pg_select(3) [php man page]

PG_SELECT(3)															      PG_SELECT(3)

pg_select - Select records

SYNOPSIS

       mixed pg_select (resource  $connection, string  $table_name, array  $assoc_array, [int  $options = PGSQL_DML_EXEC])

DESCRIPTION

       pg_select(3)  selects  records  specified by assoc_array which has field=>value. For a successful query, it returns an array containing all
       records and fields that match the condition specified by assoc_array.

       If options is specified, pg_convert(3) is applied to assoc_array with the specified flags.

PARAMETERS

	      o $connection
		- PostgreSQL database connection resource.

	      o $table_name
		- Name of the table from which to select rows.

	      o $assoc_array
		- An array whose keys are field names in the table $table_name, and whose values are the conditions that a row	must  meet  to	be
		retrieved.

	      o $options
		-  Any	number	of PGSQL_CONV_FORCE_NULL, PGSQL_DML_NO_CONV, PGSQL_DML_ESCAPE, PGSQL_DML_EXEC, PGSQL_DML_ASYNC or PGSQL_DML_STRING
		combined. If PGSQL_DML_STRING is part of the $options then query string is returned. When PGSQL_DML_NO_CONV or PGSQL_DML_ESCAPE is
		set, it does not call pg_convert(3) internally.

RETURN VALUES

	Returns TRUE on success or FALSE on failure. Returns string if PGSQL_DML_STRING is passed via $options.

EXAMPLES

       Example #1

	      pg_select(3) example

	      <?php
		$db = pg_connect('dbname=foo');
		// This is safe, since $_POST is converted automatically
		$rec = pg_select($db, 'post_log', $_POST);
		if ($rec) {
		    echo "Records selected
";
		    var_dump($rec);
		} else {
		    echo "User must have sent wrong inputs
";
		}
	      ?>

CHANGELOG

       +-------------+---------------------------------------------------+
       |  Version    |							 |
       |	     |							 |
       |	     |			  Description			 |
       |	     |							 |
       +-------------+---------------------------------------------------+
       |   5.6.0     |							 |
       |	     |							 |
       |	     |	No  longer  experimental. Added PGSQL_DML_ESCAPE |
       |	     | constant, TRUE/ FALSE and NULL data type support. |
       |	     |							 |
       |5.5.3/5.4.19 |							 |
       |	     |							 |
       |	     |	Direct SQL injection to $table_name and Indirect |
       |	     | SQL injection to identifiers are fixed.		 |
       |	     |							 |
       +-------------+---------------------------------------------------+
SEE ALSO

       pg_convert(3).

PHP Documentation Group 													      PG_SELECT(3)

PG_QUERY(3)															       PG_QUERY(3)

pg_query - Execute a query

SYNOPSIS

       resource pg_query ([resource  $connection], string  $query)

DESCRIPTION

       pg_query(3) executes the $query on the specified database $connection. pg_query_params(3) should be preferred in most cases.

	If  an error occurs, and FALSE is returned, details of the error can be retrieved using the pg_last_error(3) function if the connection is
       valid.

       Note

	       Although $connection can be omitted, it is not recommended, since it can be the cause of hard to find bugs in scripts.

       Note

	       This function used to be called pg_exec(3). pg_exec(3) is still available for compatibility reasons, but users  are  encouraged	to
	      use the newer name.

PARAMETERS

	      o $connection
		- PostgreSQL database connection resource. When $connection is not present, the default connection is used. The default connection
		is the last connection made by pg_connect(3) or pg_pconnect(3).

	      o $query
		- The SQL statement or statements to be executed. When multiple statements are passed to the function, they are automatically exe-
		cuted  as  one	transaction, unless there are explicit BEGIN/COMMIT commands included in the query string. However, using multiple
		transactions in one function call is not recommended.

	      Warning

		      String interpolation of user-supplied data is extremely dangerous and is likely to lead to SQL injection vulnerabilities. In
		     most  cases  pg_query_params(3) should be preferred, passing user-supplied values as parameters rather than substituting them
		     into the query string.

		      Any user-supplied data substituted directly into a query string should be properly escaped.

RETURN VALUES

	A query result resource on success or FALSE on failure.

EXAMPLES

       Example #1

	      pg_query(3) example

	      <?php

	      $conn = pg_pconnect("dbname=publisher");
	      if (!$conn) {
		echo "An error occurred.
";
		exit;
	      }

	      $result = pg_query($conn, "SELECT author, email FROM authors");
	      if (!$result) {
		echo "An error occurred.
";
		exit;
	      }

	      while ($row = pg_fetch_row($result)) {
		echo "Author: $row[0]  E-mail: $row[1]";
		echo "<br />
";
	      }

	      ?>

       Example #2

	      Using pg_query(3) with multiple statements

	      <?php

	      $conn = pg_pconnect("dbname=publisher");

	      // these statements will be executed as one transaction

	      $query = "UPDATE authors SET author=UPPER(author) WHERE id=1;";
	      $query .= "UPDATE authors SET author=LOWER(author) WHERE id=2;";
	      $query .= "UPDATE authors SET author=NULL WHERE id=3;";

	      pg_query($conn, $query);

	      ?>

SEE ALSO

       pg_connect(3), pg_pconnect(3), pg_fetch_array(3), pg_fetch_object(3), pg_num_rows(3), pg_affected_rows(3).

PHP Documentation Group 													       PG_QUERY(3)