Podgląd pliku: / books_opac / includes / db2.php
<?php
/*****************************************************
* System biblioteczny - Modul OPAC *
*****************************************************
* Wersja: 1.2 Stable *
* Data: 21.08.2010 (13:45) *
* Autor: Jacek Kowalski (http://jacekk.info) *
* *
* Strona WWW: http://dev.jacekk.net/books *
* *
* Utwor rozprowadzany na licencji *
* http://creativecommons.org/licenses/by-nc-sa/2.5/ *
*****************************************************/
class sql {
static $db;
static $queries = 0;
static function connect() {
self::$db = @mysql_connect();
if(!self::$db) {
error::add(mysql_error());
}
self::query('SET CHARACTER SET \'UTF8\'');
self::query('SET NAMES \'UTF8\'');
self::$queries = 0;
if(!@mysql_select_db('biblioteka')) {
error::add(mysql_error());
}
}
static function query($q) {
if(!self::$db) {
self::connect();
}
if(!@mysql_ping(self::$db)) {
self::connect();
}
$r = @mysql_query($q, self::$db);
self::$queries++;
if($r===FALSE) {
error::add(mysql_error().' '.$q);
}
return $r;
}
static function fetchone($q) {
return mysql_fetch_array($q);
}
static function fetch($q) {
while ($entry = mysql_fetch_array($q)) {
$r[] = $entry;
}
if(!$r) {
$r = array();
}
return $r;
}
static function affected() {
return mysql_affected_rows(self::$db);
}
static function escape($q) {
if(!self::$db) {
self::connect();
}
if(!@mysql_ping(self::$db)) {
self::connect();
}
return mysql_real_escape_string($q, self::$db);
}
static function close() {
mysql_close(self::$db);
}
}
class db2 {
// Allows extended WHERE queries
// LIKE, MATCH ... AGAINST, !=, >, <, IS NULL ...
static $SAFE_MODE_WHERE = FALSE;
// SELECT *
static $SAFE_MODE_SELECT = FALSE;
// Allows JOINs
static $SAFE_MODE_TABLE = FALSE;
// Allow `table`.`key` using table.key
static $SAFE_MODE_KEY = FALSE;
// Do htmlspecialchars() on db2::get results?
static $ESCAPE_DATA = TRUE;
private static $revelance = FALSE;
static function revelance() {
return (bool)self::$revelance;
}
static function __combine_select($keys, $revelance=FALSE) {
if(!self::$SAFE_MODE_SELECT && $keys=='*') {
$a[] = '*';
}
else
{
if(!is_array($keys)) {
$keys = array($keys);
}
foreach($keys as $v) {
$a[] = self::__combine_keyn($v);
if($one) break;
}
}
if($revelance && self::$revelance) {
$a[] = self::$revelance;
}
return implode(', ', $a);
}
static function __combine_where($keys, $revelance=FALSE) {
self::$revelance = FALSE;
$implode = ' AND ';
if(!is_array($keys) OR empty($keys)) {
return '';
}
if(self::$SAFE_MODE_WHERE) {
foreach($keys as $key => $value) {
if(is_null($value)) {
$a[] = self::__combine_keyn($key).' IS NULL';
}
else
{
$a[] = self::__combine_keyn($key).'=\''.sql::escape($value).'\'';
}
}
}
else
{
$a = array();
foreach($keys as $key => $value) {
if($key === 'OR') {
$implode = ' OR ';
}
elseif(is_null($value) OR $value==='') {
$a[] = self::__combine_keyn($key).' IS NULL';
}
elseif(substr($key, -1)=='!') {
$a[] = self::__combine_keyn(substr($key, 0, -1)).'!=\''.sql::escape($value).'\'';
}
elseif(substr($key, -2)=='~~') {
$temp = 'MATCH ('.self::__combine_keyn(substr($key, 0, -2)).') AGAINST (\''.sql::escape($value).'\')';
if($revelance) {
self::$revelance = $temp.' AS `revelance`';
}
$a[] = $temp;
}
elseif(substr($key, -1)=='~') {
$a[] = self::__combine_keyn(substr($key, 0, -1)).' LIKE \''.sql::escape($value).'\'';
}
elseif(substr($key, -1)=='>') {
$a[] = self::__combine_keyn(substr($key, 0, -1)).'>\''.sql::escape($value).'\'';
}
elseif(substr($key, -1)=='<') {
$a[] = self::__combine_keyn(substr($key, 0, -1)).'<\''.sql::escape($value).'\'';
}
else
{
$a[] = self::__combine_keyn($key).'=\''.sql::escape($value).'\'';
}
}
}
return ' WHERE '.implode($implode, $a).$addon;
}
static function __combine_limit($limit, $stop) {
if(!ctype_digit($limit) AND !is_int($limit)) {
return '';
}
elseif(!ctype_digit($stop) AND !is_int($stop)) {
return ' LIMIT '.$limit;
}
else
{
return ' LIMIT '.$limit.', '.$stop;
}
}
static function __combine_order($keys, $revelance=FALSE) {
if(empty($keys)) {
return '';
}
if(!is_array($keys)) {
$keys = array($keys => 'ASC');
}
foreach($keys as $key => $value) {
$bvalue = strtoupper($value);
if($bvalue != 'ASC' AND $bvalue != 'DESC') {
$key = $value;
$value = 'ASC';
}
else
{
$value = $bvalue;
}
if((!$revelance OR !self::$revelance) AND $key=='revelance') {
continue;
}
$a[] = self::__combine_keyn($key).' '.$value;
}
return ' ORDER BY '.implode(', ', $a);
}
private static function __combine_tablelist($key, $value) {
$as = FALSE;
if(!is_int($key)) {
$as = $value;
$value = $key;
}
return '`'.sql::escape($value).'`'.($as ? ' AS `'.sql::escape($as).'`' : '');
}
static function __combine_keyn($key) {
if(!self::$SAFE_MODE_KEY AND strpos($key, '.')!==FALSE) {
$key = explode('.', $key, 2);
return '`'.sql::escape($key[0]).'`.`'.sql::escape($key[1]).'`';
}
return '`'.sql::escape($key).'`';
}
static function __combine_table($table) {
if(!is_array($table) OR self::$SAFE_MODE_TABLE) {
return '`'.sql::escape($table).'` ';
}
else
{
$ret = array();
foreach($table as $key => $value) {
if(empty($value)) {
continue;
}
if(!is_array($value)) {
$ret[] = self::__combine_tablelist($key, $value);
}
else
{
switch(strtoupper($value[0])) {
case 'L':
$sub = 'LEFT JOIN ';
break;
case 'R':
$sub = 'RIGHT JOIN ';
break;
case 'J':
$sub = 'JOIN ';
break;
case 'S':
$sub = 'STRAIGHT_JOIN ';
break;
default:
continue 2;
break;
}
if(!is_array($value[1])) {
$value[1] = array($value[1]);
}
foreach($value[1] as $k => $v) {
$sub1[] = self::__combine_tablelist($k, $v);
}
$sub .= implode(', ', $sub1).' ';
if(strtoupper($value[2])=='USING') {
$sub .= 'USING ('.self::__combine_select($value[3]).')';
}
elseif(strtoupper($value[2])=='ON') {
$sub .= 'ON '.substr(self::__combine_where($value[3]), 7);
}
$ret[] = $sub;
}
}
return implode(' ', $ret).' ';
}
}
static function escape_data($data) {
if(self::$ESCAPE_DATA) {
if(is_array($data)) {
foreach($data as &$value) {
$value = self::escape_data($value);
}
}
elseif(is_string($data)) {
$data = htmlspecialchars($data);
}
}
return $data;
}
static function get($table, $keys, $where=NULL, $order=NULL, $limit=NULL, $stop=NULL, $revelance=FALSE) {
$where = self::__combine_where($where, $revelance);
$keys = self::__combine_select($keys, $revelance);
$q = sql::query('SELECT '.$keys.' FROM '.self::__combine_table($table).$where.self::__combine_order($order).self::__combine_limit($limit, $stop));
return self::escape_data(sql::fetch($q));
}
static function getone($table, $keys, $where=NULL, $order=NULL, $limit=NULL, $stop=NULL, $revelance=FALSE) {
$where = self::__combine_where($where, $revelance);
$keys = self::__combine_select($keys, $revelance);
$q = sql::query('SELECT '.$keys.' FROM '.self::__combine_table($table).$where.self::__combine_order($order, $revelance).self::__combine_limit($limit, $stop));
return self::escape_data(sql::fetchone($q));
}
static function num($table, $key, $where) {
$q = sql::query('SELECT COUNT('.self::__combine_select($key, $one).') AS `num` FROM '.self::__combine_table($table).self::__combine_where($where));
$r = sql::fetchone($q);
return $r['num'];
}
}
?>
Browse Code © 2010 by Jacek Kowalski