Re: PEAR MDB2 - Fatal error: Call to undefined function MDB2_Driver_mssql::getMessage()
- From: salvadorvp@xxxxxxxxx
- Date: 20 Feb 2007 10:05:43 -0800
Hi, thanks Erwin.
That's correct I fixed that and I also corrected the way I was reading
the error message for the $result object. But now I have a different
error. I'm trying to use a prepared query with SQL Server Express and
is not working. I'm getting this output(in error):
username: lll
An error occurred while trying to execute the following query:
select UserKey from [User] where UserName = ?
Error message: MDB2 Error: syntax error
A more detailed error description: _doQuery: [Error message: Could not
execute statement] [Last executed query: select UserKey from [User]
where UserName = ?] [Native code: 102] [Native message: Incorrect
syntax near '?'.]
From this piece of code:
// Check username and password
$result = false;
if ( isset($_POST['username']) && isset($_POST['password']) ) {
$username = $_POST['username'];
// $password = $_POST['password'];
echo "username: $username<br>\n";
//echo "password: $password<br>\n";
$result =& $dbh->query($WEBAPP_LOGIN_SQL, $username);
if (PEAR::isError($result)) {
echo "An error occurred while trying to execute the following
query:<br>\n";
echo "$WEBAPP_LOGIN_SQL<br>\n";
echo "Error message: " . $result->getMessage() . "<br>\n";
echo "A more detailed error description: " . $result-
getDebugInfo() . "<br>\n";exit();
}
}
And the query in the global variable $WEBAPP_LOGIN_SQL is:
$WEBAPP_LOGIN_SQL = "select UserKey from [User] where UserName = ?";
So I'm thinking in appending strings to form my query (in the usual
unsafe way) and think of some regular expressions to filter out
keywords for any possible inyection attack (i.e. delete|insert|update|
etc...).
.
- References:
- Prev by Date: Re: Newbie question(s) #2: Creating 'output' with form-collected variables
- Next by Date: Re: month and day of month edit fields
- Previous by thread: Re: PEAR MDB2 - Fatal error: Call to undefined function MDB2_Driver_mssql::getMessage()
- Next by thread: Is session.save_path possible in .htaccess using CGI?
- Index(es):
Relevant Pages
|
