PEAR Bug Search Results

DB: Bug 23784 [Open] The getRow method with placeholder causes PHP warning and doesn't return data

blueblood74 at hotmail dot com — 2018-12-21T12:43:04+00:00

DB Bug
Reported by blueblood
2018-12-21T09:38:24+00:00
PHP: 5.6.39 OS: CentOS Linux release 7.3.1611 Package Version: 1.9.3

Description:
------------
Dear,

The getRow method with placeholder occurs PHP warning and does not return correct result.
As far as checked, the value of "result" and "statement" property in DB_result object is updated from "(oci8 statement)" to "(Unknown)" after $this->freePrepared in common.php on line 1350 to be executed.
Please check it.
Thank you and best regards,


Test script:
---------------
getRow($sql, $params);
var_dump($row);
$conn->disconnect();
exit;

Expected result:
----------------
the first row's data in an array

Actual result:
--------------
I got the following PHP warning

PHP Warning:  ocifetchinto(): 20 is not a valid oci8 statement resource in /home/blueblood/vendor/pear-pear.php.net/DB/DB/oci8.php on line 397

DB: Bug 21217 [Assigned] autoExecute failed UPDATE if placeholders presents in WHERE

enyby at ya dot ru — 2018-07-20T18:30:32+00:00

DB Bug
Reported by enyby
2017-06-02T12:13:26+00:00
PHP: 5.6.29 OS: ANY Package Version: 1.9.2

Description:
------------
If you call autoExecute() and in WHERE present any of '!?&' query simple fails. Does not matter where these symbols appear - inside string literal or in query (for example  'a != b').
This happens because inside autoExecute() where used for catch placeholders. For example you send to autoExecute() array with $data of 3 items and $where with 'a != b'. On autoPrepare() inside autoExecute() will be collected FOUR placeholders. 3 from $data and '!' inside $where as 4 placeholder.
After that will be called execute() with $data array. But it have only 3 values. It cause error because parsed statement required 4 values for 4 placeholders.

Solution: make replace in $where before send it to autoPrepare() inside autoExecute():

if ($where) {
    $where = strtr($where, array('?' => '\?', '!' => '\!', '&' => '\&',));
}

Test script:
---------------
$data = array('a' => 'a', 'b' => 'b', 'c' => 'c');
$ret = $db->autoExecute('table', $data, DB_AUTOQUERY_UPDATE, 'a != b');
var_dump($ret);

Expected result:
----------------
DB_OK

Actual result:
--------------
DB_ERROR: DB_ERROR_MISMATCH raised from executeEmulateQuery()

DB: Bug 19794 [Open] Can not use the literal "select" in text field

blam at dentistat dot com — 2013-01-23T00:45:15+00:00

DB Bug
Reported by blam
2013-01-23T00:45:15+00:00
PHP: 5.3.2 OS: Ubuntu 10.04.3 LTS Package Version: Unknown

Description:
------------
Can not use the word "select" as input of text field when trying to build web application. It will return the following error:  "DB Error: unknown error". I try to insert data using prepare and execute, and error out. My system information are as follow:
Ubuntu 10.04.3 LTS
PHP Version 5.3.2-1ubuntu4.18
Pear DB-1.7.13
Informix 11.5


Test script:
---------------
$sql='update office set office_name=?,office_type=?,office_phone=? where office_number=?';
$sth = $dbh->prepare($sql);
if(DB::isError($sth)) { die ($sth->getDebugInfo()); }

$data = array($_GET['office_name'],$_GET['office_type'],$_GET['office_phone'],$_GET['office_number']);
			 $rcode1 = $dbh->execute($sth,$data);

Expected result:
----------------
Expected to update office_name, office_type, and office_phone.

Actual result:
--------------
When the office_name is equal to "Select dental" it failed. It failed because it include the keyword "select". I get the following error " DB Error: unknown error" from Informix. When I tried to update the table directly using isql, it will work.