47 lines
1.9 KiB
Plaintext
47 lines
1.9 KiB
Plaintext
<?php
|
|
require_once('Generic.php');
|
|
|
|
/**
|
|
* Converter: mysql_escape_string
|
|
*
|
|
* @category Functions
|
|
* @package MySQLConverterTool
|
|
* @author Andrey Hristov <andrey@php.net>, Ulf Wendel <ulf.wendel@phpdoc.de>
|
|
* @copyright 1997-2006 The PHP Group
|
|
* @license http://www.php.net/license/3_0.txt PHP License 3.0
|
|
* @version CVS: $Id:$, Release: @package_version@
|
|
* @link http://www.mysql.com
|
|
* @since Class available since Release 1.0
|
|
*/
|
|
class MySQLConverterTool_Function_EscapeString extends MySQLConverterTool_Function_Generic {
|
|
|
|
|
|
function handle(Array $params = array()) {
|
|
|
|
// mysql_escape_string ( string unescaped_string )
|
|
|
|
if (count($params) != 1)
|
|
return array(self::PARSE_ERROR_WRONG_PARAMS, NULL);
|
|
|
|
list($par1) = $this->extractParamValues($params);
|
|
$conn = $this->ston_name;
|
|
|
|
$warning = 'WARNING: mysql_escape_string() is deprecated. If no global connection has been opened already the converter cannot use mysqli_real_escape_string() to emulate the function. We add a runtime test if a connection exists, if not trigger_error() gets used to throw an E_USER_ERROR. It would be a security bug to do anything else. You must fix our code manually!';
|
|
$ret = sprintf('((isset(%s) && is_object(%s)) ? %s(%s, %s) : ((trigger_error("[MySQLConverterToo] Fix the mysql_escape_string() call! This code does not work.", E_USER_ERROR)) ? "" : ""))',
|
|
$conn,
|
|
$conn,
|
|
$this->new_name,
|
|
$conn,
|
|
$par1
|
|
);
|
|
|
|
return array($warning, $ret);
|
|
}
|
|
|
|
function getConversionHint() {
|
|
|
|
return 'Emulated using mysqli_real_escape_string and the default connection. If not default connection exists an E_USER_ERROR gets thrown.';
|
|
}
|
|
|
|
}
|
|
?> |