#48290 [WFx]: make a patch to the variable parsing module of double quoted strings

From: Date: Tue, 10 Nov 2009 07:11:10 +0000
Subject: #48290 [WFx]: make a patch to the variable parsing module of double quoted strings
References: 1  Groups: php.bugs 
Request: Send a blank email to php-bugs+get-144399@lists.php.net to get a copy of this message 
 ID:               48290
 User updated by:  kexianbin at diyism dot com
 Reported By:      kexianbin at diyism dot com
 Status:           Wont fix
 Bug Type:         Feature/Change Request
 Operating System: Irrelevant
 PHP Version:      5.3.2
 New Comment:

Rasmus,

Similar to this in php.ini file:

//Use Sybase-style magic quotes (escape ' with '' instead of \').
magic_quotes_sybase = Off

we could add "double_quotes_escape_for_db = mysql" into php.ini.


Previous Comments:
------------------------------------------------------------------------

[2009-11-10 05:35:33] kexianbin at diyism dot com

OK, maybe there is another solution.

------------------------------------------------------------------------

[2009-11-10 05:33:02] rasmus@php.net

Stop re-opening this please.  Escaping needs to be db-specific since
different dbs use different escape chars.  Therefore it cannot be done
generically at the language level.

------------------------------------------------------------------------

[2009-11-10 05:17:35] kexianbin at diyism dot com

Rasmus, I insist that the feature request should be reopen, leave it
here until some day somebody may make it realized.

------------------------------------------------------------------------

[2009-11-10 05:10:29] kexianbin at diyism dot com

Rasmus,

Why not have a think about adding addslash function to double-quoted
strings?
That maybe the simplest solution for variables replacement in sql query
string.

With the addslash function in double-quoted strings, we could code like
this:
$rs=$pdo->query("select *
                   from sem_SearchChangeShow
                   where Keyword={#Keyword}
                         and BatchNum={#BatchNum}
                         and OldChannelID={#ApvChannelID_old}
                         and OldCategoryID={#ApvCategoryID_old}
                 ");
$data=$rs->fetch(PDO::FETCH_ASSOC);

But, without it, we have to code like these:
$sql=$pdo->prepare("select *
                   from sem_SearchChangeShow
                   where Keyword=:Keyword
                         and BatchNum=:BatchNum
                         and OldChannelID=:ApvChannelID_old
                         and OldCategoryID=:ApvCategoryID_old
                 ");
$sql->execute(array(':Keyword'=>$Keyword,
                   ':BatchNum'=>$BatchNum,
                   ':ApvChannelID_old'=>$ApvChannelID_old,
                   ':ApvCategoryID_old'=>$ApvCategoryID_old
                  )
            );
$data=$sql->fetch(PDO::FETCH_ASSOC);

Please don't set the feature request to "won't fix".

------------------------------------------------------------------------

[2009-11-10 04:34:59] rasmus@php.net

This is not going to happen.

------------------------------------------------------------------------

The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at
    http://bugs.php.net/48290

-- 
Edit this bug report at http://bugs.php.net/?id=48290&edit=1

Thread (39 messages)

« previous php.bugs (#144399) next »