ZEND PHP 5 Certification STUDY GUIDE

158 ” Database Programming
$author = ’’;
if (ctype_alpha($_GET[’author’]))
{
$author = $_GET[’author’];
}
// Escape the value of $author with quote()
$sql = ’SELECT author.*, book.* FROM author
LEFT JOIN book ON author.id = book.author_id
WHERE author.last_name = ’ . $dbh->quote($author);
// Execute the statement and echo the results
$results = $dbh->query($sql);
foreach ($results as $row)
{
echo "{$row[’title’]}, {$row[’last_name’]}\n";
}
The method PDO::query() returns a PDOStatement object. By default, the fetch
mode for a PDOStatement is PDO::FETCH_BOTH, which means that it will return an
array containing both associative and numeric indexes. It is possible to change the
PDOStatement object to return, for example, an object instead of an array so that
each column in the result set may be accessed as properties of an object instead of
array indices.
$results = $dbh->query($sql);
$results->setFetchMode(PDO::FETCH_OBJ);
foreach ($results as $row)
{
echo "{$row->title}, {$row->last_name}\n";
}
To execute an INSERT, UPDATE, or DELETE statement against a database, PDO provides
the PDO::exec() method. The PDO::exec() method executes an SQL statement and
returns the number of rows affected.
Licensed to 482634 - Amber Barrow (itsadmin@deakin.edu.au)
$sql = "INSERT INTO book (isbn, title, author_id, publisher_id)
VALUES (’0395974682’, ’The Lord of the Rings’, 1, 3)";
$affected = $dbh->exec($sql);
echo "Records affected: {$affected}";