Files
kabano/includes/database.php
copilot-swe-agent[bot] e925e6424a Refine SQL helper escaping
Co-authored-by: LeOSW42 <673670+LeOSW42@users.noreply.github.com>
2026-01-24 12:58:37 +00:00

28 lines
738 B
PHP

<?php
namespace Kabano;
function sql_connect() {
global $config;
$connection = "host='".sql_escape_connection_value($config['SQL_host'])."'"
." dbname='".sql_escape_connection_value($config['SQL_db'])."'"
." user='".sql_escape_connection_value($config['SQL_user'])."'"
." password='".sql_escape_connection_value($config['SQL_pass'])."'";
$con = pg_connect($connection);
if (!$con) {
$error = error_get_last();
$message = $error && isset($error['message']) ? $error['message'] : "unknown error";
die("Could not connect to server: ".$message."\n");
}
return $con;
}
function sql_escape_connection_value($value) {
$value = (string)$value;
$value = str_replace("\0", '', $value);
return pg_escape_string($value);
}