Browse Source

[svn r13047] Replaced mysql_ calls by Database:: calls

Yannick Warnier 17 years ago
parent
commit
60909f77fa
1 changed files with 34 additions and 34 deletions
  1. 34 34
      main/inc/lib/usermanager.lib.php

+ 34 - 34
main/inc/lib/usermanager.lib.php

@@ -75,26 +75,26 @@ class UserManager
 		//$password = "PLACEHOLDER";
 		$password = ($userPasswordCrypted ? md5($password) : $password);
 		$sql = "INSERT INTO $table_user
-					                SET lastname = '".mysql_real_escape_string($lastName)."',
-					                firstname = '".mysql_real_escape_string($firstName)."',
-					                username = '".mysql_real_escape_string($loginName)."',
-					                status = '".mysql_real_escape_string($status)."',
-					                password = '".mysql_real_escape_string($password)."',
-					                email = '".mysql_real_escape_string($email)."',
-					                official_code	= '".mysql_real_escape_string($official_code)."',
-					                picture_uri 	= '".mysql_real_escape_string($picture_uri)."',
-					                creator_id  	= '".mysql_real_escape_string($creator_id)."',
-					                auth_source = '".mysql_real_escape_string($auth_source)."',
-				                    phone = '".mysql_real_escape_string($phone)."',
-				                    language = '".mysql_real_escape_string($language)."', 
+					                SET lastname = '".Database::escape_string($lastName)."',
+					                firstname = '".Database::escape_string($firstName)."',
+					                username = '".Database::escape_string($loginName)."',
+					                status = '".Database::escape_string($status)."',
+					                password = '".Database::escape_string($password)."',
+					                email = '".Database::escape_string($email)."',
+					                official_code	= '".Database::escape_string($official_code)."',
+					                picture_uri 	= '".Database::escape_string($picture_uri)."',
+					                creator_id  	= '".Database::escape_string($creator_id)."',
+					                auth_source = '".Database::escape_string($auth_source)."',
+				                    phone = '".Database::escape_string($phone)."',
+				                    language = '".Database::escape_string($language)."', 
 				                    registration_date = now(),
-				                    expiration_date = '".mysql_real_escape_string($expiration_date)."',
-									active = '".mysql_real_escape_string($active)."'";
+				                    expiration_date = '".Database::escape_string($expiration_date)."',
+									active = '".Database::escape_string($active)."'";
 		$result = api_sql_query($sql);
 		if ($result)
 		{
 			//echo "id returned";
-			return mysql_insert_id();
+			return Database::get_last_insert_id();
 		}
 		else
 		{
@@ -116,11 +116,11 @@ class UserManager
 		$table_course_user = Database :: get_main_table(TABLE_MAIN_COURSE_USER);
 		$sql = "SELECT * FROM $table_course_user WHERE status = '1' AND user_id = '".$user_id."'";
 		$res = api_sql_query($sql,__FILE__,__LINE__);
-		while ($course = mysql_fetch_object($res))
+		while ($course = Database::fetch_object($res))
 		{
 			$sql = "SELECT user_id FROM $table_course_user WHERE status='1' AND course_code ='".$course->course_code."'";
 			$res2 = api_sql_query($sql,__FILE__,__LINE__);
-			if (mysql_num_rows($res2) == 1)
+			if (Database::num_rows($res2) == 1)
 			{
 				return false;
 			}
@@ -148,7 +148,7 @@ class UserManager
 		// Unsubscribe the user from all groups in all his courses
 		$sql = "SELECT * FROM $table_course c, $table_course_user cu WHERE cu.user_id = '".$user_id."' AND c.code = cu.course_code";
 		$res = api_sql_query($sql,__FILE__,__LINE__);
-		while ($course = mysql_fetch_object($res))
+		while ($course = Database::fetch_object($res))
 		{
 			$table_group = Database :: get_course_table(TABLE_GROUP_USER, $course->db_name);
 			$sql = "DELETE FROM $table_group WHERE user_id = '".$user_id."'";
@@ -213,29 +213,29 @@ class UserManager
 		global $userPasswordCrypted;
 		$table_user = Database :: get_main_table(TABLE_MAIN_USER);
 		$sql = "UPDATE $table_user SET
-				lastname='".mysql_real_escape_string($lastname)."',
-				firstname='".mysql_real_escape_string($firstname)."',
-				username='".mysql_real_escape_string($username)."',";
+				lastname='".Database::escape_string($lastname)."',
+				firstname='".Database::escape_string($firstname)."',
+				username='".Database::escape_string($username)."',";
 		if(!is_null($password))
 		{
 			$password = $userPasswordCrypted ? md5($password) : $password;
-			$sql .= " password='".mysql_real_escape_string($password)."',";
+			$sql .= " password='".Database::escape_string($password)."',";
 		}
 		if(!is_null($auth_source))
 		{
-			$sql .=	" auth_source='".mysql_real_escape_string($auth_source)."',";
+			$sql .=	" auth_source='".Database::escape_string($auth_source)."',";
 		}
 		$sql .=	"
-				email='".mysql_real_escape_string($email)."',
-				status='".mysql_real_escape_string($status)."',
-				official_code='".mysql_real_escape_string($official_code)."',
-				phone='".mysql_real_escape_string($phone)."',
-				picture_uri='".mysql_real_escape_string($picture_uri)."',
-				expiration_date='".mysql_real_escape_string($expiration_date)."',
-				active='".mysql_real_escape_string($active)."'";
+				email='".Database::escape_string($email)."',
+				status='".Database::escape_string($status)."',
+				official_code='".Database::escape_string($official_code)."',
+				phone='".Database::escape_string($phone)."',
+				picture_uri='".Database::escape_string($picture_uri)."',
+				expiration_date='".Database::escape_string($expiration_date)."',
+				active='".Database::escape_string($active)."'";
 		if(!is_null($creator_id))
 		{
-			$sql .= ", creator_id='".mysql_real_escape_string($creator_id)."'";
+			$sql .= ", creator_id='".Database::escape_string($creator_id)."'";
 		}
 		$sql .=	" WHERE user_id='$user_id'";
 		return api_sql_query($sql,__FILE__,__LINE__);
@@ -251,7 +251,7 @@ class UserManager
 		$table_user = Database :: get_main_table(TABLE_MAIN_USER);
 		$sql = "SELECT username FROM $table_user WHERE username = '".addslashes($username)."'";
 		$res = api_sql_query($sql,__FILE__,__LINE__);
-		return mysql_num_rows($res) == 0;
+		return Database::num_rows($res) == 0;
 	}
 
 	/**
@@ -264,7 +264,7 @@ class UserManager
 		$user_table = Database :: get_main_table(TABLE_MAIN_USER);
 		$sql_query = "SELECT * FROM $user_table";
 		$sql_result = api_sql_query($sql_query,__FILE__,__LINE__);
-		while ($result = mysql_fetch_array($sql_result))
+		while ($result = Database::fetch_array($sql_result))
 		{
 			$return_array[] = $result;
 		}
@@ -321,7 +321,7 @@ class UserManager
 		$sql_query = "SELECT * FROM $user_table a, $user_course_table b where a.user_id=b.user_id AND b.status=1 AND b.course_code='$course_id'";
 		$sql_result = api_sql_query($sql_query,__FILE__,__LINE__);
 		echo "<select name=\"author\">";
-		while ($result = mysql_fetch_array($sql_result))
+		while ($result = Database::fetch_array($sql_result))
 		{
 			if($sel_teacher==$result[user_id]) $selected ="selected";
 			echo "\n<option value=\"".$result[user_id]."\" $selected>".$result[firstname]."</option>";