// Add config/alias.php file + refactoring of DB / MySQL classes
This commit is contained in:
+377
-231
@@ -27,7 +27,6 @@
|
||||
|
||||
if (file_exists(dirname(__FILE__).'/../config/settings.inc.php'))
|
||||
include_once(dirname(__FILE__).'/../config/settings.inc.php');
|
||||
//include_once(dirname(__FILE__).'/../classes/MySQL.php');
|
||||
|
||||
abstract class DbCore
|
||||
{
|
||||
@@ -52,162 +51,42 @@ abstract class DbCore
|
||||
/** @var mixed SQL cached result */
|
||||
protected $_result;
|
||||
|
||||
/** @var mixed ? */
|
||||
protected static $_db;
|
||||
|
||||
/** @var mixed Object instance for singleton */
|
||||
/** @var array List of DB instance */
|
||||
protected static $_instance = array();
|
||||
|
||||
/** @var array Object instance for singleton */
|
||||
protected static $_servers = array(
|
||||
array('server' => _DB_SERVER_, 'user' => _DB_USER_, 'password' => _DB_PASSWD_, 'database' => _DB_NAME_), /* MySQL Master server */
|
||||
/* Add here your slave(s) server(s)*/
|
||||
/*array('server' => '192.168.0.15', 'user' => 'rep', 'password' => '123456', 'database' => 'rep'),
|
||||
array('server' => '192.168.0.3', 'user' => 'myuser', 'password' => 'mypassword', 'database' => 'mydatabase'),
|
||||
*/
|
||||
array('server' => _DB_SERVER_, 'user' => _DB_USER_, 'password' => _DB_PASSWD_, 'database' => _DB_NAME_), /* MySQL Master server */
|
||||
// Add here your slave(s) server(s)
|
||||
// array('server' => '192.168.0.15', 'user' => 'rep', 'password' => '123456', 'database' => 'rep'),
|
||||
// array('server' => '192.168.0.3', 'user' => 'myuser', 'password' => 'mypassword', 'database' => 'mydatabase'),
|
||||
);
|
||||
|
||||
protected $_lastQuery;
|
||||
protected $_lastCached;
|
||||
|
||||
protected static $_idServer;
|
||||
|
||||
/**
|
||||
* Get Db object instance (Singleton)
|
||||
*
|
||||
* @param boolean $master Decides wether the connection to be returned by the master server or the slave server
|
||||
* @return Db instance
|
||||
*/
|
||||
public static function getInstance($master = 1)
|
||||
{
|
||||
if ($master OR ($nServers = sizeof(self::$_servers)) == 1)
|
||||
$idServer = 0;
|
||||
else
|
||||
$idServer = ($nServers > 2 AND ($id = ++self::$_idServer % (int)$nServers) !== 0) ? $id : 1;
|
||||
|
||||
if(!isset(self::$_instance[$idServer]))
|
||||
self::$_instance[(int)($idServer)] = new MySQL(self::$_servers[(int)($idServer)]['server'], self::$_servers[(int)($idServer)]['user'], self::$_servers[(int)($idServer)]['password'], self::$_servers[(int)($idServer)]['database']);
|
||||
|
||||
return self::$_instance[(int)($idServer)];
|
||||
}
|
||||
|
||||
public function getRessource() { return $this->_link;}
|
||||
|
||||
public function __destruct()
|
||||
{
|
||||
$this->disconnect();
|
||||
}
|
||||
|
||||
/**
|
||||
* Build a Db object
|
||||
*/
|
||||
public function __construct($server, $user, $password, $database)
|
||||
{
|
||||
$this->_server = $server;
|
||||
$this->_user = $user;
|
||||
$this->_password = $password;
|
||||
$this->_type = _DB_TYPE_;
|
||||
$this->_database = $database;
|
||||
|
||||
$this->connect();
|
||||
}
|
||||
|
||||
/**
|
||||
* Filter SQL query within a blacklist
|
||||
*
|
||||
* @param string $table Table where insert/update data
|
||||
* @param string $values Data to insert/update
|
||||
* @param string $type INSERT or UPDATE
|
||||
* @param string $where WHERE clause, only for UPDATE (optional)
|
||||
* @param string $limit LIMIT clause (optional)
|
||||
* @return mixed|boolean SQL query result
|
||||
*/
|
||||
public function autoExecute($table, $values, $type, $where = false, $limit = false, $use_cache = 1)
|
||||
{
|
||||
if (!sizeof($values))
|
||||
return true;
|
||||
|
||||
if (strtoupper($type) == 'INSERT')
|
||||
{
|
||||
$query = 'INSERT INTO `'.$table.'` (';
|
||||
foreach ($values AS $key => $value)
|
||||
$query .= '`'.$key.'`,';
|
||||
$query = rtrim($query, ',').') VALUES (';
|
||||
foreach ($values AS $key => $value)
|
||||
$query .= '\''.$value.'\',';
|
||||
$query = rtrim($query, ',').')';
|
||||
if ($limit)
|
||||
$query .= ' LIMIT '.(int)($limit);
|
||||
return $this->q($query, $use_cache);
|
||||
}
|
||||
elseif (strtoupper($type) == 'UPDATE')
|
||||
{
|
||||
$query = 'UPDATE `'.$table.'` SET ';
|
||||
foreach ($values AS $key => $value)
|
||||
$query .= '`'.$key.'` = \''.$value.'\',';
|
||||
$query = rtrim($query, ',');
|
||||
if ($where)
|
||||
$query .= ' WHERE '.$where;
|
||||
if ($limit)
|
||||
$query .= ' LIMIT '.(int)($limit);
|
||||
return $this->q($query, $use_cache);
|
||||
}
|
||||
|
||||
return false;
|
||||
}
|
||||
|
||||
|
||||
/**
|
||||
* Filter SQL query within a blacklist
|
||||
*
|
||||
* @param string $table Table where insert/update data
|
||||
* @param string $values Data to insert/update
|
||||
* @param string $type INSERT or UPDATE
|
||||
* @param string $where WHERE clause, only for UPDATE (optional)
|
||||
* @param string $limit LIMIT clause (optional)
|
||||
* @return mixed|boolean SQL query result
|
||||
*/
|
||||
public function autoExecuteWithNullValues($table, $values, $type, $where = false, $limit = false)
|
||||
{
|
||||
if (!sizeof($values))
|
||||
return true;
|
||||
|
||||
if (strtoupper($type) == 'INSERT')
|
||||
{
|
||||
$query = 'INSERT INTO `'.$table.'` (';
|
||||
foreach ($values AS $key => $value)
|
||||
$query .= '`'.$key.'`,';
|
||||
$query = rtrim($query, ',').') VALUES (';
|
||||
foreach ($values AS $key => $value)
|
||||
$query .= (($value === '' OR $value === NULL) ? 'NULL' : '\''.$value.'\'').',';
|
||||
$query = rtrim($query, ',').')';
|
||||
if ($limit)
|
||||
$query .= ' LIMIT '.(int)($limit);
|
||||
return $this->q($query);
|
||||
}
|
||||
elseif (strtoupper($type) == 'UPDATE')
|
||||
{
|
||||
$query = 'UPDATE `'.$table.'` SET ';
|
||||
foreach ($values AS $key => $value)
|
||||
$query .= '`'.$key.'` = '.(($value === '' OR $value === NULL) ? 'NULL' : '\''.$value.'\'').',';
|
||||
$query = rtrim($query, ',');
|
||||
if ($where)
|
||||
$query .= ' WHERE '.$where;
|
||||
if ($limit)
|
||||
$query .= ' LIMIT '.(int)($limit);
|
||||
return $this->q($query);
|
||||
}
|
||||
|
||||
return false;
|
||||
}
|
||||
|
||||
/*********************************************************
|
||||
* ABSTRACT METHODS
|
||||
*********************************************************/
|
||||
|
||||
/**
|
||||
* Open a connection
|
||||
*/
|
||||
abstract public function connect();
|
||||
|
||||
/**
|
||||
* Close a connection
|
||||
*/
|
||||
abstract public function disconnect();
|
||||
|
||||
/**
|
||||
* Execute a query and get result ressource
|
||||
*
|
||||
* @param string $sql
|
||||
* @return mixed
|
||||
*/
|
||||
abstract protected function _query($sql);
|
||||
|
||||
/**
|
||||
* Get number of rows in a result
|
||||
*/
|
||||
abstract protected function _numRows($result);
|
||||
|
||||
/**
|
||||
* Get the ID generated from the previous INSERT operation
|
||||
@@ -220,25 +99,6 @@ abstract class DbCore
|
||||
abstract public function Affected_Rows();
|
||||
|
||||
/**
|
||||
* Gets the number of rows in a result
|
||||
*/
|
||||
abstract public function NumRows();
|
||||
|
||||
/**
|
||||
* Delete
|
||||
*/
|
||||
abstract public function delete ($table, $where = false, $limit = false, $use_cache = 1);
|
||||
/**
|
||||
* Fetches a row from a result set
|
||||
*/
|
||||
abstract public function Execute ($query, $use_cache = 1);
|
||||
|
||||
/**
|
||||
* Fetches an array containing all of the rows from a result set
|
||||
*/
|
||||
abstract public function ExecuteS($query, $array = true, $use_cache = 1);
|
||||
|
||||
/*
|
||||
* Get next row for a query which doesn't return an array
|
||||
*/
|
||||
abstract public function nextRow($result = false);
|
||||
@@ -256,7 +116,352 @@ abstract class DbCore
|
||||
* @param string $str
|
||||
* @return string
|
||||
*/
|
||||
abstract public function escape($str);
|
||||
abstract public function _escape($str);
|
||||
|
||||
/**
|
||||
* Returns the text of the error message from previous database operation
|
||||
*/
|
||||
abstract public function getMsgError();
|
||||
|
||||
/**
|
||||
* Returns the number of the error from previous database operation
|
||||
*/
|
||||
abstract public function getNumberError();
|
||||
|
||||
/* do not remove, useful for some modules */
|
||||
abstract public function set_db($db_name);
|
||||
|
||||
/**
|
||||
* Try a connection
|
||||
*/
|
||||
abstract static public function tryToConnect($server, $user, $pwd, $db);
|
||||
|
||||
/**
|
||||
* Try to change UTF8
|
||||
*/
|
||||
abstract static public function tryUTF8($server, $user, $pwd);
|
||||
|
||||
/**
|
||||
* Get Db object instance
|
||||
*
|
||||
* @param boolean $master Decides wether the connection to be returned by the master server or the slave server
|
||||
* @return Db instance
|
||||
*/
|
||||
public static function getInstance($master = 1)
|
||||
{
|
||||
static $id = 0;
|
||||
|
||||
$nServers = sizeof(self::$_servers);
|
||||
if ($master || $nServers == 1)
|
||||
$idServer = 0;
|
||||
else
|
||||
{
|
||||
$id++;
|
||||
$idServer = ($nServers > 2 && ($id % $nServers) != 0) ? $id : 1;
|
||||
}
|
||||
|
||||
if (!isset(self::$_instance[$idServer]))
|
||||
self::$_instance[$idServer] = new MySQL(self::$_servers[$idServer]['server'], self::$_servers[$idServer]['user'], self::$_servers[$idServer]['password'], self::$_servers[$idServer]['database']);
|
||||
|
||||
return self::$_instance[$idServer];
|
||||
}
|
||||
|
||||
/**
|
||||
* Instantiate database connection
|
||||
*
|
||||
* @param string $server Server address
|
||||
* @param string $user User login
|
||||
* @param string $password User password
|
||||
* @param string $database Database name
|
||||
*/
|
||||
public function __construct($server, $user, $password, $database)
|
||||
{
|
||||
$this->_server = $server;
|
||||
$this->_user = $user;
|
||||
$this->_password = $password;
|
||||
$this->_type = _DB_TYPE_;
|
||||
$this->_database = $database;
|
||||
|
||||
if (!defined('_PS_DEBUG_SQL_'))
|
||||
define('_PS_DEBUG_SQL_', false);
|
||||
|
||||
$this->connect();
|
||||
}
|
||||
|
||||
/**
|
||||
* Close connection to database
|
||||
*/
|
||||
public function __destruct()
|
||||
{
|
||||
$this->disconnect();
|
||||
}
|
||||
|
||||
/**
|
||||
* Filter SQL query within a blacklist
|
||||
*
|
||||
* @param string $table Table where insert/update data
|
||||
* @param string $values Data to insert/update
|
||||
* @param string $type INSERT or UPDATE
|
||||
* @param string $where WHERE clause, only for UPDATE (optional)
|
||||
* @param string $limit LIMIT clause (optional)
|
||||
* @param bool $useNull If true, replace empty strings and NULL by a NULL value
|
||||
* @return mixed|boolean SQL query result
|
||||
*/
|
||||
public function autoExecute($table, $data, $type, $where = false, $limit = false, $use_cache = 1, $useNull = false)
|
||||
{
|
||||
if (!$data)
|
||||
return true;
|
||||
|
||||
if (strtoupper($type) == 'INSERT')
|
||||
{
|
||||
$keys = $values = array();
|
||||
foreach ($data AS $key => $value)
|
||||
{
|
||||
$keys[] = "`$key`";
|
||||
$values[] = ($useNull && ($value === '' || is_null($value))) ? 'NULL' : "'$value'";
|
||||
}
|
||||
|
||||
$sql = 'INSERT INTO `'.$table.'` ('.implode(', ', $keys).') VALUES ('.implode(', ', $values).')';
|
||||
if ($limit)
|
||||
$sql .= ' LIMIT '.(int)$limit;
|
||||
return $this->q($sql, $use_cache);
|
||||
}
|
||||
else if (strtoupper($type) == 'UPDATE')
|
||||
{
|
||||
$sql = 'UPDATE `'.$table.'` SET ';
|
||||
foreach ($data AS $key => $value)
|
||||
$sql .= ($useNull && ($value === '' || is_null($value))) ? "`$key` = NULL" : "`$key` = '$value',";
|
||||
$sql = rtrim($sql, ',');
|
||||
if ($where)
|
||||
$sql .= ' WHERE '.$where;
|
||||
if ($limit)
|
||||
$sql .= ' LIMIT '.(int)$limit;
|
||||
return $this->q($sql, $use_cache);
|
||||
}
|
||||
else
|
||||
die('Wrong argument (miss type) in Db::autoExecute()');
|
||||
|
||||
return false;
|
||||
}
|
||||
|
||||
/**
|
||||
* Filter SQL query within a blacklist
|
||||
*
|
||||
* @param string $table Table where insert/update data
|
||||
* @param string $values Data to insert/update
|
||||
* @param string $type INSERT or UPDATE
|
||||
* @param string $where WHERE clause, only for UPDATE (optional)
|
||||
* @param string $limit LIMIT clause (optional)
|
||||
* @return mixed|boolean SQL query result
|
||||
*/
|
||||
public function autoExecuteWithNullValues($table, $values, $type, $where = false, $limit = false)
|
||||
{
|
||||
return $this->autoExecute($table, $values, $type, $where, $limit, 0, true);
|
||||
}
|
||||
|
||||
/**
|
||||
* Execute a query and get result ressource
|
||||
*
|
||||
* @param string $sql
|
||||
* @return mixed
|
||||
*/
|
||||
public function query($sql)
|
||||
{
|
||||
$result = $this->_query($sql);
|
||||
if (_PS_DEBUG_SQL_)
|
||||
$this->displayError($sql);
|
||||
return $result;
|
||||
}
|
||||
|
||||
/**
|
||||
* Execute a DELETE query
|
||||
*
|
||||
* @param unknown_type $table Name of the table to delete
|
||||
* @param unknown_type $where WHERE clause on query
|
||||
* @param unknown_type $limit Number max of rows to delete
|
||||
* @param unknown_type $use_cache Use cache or not
|
||||
* @return bool
|
||||
*/
|
||||
public function delete($table, $where = false, $limit = false, $use_cache = 1)
|
||||
{
|
||||
$this->_result = false;
|
||||
$res = $this->query('DELETE FROM `'.pSQL($table).'`'.($where ? ' WHERE '.$where : '').($limit ? ' LIMIT '.(int)$limit : ''));
|
||||
if ($use_cache AND _PS_CACHE_ENABLED_)
|
||||
Cache::getInstance()->deleteQuery($sql);
|
||||
return $res;
|
||||
}
|
||||
|
||||
/**
|
||||
* Execute a query
|
||||
*
|
||||
* @param string $sql
|
||||
* @param bool $use_cache
|
||||
* @return mixed
|
||||
*/
|
||||
public function Execute($sql, $use_cache = 1)
|
||||
{
|
||||
$this->_result = $this->query($sql);
|
||||
if ($use_cache AND _PS_CACHE_ENABLED_)
|
||||
Cache::getInstance()->deleteQuery($sql);
|
||||
return $this->_result;
|
||||
}
|
||||
|
||||
/**
|
||||
* ExecuteS return the result of $sql as array
|
||||
*
|
||||
* @param string $sql query to execute
|
||||
* @param boolean $array return an array instead of a mysql_result object
|
||||
* @param int $use_cache if query has been already executed, use its result
|
||||
* @return array or result object
|
||||
*/
|
||||
public function ExecuteS($sql, $array = true, $use_cache = 1)
|
||||
{
|
||||
$this->_result = false;
|
||||
$this->_lastQuery = $sql;
|
||||
if ($use_cache AND _PS_CACHE_ENABLED_ && $array AND ($result = Cache::getInstance()->get(md5($sql))))
|
||||
{
|
||||
$this->_lastCached = true;
|
||||
return $result;
|
||||
}
|
||||
|
||||
$this->_result = $this->query($sql);
|
||||
if (!$this->_result)
|
||||
return false;
|
||||
|
||||
$this->_lastCached = false;
|
||||
if (!$array)
|
||||
return $this->_result;
|
||||
|
||||
$resultArray = array();
|
||||
while ($row = $this->nextRow($this->_result))
|
||||
$resultArray[] = $row;
|
||||
|
||||
if ($use_cache AND _PS_CACHE_ENABLED_)
|
||||
Cache::getInstance()->setQuery($sql, $resultArray);
|
||||
return $resultArray;
|
||||
}
|
||||
|
||||
/**
|
||||
* getRow return an associative array containing the first row of the query
|
||||
* This function automatically add "limit 1" to the query
|
||||
*
|
||||
* @param mixed $sql the select query (without "LIMIT 1")
|
||||
* @param int $use_cache find it in cache first
|
||||
* @return array associative array of (field=>value)
|
||||
*/
|
||||
public function getRow($sql, $use_cache = 1)
|
||||
{
|
||||
$sql .= ' LIMIT 1';
|
||||
$this->_result = false;
|
||||
$this->_lastQuery = $sql;
|
||||
if ($use_cache && _PS_CACHE_ENABLED_ && ($result = Cache::getInstance()->get(md5($sql))))
|
||||
{
|
||||
$this->_lastCached = true;
|
||||
return $result;
|
||||
}
|
||||
|
||||
$this->_result = $this->query($sql);
|
||||
if (!$this->_result)
|
||||
return false;
|
||||
|
||||
$this->_lastCached = false;
|
||||
$result = $this->nextRow($this->_result);
|
||||
if ($use_cache AND _PS_CACHE_ENABLED_)
|
||||
Cache::getInstance()->setQuery($sql, $result);
|
||||
return $result;
|
||||
}
|
||||
|
||||
/**
|
||||
* getValue return the first item of a select query.
|
||||
*
|
||||
* @param mixed $sql
|
||||
* @param int $use_cache
|
||||
* @return void
|
||||
*/
|
||||
public function getValue($sql, $use_cache = 1)
|
||||
{
|
||||
if (!$result = $this->getRow($sql, $use_cache))
|
||||
return false;
|
||||
return array_shift($result);
|
||||
}
|
||||
|
||||
/**
|
||||
* Get number of rows for last result
|
||||
*
|
||||
* @return int
|
||||
*/
|
||||
public function NumRows()
|
||||
{
|
||||
if (!$this->_lastCached && $this->_result)
|
||||
{
|
||||
$nrows = $this->_numRows($this->_result);
|
||||
if (_PS_CACHE_ENABLED_)
|
||||
Cache::getInstance()->setNumRows(md5($this->_lastQuery), $nrows);
|
||||
return $nrows;
|
||||
}
|
||||
else if (_PS_CACHE_ENABLED_ AND $this->_lastCached)
|
||||
return Cache::getInstance()->getNumRows(md5($this->_lastQuery));
|
||||
}
|
||||
|
||||
/**
|
||||
*
|
||||
* Execute a query
|
||||
*
|
||||
* @param string $sql
|
||||
* @param bool $use_cache
|
||||
*/
|
||||
protected function q($sql, $use_cache = 1)
|
||||
{
|
||||
global $webservice_call;
|
||||
|
||||
$this->_result = false;
|
||||
$result = $this->query($sql);
|
||||
$this->_lastQuery = $sql;
|
||||
if ($use_cache AND _PS_CACHE_ENABLED_)
|
||||
Cache::getInstance()->deleteQuery($sql);
|
||||
return $result;
|
||||
}
|
||||
|
||||
/**
|
||||
* Display last SQL error
|
||||
*
|
||||
* @param unknown_type $sql
|
||||
*/
|
||||
public function displayError($sql = false)
|
||||
{
|
||||
global $webservice_call;
|
||||
|
||||
$errno = $this->getNumberError();
|
||||
if ($webservice_call && $errno)
|
||||
WebserviceRequest::getInstance()->setError(500, '[SQL Error] '.$this->getMsgError().'. Query was : '.$sql, 97);
|
||||
elseif (_PS_DEBUG_SQL_ AND $errno AND !defined('PS_INSTALLATION_IN_PROGRESS'))
|
||||
{
|
||||
if ($sql)
|
||||
die(Tools::displayError($this->getMsgError().'<br /><br /><pre>'.$sql.'</pre>'));
|
||||
die(Tools::displayError($this->getMsgError()));
|
||||
}
|
||||
}
|
||||
|
||||
/**
|
||||
* Sanitize data which will be injected into SQL query
|
||||
*
|
||||
* @param string $string SQL data which will be injected into SQL query
|
||||
* @param boolean $htmlOK Does data contain HTML code ? (optional)
|
||||
* @return string Sanitized data
|
||||
*/
|
||||
public function escape($string, $htmlOK)
|
||||
{
|
||||
if (_PS_MAGIC_QUOTES_GPC_)
|
||||
$string = stripslashes($string);
|
||||
if (!is_numeric($string))
|
||||
{
|
||||
$string = $this->_escape($string);
|
||||
if (!$htmlOK)
|
||||
$string = strip_tags(Tools::nl2br($string));
|
||||
}
|
||||
|
||||
return $string;
|
||||
}
|
||||
|
||||
/**
|
||||
* Alias of Db::getInstance()->ExecuteS
|
||||
@@ -264,80 +469,21 @@ abstract class DbCore
|
||||
* @acces string query The query to execute
|
||||
* @return array Array of line returned by MySQL
|
||||
*/
|
||||
static public function s($query, $use_cache = 1)
|
||||
static public function s($sql, $use_cache = 1)
|
||||
{
|
||||
return Db::getInstance()->ExecuteS($query, true, $use_cache);
|
||||
return Db::getInstance()->ExecuteS($sql, true, $use_cache);
|
||||
}
|
||||
|
||||
static public function ps($query, $use_cache = 1)
|
||||
static public function ps($sql, $use_cache = 1)
|
||||
{
|
||||
$ret = Db::s($query, $use_cache);
|
||||
$ret = Db::s($sql, $use_cache);
|
||||
p($ret);
|
||||
return $ret;
|
||||
}
|
||||
|
||||
static public function ds($query, $use_cache = 1)
|
||||
static public function ds($sql, $use_cache = 1)
|
||||
{
|
||||
Db::s($query, $use_cache);
|
||||
Db::s($sql, $use_cache);
|
||||
die();
|
||||
}
|
||||
|
||||
/**
|
||||
* getRow return an associative array containing the first row of the query
|
||||
* This function automatically add "limit 1" to the query
|
||||
*
|
||||
* @param mixed $query the select query (without "LIMIT 1")
|
||||
* @param int $use_cache find it in cache first
|
||||
* @return array associative array of (field=>value)
|
||||
*/
|
||||
abstract public function getRow($query, $use_cache = 1);
|
||||
|
||||
/**
|
||||
* getValue return the first item of a select query.
|
||||
*
|
||||
* @param mixed $query
|
||||
* @param int $use_cache
|
||||
* @return void
|
||||
*/
|
||||
abstract public function getValue($query, $use_cache = 1);
|
||||
|
||||
/**
|
||||
* Returns the text of the error message from previous database operation
|
||||
*/
|
||||
abstract public function getMsgError();
|
||||
}
|
||||
|
||||
/**
|
||||
* Sanitize data which will be injected into SQL query
|
||||
*
|
||||
* @param string $string SQL data which will be injected into SQL query
|
||||
* @param boolean $htmlOK Does data contain HTML code ? (optional)
|
||||
* @return string Sanitized data
|
||||
*/
|
||||
function pSQL($string, $htmlOK = false)
|
||||
{
|
||||
if (_PS_MAGIC_QUOTES_GPC_)
|
||||
$string = stripslashes($string);
|
||||
if (!is_numeric($string))
|
||||
{
|
||||
$link = Db::getInstance()->getRessource();
|
||||
$string = _PS_MYSQL_REAL_ESCAPE_STRING_ ? Db::getInstance()->escape($string, $link) : addslashes($string);
|
||||
if (!$htmlOK)
|
||||
$string = strip_tags(nl2br2($string));
|
||||
}
|
||||
|
||||
return $string;
|
||||
}
|
||||
|
||||
/**
|
||||
* Convert \n and \r\n and \r to <br />
|
||||
*
|
||||
* @param string $string String to transform
|
||||
* @return string New string
|
||||
*/
|
||||
function nl2br2($string)
|
||||
{
|
||||
return str_replace(array("\r\n", "\r", "\n"), '<br />', $string);
|
||||
}
|
||||
|
||||
|
||||
}
|
||||
Reference in New Issue
Block a user