BeWebmaster

Useful PHP/MySQL query functions snippet

Ad

<?php
//MySQL injection safe query execution. Best for authentication scripts.

function qryLogin($query) {
 
$args  = func_get_args();
 
$query = array_shift($args);
 
$query = str_replace("?", "%s", $query);
 
$args  = array_map('mysql_real_escape_string', $args);
 
array_unshift($args,$query);
 
$query = call_user_func_array('sprintf',$args);
 
$result = mysql_query($query) or die('Query failed: ' . mysql_error());
  return
$result;
}


//call it like

$results = qryLogin( "SELECT * FROM users WHERE username='?' AND password = PASSWORD('?');" , $username,$password);

/*-----------------------------------------------------*/

//Fetch query result in array. Best for displaying info from database

function getQuery($query){
 $result = mysql_query($query) or die(mysql_error());
 if(mysql_num_rows($result) > 0){
  $rows = mysql_fetch_assoc($result);
  return $rows;
 }else{
  return "0" ;
 }
}

//call it like

$rows = getQuery( "SELECT * FROM users WHERE username='john'" );
//If found the you can display result
if($rows != 0){
   echo $rows['username'];
}else{

   echo "No record found!" ;

}

?>