startession can only be used on dev and test sites
"; } } + + /** + * Set an alternative database name in the current browser session. + * Useful for functional testing libraries like behat to create a "clean slate". + * Does not actually create the database, that's usually handled + * by {@link SapphireTest::create_temp_db()}. + * + * The database names are limited to a specific naming convention as a security measure: + * The "tmpdb" prefix and a random sequence of seven digits. + * This avoids the user gaining access to other production databases + * available on the same connection. + * + * See {@link startsession()} for a different approach which actually creates + * the DB and loads a fixture file instead. + */ + function setdb() { + if(Director::isLive()) { + return $this->permissionFailure("dev/tests/setdb can only be used on dev and test sites"); + } + + if(!isset($_GET['database'])) { + return $this->permissionFailure("dev/tests/setdb must be used with a 'database' parameter"); + } + + $database_name = $_GET['database']; + $prefix = defined('SS_DATABASE_PREFIX') ? SS_DATABASE_PREFIX : 'ss_'; + $pattern = strtolower(sprintf('#^%stmpdb\d{7}#', $prefix)); + if(!preg_match($pattern, $database_name)) { + return $this->permissionFailure("Invalid database name format"); + } + + DB::set_alternative_database_name($database_name); + + return "Set database session to '$database_name'. Time to start testing; where would you like to start?
+ "; + } function emptydb() { if(SapphireTest::using_temp_db()) {