Breaking News: Grepper is joining You.com. Read the official announcement!

Validate SQL syntax from PHP

Ivan Londono answered on May 17, 2024 Popularity 1/10 Helpfulness 8/10

answer Validate SQL syntax from PHP

related php if is a valid query mysql

Validate SQL syntax from PHP

Comment

function checkMySqlSyntax($mysqli, $query) {
   if ( trim($query) ) {
      // Replace characters within string literals that may *** up the process
      $query = replaceCharacterWithinQuotes($query, '#', '%') ;
      $query = replaceCharacterWithinQuotes($query, ';', ':') ;
      // Prepare the query to make a valid EXPLAIN query
      // Remove comments # comment ; or  # comment newline
      // Remove SET @var=val;
      // Remove empty statements
      // Remove last ;
      // Put EXPLAIN in front of every MySQL statement (separated by ;) 
      $query = "EXPLAIN " .
               preg_replace(Array("/#[^\n\r;]*([\n\r;]|$)/",
                              "/[Ss][Ee][Tt]\s+\@[A-Za-z0-9_]+\s*:?=\s*[^;]+(;|$)/",
                              "/;\s*;/",
                              "/;\s*$/",
                              "/;/"),
                        Array("","", ";","", "; EXPLAIN "), $query) ;

      foreach(explode(';', $query) as $q) {
         $result = $mysqli->query($q) ;
         $err = !$result ? $mysqli->error : false ;
         if ( ! is_object($result) && ! $err ) $err = "Unknown SQL error";
         if ( $err) return $err ;
      }
      return false ;
  }
}

Popularity 1/10 Helpfulness 8/10 Language php

Source: Grepper

Tags: php sql syntax

Link to this answer
Share Copy Link

Contributed on May 17 2024

Ivan Londono

0 Answers Avg Quality 2/10

Closely Related Answers

php if is a valid query mysql

Comment

function isSimpleValidQuery($query) {
  // Allowed starting keywords
  $allowedKeywords = ['SELECT', 'UPDATE', 'DELETE', 'INSERT'];

  // Basic pattern for alphanumeric characters, underscores, spaces, and allowed keywords
  $pattern = '/^(' . implode('|', $allowedKeywords) . ')\s+(?:(?:[a-zA-Z0-9_ ]+|' . implode('|', ['FROM', 'SET', 'WHERE']) . ')(?:\s+[a-zA-Z0-9_ ,=\.]+)*)+\s*;$/i';

  return preg_match($pattern, $query);
}

Popularity 1/10 Helpfulness 1/10 Language php

Source: Grepper

Tags: mysql php

Link to this answer
Share Copy Link

Contributed on May 17 2024

Ivan Londono

0 Answers Avg Quality 2/10

Validate SQL syntax from PHP

Contents

More Related Answers

Validate SQL syntax from PHP

Closely Related Answers

php if is a valid query mysql

Grepper

Documentation

Social

Legal

Contact

Oops, You will need to install Grepper and log-in to perform this action.