-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathmatrixquery.php
More file actions
84 lines (74 loc) · 2.42 KB
/
Copy pathmatrixquery.php
File metadata and controls
84 lines (74 loc) · 2.42 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
<?php
require_once('headerDB.inc.php');
$db = new PDO(
'mysql:host=' . $config["host"] . ';dbname=' . $config["db"],
$config["user"],
$config["pass"],
array(PDO::ATTR_ERRMODE => PDO::ERRMODE_SILENT)
);
$updCol = $_POST["updCol"];
if ($_POST["table"] !== 'lookupqualities') {
// if using visId for other purpose, do not use
if (isset($_POST["col2"]) && $_POST["col2"] == 'visId') {
$_POST["id2"] = '';
}
if (isset($_POST["col3"]) && $_POST["col3"] == 'visId') {
$_POST["id3"] = '';
}
if (isset($_POST["col4"]) && $_POST["col4"] == 'visId') {
$_POST["id4"] = '';
}
if (isset($_POST["col5"]) && $_POST["col5"] == 'visId') {
$_POST["id5"] = '';
}
}
if (!isset($_POST["pid1"]) || $_POST["pid1"] == '' || $_POST["pid1"] == 'undefined') {
$_POST["pid1"] = false;
}
if (!isset($_POST["id2"]) || $_POST["id2"] == '') {
$_POST["id2"] = 'undefined';
}
if (!isset($_POST["id3"]) || $_POST["id3"] == '') {
$_POST["id3"] = 'undefined';
}
if (!isset($_POST["id4"]) || $_POST["id4"] == '') {
$_POST["id4"] = 'undefined';
}
if (!isset($_POST["id5"]) || $_POST["id5"] == '') {
$_POST["id5"] = 'undefined';
}
$query = "SELECT " . $_POST["updCol"] . " FROM " . $_POST["table"] . " WHERE 1 = 1";
if ($_POST["pid1"]) {
$query .= " AND `" . $_POST["pcol1"] . "` = '" . $_POST["pid1"] . "'";
}
if ($_POST["id2"] !== 'undefined') {
$query .= " AND `" . $_POST["col2"] . "` = '" . $_POST["id2"] . "'";
}
if ($_POST["id3"] !== 'undefined') {
$query .= " AND `" . $_POST["col3"] . "` = '" . $_POST["id3"] . "'";
}
if ($_POST["id4"] !== 'undefined') {
$query .= " AND `" . $_POST["col4"] . "` = '" . $_POST["id4"] . "'";
}
if ($_POST["id5"] !== 'undefined') {
$query .= " AND `" . $_POST["col5"] . "` = '" . $_POST["id5"] . "'";
}
$result = $db->query($query);
$value = $result->fetchColumn();
if ($result->rowCount() > 0) {
if ($_POST["table"] == 'nextactions') {
echo 'y'; // special case of querying nextactions
} else {
echo $value; // default value, avoid encoding string
}
} else {
if ($_POST["table"] == 'nextactions') {
echo 'n'; // special case of querying nextactions
} else {
echo '*no result from query*';
}
unset($value);
}
// file_put_contents ('_response.txt', PHP_EOL . $query);
// file_put_contents ('_response.txt', PHP_EOL . $value . PHP_EOL . '--', FILE_APPEND);
$db = null; // destroy connection