LebGeeks Forums

There are a few associative array to presentation kind of views for PHP if that's what you meant. I could use a tip of that myself though.

My post pretty much killed the thread... thought so...

My post pretty much killed the thread... thought so...

Warnock's Dilemma applies.

@rahmu: Rolf didn't say that the post is eliminated necessarily. The code he posted could be handling the posting somewhere internally. I am sure he understands it's impossible to go around the communication back with the server.

Anyway, I started out with the framework, then decided to go back and work from scratch. As usual, I tried writing some general purpose wrapper around MySQL, and failed miserable:

<?php
function query_assoc($sql){
    $set = mysql_query($sql);
    
    if($set === false) return false;
    
    $result = array();
    while($row = mysql_fetch_assoc($set)){
        $result[] = $row;
    }
    
    return $result;
}

function sql_escape($in){
    return mysql_real_escape_string($in);
}

function sql_escape_array($in){
    return array_map("mysql_real_escape_string", $in);
}

function sql_insert($table, &$in){
    if(empty($in)) return;
    
    $keys =
        join(
            ", ",
            array_map(
                "sql_tick",
                sql_escape_array(array_keys($in))
            )
        );
    $values =
        join(
            ", ",
            array_map(
                "sql_quote",
                sql_escape_array(array_values($in))
            )
        );
    
    $sql = "INSERT INTO `$table` ($keys) VALUES ($values)";
    mysql_query($query);
    $in['id'] = mysql_insert_id();
}

function sql_update($from, $row, $condition){
    $sql = "UPDATE $from SET ";
    
    $assigns = array();
    foreach($row as $key => $val){
        $key = sql_tick(sql_escape($key));
        $val = sql_quote(sql_escape($val));
        $assigns[] = "$key = $val";
    }
    
    $sql .= implode(", ", $assigns);
    $sql .= $condition;
}

function sql_select(){
}

function sql_tick($str){
    return "`$str`";
}

function sql_quote($str){
    return "'$str'";
}

/*END OF FILE*/

So I reverted to writing things from scratch. I should be posting all the code somewhere as I've been intending to make it out into a community effort.

rahmu wrote:

No it doesn't work that way.

You need a way to send data to your server so it'd be saved in a database right? The way Apache works is that it expects requests in HTTP, like GET, POST, HEAD, PUT, TRACE, ...

At one point or another, if you are sending the data to Apache (who will then send it to the DB) you have to send a POST request from your browser. As you probably know, POST could be sent from HTML form, or AJAX.

"Magical binding" cannot happen. Moreover, for security reasons, a POST request must be treated server-side before being executed. Your idea of the magic binding (if it existed) would be a great security threat. (You are basically allowing any user to input whatever he wants into your db :-/ )

I think the only real reason why this wouldnt be possible is mentioned after "Moreover". Yep, validation...
You can escape data for MySQL, but if you validate, you'll need a way to send feedback to the user if the validation fails, and I'm still scratching my head over this one. The best I can come up with is sending a success/failure signal back to the javascript to handle.

(BTW what is the TRACE HTTP header?)

You're presuming forms will always be a 1 to 1 mapping with the model in the database which is almost never the case.

Last edited by xterm (30-07-2010 12:01:43 pm)

Kassem wrote:

rolf wrote:

you'll need a way to send feedback to the user if the validation fails, and I'm still scratching my head over this one. The best I can come up with is sending a success/failure signal back to the javascript to handle.

Honestly, I still do not get your point rolf. You just want to send a signal back to the client? Why not use AJAX or a WebSocket?

Yes, I think Ajax would be good. Something like XMPP would be great (because of the ability to "push"). But I'm more interested in the "1 to 1 mapping" (like xterm calls it), I don't really care about how it's done (ajax, posts or whatever).

xterm wrote:

You're presuming forms will always be a 1 to 1 mapping with the model in the database which is almost never the case.

I'm not presuming, but I think most of the time the mapping would be pretty simple, maybe related tables, not much more. Also there might be "conversion" to be made (that's the most annoying thing actually) but nothing that can't be handled by a proper callback system. No? At least that's what I'm thinking.

I know it's not a one to one thing, but it's not rocket science either, that's why I think it is worth trying.

arithma wrote:

You can perhaps reuse phpMyAdmin's code for dealing with tables, or modify it to more suite the needs of the application (and the added references between tables..) This could be an almost ready backend for all your admin needs (almost).

Thanks about the tip. I've thought about that, and I've tried a simpler equivalent of phpMyAdmin (because of the complexity of PMA), but it didnt satisfy me because I found the structure too rigid for my taste, even though it could be themed.

Last edited by rolf (01-08-2010 02:05:13 pm)