friendica
/
friendica
mirror of https://github.com/friendica/friendica
6
0
Fork 1
Code Issues Packages Projects Releases 1 Wiki Activity

Small corrections

This commit is contained in:
Michael 2017-04-25 05:11:04 +00:00
parent 8de510e635
commit 67bae59c66
1 changed files with 7 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
include/dba.php
View File

@ -443,8 +443,8 @@ class dba {
} }
/** /**
* @brief Executes a prepared statement * @brief Executes a prepared statement that returns data
* * @usage Example: $r = p("SELECT * FROM `item` WHERE `guid` = ?", $guid);
* @param string $sql SQL statement * @param string $sql SQL statement
* @return object statement object * @return object statement object
*/ */
@ -529,6 +529,7 @@ class dba {
break; break;
case 'mysql': case 'mysql':
// For the old "mysql" functions we cannot use prepared statements // For the old "mysql" functions we cannot use prepared statements
$offset = 0;
foreach ($args AS $param => $value) { foreach ($args AS $param => $value) {
if (is_int($args[$param]) OR is_float($args[$param])) { if (is_int($args[$param]) OR is_float($args[$param])) {
$replace = intval($args[$param]); $replace = intval($args[$param]);
@ -536,10 +537,11 @@ class dba {
$replace = "'".dbesc($args[$param])."'"; $replace = "'".dbesc($args[$param])."'";
} }
$pos = strpos($sql, '?'); $pos = strpos($sql, '?', $offset);
if ($pos !== false) { if ($pos !== false) {
$sql = substr_replace($sql, $replace, $pos, 1); $sql = substr_replace($sql, $replace, $pos, 1);
} }
$offset = $pos + strlen($replace);
} }
$retval = mysql_query($sql, self::$dbo->db); $retval = mysql_query($sql, self::$dbo->db);
@ -570,10 +572,10 @@ class dba {
} }
/** /**
* @brief Executes a prepared statement * @brief Executes a prepared statement like UPDATE or INSERT that doesn't return data
* *
* @param string $sql SQL statement * @param string $sql SQL statement
* @return boolean Was the query successfull? * @return boolean Was the query successfull? False is returned only if an error occurred
*/ */
static public function e($sql) { static public function e($sql) {
$a = get_app(); $a = get_app();