	$self->_assert_pass_injection_guard($ident)
	87	unless $self->renderer_will_quote;
4caa4620	88	$self->_maybe_convert_dq(Identifier(split /\Q${\$self->identifier_sep}/, $ident));
a82e41dc	89	}
	90
	91	sub _maybe_convert_dq {
	92	my ($self, $dq) = @_;
	93	if (my $c = $self->{where_convert}) {
4caa4620	94	Operator({ 'SQL.Naive' => 'apply' }, [
	95	{ type => DQ_IDENTIFIER, elements => [ $self->_sqlcase($c) ] },
	96	$dq
	97	]
	98	);
a82e41dc	99	} else {
	100	$dq;
	101	}
	102	}
	103
	104	sub _op_to_dq {
	105	my ($self, $op, @args) = @_;
	106	$self->_assert_pass_injection_guard($op);
4caa4620	107	Operator({ 'SQL.Naive' => $op }, \@args);
a82e41dc	108	}
	109
	110	sub _assert_pass_injection_guard {
	111	if ($_[1] =~ $_[0]->{injection_guard}) {
	112	my $class = ref $_[0];
	113	die "Possible SQL injection attempt '$_[1]'. If this is indeed a part of the "
	114	. "desired SQL use literal SQL ( \'...' or \[ '...' ] ) or supply your own "
	115	. "{injection_guard} attribute to ${class}->new()"
	116	}
	117	}
	118
	119	sub _insert_to_dq {
	120	my ($self, $table, $data, $options) = @_;
	121	my (@names, @values);
	122	if (ref($data) eq 'HASH') {
	123	@names = sort keys %$data;
	124	foreach my $k (@names) {
	125	local our $Cur_Col_Meta = $k;
	126	push @values, $self->_mutation_rhs_to_dq($data->{$k});
	127	}
	128	} elsif (ref($data) eq 'ARRAY') {
	129	local our $Cur_Col_Meta;
	130	@values = map $self->_mutation_rhs_to_dq($_), @$data;
	131	} else {
	132	die "Not handled yet";
	133	}
	134	my $returning;
	135	if (my $r_source = $options->{returning}) {
	136	$returning = [
	137	map +(ref($_) ? $self->_expr_to_dq($_) : $self->_ident_to_dq($_)),
	138	(ref($r_source) eq 'ARRAY' ? @$r_source : $r_source),
	139	];
	140	}
4caa4620	141	Insert(
	142	(@names ? ([ map $self->_ident_to_dq($_), @names ]) : undef),
	143	[ \@values ],
	144	$self->_table_to_dq($table),
	145	($returning ? ($returning) : undef),
	146	);
a82e41dc	147	}
	148
	149	sub _mutation_rhs_to_dq {
	150	my ($self, $v) = @_;
	151	if (ref($v) eq 'ARRAY') {
	152	if ($self->{array_datatypes}) {
	153	return $self->_value_to_dq($v);
	154	}
	155	$v = \do { my $x = $v };
	156	}
	157	if (ref($v) eq 'HASH') {
	158	my ($op, $arg, @rest) = %$v;
	159
	160	die 'Operator calls in update/insert must be in the form { -op => $arg }'
	161	if (@rest or not $op =~ /^\-(.+)/);
	162	}
	163	return $self->_expr_to_dq($v);
	164	}
	165
	166	sub _update_to_dq {
	167	my ($self, $table, $data, $where) = @_;
	168
	169	die "Unsupported data type specified to \$sql->update"
	170	unless ref $data eq 'HASH';
	171
	172	my @set;
	173
	174	foreach my $k (sort keys %$data) {
	175	my $v = $data->{$k};
	176	local our $Cur_Col_Meta = $k;
	177	push @set, [ $self->_ident_to_dq($k), $self->_mutation_rhs_to_dq($v) ];
	178	}
	179
4caa4620	180	Update(
	181	\@set,
	182	$self->_where_to_dq($where),
	183	$self->_table_to_dq($table),
	184	);
a82e41dc	185	}
	186
	187	sub _source_to_dq {
	188	my ($self, $table, undef, $where) = @_;
	189
	190	my $source_dq = $self->_table_to_dq($table);
	191
	192	if (my $where_dq = $self->_where_to_dq($where)) {
4caa4620	193	$source_dq = Where($where_dq, $source_dq);
a82e41dc	194	}
	195
	196	$source_dq;
	197	}
	198
	199	sub _select_to_dq {
	200	my $self = shift;
	201	my ($table, $fields, $where, $order) = @_;
	202
	203	my $source_dq = $self->_source_to_dq(@_);
	204
	205	my $ordered_dq = do {
	206	if ($order) {
	207	$self->_order_by_to_dq($order, undef, $source_dq);
	208	} else {
	209	$source_dq
	210	}
	211	};
	212
87af4204	213	return $self->_select_select_to_dq($fields, $ordered_dq);
a82e41dc	214	}
a82e41dc	215
87af4204	216	sub _select_select_to_dq {
a82e41dc	217	my ($self, $fields, $from_dq) = @_;
	218
	219	$fields \|\|= '*';
	220
4caa4620	221	Select(
	222	$self->_select_field_list_to_dq($fields),
	223	$from_dq,
	224	);
a82e41dc	225	}
	226
	227	sub _select_field_list_to_dq {
	228	my ($self, $fields) = @_;
87af4204	229	[ map $self->_select_field_to_dq($_),
87af4204	230	ref($fields) eq 'ARRAY' ? @$fields : $fields ];
a82e41dc	231	}
	232
	233	sub _select_field_to_dq {
	234	my ($self, $field) = @_;
87af4204	235	if (my $ref = ref($field)) {
	236	if ($ref eq 'REF' and ref($$field) eq 'HASH') {
	237	return $$field;
	238	} else {
	239	return $self->_literal_to_dq($$field);
	240	}
	241	}
	242	return $self->_ident_to_dq($field)
a82e41dc	243	}
	244
	245	sub _delete_to_dq {
	246	my ($self, $table, $where) = @_;
4caa4620	247	Delete(
	248	$self->_where_to_dq($where),
	249	$self->_table_to_dq($table),
	250	);
a82e41dc	251	}
	252
	253	sub _where_to_dq {
	254	my ($self, $where, $logic) = @_;
	255
	256	return undef unless defined($where);
	257
e177c256	258	# if we're given a simple string assume it's a literal
	259	return $self->_literal_to_dq($where) if !ref($where);
	260
a82e41dc	261	# turn the convert misfeature on - only used in WHERE clauses
	262	local $self->{where_convert} = $self->convert;
	263
	264	return $self->_expr_to_dq($where, $logic);
	265	}
	266
	267	sub _expr_to_dq {
	268	my ($self, $where, $logic) = @_;
	269
	270	if (ref($where) eq 'ARRAY') {
	271	return $self->_expr_to_dq_ARRAYREF($where, $logic);
	272	} elsif (ref($where) eq 'HASH') {
	273	return $self->_expr_to_dq_HASHREF($where, $logic);
	274	} elsif (
	275	ref($where) eq 'SCALAR'
	276	or (ref($where) eq 'REF' and ref($$where) eq 'ARRAY')
	277	) {
	278	return $self->_literal_to_dq($$where);
62d17764	279	} elsif (ref($where) eq 'REF' and ref($$where) eq 'HASH') {
62d17764	280	return $$where;
a82e41dc	281	} elsif (!ref($where) or Scalar::Util::blessed($where)) {
	282	return $self->_value_to_dq($where);
	283	}
	284	die "Can't handle $where";
	285	}
	286
	287	sub _expr_to_dq_ARRAYREF {
	288	my ($self, $where, $logic) = @_;
	289
	290	$logic = uc($logic \|\| $self->default_logic \|\| 'OR');
	291	$logic eq 'AND' or $logic eq 'OR' or die "unknown logic: $logic";
	292
	293	return unless @$where;
	294
	295	my ($first, @rest) = @$where;
	296
	297	return $self->_expr_to_dq($first) unless @rest;
	298
	299	my $first_dq = do {
	300	if (!ref($first)) {
	301	$self->_where_hashpair_to_dq($first => shift(@rest));
	302	} else {
	303	$self->_expr_to_dq($first);
	304	}
	305	};
	306
	307	return $self->_expr_to_dq_ARRAYREF(\@rest, $logic) unless $first_dq;
	308
	309	$self->_op_to_dq(
	310	$logic, $first_dq, $self->_expr_to_dq_ARRAYREF(\@rest, $logic)
	311	);
	312	}
	313
	314	sub _expr_to_dq_HASHREF {
	315	my ($self, $where, $logic) = @_;
	316
	317	$logic = uc($logic) if $logic;
	318
	319	my @dq = map {
	320	$self->_where_hashpair_to_dq($_ => $where->{$_}, $logic)
	321	} sort keys %$where;
	322
	323	return $dq[0] unless @dq > 1;
	324
	325	my $final = pop(@dq);
	326
	327	foreach my $dq (reverse @dq) {
	328	$final = $self->_op_to_dq($logic\|\|'AND', $dq, $final);
	329	}
	330
	331	return $final;
	332	}
	333
	334	sub _where_to_dq_SCALAR {
	335	shift->_value_to_dq(@_);
	336	}
	337
	338	sub _apply_to_dq {
	339	my ($self, $op, $v) = @_;
	340	my @args = map $self->_expr_to_dq($_), (ref($v) eq 'ARRAY' ? @$v : $v);
	341
	342	# Ok. Welcome to stupid compat code land. An SQLA expr that would in the
	343	# absence of this piece of crazy render to:
	344	#
345	# A( B( C( x ) ) )
346	#
347	# such as
348	#
349	# { -a => { -b => { -c => $x } } }
350	#
351	# actually needs to render to:
352	#
353	# A( B( C x ) )
354	#
355	# because SQL sucks, and databases are hateful, and SQLA is Just That DWIM.
356	#
357	# However, we don't want to catch 'A(x)' and turn it into 'A x'
358	#
359	# So the way we deal with this is to go through all our arguments, and
360	# then if the argument is -also- an apply, i.e. at least 'B', we check
361	# its arguments - and if there's only one of them, and that isn't an apply,
362	# then we convert to the bareword form. The end result should be:
363	#
364	# A( x ) -> A( x )
365	# A( B( x ) ) -> A( B x )
366	# A( B( C( x ) ) ) -> A( B( C x ) )
367	# A( B( x + y ) ) -> A( B( x + y ) )
368	# A( B( x, y ) ) -> A( B( x, y ) )
369	#
370	# If this turns out not to be quite right, please add additional tests
371	# to either 01generate.t or 02where.t and update this comment.
372
373	foreach my $arg (@args) {
374	if (
375	$arg->{type} eq DQ_OPERATOR and $arg->{operator}{'SQL.Naive'} eq 'apply'
376	and @{$arg->{args}} == 2 and $arg->{args}[1]{type} ne DQ_OPERATOR
377	) {
378	$arg->{operator}{'SQL.Naive'} = (shift @{$arg->{args}})->{elements}->[0];
379	}
380	}
381	$self->_assert_pass_injection_guard($op);
382	return $self->_op_to_dq(
383	apply => $self->_ident_to_dq($op), @args
384	);
385	}
386
387	sub _where_hashpair_to_dq {
388	my ($self, $k, $v, $logic) = @_;
389
390	if ($k =~ /^-(.*)/s) {
391	my $op = uc($1);
392	if ($op eq 'AND' or $op eq 'OR') {
393	return $self->_expr_to_dq($v, $op);
394	} elsif ($op eq 'NEST') {
395	return $self->_expr_to_dq($v);
396	} elsif ($op eq 'NOT') {
397	return $self->_op_to_dq(NOT => $self->_expr_to_dq($v));
398	} elsif ($op eq 'BOOL') {
399	return ref($v) ? $self->_expr_to_dq($v) : $self->_ident_to_dq($v);
400	} elsif ($op eq 'NOT_BOOL') {
401	return $self->_op_to_dq(
402	NOT => ref($v) ? $self->_expr_to_dq($v) : $self->_ident_to_dq($v)
403	);
404	} elsif ($op eq 'IDENT') {
405	return $self->_ident_to_dq($v);
406	} elsif ($op eq 'VALUE') {
407	return $self->_value_to_dq($v);
408	} elsif ($op =~ /^(?:AND\|OR\|NEST)_?\d+/) {
409	die "Use of [and\|or\|nest]_N modifiers is no longer supported";
410	} else {
411	return $self->_apply_to_dq($op, $v);
412	}
413	} else {
414	local our $Cur_Col_Meta = $k;
415	if (ref($v) eq 'ARRAY') {
416	if (!@$v) {
417	return $self->_literal_to_dq($self->{sqlfalse});
418	} elsif (defined($v->[0]) && $v->[0] =~ /-(and\|or)/i) {
419	return $self->_expr_to_dq_ARRAYREF([
420	map +{ $k => $_ }, @{$v}[1..$#$v]
421	], uc($1));
422	}
423	return $self->_expr_to_dq_ARRAYREF([
424	map +{ $k => $_ }, @$v
425	], $logic);
426	} elsif (ref($v) eq 'SCALAR' or (ref($v) eq 'REF' and ref($$v) eq 'ARRAY')) {
3ed3c560	427	return Literal('SQL', [ $self->_ident_to_dq($k), $self->_literal_to_dq($$v) ]);
a82e41dc	428	}
	429	my ($op, $rhs) = do {
	430	if (ref($v) eq 'HASH') {
	431	if (keys %$v > 1) {
	432	return $self->_expr_to_dq_ARRAYREF([
	433	map +{ $k => { $_ => $v->{$_} } }, sort keys %$v
	434	], $logic\|\|'AND');
	435	}
	436	my ($op, $value) = %$v;
	437	s/^-//, s/_/ /g for $op;
	438	if ($op =~ /^(and\|or)$/i) {
	439	return $self->_expr_to_dq({ $k => $value }, $op);
	440	} elsif (
	441	my $special_op = List::Util::first {$op =~ $_->{regex}}
	442	@{$self->{special_ops}}
	443	) {
	444	return $self->_literal_to_dq(
	445	[ $special_op->{handler}->($k, $op, $value) ]
	446	);;
	447	} elsif ($op =~ /^(?:AND\|OR\|NEST)_?\d+$/i) {
	448	die "Use of [and\|or\|nest]_N modifiers is no longer supported";
	449	}
	450	(uc($op), $value);
	451	} else {
	452	($self->{cmp}, $v);
	453	}
	454	};
	455	if ($op eq 'BETWEEN' or $op eq 'IN' or $op eq 'NOT IN' or $op eq 'NOT BETWEEN') {
	456	if (ref($rhs) ne 'ARRAY') {
	457	if ($op =~ /IN$/) {
	458	# have to add parens if none present because -in => \"SELECT ..."
	459	# got documented. mst hates everything.
	460	if (ref($rhs) eq 'SCALAR') {
	461	my $x = $$rhs;
	462	1 while ($x =~ s/\A\s\((.)\)\s*\Z/$1/s);
	463	$rhs = \$x;
	464	} else {
	465	my ($x, @rest) = @{$$rhs};
	466	1 while ($x =~ s/\A\s\((.)\)\s*\Z/$1/s);
	467	$rhs = \[ $x, @rest ];
	468	}
	469	}
	470	return $self->_op_to_dq(
	471	$op, $self->_ident_to_dq($k), $self->_literal_to_dq($$rhs)
	472	);
	473	}
	474	return $self->_literal_to_dq($self->{sqlfalse}) unless @$rhs;
	475	return $self->_op_to_dq(
	476	$op, $self->_ident_to_dq($k), map $self->_expr_to_dq($_), @$rhs
	477	)
	478	} elsif ($op =~ s/^NOT (?!LIKE)//) {
	479	return $self->_where_hashpair_to_dq(-not => { $k => { $op => $rhs } });
	480	} elsif ($op eq 'IDENT') {
	481	return $self->_op_to_dq(
	482	$self->{cmp}, $self->_ident_to_dq($k), $self->_ident_to_dq($rhs)
	483	);
	484	} elsif ($op eq 'VALUE') {
	485	return $self->_op_to_dq(
	486	$self->{cmp}, $self->_ident_to_dq($k), $self->_value_to_dq($rhs)
	487	);
	488	} elsif (!defined($rhs)) {
	489	my $null_op = do {
	490	if ($op eq '=' or $op eq 'LIKE') {
	491	'IS NULL'
492	} elsif ($op eq '!=') {
493	'IS NOT NULL'
494	} else {
495	die "Can't do undef -> NULL transform for operator ${op}";
496	}
497	};
498	return $self->_op_to_dq($null_op, $self->_ident_to_dq($k));
499	}
500	if (ref($rhs) eq 'ARRAY') {
501	if (!@$rhs) {
502	return $self->_literal_to_dq(
503	$op eq '!=' ? $self->{sqltrue} : $self->{sqlfalse}
504	);
505	} elsif (defined($rhs->[0]) and $rhs->[0] =~ /^-(and\|or)$/i) {
506	return $self->_expr_to_dq_ARRAYREF([
507	map +{ $k => { $op => $_ } }, @{$rhs}[1..$#$rhs]
508	], uc($1));
509	} elsif ($op =~ /^-(?:AND\|OR\|NEST)_?\d+/) {
510	die "Use of [and\|or\|nest]_N modifiers is no longer supported";
511	}
512	return $self->_expr_to_dq_ARRAYREF([
513	map +{ $k => { $op => $_ } }, @$rhs
514	]);
515	}
516	return $self->_op_to_dq(
517	$op, $self->_ident_to_dq($k), $self->_expr_to_dq($rhs)
518	);
519	}
520	}
521
522	sub _order_by_to_dq {
523	my ($self, $arg, $dir, $from) = @_;
524
525	return unless $arg;
526
4caa4620	527	my $dq = Order(
	528	undef,
	529	(defined($dir) ? (!!($dir =~ /desc/i)) : undef),
	530	($from ? ($from) : undef),
	531	);
a82e41dc	532
	533	if (!ref($arg)) {
	534	$dq->{by} = $self->_ident_to_dq($arg);
	535	} elsif (ref($arg) eq 'ARRAY') {
	536	return unless @$arg;
	537	local our $Order_Inner unless our $Order_Recursing;
	538	local $Order_Recursing = 1;
	539	my ($outer, $inner);
	540	foreach my $member (@$arg) {
	541	local $Order_Inner;
	542	my $next = $self->_order_by_to_dq($member, $dir, $from);
	543	$outer \|\|= $next;
	544	$inner->{from} = $next if $inner;
	545	$inner = $Order_Inner \|\| $next;
	546	}
	547	$Order_Inner = $inner;
	548	return $outer;
	549	} elsif (ref($arg) eq 'REF' and ref($$arg) eq 'ARRAY') {
	550	$dq->{by} = $self->_literal_to_dq($$arg);
	551	} elsif (ref($arg) eq 'SCALAR') {
8b9b83ae	552
	553	# < mst> right, but if it doesn't match that, it goes "ok, right, not sure,
	554	# totally leaving this untouched as a literal"
	555	# < mst> so I -think- it's relatively robust
	556	# < ribasushi> right, it's relatively safe then
	557	# < ribasushi> is this regex centralized?
	558	# < mst> it only exists in _order_by_to_dq in SQL::Abstract::Converter
	559	# < mst> it only exists because you were kind enough to support new
	560	# dbihacks crack combined with old literal order_by crack
	561	# < ribasushi> heh :)
	562
daf6f830	563	if (my ($ident, $dir) = $$arg =~ /^(\w+)(?:\s+(desc\|asc))?$/i) {
3d82b6c9	564	$dq->{by} = $self->_ident_to_dq($ident);
	565	$dq->{reverse} = 1 if $dir and lc($dir) eq 'desc';
	566	} else {
	567	$dq->{by} = $self->_literal_to_dq($$arg);
	568	}
a82e41dc	569	} elsif (ref($arg) eq 'HASH') {
	570	my ($key, $val, @rest) = %$arg;
	571
	572	return unless $key;
	573
	574	if (@rest or not $key =~ /^-(desc\|asc)/i) {
	575	die "hash passed to _order_by must have exactly one key (-desc or -asc)";
	576	}
	577	my $dir = uc $1;
	578	return $self->_order_by_to_dq($val, $dir, $from);
	579	} else {
	580	die "Can't handle $arg in _order_by_to_dq";
	581	}
	582	return $dq;
	583	}
	584
	585	sub _table_to_dq {
	586	my ($self, $from) = @_;
	587	if (ref($from) eq 'ARRAY') {
	588	die "Empty FROM list" unless my @f = @$from;
	589	my $dq = $self->_table_to_dq(shift @f);
	590	while (my $x = shift @f) {
4caa4620	591	$dq = Join(
	592	$dq,
	593	$self->_table_to_dq($x),
	594	);
a82e41dc	595	}
	596	$dq;
	597	} elsif (ref($from) eq 'SCALAR' or (ref($from) eq 'REF')) {
	598	$self->_literal_to_dq($$from);
	599	} else {
	600	$self->_ident_to_dq($from);
	601	}
	602	}
	603
	604	# And bindtype
	605	sub _bindtype (@) {
	606	#my ($self, $col, @vals) = @_;
	607
	608	#LDNOTE : changed original implementation below because it did not make
	609	# sense when bindtype eq 'columns' and @vals > 1.
	610	# return $self->{bindtype} eq 'columns' ? [ $col, @vals ] : @vals;
	611
	612	# called often - tighten code
	613	return $_[0]->bind_meta
	614	? map {[$_[1], $_]} @_[2 .. $#_]
	615	: @_[2 .. $#_]
	616	;
	617	}
	618
	619	# Dies if any element of @bind is not in [colname => value] format
	620	# if bindtype is 'columns'.
	621	sub _assert_bindval_matches_bindtype {
	622	# my ($self, @bind) = @_;
	623	my $self = shift;
	624	if ($self->bind_meta) {
	625	for (@_) {
	626	if (!defined $_ \|\| ref($_) ne 'ARRAY' \|\| @$_ != 2) {
	627	die "bindtype 'columns' selected, you need to pass: [column_name => bind_value]"
	628	}
	629	}
	630	}
	631	}
	632
	633	# Fix SQL case, if so requested
	634	sub _sqlcase {
	635	return $_[0]->lower_case ? $_[1] : uc($_[1]);
	636	}
	637
	638	1;