pg_delete
(PHP 4 >= 4.3.0, PHP 5, PHP 7, PHP 8)
pg_delete —
Deletes records
Description
If flags is specified,
pg_convert() is applied to
conditions with the specified flags.
By default pg_delete() passes raw values.
Values must be escaped or the PGSQL_DML_ESCAPE flag
must be specified in flags.
PGSQL_DML_ESCAPE quotes and escapes parameters/identifiers.
Therefore, table/column names become case sensitive.
Note that neither escape nor prepared query can protect LIKE query,
JSON, Array, Regex, etc. These parameters should be handled
according to their contexts. i.e. Escape/validate values.
Examples
Example #1 pg_delete() example
<?php
$db = pg_connect('dbname=foo');
// This is safe somewhat, since all values are escaped.
// However PostgreSQL supports JSON/Array. These are not
// safe by neither escape nor prepared query.
$res = pg_delete($db, 'post_log', $_POST, PG_DML_ESCAPE);
if ($res) {
echo "POST data is deleted: $res\n";
} else {
echo "User must have sent wrong inputs\n";
}
?>
See Also
- pg_convert() - Convert associative array values into forms suitable for SQL statements