Useful PHP/MySQL query functions snippet
<?php
//MySQL injection safe query execution. Best for authentication scripts.
function qryLogin($query) {
$args = func_get_args();
$query = array_shift($args);
$query = str_replace("?", "%s", $query);
$args = array_map('mysql_real_escape_string', $args);
array_unshift($args,$query);
$query = call_user_func_array('sprintf',$args);
$result = mysql_query($query) or die('Query failed: ' . mysql_error());
return $result;
}
//call it like
$results = qryLogin( "SELECT * FROM users WHERE username='?' AND password = PASSWORD('?');" , $username,$password);
/*-----------------------------------------------------*/
//Fetch query result in array. Best for displaying info from database
function getQuery($query){
$result = mysql_query($query) or die(mysql_error());
if(mysql_num_rows($result) > 0){
$rows = mysql_fetch_assoc($result);
return $rows;
}else{
return "0" ;
}
}
//call it like
$rows = getQuery( "SELECT * FROM users WHERE username='john'" );
//If found the you can display result
if($rows != 0){
echo $rows['username'];
}else{
echo "No record found!" ;
}
?>
Emir Plicanic owns and operates a web design company, is a graphic designer at a nation wide company, and enjoys teaching Dreamweaver to enthusiastic students at a local college.