RENDER() {
String query = "SELECT * FROM :table WHERE x = :val";
StringMap params;
params["table"] = "TableName";
params["val"] = "Dubious\\Value'Name\nwith;breaks";
MySQL con;
if(con.connect("localhost", "root", ""))
{
echo("connection established\n");
echo("error: "+con.error()+"\n");
echo("quotation test: "+con.escape("‘\"' or 1=1;–.")+"\n");
echo("query parse: "+con.parse_query_parameters(query, params)+"\n");
echo(var_dump(con.query("SHOW DATABASES")));
con.query("USE mysql");
?>
SELECT * FROM user table
echo(var_dump(con.query("SELECT * FROM user")));
}
?>
= var_dump(context->params) ?>}