db2_exec

Beschreibung

Prepares and executes an SQL statement.

If you plan to interpolate PHP variables into the SQL statement, understand that this is one of the more common security exposures. Consider calling db2_prepare() to prepare an SQL statement with parameter markers for input values. Then you can call db2_execute() to pass in the input values and avoid SQL injection attacks.

If you plan to repeatedly issue the same SQL statement with different parameters, consider calling db2_prepare() and db2_execute() to enable the database server to reuse its access plan and increase the efficiency of your database access.

Parameter Liste

Rückgabewerte

Returns a statement resource if the SQL statement was issued successfully, or FALSE if the database failed to execute the SQL statement.

Beispiele

Beispiel 1. Creating a table with db2_exec() The following example uses db2_exec() to issue a set of DDL statements in the process of creating a table. <?php $conn = db2_connect($database, $user, $password); // Create the test table $create = 'CREATE TABLE animals (id INTEGER, breed VARCHAR(32),     name CHAR(16), weight DECIMAL(7,2))'; $result = db2_exec($conn, $create); if ($result) {     print "Successfully created the table.\n"; } // Populate the test table $animals = array(     array(0, 'cat', 'Pook', 3.2),     array(1, 'dog', 'Peaches', 12.3),     array(2, 'horse', 'Smarty', 350.0),     array(3, 'gold fish', 'Bubbles', 0.1),     array(4, 'budgerigar', 'Gizmo', 0.2),     array(5, 'goat', 'Rickety Ride', 9.7),     array(6, 'llama', 'Sweater', 150) ); foreach ($animals as $animal) {     $rc = db2_exec($conn, "INSERT INTO animals (id, breed, name, weight)       VALUES ('{$animal[0]}', '{$animal[1]}', '{$animal[2]}', {$animal[3]})");     if ($rc) {         print "Insert... ";     } } ?> Das oben gezeigte Beispiel erzeugt folgende Ausgabe: Successfully created the table. Insert... Insert... Insert... Insert... Insert... Insert... Insert...

Beispiel 2. Executing a SELECT statement with a scrollable cursor The following example demonstrates how to request a scrollable cursor for an SQL statement issued by db2_exec(). <?php $conn = db2_connect($database, $user, $password); $sql = "SELECT name FROM animals     WHERE weight < 10.0     ORDER BY name"; if ($conn) {     require_once('prepare.inc');     $stmt = db2_exec($conn, $sql, array('cursor' => DB2_SCROLLABLE));     while ($row = db2_fetch_array($stmt)) {         print "$row[0]\n";     } } ?> Das oben gezeigte Beispiel erzeugt folgende Ausgabe: Bubbles Gizmo Pook Rickety Ride

Siehe auch