Operating Oracle's PHP classes_PHP tutorial
Jul 21, 2016 pm 04:06 PM
//[Warning]: Please do not modify without permission
//-------------------------- -------------------------------------------------- ----------------
//---------------------------------- -------------------------------------------------- ---------
//
// [File name]: c_ora_db.inc
// [Function]: Oracle public function class
// [Author] :??????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????Type,'N_'=numeric type,'L_'=Boolean type,'A_'=array type
//---------------------- -------------------------------------------------- ------------------
//--------------------------------- -------------------------------------------------- ------------
//????※db_logon()????????????????????開啟數(shù)據(jù)庫連接?????
//????※db_query()????????????????????通用select?????????????
//????※db_change()????????????????????數(shù)據(jù)庫改變的通用函數(shù)( Insert, delete, update)
// ※ db_insert () insert, directly call db_change ()
// ※ db_delete () delete, directly call db_change ()
// ※ db_update () update, directly Call db_change()??????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????? db_ // ※db_logoff() ※ Disconnect the database connection
//----- -------------------------------------------------- ----------------------------------
Class c_ora_db
{
?
//------------------------------------------ -------------------------------------------------- -
//??Variable definition
//------------------------------------- -------------------------------------------------- ---
var $C_user = ""; var $C_db Password
//Database user name
= ""; ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ?$I_linkID = 0; //Connection handle
var $I_stmtID = 0; //Query handle
var??????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????//------------------------------------------------ ------------------------------------------
//----------------------------------------------- -----------------------------------------------
/ /?????? Function name: db_logon()
//?????? Function: Open database connection
//?????? Parameters: None
//??????? Return value: Connection handle (integer)
//??? Note: None
//---------------------------------------------- -----------------------------------------------
function db_logon() ???????????????????????????????????????????????????????????????& gt; I_LINKID == 0) {alertexit ('database link failed, please contact DBA!');}
Return $ This- & GT; I_LINKID;
}
// ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- -------------------------------------------------- ----------------------------------
???????????????????????????????????????????????????-------------------------------------------------- ----------------------------------
// Function name: db_query($C_sql,$A_define ="",$I_start=-1,$I_end=-1)
// Function: select
// Parameters: $C_sql Statement
// $A_define The fields to be bound. Array type??????????????????????????????????????? “ >//????Return value: two-dimensional array ($A_rs)
// Remarks: The value of the corresponding field can be accessed through the numbers 0,1,2....; or the value of the corresponding field can also be accessed by querying the field name
//????????????????????? For example, through $A_rs[0][0] or $ A_RS [0] ['name'] or $ A_RS [0] ['name'] can all access the first record name field
// $ i_start, $ i_end is a parameter used with pages.
//--------------------------------------------- ---------------------------------------------
function db_query ($C_sql,$A_define="",$I_start=-1,$I_end=-1)
?{?
?if (!$C_sql){AlertExit("Incomplete parameters!");}//Check parameters
//Connection detection
if ($this->I_linkID == 0){AlertExit('Database link failed, please contact DBA!');}
// Format detection
$this -> I_stmtID = OCIParse($this -> I_linkID,$C_sql);
if (!$this -> I_stmtID){AlertExit(' sql format error!Please contact the programmer');}
//If the bound field is not specified, get it from the SQL statement
if($A_define=="")
{
??????????? $A_Cur = explode("select",$C_sql);
?????????????? $A_Cur =?("from",$A_Cur[1]); ); for( $i=0;$i
???????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????tID,"$A_define_up[$i]" ,&$$A_define[$i]); //Binding
?????????????????????????????????????????????????????????{
???????????? $A_define_up = trim(strtoupper($A_define));???????????????????????????????????????????????????? ???>???????? // Execute the bound SQL statement
if(!OCIExecute($this -> I_stmtID))
{
echo "Execution error:SQL Error:$C_sql
";
$lower = 0; //Get records WHILE (OCIFETCHINTO ($ this -& gt; I_Stmtid, & $ cur, OCI_ASSOC))
{
// All the records
if ($ i_start == -1)
{
?????if (gettype($A_define) == "array")?????//The query column is an array ine);$i++)
????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????
?????????????????????????????????????????????????????????????????[$i]];???????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????>??????????????????????????????????????????????????? $A_rs[$lower][$A_define[ $i]] = $$A_define[$i]; //Use lower case for access
??????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????~ ;> $$A_define)
???????????????????????????????????????????????????????????????????????????????????????????????????
?????????????????? $A_rs[$lower][0] = $$A_define;???????????????????????????????????????????????? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ?[$lower][$A_define_up] = $$A_define; //Use a larger index to access
}
$lower++; //Add one to the subscript
}
//Retrieve specified records (Use paging) if ($ i_start & lt; & gt; -1)
{
if ($ cNT & GT; = $ i_start)
{
$ cNT ++; ($I_end - $I_start <> 0)
???????????????????????????????????????????????????????????????????????????????????$A_define) == "array")
?????????????????????????????????????????????????????????????????????????????????????????????????????????????????i=0;$i
{
????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????
??????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????? $A_rs[$lower][$A_define[$i]] = $$A_define[$ i];????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????trim($A_define) <> "")
??????????????????????????????????????????????????????????????????????????????????????????????????????????????>??????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????A_define_up];??????????????????????????????????????????????????????????????????????????????????? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ?Smaller access
???????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????? break; //If $I_end-$I_start=0, it means that the record is fetched and the while loop is jumped out ofelse
??????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????? because ??>????????????????????????????????????????????????????????????????????????????????????????????????????????????????Release the handle and return the query data (a two-dimensional array)
OCIFreestatement($this -> I_stmtID);
return $A_rs;
} //End of function
//- -------------------------------------------------- ---------------------------------------
// -------------------------------------------------- -------------------------------------
// Function name: db_change( $C_sql,$A_bind)
// Function: db change
// Parameters: $C_sql SQL statement
// $A_bind The fields to be bound.Array type
// Return value: Boolean value
// Note: insert, delete, update are common
//------------------ -------------------------------------------------- ---------------------
function db_change($C_sql,$A_bind="")
{
if (!$C_sql){ AlertExit("Incomplete parameters!");}//Check parameters
?????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????? ?Please connect again later! ");}?????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????this -> I_stmtID){AlertExit(' sql format error!Please contact the programmer');}
?????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????i
$$A_bind[$i] = str_replace("","< ?",$$A_bind[$i]); //Filter out PHP tags
}
?????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????? through [$i], -1); //Binding
????????????????????????????????????????????????????????????????????????????????????????????????????Is the character
{
global $$A_bind;
$$A_bind = StripSlashes($$A_bind);
$$A_bind = str_replace("","< ?",$$A_bind);????????????????????? //Filtering Remove the PHP flag
OCIBindByName($this -> I_stmtID, ":$arrBind", &$$A_bind, -1); Success
if(!OCIExecute($this -> I_stmtID,OCI_DEFAULT))
??{
????echo "Execution error:SQL Error :$C_sql
";
?????????????????????????????????????????????????????????????????????????????????????????????????; global $I_changenum;
$I_changenum = OCINumrows($this -> I_stmtID);*/
//Release the handle and return the value
OCIFreeStatement($this -> I_stmtID);
return true;
}
//--------------------------------------------- ---------------------------------------------
//----------------------------------------------- -----------------------------------------------
/ /Function name: DB_DELETE ($ C_SQL)
// Fashion: delete
// Paraception: C_SQL SQL statement
// Return value: Boolean
// Prepare: This function is just In order to be intuitive to use, essentially call db_change()
//------------------------------------------------ -------------------------------------------------- ----
function db_delete($C_sql)
{
return $this -> db_change($C_sql);
}
//--------- -------------------------------------------------- -------------------------------
//-------- -------------------------------------------------- --------------------------------
// Function name: db_insert($C_sql,A_bind)
// Function: insert
// Parameter: C_sql statement
// A_bind Bind
//???Return value: Boolean value
//???Remarks: This function is only for intuitive use. Essentially call db_change()
//---------------------------------------- --------------------------------------------------
function db_insert($C_sql,$A_bind="")
{
return $this -> db_change($C_sql,$A_bind);
}
//---- -------------------------------------------------- ------------------------------------
//--- -------------------------------------------------- -------------------------------------
// Function name: db_update($C_sql, A_bind)
// Function: update
// Parameters: C_sql Statement
// A_bind Binding
// Return value: Boolean value
// Remarks: This function Just for intuitive use, essentially call db_change()
//---------------------------------- -------------------------------------------------- -----
function db_update($C_sql,$A_bind="")
{
return $this -> db_change($C_sql,$A_bind);
}
/ /------------------------------------------------- ------------------------------------------
//--------------------------------------------- ---------------------------------------------
// Function name: db_commit()
// Function: Transaction submission
// Parameters: None
// Return value: Boolean value
// Remarks: None
//- -------------------------------------------------- ---------------------------------------------
function db_commit()
{
return (OCICommit($this->I_linkID));
}
//--------------------------------------------- ---------------------------------------------
//----------------------------------------------- -----------------------------------------------
/ /????? Function name: db_rollback()
//????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????/------------------------------------------------- -----------------------------------------------
function db_rollback()
{
return (OCIRollback($this->I_linkID));
}
//------------------------ -------------------------------------------------- ------------------
?
//------------------------ -------------------------------------------------- ------------------
// Function name: db_logoff()
// Function: Disconnect database connection
// Parameters: None
//?Return value: Boolean value
//?Remarks: None
//-------------------------- -------------------------------------------------- --------------????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????-------------------------------------------------- ----------------------------------------
???????????????????????????????????????????????????????????/------------------------------------------------- ------------------------------------------
}
?> ;
http://www.bkjia.com/PHPjc/315288.html
www.bkjia.com
true
http: //www.bkjia.com/PHPjc/315288.html
TechArticle

Hot AI Tools

Undress AI Tool
Undress images for free

Undresser.AI Undress
AI-powered app for creating realistic nude photos

AI Clothes Remover
Online AI tool for removing clothes from photos.

Clothoff.io
AI clothes remover

Video Face Swap
Swap faces in any video effortlessly with our completely free AI face swap tool!

Hot Article

Hot Tools

Notepad++7.3.1
Easy-to-use and free code editor

SublimeText3 Chinese version
Chinese version, very easy to use

Zend Studio 13.0.1
Powerful PHP integrated development environment

Dreamweaver CS6
Visual web development tools

SublimeText3 Mac version
God-level code editing software (SublimeText3)

Hot Topics

AgeneratorinPHPisamemory-efficientwaytoiterateoverlargedatasetsbyyieldingvaluesoneatatimeinsteadofreturningthemallatonce.1.Generatorsusetheyieldkeywordtoproducevaluesondemand,reducingmemoryusage.2.Theyareusefulforhandlingbigloops,readinglargefiles,or

In PHP, you can use square brackets or curly braces to obtain string specific index characters, but square brackets are recommended; the index starts from 0, and the access outside the range returns a null value and cannot be assigned a value; mb_substr is required to handle multi-byte characters. For example: $str="hello";echo$str[0]; output h; and Chinese characters such as mb_substr($str,1,1) need to obtain the correct result; in actual applications, the length of the string should be checked before looping, dynamic strings need to be verified for validity, and multilingual projects recommend using multi-byte security functions uniformly.

To prevent session hijacking in PHP, the following measures need to be taken: 1. Use HTTPS to encrypt the transmission and set session.cookie_secure=1 in php.ini; 2. Set the security cookie attributes, including httponly, secure and samesite; 3. Call session_regenerate_id(true) when the user logs in or permissions change to change to change the SessionID; 4. Limit the Session life cycle, reasonably configure gc_maxlifetime and record the user's activity time; 5. Prohibit exposing the SessionID to the URL, and set session.use_only

You can use substr() or mb_substr() to get the first N characters in PHP. The specific steps are as follows: 1. Use substr($string,0,N) to intercept the first N characters, which is suitable for ASCII characters and is simple and efficient; 2. When processing multi-byte characters (such as Chinese), mb_substr($string,0,N,'UTF-8'), and ensure that mbstring extension is enabled; 3. If the string contains HTML or whitespace characters, you should first use strip_tags() to remove the tags and trim() to clean the spaces, and then intercept them to ensure the results are clean.

The urlencode() function is used to encode strings into URL-safe formats, where non-alphanumeric characters (except -, _, and .) are replaced with a percent sign followed by a two-digit hexadecimal number. For example, spaces are converted to signs, exclamation marks are converted to!, and Chinese characters are converted to their UTF-8 encoding form. When using, only the parameter values ??should be encoded, not the entire URL, to avoid damaging the URL structure. For other parts of the URL, such as path segments, the rawurlencode() function should be used, which converts the space to . When processing array parameters, you can use http_build_query() to automatically encode, or manually call urlencode() on each value to ensure safe transfer of data. just

There are two main ways to get the last N characters of a string in PHP: 1. Use the substr() function to intercept through the negative starting position, which is suitable for single-byte characters; 2. Use the mb_substr() function to support multilingual and UTF-8 encoding to avoid truncating non-English characters; 3. Optionally determine whether the string length is sufficient to handle boundary situations; 4. It is not recommended to use strrev() substr() combination method because it is not safe and inefficient for multi-byte characters.

To set and get session variables in PHP, you must first always call session_start() at the top of the script to start the session. 1. When setting session variables, use $_SESSION hyperglobal array to assign values ??to specific keys, such as $_SESSION['username']='john_doe'; it can store strings, numbers, arrays and even objects, but avoid storing too much data to avoid affecting performance. 2. When obtaining session variables, you need to call session_start() first, and then access the $_SESSION array through the key, such as echo$_SESSION['username']; it is recommended to use isset() to check whether the variable exists to avoid errors

Key methods to prevent SQL injection in PHP include: 1. Use preprocessing statements (such as PDO or MySQLi) to separate SQL code and data; 2. Turn off simulated preprocessing mode to ensure true preprocessing; 3. Filter and verify user input, such as using is_numeric() and filter_var(); 4. Avoid directly splicing SQL strings and use parameter binding instead; 5. Turn off error display in the production environment and record error logs. These measures comprehensively prevent the risk of SQL injection from mechanisms and details.
