hphp/test/zend/bad/ext-pgsql/08escape.php

   1 <?php
   2
   3 include 'config.inc';
   4 define('FILE_NAME', dirname(__FILE__) . '/php.gif');
   5
   6 // pg_escape_string() test
   7 $before = "ABC\\ABC\'";
   8 $expect  = "ABC\\\\ABC\\'";
   9 $expect2  = "ABC\\\\ABC\\\\''"; //the way escape string differs from PostgreSQL 9.0
  10 $after = pg_escape_string($before);
  11 if ($expect === $after || $expect2 === $after) {
  12         echo "pg_escape_string() is Ok\n";
  13 }
  14 else {
  15         echo "pg_escape_string() is NOT Ok\n";
  16         var_dump($before);
  17         var_dump($after);
  18         var_dump($expect);
  19 }
  20
  21 // pg_escape_bytea() test
  22 $before = "ABC\\ABC";
  23 $expect  = "ABC\\\\\\\\ABC";
  24 $after  = pg_escape_bytea($before);
  25 if ($expect === $after) {
  26         echo "pg_escape_bytea() is Ok\n";
  27 }
  28 else {
  29         echo "pg_escape_byte() is NOT Ok\n";
  30         var_dump($before);
  31         var_dump($after);
  32         var_dump($expect);
  33 }
  34
  35 // Test using database
  36 $data = file_get_contents(FILE_NAME);
  37 $db   = pg_connect($conn_str);
  38
  39 // Insert binary to DB
  40 $escaped_data = pg_escape_bytea($data);
  41 pg_query("DELETE FROM ".$table_name." WHERE num = -9999;");
  42 $sql = "INSERT INTO ".$table_name." (num, bin) VALUES (-9999, CAST ('".$escaped_data."' AS BYTEA));";
  43 pg_query($db, $sql);
  44
  45 // Retrieve binary from DB
  46 $sql = "SELECT bin::bytea FROM ".$table_name." WHERE num = -9999";
  47 $result = pg_query($db, $sql);
  48 $row = pg_fetch_array($result, 0, PGSQL_ASSOC);
  49
  50 if ($data === pg_unescape_bytea($row['bin'])) {
  51         echo "pg_escape_bytea() actually works with database\n";
  52 }
  53 else {
  54         echo "pg_escape_bytea() is broken\n";
  55 }
  56
  57 // pg_escape_literal/pg_escape_identifier
  58 $before = "ABC\\ABC\'";
  59 $expect  = " E'ABC\\\\ABC\\\\'''";
  60 $after = pg_escape_literal($before);
  61 if ($expect === $after) {
  62         echo "pg_escape_literal() is Ok\n";
  63 }
  64 else {
  65         echo "pg_escape_literal() is NOT Ok\n";
  66         var_dump($before);
  67         var_dump($after);
  68         var_dump($expect);
  69 }
  70
  71 $before = "ABC\\ABC\'";
  72 $expect  = "\"ABC\ABC\'\"";
  73 $after = pg_escape_identifier($before);
  74 if ($expect === $after) {
  75         echo "pg_escape_identifier() is Ok\n";
  76 }
  77 else {
  78         echo "pg_escape_identifier() is NOT Ok\n";
  79         var_dump($before);
  80         var_dump($after);
  81         var_dump($expect);
  82 }
  83
  84 ?>