CE Phoenix Cart Forum

Code: Select all

function tep_db_prepare_query($query, $params, $link = 'db') {
    $stmt = $GLOBALS[$link]->prepare($query);
    if ($stmt === false) {
        die('Fehler beim Vorbereiten des Statements: ' . $GLOBALS[$link]->error);
    }

    // Typen und Werte der Parameter extrahieren
    $types = '';
    $values = [];
    foreach ($params as $param) {
        $types .= $param['type'];
        $values[] = $param['value'];
    }

    // Dynamisch die Parameter binden
    $bindParams = array_merge([$types], $values);
    $bindParamsRefs = [];
    foreach ($bindParams as $key => $value) {
        $bindParamsRefs[$key] = &$bindParams[$key];
    }
    call_user_func_array(array($stmt, 'bind_param'), $bindParamsRefs);

    if (!$stmt->execute()) {
        die('Fehler beim Ausführen des Statements: ' . $stmt->error);
    }

    $result = $stmt->get_result(); // Ergebnis-Set abrufen

    return $result; // Ergebnis-Set zurückgeben
}

$query = "SELECT customers_id, customers_firstname FROM customers WHERE customers_firstname = ? AND customers_lastname = ?";
$params = [
    'customers_firstname' => ['value' => $_GET['firstname'], 'type' => 's'],
    'customers_lastname' => ['value' => $_GET['lastname'], 'type' => 's']
];

$test_query = tep_db_prepare_query($query, $params);

while ($row = $test_query->fetch_assoc()) {
    echo "Customer ID: " . $row['customers_id'] . " / " . $row['customers_firstname'] . "<br>";
}

Code: Select all

$params = [
    'customers_firstname' => ['value' => $_GET['firstname'], 'type' => 's'],
    'customers_lastname' => ['value' => $_GET['lastname'], 'type' => 's']
];