first commit

system/Database/MySQLi/PreparedQuery.php

@@ -0,0 +1,123 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * This file is part of CodeIgniter 4 framework.
+ *
+ * (c) CodeIgniter Foundation <admin@codeigniter.com>
+ *
+ * For the full copyright and license information, please view
+ * the LICENSE file that was distributed with this source code.
+ */
+
+namespace CodeIgniter\Database\MySQLi;
+
+use BadMethodCallException;
+use CodeIgniter\Database\BasePreparedQuery;
+use CodeIgniter\Database\Exceptions\DatabaseException;
+use mysqli;
+use mysqli_result;
+use mysqli_sql_exception;
+use mysqli_stmt;
+
+/**
+ * Prepared query for MySQLi
+ *
+ * @extends BasePreparedQuery<mysqli, mysqli_stmt, mysqli_result>
+ */
+class PreparedQuery extends BasePreparedQuery
+{
+    /**
+     * Prepares the query against the database, and saves the connection
+     * info necessary to execute the query later.
+     *
+     * NOTE: This version is based on SQL code. Child classes should
+     * override this method.
+     *
+     * @param array $options Passed to the connection's prepare statement.
+     *                       Unused in the MySQLi driver.
+     */
+    public function _prepare(string $sql, array $options = []): PreparedQuery
+    {
+        // Mysqli driver doesn't like statements
+        // with terminating semicolons.
+        $sql = rtrim($sql, ';');
+
+        if (! $this->statement = $this->db->mysqli->prepare($sql)) {
+            $this->errorCode   = $this->db->mysqli->errno;
+            $this->errorString = $this->db->mysqli->error;
+
+            if ($this->db->DBDebug) {
+                throw new DatabaseException($this->errorString . ' code: ' . $this->errorCode);
+            }
+        }
+
+        return $this;
+    }
+
+    /**
+     * Takes a new set of data and runs it against the currently
+     * prepared query. Upon success, will return a Results object.
+     */
+    public function _execute(array $data): bool
+    {
+        if (! isset($this->statement)) {
+            throw new BadMethodCallException('You must call prepare before trying to execute a prepared statement.');
+        }
+
+        // First off - bind the parameters
+        $bindTypes  = '';
+        $binaryData = [];
+
+        // Determine the type string
+        foreach ($data as $key => $item) {
+            if (is_int($item)) {
+                $bindTypes .= 'i';
+            } elseif (is_numeric($item)) {
+                $bindTypes .= 'd';
+            } elseif (is_string($item) && $this->isBinary($item)) {
+                $bindTypes .= 'b';
+                $binaryData[$key] = $item;
+            } else {
+                $bindTypes .= 's';
+            }
+        }
+
+        // Bind it
+        $this->statement->bind_param($bindTypes, ...$data);
+
+        // Stream binary data
+        foreach ($binaryData as $key => $value) {
+            $this->statement->send_long_data($key, $value);
+        }
+
+        try {
+            return $this->statement->execute();
+        } catch (mysqli_sql_exception $e) {
+            if ($this->db->DBDebug) {
+                throw new DatabaseException($e->getMessage(), $e->getCode(), $e);
+            }
+
+            return false;
+        }
+    }
+
+    /**
+     * Returns the result object for the prepared query or false on failure.
+     *
+     * @return false|mysqli_result
+     */
+    public function _getResult()
+    {
+        return $this->statement->get_result();
+    }
+
+    /**
+     * Deallocate prepared statements.
+     */
+    protected function _close(): bool
+    {
+        return $this->statement->close();
+    }
+}