Paul/Security-VM
1
0 Fork 0
Code Issues Pull Requests Releases Wiki Activity

Switched to mysqli

Browse Source
This commit is contained in:
Paul committed 2014-02-25 17:38:01 +01:00
1 parent 355afdc3ed
commit 456a8c474d
3 files changed
+19 -29
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

webshop/index.php
+6 -10
View File
@@ -11,7 +11,7 @@
<link href="/themes/css/base.css" rel="stylesheet" media="screen"/>
<link href="/themes/css/bootstrap-responsive.min.css" rel="stylesheet"/>
<link href="/themes/css/font-awesome.css" rel="stylesheet" type="text/css">
<!-- De code in dit bestand is met opzet slecht en zeer onveilig opgezet.
GEBRUIK DEZE CODE NIET als referentiemateriaal voor je eigen PHP projecten! -->
</head>
@@ -65,17 +65,13 @@
/**
* Maak verbinding met de database
*/
$connection = mysql_connect('localhost', 'webshop', 'pass')
$connection = new mysqli('localhost', 'webshop', 'pass', 'webshop')
or die('Kan geen verbinding maken met MySQL');
$db = mysql_select_db('webshop', $connection)
or die('Kan de database niet selecteren');
$result = $connection->query("SELECT * FROM producten")
or die('Query error: ' . $connection->error);
$result = mysql_query("SELECT * FROM producten")
or die('Query error: ' . mysql_error());
while ($row = mysql_fetch_array($result)) {
while ($row = $result->fetch_array()) {
?>
<li class="span3">
@@ -94,7 +90,7 @@ while ($row = mysql_fetch_array($result)) {
<?php
}
mysql_close($connection);
$connection->close();
?>
</ul>
<hr class="soft"/>
webshop/product_detail.php
+6 -9
View File
@@ -56,20 +56,17 @@
/**
* Maak verbinding met de database
*/
$connection = mysql_connect('localhost', 'webshop', 'pass')
$connection = new mysqli('localhost', 'webshop', 'pass', 'webshop')
or die('Kan geen verbinding maken met MySQL');
$db = mysql_select_db('webshop', $connection)
or die('Could not select database');
$query = 'SELECT naam, afbeelding, beschrijving, prijs FROM producten WHERE id = ' . $connection->real_escape_string($_GET['id']);
$query = 'SELECT naam, afbeelding, beschrijving, prijs FROM producten WHERE id = ' . mysql_real_escape_string($_GET['id']);
$result = $connection->query($query)
or die('<div class="alert alert-danger">Query error: <pre>' . $connection->error . '</pre>Query: <code>' . $query . '</code> </div>');
$result = mysql_query($query)
or die('<div class="alert alert-danger">Query error: <pre>' . mysql_error() . '</pre>Query: <code>' . $query . '</code> </div>');
$row = $result->fetch_array();
$row = mysql_fetch_array($result);
mysql_close($connection);
$connection->close();
?>
<div class="row">