PHP execute_query函数代码示例

function get_person_schedule($str, $date)
{
    if (!$date) {
        return array();
    }
    $email = mysql_real_escape_string($str);
    $query_date = date_format($date, 'Y-m-d');
    $result = execute_query("SELECT * FROM fuway_schedule WHERE email = \"{$email}\" AND slotdate = \"{$query_date}\" LIMIT 0, 10");
    $slots = array();
    if ($result) {
        while ($row = mysql_fetch_array($result)) {
            $slot = array();
            $person = array();
            $person["Email"] = $row["email"];
            $person["Code"] = $row["person_code"];
            $person["Name"] = $row["person_name"];
            $person["Role"] = $row["role"];
            $slot["Person"] = $person;
            $slot["Date"] = strtotime($row["slotdate"]);
            $slot["Slot"] = (int) $row["slot"];
            $slot["Room"] = $row["room"];
            $slot["Class"] = $row["class"];
            $slot["Course"] = $row["course"];
            array_push($slots, $slot);
        }
    }
    return $slots;
}

/**
 * Generates menus list.
 *
 * @param iMSCP_pTemplate $tpl Template engine instance
 * @return void
 */
function admin_generateMenusList($tpl)
{
    $query = "SELECT * FROM `custom_menus`";
    $stmt = execute_query($query);
    if (!$stmt->rowCount()) {
        $tpl->assign('MENUS_LIST_BLOCK', '');
        set_page_message(tr('No custom menu found.'), 'static_info');
    } else {
        while (!$stmt->EOF) {
            $menuId = $stmt->fields['menu_id'];
            $menuLevel = $stmt->fields['menu_level'];
            $menuOrder = $stmt->fields['menu_order'];
            $menuName = $stmt->fields['menu_name'];
            $menuLink = $stmt->fields['menu_link'];
            if ($menuLevel == 'A') {
                $menuLevel = tr('Administrator');
            } elseif ($menuLevel == 'R') {
                $menuLevel = tr('Reseller');
            } elseif ($menuLevel == 'C') {
                $menuLevel = tr('Customer');
            } elseif ($menuLevel == 'AR') {
                $menuLevel = tr('Administrator and reseller');
            } elseif ($menuLevel == 'AC') {
                $menuLevel = tr('Administrator and customer');
            } elseif ($menuLevel == 'RC') {
                $menuLevel = tr('Reseller and customer');
            } elseif ($menuLevel == 'ARC') {
                $menuLevel = tr('All');
            }
            $tpl->assign(array('MENU_LINK' => tohtml($menuLink), 'MENU_ID' => $menuId, 'LEVEL' => tohtml($menuLevel), 'ORDER' => $menuOrder, 'MENU_NAME' => tohtml($menuName), 'LINK' => tohtml($menuLink)));
            $tpl->parse('MENU_BLOCK', '.menu_block');
            $stmt->moveNext();
        }
    }
}

function ipban()
{
    $p = split('\\.', $_SERVER['REMOTE_ADDR']);
    $query = sprintf(CHECK_IPBAN, $p[0], $p[0], $p[1], $p[0], $p[1], $p[2], $p[0], $p[1], $p[2], $p[3]);
    $result = execute_query($query, 'ipban.php', 0, 0);
    $result->fetch_row();
    return $result->row[0];
}

/**
 * Generates page
 *
 * @param iMSCP_pTemplate $tpl Template engine instance
 * @return void
 */
function generatePage($tpl)
{
    $stmt = execute_query("SELECT admin_id, admin_name FROM admin WHERE admin_type = 'reseller'");
    while ($row = $stmt->fetchRow(PDO::FETCH_ASSOC)) {
        _generateResellerStatistics($tpl, $row['admin_id'], $row['admin_name']);
        $tpl->parse('RESELLER_STATISTICS_BLOCK', '.reseller_statistics_block');
    }
}

function bf_error($username)
{
    $log_ip = $_SERVER['REMOTE_ADDR'];
    $current = time();
    $query = sprintf(BF_ADD, $username, $log_ip, $current, 0);
    $result = execute_query($query, "check_user", 1, 0);
    return 1;
}

function export_table2xls($table)
{
    $sql_query = "SELECT * FROM " . $table;
    $results = execute_query($sql_query);
    query2xls($results, 'xlsfiles/' . $table . '.xls');
    //	echo "<P>Table $table exported <A HREF='export/$table.xls'>here</A><P>";
    //	ob_implicit_flush();
}

function check_hcv_coinfection($code)
{
    $query = "SELECT * FROM coinfections WHERE HCV='1' AND PatientCode = " . $code;
    $result = execute_query($query);
    $row = mysql_fetch_array($result);
    $num_rows = mysql_num_rows($result);
    mysql_free_result($result);
    if ($num_rows != 1) {
        show_errormsg("Δεν υπάρχει στη βάση καταχώρηση με συλλοίμωξη HCV και κωδικό ασθενή " . $code . ". <a href='coinfection.php?code={$code}'>Καταχωρήστε πρώτα την συνλοίμωξη στη βάση.</a>");
    }
}

function check_patient($code)
{
    $query = "SELECT * FROM patients WHERE PatientCode = " . $code;
    $result = execute_query($query);
    $row = mysql_fetch_array($result);
    $num_rows = mysql_num_rows($result);
    mysql_free_result($result);
    if ($num_rows == 1) {
        return 1;
    } else {
        return 0;
    }
}

function change_sql_user_pass(&$sql, $db_user_id, $db_user_name)
{
    global $cfg;
    if (!isset($_POST['uaction'])) {
        return;
    }
    if ($_POST['pass'] === '' && $_POST['pass_rep'] === '') {
        set_page_message(tr('Please type user password!'));
        return;
    }
    if ($_POST['pass'] !== $_POST['pass_rep']) {
        set_page_message(tr('Entered passwords does not match!'));
        return;
    }
    if (strlen($_POST['pass']) > $cfg['MAX_SQL_PASS_LENGTH']) {
        set_page_message(tr('Too long user password!'));
        return;
    }
    $user_pass = $_POST['pass'];
    //
    // update user pass in the vhcs sql_user table;
    //
    $query = <<<SQL_QUERY
        update
            sql_user
        set
            sqlu_pass = ?
        where
            sqlu_id = ?
SQL_QUERY;
    $rs = exec_query($sql, $query, array($user_pass, $db_user_id));
    //
    // update user pass in the mysql system tables;
    //
    $query = <<<SQL_QUERY

        SET PASSWORD FOR '{$db_user_name}'@'%' = PASSWORD('{$user_pass}')
 
SQL_QUERY;
    $rs = execute_query($sql, $query);
    $query = <<<SQL_QUERY

\tSET PASSWORD FOR '{$db_user_name}'@localhost = PASSWORD('{$user_pass}')

SQL_QUERY;
    $rs = execute_query($sql, $query);
    write_log($_SESSION['user_logged'] . " : update SQL user password" . $db_user_name);
    set_page_message(tr('SQL user password was successfully changed!'));
    user_goto('manage_sql.php');
}

/**
 * Generate List of Domains assigned to IPs
 *
 * @param  iMSCP_pTemplate $tpl Template engine
 * @return void
 */
function listIPDomains($tpl)
{
    $resellerId = $_SESSION['user_id'];
    $stmt = exec_query('SELECT reseller_ips FROM reseller_props WHERE reseller_id = ?', $resellerId);
    $data = $stmt->fetchRow();
    $resellerIps = explode(';', substr($data['reseller_ips'], 0, -1));
    $stmt = execute_query('SELECT ip_id, ip_number FROM server_ips WHERE ip_id IN (' . implode(',', $resellerIps) . ')');
    while ($ip = $stmt->fetchRow(PDO::FETCH_ASSOC)) {
        $stmt2 = exec_query('
				SELECT
					domain_name
				FROM
					domain
				INNER JOIN
					admin ON(admin_id = domain_admin_id)
				WHERE
					domain_ip_id = :ip_id
				AND
					created_by = :reseller_id
				UNION
				SELECT
					alias_name AS domain_name
				FROM
					domain_aliasses
				INNER JOIN
					domain USING(domain_id)
				INNER JOIN
					admin ON(admin_id = domain_admin_id)
				WHERE
					alias_ip_id = :ip_id
				AND
					created_by = :reseller_id
			', array('ip_id' => $ip['ip_id'], 'reseller_id' => $resellerId));
        $domainsCount = $stmt2->rowCount();
        $tpl->assign(array('IP' => tohtml($ip['ip_number']), 'RECORD_COUNT' => tr('Total Domains') . ': ' . $domainsCount));
        if ($domainsCount) {
            while ($data = $stmt2->fetchRow(PDO::FETCH_ASSOC)) {
                $tpl->assign('DOMAIN_NAME', tohtml(idn_to_utf8($data['domain_name'])));
                $tpl->parse('DOMAIN_ROW', '.domain_row');
            }
        } else {
            $tpl->assign('DOMAIN_NAME', tr('No used yet'));
            $tpl->parse('DOMAIN_ROW', 'domain_row');
        }
        $tpl->parse('IP_ROW', '.ip_row');
        $tpl->assign('DOMAIN_ROW', '');
    }
}

/**
 *
 */
function update_reseller_owner()
{
    if (isset($_POST['uaction']) && $_POST['uaction'] === 'reseller_owner') {
        $query = "\n\t\t\tSELECT\n\t\t\t\t`admin_id`\n\t\t\tFROM\n\t\t\t\t`admin`\n\t\t\tWHERE\n\t\t\t\t`admin_type` = 'reseller'\n\t\t\tORDER BY\n\t\t\t\t`admin_name`\n\t\t";
        $rs = execute_query($query);
        while (!$rs->EOF) {
            $admin_id = $rs->fields['admin_id'];
            $admin_id_var_name = "admin_id_{$admin_id}";
            if (isset($_POST[$admin_id_var_name]) && $_POST[$admin_id_var_name] === 'on') {
                $dest_admin = $_POST['dest_admin'];
                $query = "\n\t\t\t\t\tUPDATE\n\t\t\t\t\t\t`admin`\n\t\t\t\t\tSET\n\t\t\t\t\t\t`created_by` = ?\n\t\t\t\t\tWHERE\n\t\t\t\t\t\t`admin_id` = ?\n\t\t\t\t";
                exec_query($query, array($dest_admin, $admin_id));
            }
            $rs->moveNext();
        }
    }
}

function grava_quais($id1, $id2, $qual, $id_conn)
{
    switch ($qual) {
        case 1:
            $sql = 'INSERT INTO tb_familiaquaisespecies ';
            $sql .= '(familia_id, especie_id) ';
            $sql .= 'VALUES';
            $sql .= '(' . $id1 . ',' . $id2 . ')';
            break;
        case 2:
            $sql = 'INSERT INTO tb_generoquaisespecies ';
            $sql .= '(genero_id, especie_id) ';
            $sql .= 'VALUES';
            $sql .= '(' . $id1 . ',' . $id2 . ')';
            break;
    }
    return execute_query($sql, $id_conn);
}

function libera_acesso($item, $id_conn)
{
    if ($_SESSION['admin'] == '0') {
        $sql = "SELECT tb_usuarioquaisacessos.usuarioquaisacessos_id FROM tb_acesso ";
        $sql .= "INNER JOIN tb_usuarioquaisacessos ON (tb_usuarioquaisacessos.acesso_id = tb_acesso.acesso_id) ";
        $sql .= "WHERE tb_acesso.acesso_nome='%s' ";
        $sql .= "AND tb_usuarioquaisacessos.usuario_id = '%s' LIMIT 1";
        $sql = sprintf($sql, mysql_real_escape_string($item), mysql_real_escape_string($_SESSION['usuario_id']));
        $acessou = execute_query($sql, $id_conn);
        if (!$acessou) {
            $messagem = 'Query Inválida: ' . mysql_error() . "\n";
            $messagem .= 'Pesquisa Inteira: ' . $sql;
            die($messagem);
        }
        if (num_rows($acessou) == 0) {
            header("Location: acesso_proibido.php");
            exit(0);
        }
    }
}

/**
 * Generates IPs list.
 *
 * @access private
 * @param iMSCP_pTemplate $tpl Template engine
 * @return void
 */
function _client_generateIpsList($tpl)
{
    /** @var $cfg iMSCP_Config_Handler_File */
    $cfg = iMSCP_Registry::get('config');
    $query = "SELECT * FROM `server_ips`";
    $stmt = execute_query($query);
    if ($stmt->rowCount()) {
        while (!$stmt->EOF) {
            list($actionName, $actionUrl) = _client_generateIpAction($stmt->fields['ip_id'], $stmt->fields['ip_status']);
            $tpl->assign(array('IP' => $stmt->fields['ip_number'], 'NETWORK_CARD' => $stmt->fields['ip_card'] === NULL ? '' : tohtml($stmt->fields['ip_card'])));
            $tpl->assign(array('ACTION_NAME' => $cfg->BASE_SERVER_IP == $stmt->fields['ip_number'] ? tr('Protected') : $actionName, 'ACTION_URL' => $cfg->BASE_SERVER_IP == $stmt->fields['ip_number'] ? '#' : $actionUrl));
            $tpl->parse('IP_ADDRESS_BLOCK', '.ip_address_block');
            $stmt->moveNext();
        }
    } else {
        // Should never occur but who knows.
        $tpl->assign('IP_ADDRESSES_BLOCK', '');
        set_page_message(tr('No IP address found.'), 'info');
    }
}

function grava_usuario()
{
    $filename = upload_foto();
    require '../config/infodbcon.php';
    require '../config/database.php';
    $id_conn = open_database();
    $post = array_map("mysql_real_escape_string", $_POST);
    execute_query("START TRANSACTION", $id_conn);
    if ($post['cmb_cadastro'] == '0') {
        $sql = 'INSERT INTO tb_usuario ';
        $sql .= '(usuario_nome, usuario_login, usuario_senha, usuario_email, usuario_foto, usuario_info, usuario_ativo)';
        $sql .= 'VALUES ';
        $sql .= '(\'' . addslashes(utf8_decode($_POST['nome'])) . '\', \'' . utf8_decode($post['login']) . '\', ';
        $sql .= '\'' . md5('123mudar') . '\', \'' . $post['email'] . '\',';
        $sql .= '\'' . $filename . '\', \'' . addslashes(utf8_decode($_POST['infor'])) . '\', \'' . ($post['ativo'] ? 1 : 0) . '\')';
    } else {
        $sql = 'UPDATE tb_usuario SET ';
        $sql .= 'usuario_nome = \'' . addslashes(utf8_decode($_POST['nome'])) . '\', usuario_login = \'' . $post['login'] . '\', ';
        $sql .= 'usuario_email = \'' . $post['email'] . '\', ';
        $sql .= 'usuario_info=\'' . addslashes(utf8_decode($_POST['infor'])) . '\', ';
        $sql .= 'usuario_ativo=\'' . (isset($post['ativo']) ? 1 : 0) . '\' ';
        if ($post['trocoufoto']) {
            $sql .= ',usuario_foto=\'' . $filename . '\' ';
        }
        $sql .= 'WHERE ';
        $sql .= 'usuario_id=' . $post['cmb_cadastro'];
    }
    if (!execute_query($sql, $id_conn)) {
        $messagem = utf8_decode('Query Inválida: ') . mysql_error() . "\n";
        $messagem .= 'Pesquisa Inteira: ' . $sql;
        echo $messagem;
        execute_query("ROLLBACK", $id_conn);
    } else {
        execute_query('COMMIT', $id_conn);
        echo '1';
    }
    execute_query("END TRANSACTION", $id_conn);
    close_database($id_conn);
}