File io/db/SQLQueryVars.class.php

 1:  2:  3:  4:  5:  6:  7:  8:  9: 10: 11: 12: 13: 14: 15: 16: 17: 18: 19: 20: 21: 22: 23: 24: 25: 26: 27: 28: 29: 30: 31: 32: 33: 34: 35: 36: 37: 38: 39: 40: 41: 42: 43: 44: 45: 46: 47: 48: 49: 50: 51: 52: 53: 

<?php
/**
 * implements the query var replacement method
 * @package     IO
 * @subpackage  DB
 * @copyright   &copy; 2005-2019 PHPBoost
 * @license     https://www.gnu.org/licenses/gpl-3.0.html GNU/GPL-3.0
 * @author      Loic ROUCHON <horn@phpboost.com>
 * @version     PHPBoost 5.2 - last update: 2014 12 22
 * @since       PHPBoost 3.0 - 2009 11 01
*/

class SQLQueryVars extends StringVars
{
    /**
     * @var AbstractSQLQuerier
     */
    private $querier;

    public function __construct(AbstractSQLQuerier $querier)
    {
        $this->querier = $querier;
        $strict = true;
        parent::__construct($strict);
    }

    protected function set_var($parameter)
    {
        if ($parameter === null)
        {
            return 'NULL';
        }
        elseif (is_array($parameter))
        {
            $nb_value = count($parameter);
            for ($i = 0; $i < $nb_value; $i++)
            {
                $parameter[$i] = '\'' . $this->querier->escape($parameter[$i]) . '\'';
            }
            return '(' . implode(', ', $parameter) . ')';
        }
        elseif (is_string($parameter))
        {
            return '\'' . $this->querier->escape($parameter) . '\'';
        }
        else
        {
            return $parameter;
        }
    }
}
?>