6 * Supported database schema
8 * owner varchar(128) NOT NULL
9 * nickname varchar(16) NOT NULL
10 * firstname varchar(128)
11 * lastname varchar(128)
12 * email varchar(128) NOT NULL
14 * PRIMARY KEY (owner,nickname)
17 * @copyright 1999-2017 The SquirrelMail Project Team
18 * @license http://opensource.org/licenses/gpl-license.php GNU Public License
20 * @package squirrelmail
21 * @subpackage addressbook
25 * Needs either PDO or the DB functions
26 * Don't display errors here. Error will be set in class constructor function.
28 global $use_pdo, $disable_pdo;
29 if (empty($disable_pdo) && class_exists('PDO'))
35 @include_once
('DB.php');
38 * Address book in a database backend
40 * Backend for personal/shared address book stored in a database,
41 * accessed using the DB-classes in PEAR or PDO, the latter taking
42 * precedence if available..
44 * IMPORTANT: If PDO is not available (it should be installed by
45 * default since PHP 5.1), then the PEAR modules must
46 * be in the include path for this class to work.
48 * An array with the following elements must be passed to
49 * the class constructor (elements marked ? are optional):
51 * dsn => database DNS (see PEAR for syntax, but more or
52 * less it is: mysql://user:pass@hostname/dbname)
53 * table => table to store addresses in (must exist)
54 * owner => current user (owner of address data)
55 * ? name => name of address book
56 * ? writeable => set writeable flag (true/false)
57 * ? listing => enable/disable listing
59 * The table used should have the following columns:
60 * owner, nickname, firstname, lastname, email, label
61 * The pair (owner,nickname) should be unique (primary key).
63 * NOTE. This class should not be used directly. Use the
64 * "AddressBook" class instead.
66 * Three settings that control PDO behavior can be specified in
67 * config/config_local.php if needed:
68 * boolean $disable_pdo SquirrelMail uses PDO by default to access the
69 * user preferences and address book databases, but
70 * setting this to TRUE will cause SquirrelMail to
71 * fall back to using Pear DB instead.
72 * boolean $pdo_show_sql_errors When database errors are encountered,
73 * setting this to TRUE causes the actual
74 * database error to be displayed, otherwise
75 * generic errors are displayed, preventing
76 * internal database information from being
77 * exposed. This should be enabled only for
79 * string $pdo_identifier_quote_char By default, SquirrelMail will quote
80 * table and field names in database
81 * queries with what it thinks is the
82 * appropriate quote character for the
83 * database type being used (backtick
84 * for MySQL (and thus MariaDB), double
85 * quotes for all others), but you can
86 * override the character used by
87 * putting it here, or tell SquirrelMail
88 * NOT to quote identifiers by setting
91 * @package squirrelmail
92 * @subpackage addressbook
94 class abook_database
extends addressbook_backend
{
104 var $bname = 'database';
107 * Data Source Name (connection description)
113 * Character used to quote database table
117 var $identifier_quote_char = '';
120 * Table that stores addresses
127 * Limits list of database entries visible to end user
137 * Enable/disable writing into address book
140 var $writeable = true;
142 * Enable/disable address book listing
147 /* ========================== Private ======================= */
150 * Constructor (PHP5 style, required in some future version of PHP)
151 * @param array $param address book backend options
153 function __construct($param) {
154 $this->sname
= _("Personal Address Book");
156 /* test if PDO or Pear DB classes are available and freak out if necessary */
158 if (!$use_pdo && !class_exists('DB')) {
159 // same error also in db_prefs.php
160 $error = _("Could not find or include PHP PDO or PEAR database functions required for the database backend.") . "\n";
161 $error .= sprintf(_("PDO should come preinstalled with PHP version 5.1 or higher. Otherwise, is PEAR installed, and is the include path set correctly to find %s?"), 'DB.php') . "\n";
162 $error .= _("Please contact your system administrator and report this error.");
163 return $this->set_error($error);
166 if (is_array($param)) {
167 if (empty($param['dsn']) ||
168 empty($param['table']) ||
169 empty($param['owner'])) {
170 return $this->set_error('Invalid parameters');
173 $this->dsn
= $param['dsn'];
174 $this->table
= $param['table'];
175 $this->owner
= $param['owner'];
177 if (!empty($param['name'])) {
178 $this->sname
= $param['name'];
181 if (isset($param['writeable'])) {
182 $this->writeable
= $param['writeable'];
185 if (isset($param['listing'])) {
186 $this->listing
= $param['listing'];
189 // figure out identifier quoting (only used for PDO, though we could change that)
190 global $pdo_identifier_quote_char;
191 if (empty($pdo_identifier_quote_char)) {
192 if (strpos($this->dsn
, 'mysql') === 0)
193 $this->identifier_quote_char
= '`';
195 $this->identifier_quote_char
= '"';
196 } else if ($pdo_identifier_quote_char === 'none')
197 $this->identifier_quote_char
= '';
199 $this->identifier_quote_char
= $pdo_identifier_quote_char;
205 return $this->set_error('Invalid argument to constructor');
210 * Constructor (PHP4 style, kept for compatibility reasons)
211 * @param array $param address book backend options
213 function abook_database($param) {
214 return self
::__construct($param);
219 * @param bool $new new connection if it is true
222 function open($new = false) {
226 /* Return true is file is open and $new is unset */
227 if ($this->dbh
&& !$new) {
231 /* Close old file, if any */
237 // parse and convert DSN to PDO style
238 // Pear's full DSN syntax is one of the following:
239 // phptype(dbsyntax)://username:password@protocol+hostspec/database?option=value
240 // phptype(syntax)://user:pass@protocol(proto_opts)/database
242 // $matches will contain:
246 // 4: hostname (and possible port number) OR protocol (and possible protocol options)
247 // 5: database name (and possible options)
248 // 6: port number (moved from match number 4)
249 // 7: options (moved from match number 5)
250 // 8: protocol (instead of hostname)
251 // 9: protocol options (moved from match number 4/8)
252 //TODO: do we care about supporting cases where no password is given? (this is a legal DSN, but causes an error below)
253 if (!preg_match('|^(.+)://(.+):(.+)@(.+)/(.+)$|i', $this->dsn
, $matches)) {
254 return $this->set_error(_("Could not parse prefs DSN"));
260 if (preg_match('|^(.+):(\d+)$|', $matches[4], $host_port_matches)) {
261 $matches[4] = $host_port_matches[1];
262 $matches[6] = $host_port_matches[2];
264 if (preg_match('|^(.+?)\((.+)\)$|', $matches[4], $protocol_matches)) {
265 $matches[8] = $protocol_matches[1];
266 $matches[9] = $protocol_matches[2];
270 //TODO: currently we just ignore options specified on the end of the DSN
271 if (preg_match('|^(.+?)\?(.+)$|', $matches[5], $database_name_options_matches)) {
272 $matches[5] = $database_name_options_matches[1];
273 $matches[7] = $database_name_options_matches[2];
275 if ($matches[8] === 'unix' && !empty($matches[9]))
276 $pdo_prefs_dsn = $matches[1] . ':unix_socket=' . $matches[9] . ';dbname=' . $matches[5];
278 $pdo_prefs_dsn = $matches[1] . ':host=' . $matches[4] . (!empty($matches[6]) ?
';port=' . $matches[6] : '') . ';dbname=' . $matches[5];
280 $dbh = new PDO($pdo_prefs_dsn, $matches[2], $matches[3]);
281 } catch (Exception
$e) {
282 return $this->set_error(sprintf(_("Database error: %s"), $e->getMessage()));
285 $dbh->setAttribute(PDO
::ATTR_CASE
, PDO
::CASE_LOWER
);
288 $dbh = DB
::connect($this->dsn
, true);
290 if (DB
::isError($dbh)) {
291 return $this->set_error(sprintf(_("Database error: %s"),
292 DB
::errorMessage($dbh)));
296 * field names are lowercased.
297 * We use unquoted identifiers and they use upper case in Oracle
299 $dbh->setOption('portability', DB_PORTABILITY_LOWERCASE
);
307 * Close the file and forget the filehandle
314 $this->dbh
->disconnect();
320 * Determine internal database field name given one of
321 * the SquirrelMail SM_ABOOK_FIELD_* constants
323 * @param integer $field The SM_ABOOK_FIELD_* contant to look up
325 * @return string The desired field name, or the string "ERROR"
326 * if the $field is not understood (the caller
327 * is responsible for handing errors)
330 function get_field_name($field) {
332 case SM_ABOOK_FIELD_NICKNAME
:
334 case SM_ABOOK_FIELD_FIRSTNAME
:
336 case SM_ABOOK_FIELD_LASTNAME
:
338 case SM_ABOOK_FIELD_EMAIL
:
340 case SM_ABOOK_FIELD_LABEL
:
347 /* ========================== Public ======================== */
350 * Search the database
352 * Backend supports only * and ? wildcards. Complex eregs are not supported.
353 * Search is case insensitive.
354 * @param string $expr search expression
355 * @return array search results. boolean false on error
357 function search($expr) {
363 /* To be replaced by advanded search expression parsing */
364 if (is_array($expr)) {
368 // don't allow wide search when listing is disabled.
369 if ($expr=='*' && ! $this->listing
)
372 /* lowercase expression in order to make it case insensitive */
373 $expr = strtolower($expr);
375 /* escape SQL wildcards */
376 $expr = str_replace('_', '\\_', $expr);
377 $expr = str_replace('%', '\\%', $expr);
379 /* Convert wildcards to SQL syntax */
380 $expr = str_replace('?', '_', $expr);
381 $expr = str_replace('*', '%', $expr);
385 global $use_pdo, $pdo_show_sql_errors;
387 if (!($sth = $this->dbh
->prepare('SELECT * FROM ' . $this->identifier_quote_char
. $this->table
. $this->identifier_quote_char
. ' WHERE ' . $this->identifier_quote_char
. 'owner' . $this->identifier_quote_char
. ' = ? AND (LOWER(' . $this->identifier_quote_char
. 'firstname' . $this->identifier_quote_char
. ') LIKE ? ESCAPE ? OR LOWER(' . $this->identifier_quote_char
. 'lastname' . $this->identifier_quote_char
. ') LIKE ? ESCAPE ? OR LOWER(' . $this->identifier_quote_char
. 'email' . $this->identifier_quote_char
. ') LIKE ? ESCAPE ? OR LOWER(' . $this->identifier_quote_char
. 'nickname' . $this->identifier_quote_char
. ') LIKE ? ESCAPE ?)'))) {
388 if ($pdo_show_sql_errors)
389 return $this->set_error(sprintf(_("Database error: %s"), implode(' - ', $this->dbh
->errorInfo())));
391 return $this->set_error(sprintf(_("Database error: %s"), _("Could not prepare query")));
393 if (!($res = $sth->execute(array($this->owner
, $expr, '\\', $expr, '\\', $expr, '\\', $expr, '\\')))) {
394 if ($pdo_show_sql_errors)
395 return $this->set_error(sprintf(_("Database error: %s"), implode(' - ', $sth->errorInfo())));
397 return $this->set_error(sprintf(_("Database error: %s"), _("Could not execute query")));
400 while ($row = $sth->fetch(PDO
::FETCH_ASSOC
)) {
401 array_push($ret, array('nickname' => $row['nickname'],
402 'name' => $this->fullname($row['firstname'], $row['lastname']),
403 'firstname' => $row['firstname'],
404 'lastname' => $row['lastname'],
405 'email' => $row['email'],
406 'label' => $row['label'],
407 'backend' => $this->bnum
,
408 'source' => &$this->sname
));
412 $expr = $this->dbh
->quoteString($expr);
414 /* create escape expression */
415 $escape = 'ESCAPE \'' . $this->dbh
->quoteString('\\') . '\'';
417 $query = sprintf("SELECT * FROM %s WHERE owner='%s' AND " .
418 "(LOWER(firstname) LIKE '%s' %s " .
419 "OR LOWER(lastname) LIKE '%s' %s " .
420 "OR LOWER(email) LIKE '%s' %s " .
421 "OR LOWER(nickname) LIKE '%s' %s)",
422 $this->table
, $this->owner
, $expr, $escape, $expr, $escape,
423 $expr, $escape, $expr, $escape);
424 $res = $this->dbh
->query($query);
426 if (DB
::isError($res)) {
427 return $this->set_error(sprintf(_("Database error: %s"),
428 DB
::errorMessage($res)));
431 while ($row = $res->fetchRow(DB_FETCHMODE_ASSOC
)) {
432 array_push($ret, array('nickname' => $row['nickname'],
433 'name' => $this->fullname($row['firstname'], $row['lastname']),
434 'firstname' => $row['firstname'],
435 'lastname' => $row['lastname'],
436 'email' => $row['email'],
437 'label' => $row['label'],
438 'backend' => $this->bnum
,
439 'source' => &$this->sname
));
446 * Lookup an address by the indicated field.
448 * @param string $value The value to look up
449 * @param integer $field The field to look in, should be one
450 * of the SM_ABOOK_FIELD_* constants
451 * defined in include/constants.php
452 * (OPTIONAL; defaults to nickname field)
453 * NOTE: uniqueness is only guaranteed
454 * when the nickname field is used here;
455 * otherwise, the first matching address
458 * @return array Array with lookup results when the value
459 * was found, an empty array if the value was
463 function lookup($value, $field=SM_ABOOK_FIELD_NICKNAME
) {
468 $value = strtolower($value);
470 if (!$this->open()) {
474 $db_field = $this->get_field_name($field);
475 if ($db_field == 'ERROR') {
476 return $this->set_error(sprintf(_("Unknown field name: %s"), $field));
479 global $use_pdo, $pdo_show_sql_errors;
481 if (!($sth = $this->dbh
->prepare('SELECT * FROM ' . $this->identifier_quote_char
. $this->table
. $this->identifier_quote_char
. ' WHERE ' . $this->identifier_quote_char
. 'owner' . $this->identifier_quote_char
. ' = ? AND LOWER(' . $this->identifier_quote_char
. $db_field . $this->identifier_quote_char
. ') = ?'))) {
482 if ($pdo_show_sql_errors)
483 return $this->set_error(sprintf(_("Database error: %s"), implode(' - ', $this->dbh
->errorInfo())));
485 return $this->set_error(sprintf(_("Database error: %s"), _("Could not prepare query")));
487 if (!($res = $sth->execute(array($this->owner
, $value)))) {
488 if ($pdo_show_sql_errors)
489 return $this->set_error(sprintf(_("Database error: %s"), implode(' - ', $sth->errorInfo())));
491 return $this->set_error(sprintf(_("Database error: %s"), _("Could not execute query")));
494 if ($row = $sth->fetch(PDO
::FETCH_ASSOC
)) {
495 return array('nickname' => $row['nickname'],
496 'name' => $this->fullname($row['firstname'], $row['lastname']),
497 'firstname' => $row['firstname'],
498 'lastname' => $row['lastname'],
499 'email' => $row['email'],
500 'label' => $row['label'],
501 'backend' => $this->bnum
,
502 'source' => &$this->sname
);
506 $query = sprintf("SELECT * FROM %s WHERE owner = '%s' AND LOWER(%s) = '%s'",
507 $this->table
, $this->owner
, $db_field,
508 $this->dbh
->quoteString($value));
510 $res = $this->dbh
->query($query);
512 if (DB
::isError($res)) {
513 return $this->set_error(sprintf(_("Database error: %s"),
514 DB
::errorMessage($res)));
517 if ($row = $res->fetchRow(DB_FETCHMODE_ASSOC
)) {
518 return array('nickname' => $row['nickname'],
519 'name' => $this->fullname($row['firstname'], $row['lastname']),
520 'firstname' => $row['firstname'],
521 'lastname' => $row['lastname'],
522 'email' => $row['email'],
523 'label' => $row['label'],
524 'backend' => $this->bnum
,
525 'source' => &$this->sname
);
534 * @return array search results
536 function list_addr() {
538 if (!$this->open()) {
542 if(isset($this->listing
) && !$this->listing
) {
547 global $use_pdo, $pdo_show_sql_errors;
549 if (!($sth = $this->dbh
->prepare('SELECT * FROM ' . $this->identifier_quote_char
. $this->table
. $this->identifier_quote_char
. ' WHERE ' . $this->identifier_quote_char
. 'owner' . $this->identifier_quote_char
. ' = ?'))) {
550 if ($pdo_show_sql_errors)
551 return $this->set_error(sprintf(_("Database error: %s"), implode(' - ', $this->dbh
->errorInfo())));
553 return $this->set_error(sprintf(_("Database error: %s"), _("Could not prepare query")));
555 if (!($res = $sth->execute(array($this->owner
)))) {
556 if ($pdo_show_sql_errors)
557 return $this->set_error(sprintf(_("Database error: %s"), implode(' - ', $sth->errorInfo())));
559 return $this->set_error(sprintf(_("Database error: %s"), _("Could not execute query")));
562 while ($row = $sth->fetch(PDO
::FETCH_ASSOC
)) {
563 array_push($ret, array('nickname' => $row['nickname'],
564 'name' => $this->fullname($row['firstname'], $row['lastname']),
565 'firstname' => $row['firstname'],
566 'lastname' => $row['lastname'],
567 'email' => $row['email'],
568 'label' => $row['label'],
569 'backend' => $this->bnum
,
570 'source' => &$this->sname
));
573 $query = sprintf("SELECT * FROM %s WHERE owner='%s'",
574 $this->table
, $this->owner
);
576 $res = $this->dbh
->query($query);
578 if (DB
::isError($res)) {
579 return $this->set_error(sprintf(_("Database error: %s"),
580 DB
::errorMessage($res)));
583 while ($row = $res->fetchRow(DB_FETCHMODE_ASSOC
)) {
584 array_push($ret, array('nickname' => $row['nickname'],
585 'name' => $this->fullname($row['firstname'], $row['lastname']),
586 'firstname' => $row['firstname'],
587 'lastname' => $row['lastname'],
588 'email' => $row['email'],
589 'label' => $row['label'],
590 'backend' => $this->bnum
,
591 'source' => &$this->sname
));
600 * @param array $userdata added data
603 function add($userdata) {
604 if (!$this->writeable
) {
605 return $this->set_error(_("Address book is read-only"));
608 if (!$this->open()) {
612 // NB: if you want to check for some unwanted characters
613 // or other problems, do so here like this:
614 // TODO: Should pull all validation code out into a separate function
615 //if (strpos($userdata['nickname'], ' ')) {
616 // return $this->set_error(_("Nickname contains illegal characters"));
619 /* See if user exist already */
620 $ret = $this->lookup($userdata['nickname']);
622 return $this->set_error(sprintf(_("User \"%s\" already exists"), $ret['nickname']));
625 global $use_pdo, $pdo_show_sql_errors;
627 if (!($sth = $this->dbh
->prepare('INSERT INTO ' . $this->identifier_quote_char
. $this->table
. $this->identifier_quote_char
. ' (' . $this->identifier_quote_char
. 'owner' . $this->identifier_quote_char
. ', ' . $this->identifier_quote_char
. 'nickname' . $this->identifier_quote_char
. ', ' . $this->identifier_quote_char
. 'firstname' . $this->identifier_quote_char
. ', ' . $this->identifier_quote_char
. 'lastname' . $this->identifier_quote_char
. ', ' . $this->identifier_quote_char
. 'email' . $this->identifier_quote_char
. ', ' . $this->identifier_quote_char
. 'label' . $this->identifier_quote_char
. ') VALUES (?, ?, ?, ?, ?, ?)'))) {
628 if ($pdo_show_sql_errors)
629 return $this->set_error(sprintf(_("Database error: %s"), implode(' - ', $this->dbh
->errorInfo())));
631 return $this->set_error(sprintf(_("Database error: %s"), _("Could not prepare query")));
633 if (!($res = $sth->execute(array($this->owner
, $userdata['nickname'], $userdata['firstname'], (!empty($userdata['lastname']) ?
$userdata['lastname'] : ''), $userdata['email'], (!empty($userdata['label']) ?
$userdata['label'] : ''))))) {
634 if ($pdo_show_sql_errors)
635 return $this->set_error(sprintf(_("Database error: %s"), implode(' - ', $sth->errorInfo())));
637 return $this->set_error(sprintf(_("Database error: %s"), _("Could not execute query")));
641 $query = sprintf("INSERT INTO %s (owner, nickname, firstname, " .
642 "lastname, email, label) VALUES('%s','%s','%s'," .
644 $this->table
, $this->owner
,
645 $this->dbh
->quoteString($userdata['nickname']),
646 $this->dbh
->quoteString($userdata['firstname']),
647 $this->dbh
->quoteString((!empty($userdata['lastname'])?
$userdata['lastname']:'')),
648 $this->dbh
->quoteString($userdata['email']),
649 $this->dbh
->quoteString((!empty($userdata['label'])?
$userdata['label']:'')) );
652 $r = $this->dbh
->simpleQuery($query);
654 /* Check for errors */
655 if (DB
::isError($r)) {
656 return $this->set_error(sprintf(_("Database error: %s"),
657 DB
::errorMessage($r)));
665 * Deletes address book entries
666 * @param array $alias aliases that have to be deleted. numerical
667 * array with nickname values
670 function remove($alias) {
671 if (!$this->writeable
) {
672 return $this->set_error(_("Address book is read-only"));
675 if (!$this->open()) {
679 global $use_pdo, $pdo_show_sql_errors;
683 $where_clause_args = array();
684 while (list($undef, $nickname) = each($alias)) {
685 $where_clause .= $sepstr . $this->identifier_quote_char
. 'nickname' . $this->identifier_quote_char
. ' = ?';
686 $where_clause_args[] = $nickname;
689 if (!($sth = $this->dbh
->prepare('DELETE FROM ' . $this->identifier_quote_char
. $this->table
. $this->identifier_quote_char
. ' WHERE ' . $this->identifier_quote_char
. 'owner' . $this->identifier_quote_char
. ' = ? AND (' . $where_clause . ')'))) {
690 if ($pdo_show_sql_errors)
691 return $this->set_error(sprintf(_("Database error: %s"), implode(' - ', $this->dbh
->errorInfo())));
693 return $this->set_error(sprintf(_("Database error: %s"), _("Could not prepare query")));
695 array_unshift($where_clause_args, $this->owner
);
696 if (!($res = $sth->execute($where_clause_args))) {
697 if ($pdo_show_sql_errors)
698 return $this->set_error(sprintf(_("Database error: %s"), implode(' - ', $sth->errorInfo())));
700 return $this->set_error(sprintf(_("Database error: %s"), _("Could not execute query")));
704 $query = sprintf("DELETE FROM %s WHERE owner='%s' AND (",
705 $this->table
, $this->owner
);
708 while (list($undef, $nickname) = each($alias)) {
709 $query .= sprintf("%s nickname='%s' ", $sepstr,
710 $this->dbh
->quoteString($nickname));
716 $r = $this->dbh
->simpleQuery($query);
718 /* Check for errors */
719 if (DB
::isError($r)) {
720 return $this->set_error(sprintf(_("Database error: %s"),
721 DB
::errorMessage($r)));
730 * @param string $alias modified alias
731 * @param array $userdata new data
734 function modify($alias, $userdata) {
735 if (!$this->writeable
) {
736 return $this->set_error(_("Address book is read-only"));
739 if (!$this->open()) {
743 // NB: if you want to check for some unwanted characters
744 // or other problems, do so here like this:
745 // TODO: Should pull all validation code out into a separate function
746 //if (strpos($userdata['nickname'], ' ')) {
747 // return $this->set_error(_("Nickname contains illegal characters"));
750 /* See if user exist */
751 $ret = $this->lookup($alias);
753 return $this->set_error(sprintf(_("User \"%s\" does not exist"),$alias));
756 /* make sure that new nickname is not used */
757 if (strtolower($alias) != strtolower($userdata['nickname'])) {
758 /* same check as in add() */
759 $ret = $this->lookup($userdata['nickname']);
761 $error = sprintf(_("User '%s' already exist."), $ret['nickname']);
762 return $this->set_error($error);
766 global $use_pdo, $pdo_show_sql_errors;
768 if (!($sth = $this->dbh
->prepare('UPDATE ' . $this->identifier_quote_char
. $this->table
. $this->identifier_quote_char
. ' SET ' . $this->identifier_quote_char
. 'nickname' . $this->identifier_quote_char
. ' = ?, ' . $this->identifier_quote_char
. 'firstname' . $this->identifier_quote_char
. ' = ?, ' . $this->identifier_quote_char
. 'lastname' . $this->identifier_quote_char
. ' = ?, ' . $this->identifier_quote_char
. 'email' . $this->identifier_quote_char
. ' = ?, ' . $this->identifier_quote_char
. 'label' . $this->identifier_quote_char
. ' = ? WHERE ' . $this->identifier_quote_char
. 'owner' . $this->identifier_quote_char
. ' = ? AND ' . $this->identifier_quote_char
. 'nickname' . $this->identifier_quote_char
. ' = ?'))) {
769 if ($pdo_show_sql_errors)
770 return $this->set_error(sprintf(_("Database error: %s"), implode(' - ', $this->dbh
->errorInfo())));
772 return $this->set_error(sprintf(_("Database error: %s"), _("Could not prepare query")));
774 if (!($res = $sth->execute(array($userdata['nickname'], $userdata['firstname'], (!empty($userdata['lastname']) ?
$userdata['lastname'] : ''), $userdata['email'], (!empty($userdata['label']) ?
$userdata['label'] : ''), $this->owner
, $alias)))) {
775 if ($pdo_show_sql_errors)
776 return $this->set_error(sprintf(_("Database error: %s"), implode(' - ', $sth->errorInfo())));
778 return $this->set_error(sprintf(_("Database error: %s"), _("Could not execute query")));
782 $query = sprintf("UPDATE %s SET nickname='%s', firstname='%s', ".
783 "lastname='%s', email='%s', label='%s' ".
784 "WHERE owner='%s' AND nickname='%s'",
786 $this->dbh
->quoteString($userdata['nickname']),
787 $this->dbh
->quoteString($userdata['firstname']),
788 $this->dbh
->quoteString((!empty($userdata['lastname'])?
$userdata['lastname']:'')),
789 $this->dbh
->quoteString($userdata['email']),
790 $this->dbh
->quoteString((!empty($userdata['label'])?
$userdata['label']:'')),
792 $this->dbh
->quoteString($alias) );
795 $r = $this->dbh
->simpleQuery($query);
797 /* Check for errors */
798 if (DB
::isError($r)) {
799 return $this->set_error(sprintf(_("Database error: %s"),
800 DB
::errorMessage($r)));
806 } /* End of class abook_database */