dbEdit - DB Table editor module

<?php

/**
 * module save configuration
 *
 * @package dbEdit Table Editor
 * @version 1.0
 * @author Jelle Jager
 * @copyright 2008 Jelle Jager
 * @license GPL
 *
 * //Permissions!!!
 * //Permissions!!!
 */
	//* debug */ print __LINE__.': '.$dba.'<br />';
	include_once('JSON.php');
	$json = new Services_JSON(SERVICES_JSON_LOOSE_TYPE);

	function findField($fieldName) {
		global $dbFields;
		if(is_array($fieldName)):
			foreach($fieldName as $name)
				if(!findField($name)) return false;
			return $fieldName;
		endif;
		return (isset($dbFields[$fieldName]))?$fieldName:false;
	}

	//Need to do some translating from php (display) to mysql types.
	$allowedFieldTypes = array(
		'string'=>'string',
		'int' => 'number',
		'float' => 'number',
		'double' => 'number',
		'blob' => 'string'
	//	'' => '',
	);
	//* debug */ print __LINE__.': <pre>'.print_r($_REQUEST,true) .'</pre><br />';

	unset($dbConfig);
	//NEED TO DO TYPES!! SEE THROUGH CODE for supported types!!!

	//check if we have a valid json
	if( !isset($_POST['json_data']) ) die('No data to process!');
	$dbConfig = $json->decode($_POST['json_data']);
	if( !$dbConfig ) die('No data or invalid configuration data found.!');

	//get fields info from database
	$GLOBALS['dbFields'] = $modx->db->getTableMetaData( $dbConfig['tableName'] );
	global $dbFields;
	if(!$dbFields) die('Could not verify table data.');

	if(!is_array($dbConfig) || !isset($dbConfig['tableName'])):
		$ok=false;
	else:
		//do some validation...
		foreach( $dbConfig['fields'] as $fld_name => $props ):
			//check that field exists in table
			$ok = (isset($dbFields[$fld_name]))?1:0;
			//check that (db) data type is the same (otherwise someone is tampering?)
			$l = strlen($props['dbtype']);
			$ok = ( $ok && $props['dbtype']==substr($dbFields[$fld_name]['Type'],0,$l))?1:0;
			//check that (display) data type is appropriate?
			//HOW?? What datatypes? Especially with bindings!
			//* debug */ print __LINE__.': <pre>'.print_r($ok,true) .'</pre><br />';
			//* debug */ print __LINE__.': <pre>'.print_r($props,true) .'</pre><br />';
			
			//check that default values are appropriate
			if($ok && !empty($props['default']) ):
				if ($props['type']=='date' || $props['type']=='time'):
					# date/time field, check for invalid default
					$t = strtotime($props['default']);
					$ok = ( ($t!=-1 && $t!=false) ) ?1:0;
				endif;
				//* debug */ print __LINE__.': <pre>'.print_r($ok,true) .'</pre><br />';
				
				if($ok && in_array(strtoupper($props['type']),$modx->db->dataTypes['numeric'])):
					# numeric field, check for non-numeric default
					$ok = ( !is_numeric($props['default']) )?0:1;
				endif;
				//* debug */ print __LINE__.': <pre>'.print_r($ok,true) .'</pre><br />';
			endif;
			//* debug */ print __LINE__.': <pre>'.print_r($ok,true) .'</pre><br />';
		endforeach;
	endif;

	if($ok):
		//need to validate all values here!!
		$insertFields['name'] = $modx->db->escape($dbConfig['title']);
		$insertFields['comment'] = $modx->db->escape($dbConfig['description']);
		$insertFields['config'] = $modx->db->escape(serialize($dbConfig));
		//update or new?
	endif;
	
	if ($dba==109):
		$ok = $modx->putIntTableRow($insertFields,$dbe_config_table)?1:0;
	elseif(($dba==119 || $dba==110) && !empty($db_id) ):
		$ok = $modx->updIntTableRow($insertFields,$dbe_config_table,"recID=".$db_id)?1:0;
	else:
		$msg = "Wrong save action encountered!<br />";
	endif;

	if ($ok):
		$msg .= "Configuration for \"".$dbConfig['moduleName']."\" saved succesfully.";
		$_SESSION['dbedit_message'] = array('succes',$msg);
		header("location: index.php?a=".$_REQUEST['a']."&id=".$module_id);
		exit;
	else:
		//* debug */ print __LINE__.': <pre>'.print_r($dbConfig,true) .'</pre><br />';
		$msg .=  "Unable to save configuration. Reason is: <br />".$modx->db->getLastError();
	endif;

//somehow make this possible???
//$dbConfig['list']['Select'] = "recID,concat(FirstName,\" \",LastName) as FullName,artistCode,Type";
//$dbConfig['list']['Where'] = "";

include($basePath.$mod_path.'/header.inc.php');
?>

<div class="subTitle">
	<span class="right"><em>db</em>Edit Table Editor</span>
</div>
<div class="sectionHeader"><img src='media/images/misc/dot.gif' alt="." /> Save Configuration</div><div class="sectionBody">
<?php print $msg; ?>
<ul>
	<li><a href="<?php echo $moduleHomeUrl; ?>">Return to dbEdit module</a></li>
</ul>
</div>
<?php include($basePath.$mod_path.'/footer.inc.php'); ?>

Select a the table to expose it's properties below.
« MODx Parse Error »
MODx encountered the following error while attempting to parse the requested resource:
« Execution of a query to the database failed - You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'WHERE Tables_in_modx NOT LIKE 'modx_%'' at line 1 »
      SQL: SHOW TABLES FROM `modx` WHERE Tables_in_modx NOT LIKE 'modx_%'
      [Copy SQL to ClipBoard]

case "debugconfig":
$include_file = "debug.print.table.php";