concepte si design OOP

Quote

public function DatabaseInsert($table,$data){
		if(!is_array($data)) return FALSE;
		foreach($data as $aux=>$val){
			$data[$aux]=$this->DatabaseEscape($val);
		}
		$cols=array_keys($data);
		$values=array_values($data);
		return $this->DatabaseQuery("INSERT INTO ".$table." (".implode(',',$cols).") VALUES (".implode(',',$values).")");
	}

public function DatabaseQuery($sql){
		if(FALSE===mysql_query($sql,$this->connection)){
			return FALSE;
		}
		else {
			return mysql_query($sql,$this->connection);
		}
	}

vali38, on Feb 17 2009, 14:21, said:

public function DatabaseInsert($table,$data){
		 if(!is_array($data)) return FALSE;
		 foreach($data as $aux=>$val){
			 $data[$aux]=$this->DatabaseEscape($val);
		 }
		 $cols=array_keys($data);
		 $values=array_values($data);
		throw new Exception("INSERT INTO ".$table." (".implode(',',$cols).") VALUES (".implode(',',$values).")");
		 return $this->DatabaseQuery("INSERT INTO ".$table." (".implode(',',$cols).") VALUES (".implode(',',$values).")");
	 }
 
 public function DatabaseQuery($sql){
		 if(FALSE===mysql_query($sql,$this->connection)){
			 return FALSE;
		 }
		 else {
			 return mysql_query($sql,$this->connection);
		 }
	 }

Quote

Edited by vali38, 17 February 2009 - 15:37.

vali38, on Feb 17 2009, 18:25, said:

vali38, on Feb 18 2009, 17:17, said:

vali38, on Feb 18 2009, 19:11, said:

vali38, on Feb 20 2009, 22:33, said:

public function __construct($subject){
		$this->subject=$this->XSSSecurity($subject); //XSSSecurity elimina tagurile php si html si converteste caracterele speciale
	}

Edited by vali38, 21 February 2009 - 13:12.

Quote

vali38, on Feb 21 2009, 14:10, said:

am o intrebare legata de securitatea scripturilor,mai exact regula de aur

am definit o clasa cu o metoda constructor cu rol de setter care preia prin intermediul parametrilor date trimise prin $_POST.unde trebuie sa aplic regula de aur ca totul sa fie ok ? este bine asa ?

public function __construct($subject){
		 $this->subject=$this->XSSSecurity($subject); //XSSSecurity elimina tagurile php si html si converteste caracterele speciale
	 }

intreb asta pentru ca nu stiu daca in functia de mai sus pot aparea erori.am incercat sa verific in diferite moduri si de fiecare data totul a fost ok.probabil ar putea sa apara ceva la nivelul parametrilor dar la testul meu nu s-a intamplat nimic

public function __construct($subject) {
   $this->setSubject($this->XSSSecurity($subject));
}

OriginalCopy, on Feb 21 2009, 16:49, said:

vali38, on Feb 21 2009, 16:18, said: