File indexing completed on 2025-01-19 05:21:03

 <?php
 /**
  * Zend Framework
  *
  * LICENSE
  *
  * This source file is subject to the new BSD license that is bundled
  * with this package in the file LICENSE.txt.
  * It is also available through the world-wide-web at this URL:
  * http://framework.zend.com/license/new-bsd
  * If you did not receive a copy of the license and are unable to
  * obtain it through the world-wide-web, please send an email
  * to license@zend.com so we can send you a copy immediately.
  *
  * @category   Zend
  * @package    Zend_Db
  * @subpackage Statement
  * @copyright  Copyright (c) 2005-2015 Zend Technologies USA Inc. (http://www.zend.com)
  * @license    http://framework.zend.com/license/new-bsd     New BSD License
  * @version    $Id$
  */
 
 /**
  * @see Zend_Db
  */
 // require_once 'Zend/Db.php';
 
 /**
  * @see Zend_Db_Statement_Interface
  */
 // require_once 'Zend/Db/Statement/Interface.php';
 
 /**
  * Abstract class to emulate a PDOStatement for native database adapters.
  *
  * @category   Zend
  * @package    Zend_Db
  * @subpackage Statement
  * @copyright  Copyright (c) 2005-2015 Zend Technologies USA Inc. (http://www.zend.com)
  * @license    http://framework.zend.com/license/new-bsd     New BSD License
  */
 abstract class Zend_Db_Statement implements Zend_Db_Statement_Interface
 {
 
     /**
      * @var resource|object The driver level statement object/resource
      */
     protected $_stmt = null;
 
     /**
      * @var Zend_Db_Adapter_Abstract
      */
     protected $_adapter = null;
 
     /**
      * The current fetch mode.
      *
      * @var integer
      */
     protected $_fetchMode = Zend_Db::FETCH_ASSOC;
 
     /**
      * Attributes.
      *
      * @var array
      */
     protected $_attribute = array();
 
     /**
      * Column result bindings.
      *
      * @var array
      */
     protected $_bindColumn = array();
 
     /**
      * Query parameter bindings; covers bindParam() and bindValue().
      *
      * @var array
      */
     protected $_bindParam = array();
 
     /**
      * SQL string split into an array at placeholders.
      *
      * @var array
      */
     protected $_sqlSplit = array();
 
     /**
      * Parameter placeholders in the SQL string by position in the split array.
      *
      * @var array
      */
     protected $_sqlParam = array();
 
     /**
      * @var Zend_Db_Profiler_Query
      */
     protected $_queryId = null;
 
     /**
      * Constructor for a statement.
      *
      * @param Zend_Db_Adapter_Abstract $adapter
      * @param mixed $sql Either a string or Zend_Db_Select.
      */
     public function __construct($adapter, $sql)
     {
         $this->_adapter = $adapter;
         if ($sql instanceof Zend_Db_Select) {
             $sql = $sql->assemble();
         }
         $this->_parseParameters($sql);
         $this->_prepare($sql);
 
         $this->_queryId = $this->_adapter->getProfiler()->queryStart($sql);
     }
 
     /**
      * Internal method called by abstract statment constructor to setup
      * the driver level statement
      *
      * @return void
      */
     protected function _prepare($sql)
     {
         return;
     }
 
     /**
      * @param string $sql
      * @return void
      */
     protected function _parseParameters($sql)
     {
         $sql = $this->_stripQuoted($sql);
 
         // split into text and params
         $this->_sqlSplit = preg_split('/(\?|\:[a-zA-Z0-9_]+)/',
             $sql, -1, PREG_SPLIT_DELIM_CAPTURE|PREG_SPLIT_NO_EMPTY);
 
         // map params
         $this->_sqlParam = array();
         foreach ($this->_sqlSplit as $key => $val) {
             if ($val == '?') {
                 if ($this->_adapter->supportsParameters('positional') === false) {
                     /**
                      * @see Zend_Db_Statement_Exception
                      */
                     // require_once 'Zend/Db/Statement/Exception.php';
                     throw new Zend_Db_Statement_Exception("Invalid bind-variable position '$val'");
                 }
             } else if ($val[0] == ':') {
                 if ($this->_adapter->supportsParameters('named') === false) {
                     /**
                      * @see Zend_Db_Statement_Exception
                      */
                     // require_once 'Zend/Db/Statement/Exception.php';
                     throw new Zend_Db_Statement_Exception("Invalid bind-variable name '$val'");
                 }
             }
             $this->_sqlParam[] = $val;
         }
 
         // set up for binding
         $this->_bindParam = array();
     }
 
     /**
      * Remove parts of a SQL string that contain quoted strings
      * of values or identifiers.
      *
      * @param string $sql
      * @return string
      */
     protected function _stripQuoted($sql)
     {
 
         // get the character for value quoting
         // this should be '
         $q = $this->_adapter->quote('a');
         $q = $q[0];        
         // get the value used as an escaped quote,
         // e.g. \' or ''
         $qe = $this->_adapter->quote($q);
         $qe = substr($qe, 1, 2);
         $qe = preg_quote($qe);
         $escapeChar = substr($qe,0,1);
         // remove 'foo\'bar'
         if (!empty($q)) {
             $escapeChar = preg_quote($escapeChar);
             // this segfaults only after 65,000 characters instead of 9,000
             $sql = preg_replace("/$q([^$q{$escapeChar}]*|($qe)*)*$q/s", '', $sql);
         }
         
         // get a version of the SQL statement with all quoted
         // values and delimited identifiers stripped out
         // remove "foo\"bar"
         $sql = preg_replace("/\"(\\\\\"|[^\"])*\"/Us", '', $sql);
 
         // get the character for delimited id quotes,
         // this is usually " but in MySQL is `
         $d = $this->_adapter->quoteIdentifier('a');
         $d = $d[0];
         // get the value used as an escaped delimited id quote,
         // e.g. \" or "" or \`
         $de = $this->_adapter->quoteIdentifier($d);
         $de = substr($de, 1, 2);
         $de = preg_quote($de);
         // Note: $de and $d where never used..., now they are:
         $sql = preg_replace("/$d($de|\\\\{2}|[^$d])*$d/Us", '', $sql);
         return $sql;
     }
 
     /**
      * Bind a column of the statement result set to a PHP variable.
      *
      * @param string $column Name the column in the result set, either by
      *                       position or by name.
      * @param mixed  $param  Reference to the PHP variable containing the value.
      * @param mixed  $type   OPTIONAL
      * @return bool
      */
     public function bindColumn($column, &$param, $type = null)
     {
         $this->_bindColumn[$column] =& $param;
         return true;
     }
 
     /**
      * Binds a parameter to the specified variable name.
      *
      * @param mixed $parameter Name the parameter, either integer or string.
      * @param mixed $variable  Reference to PHP variable containing the value.
      * @param mixed $type      OPTIONAL Datatype of SQL parameter.
      * @param mixed $length    OPTIONAL Length of SQL parameter.
      * @param mixed $options   OPTIONAL Other options.
      * @return bool
      */
     public function bindParam($parameter, &$variable, $type = null, $length = null, $options = null)
     {
         if (!is_int($parameter) && !is_string($parameter)) {
             /**
              * @see Zend_Db_Statement_Exception
              */
             // require_once 'Zend/Db/Statement/Exception.php';
             throw new Zend_Db_Statement_Exception('Invalid bind-variable position');
         }
 
         $position = null;
         if (($intval = (int) $parameter) > 0 && $this->_adapter->supportsParameters('positional')) {
             if ($intval >= 1 || $intval <= count($this->_sqlParam)) {
                 $position = $intval;
             }
         } else if ($this->_adapter->supportsParameters('named')) {
             if ($parameter[0] != ':') {
                 $parameter = ':' . $parameter;
             }
             if (in_array($parameter, $this->_sqlParam) !== false) {
                 $position = $parameter;
             }
         }
 
         if ($position === null) {
             /**
              * @see Zend_Db_Statement_Exception
              */
             // require_once 'Zend/Db/Statement/Exception.php';
             throw new Zend_Db_Statement_Exception("Invalid bind-variable position '$parameter'");
         }
 
         // Finally we are assured that $position is valid
         $this->_bindParam[$position] =& $variable;
         return $this->_bindParam($position, $variable, $type, $length, $options);
     }
 
     /**
      * Binds a value to a parameter.
      *
      * @param mixed $parameter Name the parameter, either integer or string.
      * @param mixed $value     Scalar value to bind to the parameter.
      * @param mixed $type      OPTIONAL Datatype of the parameter.
      * @return bool
      */
     public function bindValue($parameter, $value, $type = null)
     {
         return $this->bindParam($parameter, $value, $type);
     }
 
     /**
      * Executes a prepared statement.
      *
      * @param array $params OPTIONAL Values to bind to parameter placeholders.
      * @return bool
      */
     public function execute(array $params = null)
     {
         /*
          * Simple case - no query profiler to manage.
          */
         if ($this->_queryId === null) {
             return $this->_execute($params);
         }
 
         /*
          * Do the same thing, but with query profiler
          * management before and after the execute.
          */
         $prof = $this->_adapter->getProfiler();
         $qp = $prof->getQueryProfile($this->_queryId);
         if ($qp->hasEnded()) {
             $this->_queryId = $prof->queryClone($qp);
             $qp = $prof->getQueryProfile($this->_queryId);
         }
         if ($params !== null) {
             $qp->bindParams($params);
         } else {
             $qp->bindParams($this->_bindParam);
         }
         $qp->start($this->_queryId);
 
         $retval = $this->_execute($params);
 
         $prof->queryEnd($this->_queryId);
 
         return $retval;
     }
 
     /**
      * Returns an array containing all of the result set rows.
      *
      * @param int $style OPTIONAL Fetch mode.
      * @param int $col   OPTIONAL Column number, if fetch mode is by column.
      * @return array Collection of rows, each in a format by the fetch mode.
      */
     public function fetchAll($style = null, $col = null)
     {
         $data = array();
         if ($style === Zend_Db::FETCH_COLUMN && $col === null) {
             $col = 0;
         }
         if ($col === null) {
             while ($row = $this->fetch($style)) {
                 $data[] = $row;
             }
         } else {
             while (false !== ($val = $this->fetchColumn($col))) {
                 $data[] = $val;
             }
         }
         return $data;
     }
 
     /**
      * Returns a single column from the next row of a result set.
      *
      * @param int $col OPTIONAL Position of the column to fetch.
      * @return string One value from the next row of result set, or false.
      */
     public function fetchColumn($col = 0)
     {
         $data = array();
         $col = (int) $col;
         $row = $this->fetch(Zend_Db::FETCH_NUM);
         if (!is_array($row)) {
             return false;
         }
         return $row[$col];
     }
 
     /**
      * Fetches the next row and returns it as an object.
      *
      * @param string $class  OPTIONAL Name of the class to create.
      * @param array  $config OPTIONAL Constructor arguments for the class.
      * @return mixed One object instance of the specified class, or false.
      */
     public function fetchObject($class = 'stdClass', array $config = array())
     {
         $obj = new $class($config);
         $row = $this->fetch(Zend_Db::FETCH_ASSOC);
         if (!is_array($row)) {
             return false;
         }
         foreach ($row as $key => $val) {
             $obj->$key = $val;
         }
         return $obj;
     }
 
     /**
      * Retrieve a statement attribute.
      *
      * @param string $key Attribute name.
      * @return mixed      Attribute value.
      */
     public function getAttribute($key)
     {
         if (array_key_exists($key, $this->_attribute)) {
             return $this->_attribute[$key];
         }
     }
 
     /**
      * Set a statement attribute.
      *
      * @param string $key Attribute name.
      * @param mixed  $val Attribute value.
      * @return bool
      */
     public function setAttribute($key, $val)
     {
         $this->_attribute[$key] = $val;
     }
 
     /**
      * Set the default fetch mode for this statement.
      *
      * @param int   $mode The fetch mode.
      * @return bool
      * @throws Zend_Db_Statement_Exception
      */
     public function setFetchMode($mode)
     {
         switch ($mode) {
             case Zend_Db::FETCH_NUM:
             case Zend_Db::FETCH_ASSOC:
             case Zend_Db::FETCH_BOTH:
             case Zend_Db::FETCH_OBJ:
                 $this->_fetchMode = $mode;
                 break;
             case Zend_Db::FETCH_BOUND:
             default:
                 $this->closeCursor();
                 /**
                  * @see Zend_Db_Statement_Exception
                  */
                 // require_once 'Zend/Db/Statement/Exception.php';
                 throw new Zend_Db_Statement_Exception('invalid fetch mode');
                 break;
         }
     }
 
     /**
      * Helper function to map retrieved row
      * to bound column variables
      *
      * @param array $row
      * @return bool True
      */
     public function _fetchBound($row)
     {
         foreach ($row as $key => $value) {
             // bindColumn() takes 1-based integer positions
             // but fetch() returns 0-based integer indexes
             if (is_int($key)) {
                 $key++;
             }
             // set results only to variables that were bound previously
             if (isset($this->_bindColumn[$key])) {
                 $this->_bindColumn[$key] = $value;
             }
         }
         return true;
     }
 
     /**
      * Gets the Zend_Db_Adapter_Abstract for this
      * particular Zend_Db_Statement object.
      *
      * @return Zend_Db_Adapter_Abstract
      */
     public function getAdapter()
     {
         return $this->_adapter;
     }
 
     /**
      * Gets the resource or object setup by the
      * _parse
      * @return unknown_type
      */
     public function getDriverStatement()
     {
         return $this->_stmt;
     }
 }