Nabble - PostgreSQL - php

Re: Problem with utf8 encoding

2009-12-03T01:35:14Z

On Thu, 2009-12-03 at 02:00 -0500, Jorge Miranda Castañeda wrote:

> Hello everyone!
>
>
> I'm working in a project using postgres, propel, and php.
>
>
> My development environment is:
> SO: Windows vista Business SP2
> Postgres: Postgres v8.4
> Propel: Propel generator/runtime v1.4
> PHP: PHP v5.3
>
>
> Currently I'm struggling with a problem caused by the encoding.
> Everytime I try to insert a row into the table CURRENCY, which has ID,
> DESC, and SYMBOL as its columns, I get the following error:
> Unable to execute INSERT statement. [wrapped: SQLSTATE[22021]:
> Character not in repertoire: 7 ERROR: invalid byte sequence for
> encoding "UTF8": 0x80 HINT: This error can also happen if the byte
> sequence does not match the encoding expected by the server, which is
> controlled by "client_encoding".]
>
>
> I've created the database using this sentence:
> CREATE DATABASE sbs
> WITH OWNER = sbsadmin
> ENCODING = 'UTF8'
> LC_COLLATE = 'Spanish_Peru.1252'
> LC_CTYPE = 'Spanish_Peru.1252'
> CONNECTION LIMIT = -1;

Hola Jorge,

I suspect it's the LC_COLLATE and LC_CTYPE that you have there. I don't
*know* this, but they *look* like they are some weird sort of
collation/ctype based on the misguided Windows-1252 encoding. Sadly,
Windows provides data in this encoding into web forms where the accept
charset is supposedly only ISO-8859.

In Windows-1252 the Euro currency symbol is somewhere in the 0x80 - 0x9f
range - possibly it is 0x80, in fact.

I think you would be better to use a consistent locale like es_PE.UTF-8
though if your data is 1252 encoded then you might need to iconv it
first.

If you have data which is a mix of ISO-8859-1, Windows-1252 and UTF-8
then I can point you at a wee bit of PHP code I wrote which will look at
each character in a string and only iconv from 8859/1252 -> UTF-8 if it
is a high-bit byte which is not part of a valid UTF-8 character already.

The code is here:

http://repo.or.cz/w/awl.git/blob/HEAD:/inc/AWLUtilities.php

You need both of the last two functions - call the first one during
initialisation, and use the second one to clean the strings.

Cheers,
Andrew McMillan.

------------------------------------------------------------------------
andrew (AT) morphoss (DOT) com +64(272)DEBIAN
You will feel hungry again in another hour.
------------------------------------------------------------------------

signature.asc (205 bytes) Download Attachment

Problem with utf8 encoding

2009-12-02T23:00:16Z

Hello everyone!

I'm working in a project using postgres, propel, and php.

My development environment is:

SO: Windows vista Business SP2

Postgres: Postgres v8.4

Propel: Propel generator/runtime v1.4

PHP: PHP v5.3

Currently I'm struggling with a problem caused by the encoding. Everytime I try to insert a row into the table CURRENCY, which has ID, DESC, and SYMBOL as its columns, I get the following error:

Unable to execute INSERT statement. [wrapped: SQLSTATE[22021]: Character not in repertoire: 7 ERROR: invalid byte sequence for encoding "UTF8": 0x80 HINT: This error can also happen if the byte sequence does not match the encoding expected by the server, which is controlled by "client_encoding".]

I've created the database using this sentence:

CREATE DATABASE sbs

WITH OWNER = sbsadmin

ENCODING = 'UTF8'

LC_COLLATE = 'Spanish_Peru.1252'

LC_CTYPE = 'Spanish_Peru.1252'

CONNECTION LIMIT = -1;

When I run the following commands in psql I get this:

sbs=#SHOW SERVER_ENCODING;

server_encoding

---------------

UTF8

(1 fila)

sbs=#SHOW CLIENT_ENCODING;

client_encoding

---------------

UTF8

(1 fila)

The generated file by propel that manages the database connection sets the charset to utf8 too. The insertion fails only everytime I try to insert the currency symbols such as €, ¥, £, ₱, etc. I have no problem with symbols such S/., $, p., Q, L or any other non-special symbol. The curious thing is that when I run the sentence INSERT INTO CURRENCY VALUES(3,'EURO','€'); using the query tool of pgAdminIII, I got no error and the query was sucessfully executed. However running the same sentence in psql, I got the row inserted but with ? instead of € as the currency symbol.

I think the utf8 is the apropiate charset to represent these symbols but I have no idea why I'm getting this problem. I've spent the whole day struggling with this problem and I can't figure it out yet. I have tried many things, none of them worked. So this is why I'm here asking for your help, as my last resource. Any guidance that could put me in the right direction to address this problem will be really appreciated!

Thanks in advance and I'm sorry If I went on a bit long...

--
Jorge Miranda Castañeda.

Simbiosys Software S.A.C.

www.simbiosysonline.com

Re: Use of pg_escape_string()

2009-11-23T09:31:24Z

Adding an extra apostrophe is one of the ways you can escape another apostrophe with Postgre. I believe Postgre can use an extra apostrophe or a backslash... and the API call you're using just happens to elect using the extra apostrophe over the backslash. If you look at the data inserted into the database is there only one apostrophe in your data? If so, that's what it is. If there's two it could be as the previous poster said and magic quotes is enabled.

Eric Chamberlain

On Nov 22, 2009, at 11:44 AM, Raymond O'Donnell wrote:

> On 22/11/2009 19:22, Sylvain Racine wrote:
>> Hello,
>>
>> I use to hear about to escape every variables who come from user in PHP.
>> Most programmers around me use MySQL with mysql_escape_string(). Because
>> I program with PostgreSQL, I take advantage to use pg_escape_string().
>> Everything goes well, up I entered data with apostrophe(').
>> pg_escape_string() escapes my apostrophe with another apostrophe ('').
>> My data are well store in database. No error... except that appears a
>> double apostrophe. This is not what I want.
>>
>> Maybe something is wrong in my program. Here is a sample of what I use
>> to store data in table "personnes" which have two columns: firstname,
>> lastname. I remove database connection and construction of objects
>> Minute and Personnes.
>
> Where is the INSERTed data coming from? - Is it coming from data
> submitted by GET or POST? - if so, is magic_quotes_gpc turned on? If it
> is, this could explain what you're seeing.
>
> BTW, it's much better to use parametrised queries - look up
> pg_query_params in the PHP docs. This looks after all quoting for you
> automatically, and prevents SQL injection attacks.
>
> Ray.
>
>
> --
> Raymond O'Donnell :: Galway :: Ireland
> rod@...
>
> --
> Sent via pgsql-php mailing list (pgsql-php@...)
> To make changes to your subscription:
> http://www.postgresql.org/mailpref/pgsql-php

Confidentiality Notice: This e-mail may contain proprietary information some of which may be legally privileged. It is for the intended recipient(s) only. If you believe that it has been sent to you in error, please notify the sender by reply e-mail and delete the message. Any disclosure, copying, distribution or use of this information by someone other than the intended recipient(s) is prohibited and may be unlawful.

--
Sent via pgsql-php mailing list (pgsql-php@...)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-php

Re: Use of pg_escape_string()

2009-11-22T11:44:48Z

On 22/11/2009 19:22, Sylvain Racine wrote:

> Hello,
>
> I use to hear about to escape every variables who come from user in PHP.
> Most programmers around me use MySQL with mysql_escape_string(). Because
> I program with PostgreSQL, I take advantage to use pg_escape_string().
> Everything goes well, up I entered data with apostrophe(').
> pg_escape_string() escapes my apostrophe with another apostrophe ('').
> My data are well store in database. No error... except that appears a
> double apostrophe. This is not what I want.
>
> Maybe something is wrong in my program. Here is a sample of what I use
> to store data in table "personnes" which have two columns: firstname,
> lastname. I remove database connection and construction of objects
> Minute and Personnes.

Where is the INSERTed data coming from? - Is it coming from data
submitted by GET or POST? - if so, is magic_quotes_gpc turned on? If it
is, this could explain what you're seeing.

BTW, it's much better to use parametrised queries - look up
pg_query_params in the PHP docs. This looks after all quoting for you
automatically, and prevents SQL injection attacks.

Ray.

--
Raymond O'Donnell :: Galway :: Ireland
rod@...

--
Sent via pgsql-php mailing list (pgsql-php@...)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-php

Use of pg_escape_string()

2009-11-22T11:22:07Z

Hello,

I use to hear about to escape every variables who come from user in PHP.
Most programmers around me use MySQL with mysql_escape_string(). Because
I program with PostgreSQL, I take advantage to use pg_escape_string().
Everything goes well, up I entered data with apostrophe(').
pg_escape_string() escapes my apostrophe with another apostrophe ('').
My data are well store in database. No error... except that appears a
double apostrophe. This is not what I want.

Maybe something is wrong in my program. Here is a sample of what I use
to store data in table "personnes" which have two columns: firstname,
lastname. I remove database connection and construction of objects
Minute and Personnes.

Ex: Nathalie Prud'homme gives Nathalie Prud''homme...

$minute->personnes->firstname = $_POST["firstname"];
$minute->personnes->lastname = $_POST["lastname"];
$fields = array("firstname","lastname");

$query =
$GLOBALS['phpag']->db->record('personnes',$fields,$minute->personnes);
if (!$GLOBALS['phpag']->db->query($query))
{
echo $GLOBALS['phpag']->db->error;
}

class db

{
function query($query, $offset=0, $num_rows=-1)
{
if (!$this->link_ID)
{
$this->error .= '<div style="color:#FF0000">Can't connect to
database.</div>';
return FALSE;
}
$this->record = array();
$this->count = 0;

if (!$num_rows && $this->debug)
{
print 'number of lines limit =
'.$GLOBALS['phpag_info']['preferences']['phpag']['lines'];
$num_rows = $GLOBALS['phpag_info']['preferences']['phpag']['lines'];
}
if ($num_rows > 0)
{
$query .= ' LIMIT '.$num_rows.' OFFSET '.$offset;
if ($this->debug) {
print '<div>Query: '.$query.'</div>';
}

$this->query_ID = pg_query($this->link_ID, $query);
} else
{
if ($this->debug) {
print '<div>Query: '.$query.'</div>';
}

$this->query_ID = pg_query($this->link_ID, $query);
}

if (!$this->query_ID)
{
$this->err = pg_last_error($this->link_ID);
$this->error .= '<div style="color:#FF0000">Error in query sent
to database<br><br>'.$this->err."<br><br>\n";
$this->error .= "<u>Invalid SQL query:</u>:
<blockquote>$query</blockquote></div><br>";
return FALSE;
}
else
{
for ($i = 0; $i < pg_numrows($this->query_ID); $i++)
{
$this->record[$i] = pg_fetch_array($this->query_ID,$i);

if ($this->debug)
{
echo 'Record #'.$i.' ';
print_r($this->record[$i]);
print "<br>";
}
}
//Calculate how many records
$this->count = ($this->record ? count($this->record): 0);
}

return $this->query_ID;
}

// Escape string if necessary
function slash ($text)
{
$text = pg_escape_string($text);
return $text;
}

function record($table,$fields,$values)
{
if (class_exists(get_class($values)))
$values=get_object_vars($values);
$query = 'INSERT INTO '.$table.'(';

if (empty($champs)) {
$arg['type'] = 'php';
$arg['message'] = '<div
style="color:#FF0000">SQL Error: You try to insert values in table
without declare column name!</div>';
Error::thrown($arg,FALSE,TRUE);
}
foreach ($fields as $num =>$col) {
$query .= ($num ? ',': '').$col;
}

$query .= ') VALUES (';

if (empty($values)) {
$arg['type'] = 'php';
$arg['message'] = '<div
style="color:#FF0000">SQL Error: You try to insert data in table
without giving values!</div>';
Error::thrown($arg,FALSE,TRUE);
}

$valueClause = '';
$id = 0;
foreach ($values as $num => $col) {
preg_match('/^id/',$num,$match);
if (!empty($match[0])) $id += 1;
if (empty($match[0])) { // Remove column beginning
with 'id...'
$valueClause .= ($valueClause ? ',' :
'').'\''.$this->slash($col).'\'';
}
}

if (count($fields) != (count($fields) - $id)) {
$arg['type'] = 'php';
$arg['message'] = '<div
style="color:#FF0000">SQL Error: The number of columns mismatches with
the number of values!</div>';
Error::thrown($arg,FALSE,TRUE);
}

$query .= $valueClause.');';

return $query;
}

}

Anybody have an idea?

--
Sent via pgsql-php mailing list (pgsql-php@...)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-php

Re: [GENERAL] PostgreSQL driver for Joomla review

2009-10-21T02:17:59Z

2009/10/21 Csaba Nagy <nagy@...>:

> Hi Thom,
>
> Sorry for the delay, I got sick in the meantime. I see that others
> already did some review, I will do a quick one too, later maybe I'll
> actually try it out... so after a quick review:
>
> * on line 218, the " ENCODING '$DBname')" part feels wrong, you probably
> want hardcoded UTF8 encoding there ?
> * as Merlin already commented, transactions are always safe in postgres,
> this is no mysql ;-)
> * again, as Merlin commented, getTableList is getting the data bases,
> which doesn't make sense, but maybe you actually wanted to get the
> tables - in this case you don't have a typo but you need to change the
> query ;-)
>
> If I'll get some time I'll test it too, but likely not this week...

Thanks for the feedback Csaba,

Yes, I will change the function which uses transactions, and also
replace any conditional UTF8 statements with hard-coded ones.

The getTableList function...erm... not sure what I was thinking there.
How about:

select tablename from pg_tables where schemaname='public';

As for testing it, you won't be able to with the existing Joomla code
base as most of the queries will fail as they've been terribly
written, and that's because MySQL lets you get away with it for some
reason. I imagine the only way to test it is to either get a copy of
modified Joomla from me (although it still needs work), or create a
test app which uses that class, but you will need the parent JDatabase
class from Joomla too... and not sure how deep that rabbit hole goes
as that will also in turn inherit from another class.

Thanks again.

Thom

--
Sent via pgsql-php mailing list (pgsql-php@...)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-php

Re: [GENERAL] PostgreSQL driver for Joomla review

2009-10-20T12:00:19Z

2009/10/20 Alban Hertroys <dalroi@...>:
> You miss a keyword in your query in renameTable; it should be " RENAME TO ",
> not " TO ".

Thanks for spotting that. I've made my amendments for next submit.

> Wouldn't it be convenient to have an EXPLAIN ANALYSE version of explain()?
> Maybe with a boolean parameter?

The problem is, I don't see where they're using this function, so if
they're using it to EXPLAIN an INSERT, UPDATE or DELETE statement,
ANALYZE would execute it... unless I roll it back straight after.

> In insertObject() you have a query "SELECT $keyName AS 'id' FROM $table'" -
> That line contains two syntax errors: 'id' (You probably meant "id") and
> $table' (spurious trailing quote).

Again, you're right and well spotted. :) Fixed both of those.

Cheers for helping out Alban! :D

Thom

--
Sent via pgsql-php mailing list (pgsql-php@...)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-php

Re: [GENERAL] PostgreSQL driver for Joomla review

2009-10-20T07:02:18Z

2009/10/20 Merlin Moncure <mmoncure@...>:

> On Tue, Oct 20, 2009 at 8:02 AM, Thom Brown <thombrown@...> wrote:
>> If anyone has a moment, could they review the PostgreSQL driver I
>> wrote for Joomla's next major release? The developers at Joomla have
>> listened to the persistent noise created about only having MySQL as an
>> option and are now accepting submissions for alternative database
>> systems. (see http://groups.google.com/group/joomla-dev-cms/browse_thread/thread/1382dc6f4af56278#msg_9b95648941ef6fa7
>> for this development)
>>
>> My submission can be found at:
>> http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEdit&tracker_item_id=18384
>>
>> Things to watch out for a version-dependent features and clumsy implementations.
>
> *) why bother with the version check in queryBatch? why not just do
> begin->commit always?

To be honest, I hadn't touched that function. That's entirely
inherited from the MySQL one, but you're right, for Postgres there's
no need to check the version.

> *) no ability to delete?

The driver has to match that of the MySQL one in Joomla, so I couldn't
implement functionality which wouldn't be used by every driver. The
only thing I added which differed was a concatentation operator which
I put in for future implementation as I believe it will be necessary
if they're going to adapt the existing codebase to support multiple
database systems.

> *) looks like typo on line 713

Yes, that's just left over from me quickly trying to tidy up my
comments as I couldn't get the proper version from the site. Please
ignore it as it isn't in my actual submission.

Thanks Merlin!

Thom

--
Sent via pgsql-php mailing list (pgsql-php@...)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-php

Re: [GENERAL] PostgreSQL driver for Joomla review

2009-10-20T06:28:58Z

2009/10/20 Reid Thompson <reid.thompson@...>:

> your attachment contains this...
>
> <?xml version="1.0" encoding="iso-8859-1"?>
> <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
> "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
> <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
> <head>
> <title>403 - Forbidden</title>
> </head>
> <body>
> <h1>403 - Forbidden</h1>
> </body>
> </html>
>

Erk.. that's weird. I got that too even after being logged in. I'm
not sure how anyone can review it if no-one has access to it.

I've attached my working version which differs only slightly to
conform with coding-styles required by Joomla.

Apologies

Thom

--
Sent via pgsql-php mailing list (pgsql-php@...)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-php

postgresql.php (23K) Download Attachment

Re: [GENERAL] PostgreSQL driver for Joomla review

2009-10-20T06:00:17Z

2009/10/20 Csaba Nagy <nagy@...>:

> Hi Thom,
>
> I would like to review it, but I get "403 - Forbidden" when clicking:
>
> http://downloads.joomlacode.org/trackeritem/4/5/0/45041/postgresql.php
>
> Not sure what that means, probably I need some kind of login to the
> joomla tracker system, and I don't have one, and I would prefer not to
> create one... is it possible to access that somehow without full access
> to the joomla tracker ?

Hi Csaba,

I didn't realise it wasn't publicly viewable. I've attached a copy of
the php file anyhow. Can you see the tracker page at all?

Thom

--
Sent via pgsql-php mailing list (pgsql-php@...)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-php

postgresql.php (476 bytes) Download Attachment

PostgreSQL driver for Joomla review

2009-10-20T05:02:47Z

If anyone has a moment, could they review the PostgreSQL driver I
wrote for Joomla's next major release? The developers at Joomla have
listened to the persistent noise created about only having MySQL as an
option and are now accepting submissions for alternative database
systems. (see http://groups.google.com/group/joomla-dev-cms/browse_thread/thread/1382dc6f4af56278#msg_9b95648941ef6fa7
for this development)

My submission can be found at:
http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEdit&tracker_item_id=18384

Things to watch out for a version-dependent features and clumsy implementations.

Thanks

Thom Brown

--
Sent via pgsql-php mailing list (pgsql-php@...)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-php

Re: PHP suddenly not recognising pg_connect

2009-10-12T14:03:15Z

Okay, ignore me. It appears that the ini files hadn't been updated, although looking at the merge, I don't see exactly how that helped.

It's working now anyway. Postgres and MySQL are both showing in phpinfo() now.

Thom

2009/10/12 Thom Brown <thombrown@...>

I restarted apache today and suddenly a site I managed stopped working. It seems php no longer recognises the pg_connect command. I'm running PostgreSQL 8.4.1 and PHP 5.2.11 on Gentoo. I recompiled PHP just in case I'd upgraded PostgreSQL before without recompiling PHP with it, but no luck. I've checked what gentoo says I've got installed, and it says that it used postgres as one of the includes with dev-lang/php.

I've also noticed PHP has also dropped MySQL support. Doing a phpinfo() check, I've got --with-pgsql=shared showing and also mysql=shared,/usr' '--with-mysql-sock=/var/run/mysqld/mysqld.sock' '--with-mysqli=shared,/usr/bin/mysql_config, but there's no section for PostgreSQL on the page, or MySQL.

I installed pgbouncer a couple days ago too, but I don't expect that's got anything to do with this.

What's going on?

Thom

PHP suddenly not recognising pg_connect

2009-10-12T13:38:15Z

I restarted apache today and suddenly a site I managed stopped working. It seems php no longer recognises the pg_connect command. I'm running PostgreSQL 8.4.1 and PHP 5.2.11 on Gentoo. I recompiled PHP just in case I'd upgraded PostgreSQL before without recompiling PHP with it, but no luck. I've checked what gentoo says I've got installed, and it says that it used postgres as one of the includes with dev-lang/php.

I've also noticed PHP has also dropped MySQL support. Doing a phpinfo() check, I've got --with-pgsql=shared showing and also mysql=shared,/usr' '--with-mysql-sock=/var/run/mysqld/mysqld.sock' '--with-mysqli=shared,/usr/bin/mysql_config, but there's no section for PostgreSQL on the page, or MySQL.

I installed pgbouncer a couple days ago too, but I don't expect that's got anything to do with this.

What's going on?

Thom

Re: checking select query syntax and semantics via php without executing

2009-10-05T15:06:45Z

On Oct 5, 2009, at 3:03 PM, Marco Dieckhoff wrote:
> Must be one of the quickest "case solved, thread closed" I have ever
> seen :)

And you can present the user with the query plan, so they can tell if
they are about to do something horrible to the database. :)

--
-- Christophe Pettus
xof@...

--
Sent via pgsql-php mailing list (pgsql-php@...)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-php

Re: checking select query syntax and semantics via php without executing

2009-10-05T15:03:36Z

Bill Moran schrieb:
> In response to Marco Dieckhoff <dieck@...>:
>> Hi there!
>>
>> Is it possible in PHP to give a sql (select) query to Postgres via pg_*
>> so that it is NOT executed but merely checked for syntax including
>> correct, existing field and table names, and data types?

> Off the top of my head, you could prefix the query with EXPLAIN, which
> will cause it to be planned (thus checking syntax) and return an
> execution plan, but not actually run the query.

Works as a charm, thanks to both of you.

Must be one of the quickest "case solved, thread closed" I have ever seen :)

--
Sent via pgsql-php mailing list (pgsql-php@...)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-php

Re: checking select query syntax and semantics via php without executing

2009-10-05T15:01:39Z

In response to Marco Dieckhoff <dieck@...>:

>
> Hi there!
>
> Is it possible in PHP to give a sql (select) query to Postgres via pg_*
> so that it is NOT executed but merely checked for syntax including
> correct, existing field and table names, and data types?
>
>
> I'm working on a system where users may assemble their own query in a
> construction kit, and want that to be checked, so that they don't e.g.
> compare UUID "<" datetime or something like this.
>
>
> If I try to execute the generated query, bad queries are instantly found
> by pg_query.
>
>
> But good ones are fully executed, which can take a long time depending
> on joins and aggregations.
>
> It seems that pg_prepare doesn't return errors on bad queries,
> pg_last_error() is empty.
>
> The asynchronous pg_send_query (and pg_cancel_query) seem not to return
> any errors, either.
>
> I tried with three queries:
>
> "SELECT * FROM tableok"
> "SELECT nonexistingfield FROM nonexistingtable"
> "SELECT complete bad / sql query FROM nonsense"
>
>
> Any ideas?

Off the top of my head, you could prefix the query with EXPLAIN, which
will cause it to be planned (thus checking syntax) and return an
execution plan, but not actually run the query.

--
Bill Moran
http://www.potentialtech.com
http://people.collaborativefusion.com/~wmoran/

--
Sent via pgsql-php mailing list (pgsql-php@...)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-php

Re: checking select query syntax and semantics via php without executing

2009-10-05T14:50:51Z

On 05/10/2009 22:34, Marco Dieckhoff wrote:

> Is it possible in PHP to give a sql (select) query to Postgres via pg_*
> so that it is NOT executed but merely checked for syntax including
> correct, existing field and table names, and data types?

How about prepending "explain" to the query? Just a wild notion.

Ray.

------------------------------------------------------------------
Raymond O'Donnell, Director of Music, Galway Cathedral, Ireland
rod@...
Galway Cathedral Recitals: http://www.galwaycathedral.org/recitals
------------------------------------------------------------------

--
Sent via pgsql-php mailing list (pgsql-php@...)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-php

checking select query syntax and semantics via php without executing

2009-10-05T14:34:32Z

Hi there!

Is it possible in PHP to give a sql (select) query to Postgres via pg_*
so that it is NOT executed but merely checked for syntax including
correct, existing field and table names, and data types?

I'm working on a system where users may assemble their own query in a
construction kit, and want that to be checked, so that they don't e.g.
compare UUID "<" datetime or something like this.

If I try to execute the generated query, bad queries are instantly found
by pg_query.

But good ones are fully executed, which can take a long time depending
on joins and aggregations.

It seems that pg_prepare doesn't return errors on bad queries,
pg_last_error() is empty.

The asynchronous pg_send_query (and pg_cancel_query) seem not to return
any errors, either.

I tried with three queries:

"SELECT * FROM tableok"
"SELECT nonexistingfield FROM nonexistingtable"
"SELECT complete bad / sql query FROM nonsense"

Any ideas?

--
Sent via pgsql-php mailing list (pgsql-php@...)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-php

Re: Error code

2009-09-22T08:54:27Z

Thank you, all.

I will have all proposals in mind.

On Tue, Sep 22, 2009 at 11:08 AM, Bill Moran <wmoran@...> wrote:

In response to Gustavo Amarilla Santacruz <gusamasan@...>:

> Thank you, Bill.
> I can not use the numeric error code such as 23505 ( by coding convention );
> I need to do this:

That's fine. Note, however, that those codes are not numeric.
Also, you'll be better served putting them in constants, to avoid
bugs where the values are accidentally changed.

>
>
> ------------------------ CODE
> -----------------------------------------------------------
>
> include( "PostgresqlErrorList.php" );
> .
> .
> .
> if( $errorCode == $UNIQUE_VIOLATION )
> echo( "message" );
>
>
>
>
> ------------------------ CODE
> -----------------------------------------------------------
>
>
> Here, "PostgresqlErrorList.php" is a file included in PHP libraries. This
> file would can contain code such as:
>
>
>
> <php?
> $UNIQUE_VIOLATION = 23505;
> $DATETIME_FIELD_OVERFLOW = 22008;
> .
> .
> .
> ?>
>
>
> Exists this file for in Postgresql-PHP library?
>
> On Tue, Sep 22, 2009 at 9:38 AM, Bill Moran <wmoran@...>wrote:
>
> > In response to Gustavo Amarilla Santacruz <gusamasan@...>:
> >
> > > Thank you, Chris.
> > > Now, I need to do this in PHP:
> > >
> > > -------------------- CODE
> > > ---------------------------------------------------------------
> > >
> > > $errorCode = pg_result_error_field($res1, PGSQL_DIAG_SQLSTATE) ;
> > >
> > > if( $errorCode == UNIQUE_VIOLATION )
> >
> > if ( $errorCode == '23505' )
> >
> > --
> > Bill Moran
> > http://www.potentialtech.com
> > http://people.collaborativefusion.com/~wmoran/
> >
>
>
>
> --
> Gustavo Amarilla
> ISMEB

--

Bill Moran
http://www.potentialtech.com
http://people.collaborativefusion.com/~wmoran/

--
Gustavo Amarilla
ISMEB

Re: Error code

2009-09-22T08:08:35Z

In response to Gustavo Amarilla Santacruz <gusamasan@...>:

> Thank you, Bill.
> I can not use the numeric error code such as 23505 ( by coding convention );
> I need to do this:

That's fine. Note, however, that those codes are not numeric.
Also, you'll be better served putting them in constants, to avoid
bugs where the values are accidentally changed.

>
>
> ------------------------ CODE
> -----------------------------------------------------------
>
> include( "PostgresqlErrorList.php" );
> .
> .
> .
> if( $errorCode == $UNIQUE_VIOLATION )
> echo( "message" );
>
>
>
>
> ------------------------ CODE
> -----------------------------------------------------------
>
>
> Here, "PostgresqlErrorList.php" is a file included in PHP libraries. This
> file would can contain code such as:
>
>
>
> <php?
> $UNIQUE_VIOLATION = 23505;
> $DATETIME_FIELD_OVERFLOW = 22008;
> .
> .
> .
> ?>
>
>
> Exists this file for in Postgresql-PHP library?
>
> On Tue, Sep 22, 2009 at 9:38 AM, Bill Moran <wmoran@...>wrote:
>
> > In response to Gustavo Amarilla Santacruz <gusamasan@...>:
> >
> > > Thank you, Chris.
> > > Now, I need to do this in PHP:
> > >
> > > -------------------- CODE
> > > ---------------------------------------------------------------
> > >
> > > $errorCode = pg_result_error_field($res1, PGSQL_DIAG_SQLSTATE) ;
> > >
> > > if( $errorCode == UNIQUE_VIOLATION )
> >
> > if ( $errorCode == '23505' )
> >
> > --
> > Bill Moran
> > http://www.potentialtech.com
> > http://people.collaborativefusion.com/~wmoran/
> >
>
>
>
> --
> Gustavo Amarilla
> ISMEB

--
Bill Moran
http://www.potentialtech.com
http://people.collaborativefusion.com/~wmoran/

--
Sent via pgsql-php mailing list (pgsql-php@...)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-php

Re: Error code

2009-09-22T07:20:11Z

Thank you, Bill.

I can not use the numeric error code such as 23505 ( by coding convention ); I need to do this:

------------------------ CODE -----------------------------------------------------------

include( "PostgresqlErrorList.php" );

if( $errorCode == $UNIQUE_VIOLATION )

echo( "message" );

------------------------ CODE -----------------------------------------------------------

Here, "PostgresqlErrorList.php" is a file included in PHP libraries. This file would can contain code such as:

<php?

$UNIQUE_VIOLATION = 23505;

$DATETIME_FIELD_OVERFLOW = 22008;

Exists this file for in Postgresql-PHP library?

On Tue, Sep 22, 2009 at 9:38 AM, Bill Moran <wmoran@...> wrote:

In response to Gustavo Amarilla Santacruz <gusamasan@...>:

> Thank you, Chris.
> Now, I need to do this in PHP:
>
> -------------------- CODE
> ---------------------------------------------------------------
>
> $errorCode = pg_result_error_field($res1, PGSQL_DIAG_SQLSTATE) ;
>
> if( $errorCode == UNIQUE_VIOLATION )

if ( $errorCode == '23505' )

--
Bill Moran
http://www.potentialtech.com
http://people.collaborativefusion.com/~wmoran/

--
Gustavo Amarilla

ISMEB

Re: Error code

2009-09-22T06:38:15Z

In response to Gustavo Amarilla Santacruz <gusamasan@...>:

> Thank you, Chris.
> Now, I need to do this in PHP:
>
> -------------------- CODE
> ---------------------------------------------------------------
>
> $errorCode = pg_result_error_field($res1, PGSQL_DIAG_SQLSTATE) ;
>
> if( $errorCode == UNIQUE_VIOLATION )

if ( $errorCode == '23505' )

--
Bill Moran
http://www.potentialtech.com
http://people.collaborativefusion.com/~wmoran/

--
Sent via pgsql-php mailing list (pgsql-php@...)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-php

Re: Error code

2009-09-22T06:17:21Z

Thank you, Chris.

Now, I need to do this in PHP:

-------------------- CODE ---------------------------------------------------------------

$errorCode = pg_result_error_field($res1, PGSQL_DIAG_SQLSTATE) ;

if( $errorCode == UNIQUE_VIOLATION )

echo( "message 1" );

else if( $errorCode == DATETIME_FIELD_OVERFLOW )

echo( "message 2" );

-------------------- CODE ---------------------------------------------------------------

How I can do it?; how I can compare $errorCode with a Postgres error name ( as in http://www.postgresql.org/docs/8.1/static/errcodes-appendix.html ).

Thank you, again.

On Mon, Sep 21, 2009 at 9:00 PM, Chris <dmagick@...> wrote:

Gustavo Amarilla Santacruz wrote:

Hello all.

How I can get the postgres error code from PHP?. I can get the error text, but I need error code to verbose ( and country dependient) messages.

http://www.php.net/manual/en/function.pg-result-error-field.php

seems to be the best fit.

--
Postgresql & php tutorials
http://www.designmagick.com/

--
Gustavo Amarilla

Re: Error code

2009-09-21T18:00:45Z

Gustavo Amarilla Santacruz wrote:
> Hello all.
>
> How I can get the postgres error code from PHP?. I can get the error
> text, but I need error code to verbose ( and country dependient) messages.

http://www.php.net/manual/en/function.pg-result-error-field.php

seems to be the best fit.

--
Postgresql & php tutorials
http://www.designmagick.com/

--
Sent via pgsql-php mailing list (pgsql-php@...)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-php

Error code

2009-09-21T07:56:17Z

Hello all.

How I can get the postgres error code from PHP?. I can get the error text, but I need error code to verbose ( and country dependient) messages.

Thank you, in advance.

-----------------------

Gustavo Amarilla

ISMEB: I am Sorry, My English is Bad.

Re: pg_connect() error

2009-09-10T15:51:14Z

Arun Oakley wrote:
> hi guys,
>
> we have a postgres db with a hosting company and have been trying to
> connect to. error is below.
> *Warning*: pg_connect() [function.pg-connect
> <http://hoopsgm.net/test/function.pg-connect>]: Unable to connect to
> PostgreSQL server: could not connect to server: Connection refused Is
> the server running on host "pgdb1.host-ed.net
> <http://pgdb1.host-ed.net>" and accepting TCP/IP connections on port 3306?

Port 3306 is usually mysql not postgres.

Postgres (by default) uses 5432.

> from my trawling around google i have found that it could be related to
> the postgres.conf file and turning on tcpip sockets to true?? (i cannot
> view/edit any postgres conf files)

> oh and those are the host/port details supplied by hosting provider
>
>
> any help would be appreciated in pointing on the right path.

Make sure they know you want a postgres db, not mysql.

Apart from that, if you can't view a postgres.conf file let alone change
it, you need to raise a support issue with them to fix it.

Do they allow remote connections to their database? Maybe they don't for
security reasons.

--
Postgresql & php tutorials
http://www.designmagick.com/

--
Sent via pgsql-php mailing list (pgsql-php@...)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-php

Web based visual query builder

2009-09-09T20:48:54Z

Hi everyone.. I’m looking for a web based visual query builder for postgresql and php do you know about a good tool to do this?

Thanks in advance

Re: Stored procedures, PDO, and PHP issue

2009-09-08T22:24:32Z

Add this as a PDO option

array(PDO::ATTR_ERRMODE => PDO::ERRMODE_EXCEPTION)

I bet there's a PDOException being thrown and I would NOT be at all
surprised if it is a HY000 error where PDO is complaining about
unbuffered queries....

On 2009-08-19 20:47, Eric Chamberlain wrote:
> Wow, I apologize. The code is exactly like what yours is. In my rush
> I missed the correct code.
>
> Eric
>
> > >>> $stmt->bindParam(1, $userId, $hashPass, PDO::PARAM_INT);
> >
> >
> > You should be calling bindParam once for each parameter
> > $stmt->bindParam(1, $userId, PDO::PARAM_INT);
> > $stmt->bindParam(2, $hashPass, PDO::PARAM_STR);
> >
> >
> > Nick
> >
>
>

--
Sent via pgsql-php mailing list (pgsql-php@...)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-php

Re: How to select the source ip address for a connection to the database server

2009-09-07T03:49:42Z

On 2009-09-06, Dimitris Sakellarios <dimitris.sakellarios@...> wrote:

>
> That is the way sockets normally work, the primary address is always
> used for outgoing connections. It can not be changed without some low
> level programming. It is necessary to bind the socket to the specific IP
> address before opening the connection. I have done it with Perl, but not
> PHP.
>
> Bob McConnell
> N2SPP
>

basically what you need to do is take the libpq source extend the
conneection-string facility to include
bind-to-port and bind-to-address parameters which bind the outgoing
connection to the named resources and then recompile it and get it
installed on your server

no changes are likely to be needed to PHP

--
Sent via pgsql-php mailing list (pgsql-php@...)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-php

Re: How to select the source ip address for a connection to the database server

2009-09-07T03:40:21Z

On 2009-09-02, dimitris.sakellarios@... <dimitris.sakellarios@...> wrote:

>
> Hi,
>
> I am currently=A0working with PHP5+PGSQL 8.2.13 and i have the =20
> following problem to solve and i need your help.
>
> The server hosting PHP+psql=A0client=A0has 1 physical network =20
> interfaces with multiple=A0subinterfaces using different IPs.
>
> One of those IP=A0is dedicated to my domain, but it is not servers =20
> default IP address since i share the server.
>
> So the problem that i need to solve is how am i going to be able to =20
> use-select my domains IP address as source=A0to connect to the remote =20
> databases.
>
> Is there any configuration to settle default source IP the client will us=
> e?
>
> At the moment all my attempts to connect to the database=A0make use =20
> of=A0servers default interface IP as source.
>
> Thanks in advance for your help.

easiest way it probably by setting a routing rule, you need
root/adimnistrator to do this.

--
Sent via pgsql-php mailing list (pgsql-php@...)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-php

Re: How to select the source ip address for a connection to the database server

2009-09-06T12:35:32Z

Dimitris Sakellarios wrote:
> Bob hi I would be very interested in giving me some small hint of how you
> did that in PERL so I can start from someplace in PHP.
>
> BR.

Well, stripping it down to the basics, here is what I used:

-------------8<------------------------------
$port = 23 unless $port;
$them = 'localhost' unless $them;
$AF_INET = 2;
$SOCK_STREAM = 1;

$sockaddr = 'S n a4 x8';

($name,$aliases,$proto) = getprotobyname('tcp');
($name,$aliases,$port) = getservbyname($port,'tcp')
unless $port =~ /^\d+$/;;
($name,$aliases,$type,$len,$thisaddr) =
gethostbyname($hostname);
($name,$aliases,$type,$len,$thataddr) = gethostbyname($them);

$this = pack($sockaddr, $AF_INET, 0, $thisaddr);
$that = pack($sockaddr, $AF_INET, $port, $thataddr);

if (socket(S, $AF_INET, $SOCK_STREAM, $proto)) {
print "socket ok\n";
}
else {
die $!;
}

if (bind(S, $this)) {
print "bind ok\n";
}
else {
die $!;
}

if (connect(S,$that)) {
print "connect ok\n";
}
else {
die $!;
}
-------------8<------------------------------

The key is the variable $thisaddr. Put your server's DNS name or IP
address as the parameter for the 'gethostbyname($hostname)' call that
initializes it. That binds the outgoing connection to your IP. In my
test platform I use "gethostbyname('10.3.1.70')", which binds it
directly to one of the three network cards in that computer. The rest is
pretty normal for a socket definition.

But as I said, this is pretty low level. It doesn't use any of the
socket libraries or classes most people favor for Perl coding these
days. If you need more ideas, I located this code again today doing a
Google search on "Perl socket bind connect".

Good luck,

Bob McConnell
N2SPP

--
Sent via pgsql-php mailing list (pgsql-php@...)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-php

Re: How to select the source ip address for a connection to the database server

2009-09-06T06:13:26Z

Bob hi I would be very interested in giving me some small hint of how you
did that in PERL so I can start from someplace in PHP.

BR.

-----Original Message-----
From: pgsql-php-owner@... [mailto:pgsql-php-owner@...]
On Behalf Of Bob McConnell
Sent: Sunday, September 06, 2009 3:58 AM
To: dimitris.sakellarios@...
Cc: pgsql-php@...
Subject: Re: [PHP] How to select the source ip address for a connection to
the database server

dimitris.sakellarios@... wrote:

>
> I am currently working with PHP5+PGSQL 8.2.13 and i have the following
> problem to solve and i need your help.
>
> The server hosting PHP+psql client has 1 physical network interfaces
> with multiple subinterfaces using different IPs.
>
> One of those IP is dedicated to my domain, but it is not servers
> default IP address since i share the server.
>
> So the problem that i need to solve is how am i going to be able to
> use-select my domains IP address as source to connect to the remote
> databases.
>
> Is there any configuration to settle default source IP the client will
> use?
>
> At the moment all my attempts to connect to the database make use
> of servers default interface IP as source.
>
> Thanks in advance for your help.

That is the way sockets normally work, the primary address is always
used for outgoing connections. It can not be changed without some low
level programming. It is necessary to bind the socket to the specific IP
address before opening the connection. I have done it with Perl, but not
PHP.

Bob McConnell
N2SPP

--
Sent via pgsql-php mailing list (pgsql-php@...)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-php

__________ Information from ESET NOD32 Antivirus, version of virus signature
database 4398 (20090905) __________

The message was checked by ESET NOD32 Antivirus.

http://www.eset.com

__________ Information from ESET NOD32 Antivirus, version of virus signature
database 4398 (20090905) __________

The message was checked by ESET NOD32 Antivirus.

http://www.eset.com

--
Sent via pgsql-php mailing list (pgsql-php@...)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-php

Re: How to select the source ip address for a connection to the database server

2009-09-05T17:57:56Z

dimitris.sakellarios@... wrote:

Re: How to select the source ip address for a connection to the database server

2009-09-04T03:21:20Z

Greg and Anrew thanks for your concern on the issue.

Indeed selecting the source interface - ip would be a great option since for
me (but many other) trying to connect to a secure postgresql server over
internet is must accompanied with username + password + ssl but it is one
more L3 criteria.

And also I feel sure that my application will run whatever the server admin
changes.

Pls let me know if any modification in libpq code could help to bind address
or interface alias temporary.

DS
-----Original Message-----
From: gsstark@... [mailto:gsstark@...] On Behalf Of Greg Stark
Sent: Thursday, September 03, 2009 3:51 PM
To: Andrew McMillan
Cc: dimitris.sakellarios@...; pgsql-php@...
Subject: Re: How to select the source ip address for a connection to the
database server

On Thu, Sep 3, 2009 at 12:31 PM, Andrew McMillan<andrew@...> wrote:
> Nope, unless you're root you're unlikely to be able to choose the source
> address for your connection, and even then it would be tricky.

I don't think you need to be root to select a source address. But
that's not helpful since libpq doesn't support binding to a particular
interface. That would be a useful feature and we should probably add
it to the TODO.

You should note that the source address isn't actually a very secure
way to protect your connections since any other host on that network
could spoof your address.

It sounds like what you're looking for is to control the interface the
packets are routed through. This is separate from the source address
as packets are often routed through multiple hosts along their way.
Routing rules are not something individual applications normally get
involved in. If the connections are being routed through the wrong
interface then you have a global problem, not just with the database
and it requires system-wide configuration changes.

--
greg
http://mit.edu/~gsstark/resume.pdf

__________ Information from ESET NOD32 Antivirus, version of virus signature
database 4393 (20090904) __________

The message was checked by ESET NOD32 Antivirus.

http://www.eset.com

__________ Information from ESET NOD32 Antivirus, version of virus signature
database 4394 (20090904) __________

The message was checked by ESET NOD32 Antivirus.

http://www.eset.com

--
Sent via pgsql-php mailing list (pgsql-php@...)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-php

pg_connect() error

2009-09-03T21:19:59Z

hi guys,

we have a postgres db with a hosting company and have been trying to connect to. error is below.

Warning: pg_connect() [function.pg-connect]: Unable to connect to PostgreSQL server: could not connect to server: Connection refused Is the server running on host "pgdb1.host-ed.net" and accepting TCP/IP connections on port 3306?

from my trawling around google i have found that it could be related to the postgres.conf file and turning on tcpip sockets to true?? (i cannot view/edit any postgres conf files)

oh and those are the host/port details supplied by hosting provider

any help would be appreciated in pointing on the right path.

Cheers

Arun