phangoapp/phamodels
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Fixes for better filtering of variables in querys. Added a new method for filtered querys added

Browse source
This commit is contained in:
Antonio de la Rosa 2016-10-01 05:07:39 +02:00
parent 40719f8931
commit 7aa56b006d
1 changed files with 40 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

44
src/Webmodel.php
View file

@ -705,6 +705,21 @@ class Webmodel {
return SQLClass::webtsys_query($sql_query, $this->db_selected);
}
/**
* This method is used for make string queries with filter.
*
*/
public function execute($sql_query, $values)
{
$this->set_phango_connection();
$sql_query=$this->filter_query([$sql_query, $values]);
return SQLClass::webtsys_query($sql_query, $this->db_selected);
}
/**
* Method for add conditions to sql operations in this model
*
@ -718,7 +733,22 @@ class Webmodel {
$str_conditions=$this->conditions;
$args=$this->args;
$this->conditions=$this->filter_query($conditions);
//$this->order_by=$order_by;
}
/**
* Method for filter a query or part
*
* @param array $conditions An array with two elements. The first element define the where statement where the values are marked with ? symbol. The real values are saved in second element of the array. The behaviour is similar to python sql statements or PDO.
* @example ['WHERE name=? and lastname=?', ['Anthony', 'Smith']]
* @warning Use an string for conditions is deprecated, use the array type.
*/
public function filter_query($conditions)
{
$raw_query=0;
@ -824,21 +854,19 @@ class Webmodel {
}
$this->conditions=trim(implode(' ', $arr_conditions));
return trim(implode(' ', $arr_conditions));
}
else
{
$this->conditions=trim($str_conditions);
return trim($str_conditions);
}
}
//$this->order_by=$order_by;
}
/**
@ -1876,10 +1904,12 @@ class Webmodel {
* @param string $value The query string to escape.
*/
static public function escape_string($value)
public function escape_string($value)
{
return addslashes($value);
$this->connect_to_db();
return SQLClass::webtsys_escape_string($value, $this->db_selected);
}