query('begin work'); } /** * Tells the DB Layer to end a DB transaction. * * @access public * @param boolean If true, perform the query. If false, rollback. */ public function endTransaction(bool $commit) { if ($commit) { $this->query('commit'); } else { $this->query('rollback'); } } /** * Assemble and return SQL condition for a "IN (...)" clause * * @access public * @param string table column name * @param array referenced array of values to search for in the "IN (...)" clause * @param string condition of how to associate the different input values of the $search_ids parameter * @return string resulting SQL string */ public function inSql($col, &$search_ids, $type = ' OR ') { return $col . " IN (" . implode(', ', $search_ids) . ")"; } /** * Connect to the configured Database * * @access public * @return resource connection handle */ public function connect() { if (isset($this->serendipity['dbPersistent']) && $this->serendipity['dbPersistent']) { $function = 'pg_pconnect'; } else { $function = 'pg_connect'; } $host = $port = ''; if (strlen($this->db_hostname)) { if (false !== strstr($this->db_hostname, ':')) { $tmp = explode(':', $this->db_hostname); $host = "host={$tmp[0]} "; $port = "port={$tmp[1]} "; } else { $host = "host={$this->db_hostname} "; } } $this->db_conn = $function( sprintf( '%sdbname=%s user=%s password=%s', "$host$port", $this->db_name, $this->db_username, $this->db_password ) ); return $this->db_conn; } /** * Returns an escaped string, so that it can be safely included in a SQL string encapsulated within quotes, without allowing SQL injection. */ public function escapeString($string): string { return pg_escape_string($string); } /** * Returns the option to a LIMIT SQL statement, because it varies across DB systems * * @access public * @param int Number of the first row to return data from * @param int Number of rows to return * @return string SQL string to pass to a LIMIT statement */ public function limit($start, $offset) { return $offset . ', ' . $start; } /** * Return a LIMIT SQL option to the DB Layer as a full LIMIT statement * * @access public * @param SQL string of a LIMIT option * @return SQL string containing a full LIMIT statement */ public function limitSql($limitstring) { $limit_split = explode(',', $limitstring); if (count($limit_split) > 1) { $limit = ' LIMIT ' . $limit_split[0] . ' OFFSET ' . $limit_split[1]; } else { $limit = ' LIMIT ' . $limit_split[0]; } return $limit; } /** * Returns the number of affected rows of a SQL query * * @access public * @return int Number of affected rows */ public function affectedRows() { return pg_affected_rows($this->serendipity['dbLastResult']); } /** * Returns the number of updated rows in a SQL query * * @access public * @return int Number of updated rows */ public function updatedRows() { // it is unknown whether pg_affected_rows returns number of rows // UPDATED or MATCHED on an UPDATE statement. return pg_affected_rows($this->serendipity['dbLastResult']); } /** * Returns the number of matched rows in a SQL query * * @access public * @return int Number of matched rows */ public function matchedRows() { // it is unknown whether pg_affected_rows returns number of rows // UPDATED or MATCHED on an UPDATE statement. return pg_affected_rows($this->serendipity['dbLastResult']); } /** * Returns the latest INSERT_ID of an SQL INSERT INTO command, for auto-increment columns * * @access public * @param string Name of the table to get a INSERT ID for * @param string Name of the column to get a INSERT ID for * @return int Value of the auto-increment column */ public function insertId($table = '', $id = '') { if (empty($table) || empty($id)) { // BC - will/should never be called with empty parameters! return pg_last_oid($this->serendipity['dbLastResult']); } else { $query = "SELECT currval('{$this->db_prefix}{$table}_{$id}_seq'::text) AS {$id}"; $res = pg_query($this->db_conn, $query); if (pg_num_rows($res)) { $insertId = pg_fetch_array($res, 0, PGSQL_ASSOC); return $insertId[$id]; } else { return pg_last_oid($this->serendipity['dbLastResult']); // BC - should not happen! } } } /** * Perform a DB Layer SQL query. * * This function returns values dependin on the input parameters and the result of the query. * It can return: * false or a string if there was an error (depends on $expectError), * true if the query succeeded but did not generate any rows * array of field values if it returned a single row and $single is true * array of array of field values if it returned row(s) [stacked array] * * @access public * @param string SQL query to execute * @param boolean Toggle whether the expected result is a single row (TRUE) or multiple rows (FALSE). This affects whether the returned array is 1 or 2 dimensional! * @param string Result type of the array indexing. Can be one of "assoc" (associative), "num" (numerical), "both" (numerical and associative, default) * @param boolean If true, errors will be reported. If false, errors will be ignored. * @param string A possible array key name, so that you can control the multi-dimensional mapping of an array by the key column * @param string A possible array field name, so that you can control the multi-dimensional mapping of an array by the key column and the field value. * @param boolean If true, the executed SQL error is known to fail, and should be disregarded (errors can be ignroed on DUPLICATE INDEX queries and the likes) * @return mixed Returns the result of the SQL query, depending on the input parameters */ public function &query($sql, $single = false, $result_type = "both", $reportErr = false, $assocKey = false, $assocVal = false, $expectError = false) { $type_map = array( 'assoc' => PGSQL_ASSOC, 'num' => PGSQL_NUM, 'both' => PGSQL_BOTH, 'true' => true, 'false' => false ); if (!isset($this->serendipity['dbPgsqlOIDS'])) { $this->serendipity['dbPgsqlOIDS'] = true; @$this->query('SET default_with_oids = true', true, 'both', false, false, false, true); } if (!$expectError && ($reportErr || !$this->serendipity['production'])) { $this->serendipity['dbLastResult'] = pg_query($this->db_conn, $sql); } else { $this->serendipity['dbLastResult'] = @pg_query($this->db_conn, $sql); } if (!$this->serendipity['dbLastResult']) { if (!$expectError && !$this->serendipity['production']) { print "Error in $sql"; print pg_last_error($this->db_conn) . "
\n"; if (function_exists('debug_backtrace')) { highlight_string(var_export(debug_backtrace(), 1)); } print "
$sql
"; } return $type_map['false']; } if ($this->serendipity['dbLastResult'] === true) { return $type_map['true']; } $result_type = $type_map[$result_type]; $n = pg_num_rows($this->serendipity['dbLastResult']); switch ($n) { case 0: if ($single) { return $type_map['false']; } return $type_map['true']; case 1: if ($single) { return pg_fetch_array($this->serendipity['dbLastResult'], 0, $result_type); } default: $rows = array(); for ($i = 0; $i < $n; $i++) { if (!empty($assocKey)) { // You can fetch a key-associated array via the two function parameters assocKey and assocVal $row = pg_fetch_array($this->serendipity['dbLastResult'], $i, $result_type); if (empty($assocVal)) { $rows[$row[$assocKey]] = $row; } else { $rows[$row[$assocKey]] = $row[$assocVal]; } } else { $rows[] = pg_fetch_array($this->serendipity['dbLastResult'], $i, $result_type); } } return $rows; } } /** * Prepares a Serendipity query input to fully valid SQL. Replaces certain "template" variables. * * @access public * @param string SQL query with template variables to convert * @return resource SQL resource handle of the executed query */ public function schemaImport($query) { static $search = array('{AUTOINCREMENT}', '{PRIMARY}', '{UNSIGNED}', '{FULLTEXT}', '{BOOLEAN}', 'int(1)', 'int(10)', 'int(11)', 'int(4)', '{UTF_8}', '{TEXT}'); static $replace = array('SERIAL', 'primary key', '', '', 'BOOLEAN NOT NULL', 'int2', 'int4', 'int4', 'int4', '', 'text'); if (stristr($query, '{FULLTEXT_MYSQL}')) { return true; } $query = trim(str_replace($search, $replace, $query)); if ($query[0] == '@') { // Errors are expected to happen (like duplicate index creation) return $this->query(substr($query, 1), false, 'both', false, false, false, true); } else { return $this->query($query); } } /** * Try to connect to the configured Database (during installation) * * @access public * @param array input configuration array, holding the connection info * @param array referenced array which holds the errors that might be encountered * @return boolean return true on success, false on error */ public function probe($hash, &$errs) { if (!function_exists('pg_connect')) { $errs[] = 'No PostgreSQL extension found. Please check your webserver installation or contact your systems administrator regarding this problem.'; return false; } $this->db_conn = pg_connect( sprintf( '%sdbname=%s user=%s password=%s', strlen($hash['dbHost']) ? ('host=' . $hash['dbHost'] . ' ') : '', $hash['dbName'], $hash['dbUser'], $hash['dbPass'] ) ); if (!$this->db_conn) { $errs[] = 'Could not connect to database; check your settings.'; return false; } return true; } /** * Returns the SQL code used for concatenating strings * * @access public * @param string Input string/column to concatenate * @return string SQL parameter */ public function concat($string) { return '(' . str_replace(', ', '||', $string) . ')'; } }