PHP DAO::execute方法代码示例

/**
 * Execute Query to obtain one or more objects from the NECLIMS db; returns string on error
 *
 * @param $sql
 * @param optional class specification
 */
function query($sql, $object = NULL)
{
    // include object class if specifed
    if ($object != NULL) {
        require_once $object . ".cls.php";
    }
    // create a data access object
    $dao = new DAO();
    // pass the sql statement to the data access object
    $dao->setSQL($sql);
    // declare an array for storing the row results
    $retVal = array();
    try {
        // run the sql statement
        if ($dao->execute() && sqlsrv_has_rows($dao->getResultSet())) {
            // object specified.
            if ($object != NULL) {
                // while there were more results/rows, save the object in the array
                while ($row = sqlsrv_fetch_object($dao->getResultSet(), $object . "")) {
                    $retVal[] = $row;
                }
            } else {
                // while there were more results/rows, save the object in the array
                while ($row = sqlsrv_fetch_array($dao->getResultSet(), SQLSRV_FETCH_ASSOC)) {
                    $retVal[] = $row;
                }
            }
        }
    } catch (Exception $e) {
        return "Query Error: " . $e->getMessage() . ". SQL: " . $sql . ". Object specified: " . $object;
    }
    // return to the caller
    return $retVal;
    //error_log(print_r($retVal, true));
}

/**
 * Dumps the Founder data into a table
 *
 * @param int $CompanyID
 */
function dumpFounderData($CompanyID)
{
    // include the data access class
    include_once "DAO.php";
    try {
        // create a new data access object
        $db = new DAO();
        $sql = "EXEC dbo.GetFounderByCompanyID @CompanyID = " . $CompanyID;
        // set the select statement
        $db->setSQL($sql);
        // execute the SQL
        if ($db->execute()) {
            // did we get some rows
            if (sqlsrv_has_rows($db->getResultSet())) {
                // output the table and the first row (column headers)
                echo '<br>';
                echo '<table class="sorted table-autosort:0 table-stripeclass:alternate">';
                echo "<thead><tr>";
                echo "<th class='table-sortable:default' width='100'>Name</th>";
                echo "</tr></thead><tbody>";
                // output the table rows
                while ($row = sqlsrv_fetch_array($db->getResultSet(), SQLSRV_FETCH_ASSOC)) {
                    echo '<tr><td class="left" width="70"><a href="../Participant/History.php?wfID=' . $row['ID'] . '" target="_blank">' . $row['FounderName'] . '</a></td></tr>';
                }
                // finish the table
                echo "</tbody></table>";
            } else {
                echo "<div class='err'>No data found.</div>";
            }
        }
    } catch (Exception $e) {
        echo $e->getMessage(), "\n";
    }
    echo "</br>";
}

 /**
  * Sets up the fixture, for example, open a network connection.
  * This method is called before a test is executed.
  *
  * @access protected
  */
 protected function setUp()
 {
     //Include the ADOdb Library
     global $global, $dao;
     $global = array('approot' => realpath(dirname(__FILE__)) . '/../../../');
     $dao = new DAO($global['db']);
     require_once $global['approot'] . '3rd/adodb/adodb.inc.php';
     //Make the connection to $global['db']
     $global['db'] = NewADOConnection('mysql');
     $global['db']->Connect(TEST_DB_HOST, TEST_DB_USER, TEST_DB_PASSWD, TEST_DB_NAME);
     // test valid user
     $dao->execute("insert into users (user_name, p_uuid) values ('test1', 'any_p_uuid1')");
     $dao->execute("insert into users (user_name, p_uuid) values ('vtest2', 'any_p_uuid2')");
     $dao->execute("delete from users where user_name = 'test3'");
     $dao->execute("delete from users where user_name = 'test4'");
 }

function dumpParticipantWorkFlows($DONOR_CODE)
{
    // include the data access class
    include_once "DAO.php";
    try {
        // create a new data access object
        $db = new DAO();
        // set the SQL
        $sql = "EXEC dbo.GetParticipantWorkFlows @DONOR_CODE ='" . $DONOR_CODE . "'";
        // set the select statement
        $db->setSQL($sql);
        // execute the SQL
        if ($db->execute()) {
            // did we get some rows
            if (sqlsrv_has_rows($db->getResultSet())) {
                // output the table and the first row (column headers)
                echo '<br>';
                echo '<table class="sorted table-autosort:0 table-stripeclass:alternate">';
                echo "<thead><tr>";
                echo "<th class='table-sortable:default' width='70'>Name</th>";
                echo "<th class='table-sortable:default' width='295'>Description</th>";
                echo "<th class='table-sortable:default' width='75'>Status</th>";
                echo "<th class='table-sortable:default' width='150'>Next step</th>";
                echo "<th class='table-sortable:default' width='200'>Next step role</th>";
                echo "</tr></thead><tbody>";
                // output the table rows
                while ($row = sqlsrv_fetch_array($db->getResultSet(), SQLSRV_FETCH_ASSOC)) {
                    echo '<tr><td class="left" width="70"><a href="../Participant/History.php?wfID=' . $row['ID'] . '" target="_blank">' . $row['Name'] . '</a></td>';
                    echo '<td class="left" width="295">' . $row['Description'] . '</td>';
                    echo '<td class="center" width="75">' . $row['WorkFlowStatus'] . '</td>';
                    echo '<td class="left" width="150">' . $row['NextStep'] . '</td>';
                    echo '<td class="left" width="200">' . $row['Role'] . '</td></tr>';
                }
                // finish the table
                echo "</tbody></table>";
            } else {
                echo "<div class='err'>No data found.</div>";
            }
        }
    } catch (Exception $e) {
        echo $e->getMessage(), "\n";
    }
    echo "</br>";
}

            $subquery = "(SELECT term FROM " . TABLE_PREFIX . "language_text\n\t\t\t\t\t\t\t\t\t\tWHERE language_code='" . $_REQUEST['lang_code'] . "'\n\t\t\t\t\t\t\t\t\t\t  AND text <> '')";
            if ($_REQUEST['new_or_translated'] == 1) {
                $sql .= " AND term NOT IN " . $subquery;
            }
            if ($_REQUEST['new_or_translated'] == 2) {
                $sql .= " AND term IN " . $subquery;
            }
        }
        if (isset($_REQUEST['new_or_translated']) && $_REQUEST['new_or_translated'] == 3) {
            $sql = "select * from " . TABLE_PREFIX . "language_text a \n\t\t\t\t\t\t\twhere language_code='" . DEFAULT_LANGUAGE_CODE . "' \n\t\t\t\t\t\t\t\tand exists (select 1 from " . TABLE_PREFIX . "language_text b \n\t\t\t\t\t\t\t\t\t\t\t\t\t\twhere language_code = '" . $_REQUEST['lang_code'] . "' \n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tand a.term = b.term \n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tand a.revised_date > b.revised_date)";
        }
    }
    if (isset($_REQUEST['search'])) {
        $sql = "SELECT * FROM " . TABLE_PREFIX . "language_text \n\t\t\t\t\t\tWHERE language_code='" . DEFAULT_LANGUAGE_CODE . "'\n\t\t\t\t\t\t  AND lower(term) like '%" . $addslashes(strtolower(trim($_REQUEST['search_phase']))) . "%'";
    }
    $rows = $dao->execute($sql);
    if (is_array($rows)) {
        $num_results = count($rows);
    } else {
        $num_results = 0;
    }
}
if (isset($_REQUEST["save"])) {
    $sql_save = "REPLACE INTO " . TABLE_PREFIX . "language_text VALUES ('" . $_POST["lang_code"] . "', '" . $_POST["variable"] . "', '" . $_POST["term"] . "', '" . $addslashes($_POST["translated_text"]) . "', NOW(), '')";
    $trans = get_html_translation_table(HTML_ENTITIES);
    $trans = array_flip($trans);
    $sql_save = strtr($sql_save, $trans);
    if (!$dao->execute($sql_save)) {
        $success_error = '<div class="error">Error: changes not saved!</div>';
    } else {
        $success_error = '<div class="feedback2"">Success: changes saved.</div>';

 /**
  * replace source object with alternatives according to user's preferences
  * @access	public
  * @param	$cid: 				content id.
  * @param	$content:	 		the original content page ($content_row['text'], from content.php).
  * @param    $info_only:         when "true", return the array of info (has_text_alternative, has_audio_alternative, has_visual_alternative, has_sign_lang_alternative)
  * @param    $only_on_secondary_type: 
  * @return	string				$content: the content page with the appropriated resources.
  * @see		$db			        from include/vitals.inc.php
  * @author	Cindy Qi Li
  */
 public static function applyAlternatives($cid, $content, $info_only = false, $only_on_secondary_type = 0)
 {
     global $db, $_course_id;
     include_once TR_INCLUDE_PATH . 'classes/DAO/DAO.class.php';
     $dao = new DAO();
     $video_exts = array("mpg", "avi", "wmv", "mov", "swf", "mp4", "flv");
     $audio_exts = array("mp3", "wav", "ogg", "mid");
     $audio_width = 425;
     $audio_height = 27;
     $txt_exts = array("txt", "html", "htm");
     $image_exts = array("gif", "bmp", "png", "jpg", "jpeg", "png", "tif");
     $only_on_secondary_type = intval($only_on_secondary_type);
     // intialize the 4 returned values when $info_only is on
     if ($info_only) {
         $has_text_alternative = false;
         $has_audio_alternative = false;
         $has_visual_alternative = false;
         $has_sign_lang_alternative = false;
     }
     if (!$info_only && !$only_on_secondary_type && $_SESSION['prefs']['PREF_USE_ALTERNATIVE_TO_TEXT'] == 0 && $_SESSION['prefs']['PREF_USE_ALTERNATIVE_TO_AUDIO'] == 0 && $_SESSION['prefs']['PREF_USE_ALTERNATIVE_TO_VISUAL'] == 0) {
         //No user's preferences related to content format are declared
         if (!$info_only) {
             return $content;
         } else {
             return array($has_text_alternative, $has_audio_alternative, $has_visual_alternative, $has_sign_lang_alternative);
         }
     }
     // get all relations between primary resources and their alternatives
     $sql = "SELECT DISTINCT c.content_path, pr.resource,  prt.type_id primary_type,\r\n                       sr.secondary_resource, srt.type_id secondary_type\r\n\t\t          FROM " . TABLE_PREFIX . "primary_resources pr, " . TABLE_PREFIX . "primary_resources_types prt," . TABLE_PREFIX . "secondary_resources sr," . TABLE_PREFIX . "secondary_resources_types srt," . TABLE_PREFIX . "content c\r\n\t\t         WHERE pr.content_id=" . $cid . "\r\n\t\t\t       AND pr.primary_resource_id = prt.primary_resource_id\r\n\t\t\t       AND pr.primary_resource_id = sr.primary_resource_id\r\n\t\t\t       AND sr.language_code='" . $_SESSION['lang'] . "'\r\n\t\t\t       AND sr.secondary_resource_id = srt.secondary_resource_id\r\n\t\t           AND pr.content_id = c.content_id";
     if ($only_on_secondary_type > 0) {
         $sql .= " AND srt.type_id=" . $only_on_secondary_type;
     }
     $sql .= " ORDER BY pr.primary_resource_id, prt.type_id";
     $rows = $dao->execute($sql);
     if (!is_array($rows)) {
         if (!$info_only) {
             return $content;
         } else {
             return array($has_text_alternative, $has_audio_alternative, $has_visual_alternative, $has_sign_lang_alternative);
         }
     }
     $primary_resource_names = array();
     foreach ($rows as $row) {
         // if the primary resource is defined with multiple resource type,
         // the primary resource would be replaced/appended multiple times.
         // This is what we want at applying alternatives by default, but
         // not when only one secondary type is chosen to apply.
         // This fix is to remove the duplicates on the same primary resource.
         // A dilemma of this fix is, for example, if the primary resource type
         // is "text" and "visual", but
         // $_SESSION['prefs']['PREF_ALT_TO_TEXT_APPEND_OR_REPLACE'] == 'replace'
         // $_SESSION['prefs']['PREF_ALT_TO_VISUAL_APPEND_OR_REPLACE'] == 'append'
         // so, should replace happen or append happen? With this fix, whichever
         // the first in the sql return gets preserved in the array and processed.
         // The further improvement is requried to keep rows based on the selected
         // secondary type (http://www.atutor.ca/atutor/mantis/view.php?id=4598).
         if ($only_on_secondary_type > 0) {
             if (in_array($row['resource'], $primary_resource_names)) {
                 continue;
             } else {
                 $primary_resource_names[] = $row['resource'];
             }
         }
         $alternative_rows[] = $row;
         $youtube_playURL = ContentUtility::convertYoutubeWatchURLToPlayURL($row['resource']);
         if ($row['resource'] != $youtube_playURL) {
             $row['resource'] = $youtube_playURL;
             $alternative_rows[] = $row;
         }
     }
     foreach ($alternative_rows as $row) {
         if ($info_only || $only_on_secondary_type || $_SESSION['prefs']['PREF_USE_ALTERNATIVE_TO_TEXT'] == 1 && $row['primary_type'] == 3 && ($_SESSION['prefs']['PREF_ALT_TO_TEXT'] == "audio" && $row['secondary_type'] == 1 || $_SESSION['prefs']['PREF_ALT_TO_TEXT'] == "visual" && $row['secondary_type'] == 4 || $_SESSION['prefs']['PREF_ALT_TO_TEXT'] == "sign_lang" && $row['secondary_type'] == 2) || $_SESSION['prefs']['PREF_USE_ALTERNATIVE_TO_AUDIO'] == 1 && $row['primary_type'] == 1 && ($_SESSION['prefs']['PREF_ALT_TO_AUDIO'] == "visual" && $row['secondary_type'] == 4 || $_SESSION['prefs']['PREF_ALT_TO_AUDIO'] == "text" && $row['secondary_type'] == 3 || $_SESSION['prefs']['PREF_ALT_TO_AUDIO'] == "sign_lang" && $row['secondary_type'] == 2) || $_SESSION['prefs']['PREF_USE_ALTERNATIVE_TO_VISUAL'] == 1 && $row['primary_type'] == 4 && ($_SESSION['prefs']['PREF_ALT_TO_VISUAL'] == "audio" && $row['secondary_type'] == 1 || $_SESSION['prefs']['PREF_ALT_TO_VISUAL'] == "text" && $row['secondary_type'] == 3 || $_SESSION['prefs']['PREF_ALT_TO_VISUAL'] == "sign_lang" && $row['secondary_type'] == 2)) {
             $ext = substr($row['secondary_resource'], strrpos($row['secondary_resource'], '.') + 1);
             // alternative is video
             if (in_array($ext, $video_exts) || in_array($ext, $audio_exts) || preg_match("/http:\\/\\/.*youtube.com\\/watch.*/", $row['secondary_resource'])) {
                 if (in_array($ext, $audio_exts)) {
                     // display audio medias in a smaller width/height (425 * 27)
                     // A hack for now to handle audio media player size
                     $target = '[media|' . $audio_width . '|' . $audio_height . ']' . $row['secondary_resource'] . '[/media]';
                 } else {
                     // use default media size for video medias
                     $target = '[media]' . $row['secondary_resource'] . '[/media]';
                 }
             } else {
                 if (in_array($ext, $txt_exts)) {
                     if ($row['content_path'] != '') {
                         $file_location = $row['content_path'] . '/' . $row['secondary_resource'];
                     } else {
                         $file_location = $row['secondary_resource'];
//.........这里部分代码省略.........

/**
 * displays the founder pulldown
 *
 * @param unknown_type $ID
 * @param unknown_type $selectedVal
 * @param unknown_type $isBootstrap
 */
function displayFounderPulldown($ID, $selectedVal, $isBootstrap = false, $tooltip = null)
{
    // include the data access class
    include_once "DAO.php";
    try {
        // create a new data access object
        $db = new DAO();
        $sql = "EXEC dbo.GetCompanyLookUp @likeClause=" . $like . "'";
        // set the select statement
        $db->setSQL($sql);
        // execute the SQL
        if ($db->execute()) {
            // did we get some rows
            if (sqlsrv_has_rows($db->getResultSet())) {
                if ($isBootstrap) {
                    // start the pulldown control
                    echo '<select name="' . $ID . '" id="' . $ID . '" class="form-control" data-toggle="tooltip" data-placement="bottom"' . ' title="' . $tooltip . '"><option value="-1">Select a value...</option>';
                    // output the table rows
                    while ($row = sqlsrv_fetch_array($db->getResultSet(), SQLSRV_FETCH_ASSOC)) {
                        echo '<option value = "' . $row['CompanyID'] . '" ' . IsSelected($row['CompanyID'], $selectedVal) . '>' . $row['CompanyName'] . '</option>';
                    }
                    // finish off the control
                    echo "</select>";
                } else {
                    // start the pulldown control
                    echo '<select name="' . $ID . '" id="' . $ID . '"><option value="-1">Select a value...</option>';
                    // output the table rows
                    while ($row = sqlsrv_fetch_array($db->getResultSet(), SQLSRV_FETCH_ASSOC)) {
                        echo '<option value = "' . $row['CompanyID'] . '" ' . IsSelected($row['CompanyID'], $selectedVal) . '>' . $row['CompanyName'] . '</option>';
                    }
                    // finish off the control
                    echo "</select>";
                }
            } else {
                echo '<div class="err">No data found.</div>';
            }
        }
    } catch (Exception $e) {
        echo $e->getMessage(), "\n";
    }
}

 function queryFromFile($sql_file_path, $table_prefix)
 {
     global $db, $progress, $errors;
     include_once AC_INCLUDE_PATH . 'classes/DAO/DAO.class.php';
     $dao = new DAO();
     $tables = array();
     if (!file_exists($sql_file_path)) {
         return false;
     }
     $sql_query = trim(fread(fopen($sql_file_path, 'r'), filesize($sql_file_path)));
     SqlUtility::splitSqlFile($pieces, $sql_query);
     foreach ($pieces as $piece) {
         $piece = trim($piece);
         // [0] contains the prefixed query
         // [4] contains unprefixed table name
         if ($table_prefix || $table_prefix == '') {
             $prefixed_query = SqlUtility::prefixQuery($piece, $table_prefix);
         } else {
             $prefixed_query = $piece;
         }
         if ($prefixed_query != false) {
             $table = $table_prefix . $prefixed_query[4];
             $prefixed_query[1] = strtoupper($prefixed_query[1]);
             if (strtoupper($prefixed_query[1]) == 'CREATE TABLE') {
                 if ($dao->execute($prefixed_query[0]) !== false) {
                     $progress[] = 'Table <b>' . $table . '</b> created successfully.';
                 } else {
                     if (mysql_errno($db) == 1050) {
                         $progress[] = 'Table <b>' . $table . '</b> already exists. Skipping.';
                     } else {
                         $errors[] = 'Table <b>' . $table . '</b> creation failed.';
                     }
                 }
             } elseif ($prefixed_query[1] == 'INSERT INTO' || $prefixed_query[1] == 'ALTER TABLE' || $prefixed_query[1] == 'DROP TABLE' || $prefixed_query[1] == 'UPDATE') {
                 $dao->execute($prefixed_query[0]);
             }
         }
     }
     return TRUE;
 }

 */
define('TR_INCLUDE_PATH', '../../include/');
require_once TR_INCLUDE_PATH . 'vitals.inc.php';
$pid = intval($_POST['pid']);
$type_id = intval($_POST['a_type']);
$secondary_resource = trim($_POST['alternative']);
// check post vars
if ($pid == 0 || $type_id == 0 || $secondary_resource == '') {
    exit;
}
require_once TR_INCLUDE_PATH . 'classes/DAO/DAO.class.php';
$dao = new DAO();
// delete the existing alternative for this (pid, a_type)
$sql = "SELECT sr.secondary_resource_id \n          FROM " . TABLE_PREFIX . "secondary_resources sr, " . TABLE_PREFIX . "secondary_resources_types srt\n         WHERE sr.secondary_resource_id = srt.secondary_resource_id\n           AND sr.primary_resource_id = " . $pid . "\n           AND sr.language_code = '" . $_SESSION['lang'] . "'\n           AND srt.type_id=" . $type_id;
//$existing_secondary_result = mysql_query($sql, $db);
$existing_secondary_rows = $dao->execute($sql);
if (is_array($existing_secondary_rows)) {
    foreach ($existing_secondary_rows as $existing_secondary) {
        $sql = "DELETE FROM " . TABLE_PREFIX . "secondary_resources \n\t\t         WHERE secondary_resource_id = " . $existing_secondary['secondary_resource_id'];
        $dao->execute($sql);
        $sql = "DELETE FROM " . TABLE_PREFIX . "secondary_resources_types \n\t\t         WHERE secondary_resource_id = " . $existing_secondary['secondary_resource_id'] . "\n\t\t           AND type_id=" . $type_id;
        $dao->execute($sql);
    }
}
// insert new alternative
$sql = "INSERT INTO " . TABLE_PREFIX . "secondary_resources (primary_resource_id, secondary_resource, language_code)\n        VALUES (" . $pid . ", '" . mysql_real_escape_string($secondary_resource) . "', '" . $_SESSION['lang'] . "')";
$dao->execute($sql);
$secondary_resource_id = mysql_insert_id();
$sql = "INSERT INTO " . TABLE_PREFIX . "secondary_resources_types (secondary_resource_id, type_id)\n        VALUES (" . $secondary_resource_id . ", " . $type_id . ")";
$dao->execute($sql);
exit;

            $sql .= "((U.first_name LIKE '{$term}') OR (U.last_name LIKE '{$term}') OR (U.email LIKE '{$term}') OR (U.login LIKE '{$term}')) {$predicate}";
        }
    }
    $sql = '(' . substr($sql, 0, -strlen($predicate)) . ')';
    $search = $sql;
} else {
    $search = '1';
}
if ($_GET['user_group_id'] && $_GET['user_group_id'] != -1) {
    $user_group_sql = "U.user_group_id = " . $_GET['user_group_id'];
    $page_string .= htmlspecialchars(SEP) . 'user_group_id=' . urlencode($_GET['user_group_id']);
} else {
    $user_group_sql = '1';
}
$sql = "SELECT COUNT(user_id) AS cnt FROM " . TABLE_PREFIX . "users U WHERE status {$status} AND {$search} AND {$user_group_sql}";
$rows = $dao->execute($sql);
$num_results = $rows[0]['cnt'];
$num_pages = max(ceil($num_results / $results_per_page), 1);
$page = intval($_GET['p']);
if (!$page) {
    $page = 1;
}
$count = ($page - 1) * $results_per_page + 1;
$offset = ($page - 1) * $results_per_page;
if (isset($_GET['apply_all']) && $_GET['change_status'] >= -1) {
    $offset = 0;
    $results_per_page = 999999;
}
$sql = "SELECT U.user_id, U.login, U.first_name, U.last_name, UG.title user_group, U.email, U.status, U.last_login AS last_login \r\n          FROM " . TABLE_PREFIX . "users U, " . TABLE_PREFIX . "user_groups UG\r\n          WHERE U.user_group_id = UG.user_group_id\r\n          AND U.status {$status} AND {$search} AND {$user_group_sql} ORDER BY {$col} {$order} LIMIT {$offset}, {$results_per_page}";
$user_rows = $dao->execute($sql);
if (isset($_GET['apply_all']) && $_GET['change_status'] >= -1) {

 function importQTI($_POST)
 {
     require_once TR_INCLUDE_PATH . 'classes/DAO/DAO.class.php';
     require_once TR_INCLUDE_PATH . 'classes/Utility.class.php';
     global $msg, $db, $_course_id;
     //		$_POST = $this->_POST;
     if ($_POST['question'] == '') {
         $msg->addError(array('EMPTY_FIELDS', _AT('question')));
     }
     //Multiple answer can have 0+ answers, in the QTIImport.class, if size(answer) < 2, answer will be came a scalar.
     //The following code will change $_POST[answer] back to a vector.
     $_POST['answer'] = $_POST['answers'];
     if (!$msg->containsErrors()) {
         $choice_new = array();
         // stores the non-blank choices
         $answer_new = array();
         // stores the associated "answer" for the choices
         foreach ($_POST['choice'] as $choiceNum => $choiceOpt) {
             $choiceOpt = Utility::validateLength($choiceOpt, 255);
             $choiceOpt = trim($choiceOpt);
             $_POST['answer'][$choiceNum] = intval($_POST['answer'][$choiceNum]);
             if ($choiceOpt == '') {
                 /* an empty option can't be correct */
                 $_POST['answer'][$choiceNum] = 0;
             } else {
                 /* filter out empty choices/ remove gaps */
                 $choice_new[] = $choiceOpt;
                 if (in_array($choiceNum, $_POST['answer'])) {
                     $answer_new[] = 1;
                 } else {
                     $answer_new[] = 0;
                 }
                 if ($_POST['answer'][$choiceNum] != 0) {
                     $has_answer = TRUE;
                 }
             }
         }
         if ($has_answer != TRUE) {
             $hidden_vars['required'] = htmlspecialchars($_POST['required']);
             $hidden_vars['feedback'] = htmlspecialchars($_POST['feedback']);
             $hidden_vars['question'] = htmlspecialchars($_POST['question']);
             $hidden_vars['category_id'] = htmlspecialchars($_POST['category_id']);
             for ($i = 0; $i < count($choice_new); $i++) {
                 $hidden_vars['answer[' . $i . ']'] = htmlspecialchars($answer_new[$i]);
                 $hidden_vars['choice[' . $i . ']'] = htmlspecialchars($choice_new[$i]);
             }
             $msg->addConfirm('NO_ANSWER', $hidden_vars);
         } else {
             //add slahes throughout - does that fix it?
             $_POST['answer'] = $answer_new;
             $_POST['choice'] = $choice_new;
             $_POST['answer'] = array_pad($_POST['answer'], 10, 0);
             $_POST['choice'] = array_pad($_POST['choice'], 10, '');
             //				$_POST['feedback'] = $addslashes($_POST['feedback']);
             //				$_POST['question'] = $addslashes($_POST['question']);
             $sql_params = array($_POST['category_id'], $_course_id, $_POST['feedback'], $_POST['question'], $_POST['choice'][0], $_POST['choice'][1], $_POST['choice'][2], $_POST['choice'][3], $_POST['choice'][4], $_POST['choice'][5], $_POST['choice'][6], $_POST['choice'][7], $_POST['choice'][8], $_POST['choice'][9], $_POST['answer'][0], $_POST['answer'][1], $_POST['answer'][2], $_POST['answer'][3], $_POST['answer'][4], $_POST['answer'][5], $_POST['answer'][6], $_POST['answer'][7], $_POST['answer'][8], $_POST['answer'][9]);
             $sql = vsprintf(TR_SQL_QUESTION_MULTIANSWER, $sql_params);
             //				$result	= mysql_query($sql, $db);
             //				if ($result==true){
             $dao = new DAO();
             if ($dao->execute($sql)) {
                 return mysql_insert_id();
             }
         }
     }
 }

<?php

include_once "DAO.php";
//create a data access object
$dao = new DAO();
//pass the sql statement to the data access object
$dao->setSQL("[dbo].[getcompanies]");
try {
    // run the sql statement
    $dao->execute();
    if (sqlsrv_has_rows($dao->getResultSet())) {
        $rows = sqlsrv_num_rows($dao->getResultSet());
        if ($rows === false) {
            echo "error";
        } else {
            echo 'Number of rows: ' . $rows;
        }
    } else {
        echo "no rows";
    }
} catch (Exception $e) {
    return array(false, "NonQuery Error: " . $e->getMessage() . ". SQL: " . $sql);
}

 echo '    <th rowspan="2" id="header2">' . _AT('resource_type') . '</th>' . "\n";
 echo '    <th colspan="4">' . _AT('alternatives') . '</th>' . "\n";
 echo '  </tr>' . "\n";
 echo '  <tr>' . "\n";
 echo '    <th id="header3">' . _AT('text') . '</th>' . "\n";
 echo '    <th id="header4">' . _AT('audio') . '</th>' . "\n";
 echo '    <th id="header5">' . _AT('visual') . '</th>' . "\n";
 echo '    <th id="header6">' . _AT('sign_lang') . '</th>' . "\n";
 echo '  </tr>' . "\n";
 echo '  </thead>' . "\n";
 echo '  <tbody>';
 foreach ($primary_resources as $primary_resource_id => $primary_resource_row) {
     $primary_resource = $primary_resource_row['resource'];
     $sql = "SELECT prt.type_id, rt.type\n\t\t\t          FROM " . TABLE_PREFIX . "primary_resources pr, " . TABLE_PREFIX . "primary_resources_types prt, " . TABLE_PREFIX . "resource_types rt\n\t\t\t         WHERE pr.content_id = " . $cid . "\n\t\t\t           AND pr.language_code = '" . $_SESSION['lang'] . "'\n\t\t\t           AND pr.primary_resource_id='" . $primary_resource_id . "'\n\t\t\t           AND pr.primary_resource_id = prt.primary_resource_id\n\t\t\t           AND prt.type_id = rt.type_id";
     //		$primary_type_result = mysql_query($sql, $db);
     $primary_types = $dao->execute($sql);
     if (!$is_post_indicator_set) {
         echo '  <input type="hidden" name="use_post_for_alt" value="1" />' . "\n";
         $is_post_indicator_set = true;
     }
     // get secondary resources for the current primary resource
     $sql = "SELECT pr.primary_resource_id, sr.secondary_resource, srt.type_id\n\t\t\t          FROM " . TABLE_PREFIX . "primary_resources pr, " . TABLE_PREFIX . "secondary_resources sr, " . TABLE_PREFIX . "secondary_resources_types srt\n\t\t\t         WHERE pr.content_id = " . $cid . "\n\t\t\t           AND pr.language_code = '" . $_SESSION['lang'] . "'\n\t\t\t           AND pr.primary_resource_id='" . $primary_resource_id . "'\n\t\t\t           AND pr.primary_resource_id = sr.primary_resource_id\n\t\t\t           AND sr.secondary_resource_id = srt.secondary_resource_id";
     //		$secondary_result = mysql_query($sql, $db);
     $secondary_resources = $dao->execute($sql);
     echo '  <tr>' . "\n";
     // table cell "original resource"
     echo '    <td headers="header1">' . "\n";
     echo '    <a href="' . $primary_resource . '" title="' . _AT('new_window') . '" target="_new">' . get_display_filename($primary_resource) . '</a>' . "\n";
     echo '    </td>' . "\n";
     // table cell "original resource type"
     echo '    <td headers="header2">' . "\n";

//			if (!in_array($w, $word)) {
//				unset($_POST['glossary_defs'][$w]);
//				continue;
//			}
//			echo '<input type="hidden" name="glossary_defs['.$w.']" value="'.htmlspecialchars(stripslashes($d)).'" />';
//		}
//		if (isset($_POST['related_term'])) {
//			foreach($_POST['related_term'] as $w => $d) {
//				echo '<input type="hidden" name="related_term['.$w.']" value="'.$d.'" />';
//			}
//		}
//	}
// adapted content
$sql = "SELECT pr.primary_resource_id, prt.type_id\n\t          FROM " . TABLE_PREFIX . "primary_resources pr, " . TABLE_PREFIX . "primary_resources_types prt\n\t         WHERE pr.content_id = " . $cid . "\n\t           AND pr.language_code = '" . $_SESSION['lang'] . "'\n\t           AND pr.primary_resource_id = prt.primary_resource_id";
//	$all_types_result = mysql_query($sql, $db);
$types = $dao->execute($sql);
$i = 0;
if (is_array($types)) {
    foreach ($types as $type) {
        $row_alternatives['alt_' . $type['primary_resource_id'] . '_' . $type['type_id']] = 1;
    }
}
if ($current_tab != 2 && isset($_POST['use_post_for_alt'])) {
    echo '<input type="hidden" name="use_post_for_alt" value="1" />';
    if (is_array($_POST)) {
        foreach ($_POST as $alt_id => $alt_value) {
            if (substr($alt_id, 0, 4) == 'alt_') {
                echo '<input type="hidden" name="' . $alt_id . '" value="' . $alt_value . '" />';
            }
        }
    }

 /**
  * Gets the list of IDs and roles for the user.
  *
  * @param string $UserName
  */
 function getUserIDRoles($UserName)
 {
     // include the data access class
     include_once "DAO.php";
     // preset the return flag
     $retVal = 0;
     try {
         // save the user name in this object
         $this->setUserName($UserName);
         // create a new data access object
         $db = new DAO();
         // clear the output variable before use
         unset($this->UserIDRoleList);
         // set the stored proc that does the work
         $db->setSQL("exec dbo.GetUserIDRoles @UserName=N'" . $UserName . "'");
         // execute the SQL
         if ($db->execute()) {
             // for each item in the table
             while ($item = sqlsrv_fetch_array($db->getResultSet(), SQLSRV_FETCH_NUMERIC)) {
                 // save the records for this table
                 $this->UserIDRoleList[] = $item;
             }
         }
     } catch (Exception $e) {
         echo $e->getMessage(), "\n";
         // set an error code
         $retVal = 1;
     }
     // return to the caller
     return $retVal;
 }