comparison: www/includes/db_recipes.php
www/includes/db_recipes.php
- changeset 130
- 601920b902e5
- parent 94
- 295c3af2a421
- child 142
- 793af7691a5e
equal
deleted
inserted
replaced
| 129:7f41b61c3faf | 130:601920b902e5 |
|---|---|
| 14 $replacements = array("\\\\", "\\/", "\\\"", "\\n", "\\r", "\\t", "\\f", "\\b"); | 14 $replacements = array("\\\\", "\\/", "\\\"", "\\n", "\\r", "\\t", "\\f", "\\b"); |
| 15 $rescapers = array("'"); | 15 $rescapers = array("'"); |
| 16 $rreplacements = array("\\'"); | 16 $rreplacements = array("\\'"); |
| 17 $disallowed = array('visibleindex','uniqueid','boundindex','uid'); | 17 $disallowed = array('visibleindex','uniqueid','boundindex','uid'); |
| 18 | 18 |
| 19 // get data and store in a json array | |
| 20 $query = "SELECT * FROM recipes ORDER BY st_guide,st_letter,st_name,name"; | |
| 21 if (isset($_POST['insert']) || isset($_POST['update'])) { | 19 if (isset($_POST['insert']) || isset($_POST['update'])) { |
| 22 if (isset($_POST['insert'])) { | 20 if (isset($_POST['insert'])) { |
| 23 // INSERT COMMAND | 21 // INSERT COMMAND |
| 24 $sql = "INSERT INTO `recipes` SET "; | 22 $sql = "INSERT INTO `recipes` SET "; |
| 25 } | 23 } |
| 162 syslog(LOG_NOTICE, "db_recipes: deleted record ".$_POST['record']); | 160 syslog(LOG_NOTICE, "db_recipes: deleted record ".$_POST['record']); |
| 163 } | 161 } |
| 164 echo $result; | 162 echo $result; |
| 165 | 163 |
| 166 } else { | 164 } else { |
| 167 // SELECT COMMAND | 165 /* |
| 166 * Select all or a given record. | |
| 167 */ | |
| 168 if (isset($_GET['record'])) { | |
| 169 $query = "SELECT * FROM recipes WHERE record='" . $_GET['record'] . "';"; | |
| 170 } else { | |
| 171 $query = "SELECT * FROM recipes ORDER BY st_guide,st_letter,st_name,name"; | |
| 172 } | |
| 168 $result = mysqli_query($connect, $query) or die("SQL Error 1: " . mysqli_error($connect)); | 173 $result = mysqli_query($connect, $query) or die("SQL Error 1: " . mysqli_error($connect)); |
| 169 $recipes = '['; | 174 $recipes = '['; |
| 170 $comma = FALSE; | 175 $comma = FALSE; |
| 171 while ($row = mysqli_fetch_array($result, MYSQLI_ASSOC)) { | 176 while ($row = mysqli_fetch_array($result, MYSQLI_ASSOC)) { |
| 172 // Manual encode to JSON. | 177 // Manual encode to JSON. |
