Bright Cherry » MySQL & PHP

PHP / MySQL – Strip Content And Only Display Images From A MySQL Table

Maruf — Sun, 20 Jun 2010 20:56:10 +0000

This is another one of those quite specific pieces of code, so I doubt many people will need it. I think the code is quite useful, so I thought i’d make a post about it. Anyways, I’m going to show you how you can pull just images out of a field in a MySQL table. I used this code yesterday, to specifically pull out all images from a WordPress Blog – to look at all the images that have been posted in ALL articles.

What the following PHP/MySQL code will specifcally deliver…

It will pull out ONLY images
If one field has multiple images, it will display ALL of them

View Code PHP

//this query will only get the rows that have images in them
$sql =
"SELECT [field]
FROM [table]
WHERE [field] LIKE '%;
//execute the query
$result = mysql_query($sql);
//loop the results
while($row = mysql_fetch_array($result))
{
 //this is the magic - preg_match matches all the images saves them into an array called images[]
 preg_match_all('/]+>/i',$row['ENTER FIELD'],$images[]);
}
 
//echo out all the images
print_r($images);

That’s it! The print_r will show you all the images when you load the page. The preg_match_all line can actually be used with any string to pull out image references (or whatever regulat expression you require). I’m just specifcially demonstrating how I used it with WordPress/images.

If you don’t want to see the images, and just want to see the actual image URL’s, you can do the following…

View Code PHP

//put the images[] array into a foreach loop
foreach($images as $image)
{
  //because each entry may have multiple images, we have to loop through each row to get each image
  foreach($image[0] as $img)
  {
    //remove the  tag
    $img = str_replace(','', $img);
    //explode each image by double quotes (or single quotes depending on how you quote your images), so we know where the image URL ends!
    $img = explode('" ', $img);
    //rename the image URL to $file for ease
    $file = $img[0];
   //echo out each image URL
    echo $file . "
";;
  }
}

Please let mw know if anyone actually uses this code and how useful it was…

PHP/MySQL- Escape All POST Or GET Variables For MySQL INSERT

Maruf — Tue, 16 Feb 2010 19:26:58 +0000

I’m quickly going to demonstrate how to escape special characters in a string for all POST/GET variables safe for a MySQL INSERT query when passing values from a HTML form.

So, let’s say we have a form like this on index.php:

View Code HTML



Details

First Name:





Surname:





Email:

The form’s action is insert.php, so whichever method you choose (GET/POST) will get passed to insert.php. Now, before you INSERT the data into a MySQL table, you should ensure the data is safe to INSERT.

The PHP function you should use is mysql_real_escape_string.

You can do the following before inserting the data (assuming the method type is POST):

View Code PHP

1
2
3

$_POST['first_name'] = mysql_real_escape_string($_POST['first_name']);
$_POST['surname'] = mysql_real_escape_string($_POST['surname']);
$_POST['email'] = mysql_real_escape_string($_POST['email']);

But that’s not a very efficient method because you’re repeating the same function over and over, and if the form you’re using has a lot more fields, it will quickly become very problematic for a number of reasons.

Here’s a better and more efficient way of cleaning the data:

View Code PHP

foreach(array_keys($_POST) as $key)
{
  $clean[$key] = mysql_real_escape_string($_POST[$key]);
}

So what’s happening now is that ALL the POST variables are being cleaned in the foreach loop. You’re also renaming the POST values to $clean, but keeping the actual key value the same – so to echo the values you simply do this:

View Code PHP

1
2
3

echo $clean['first_name'];
echo $clean['surname'];
echo $clean['email'];

It’s as easy as that

MySQL & PHP- Show Tables In Database

Maruf — Fri, 14 Nov 2008 09:01:00 +0000

Someone asked me the other day how to display the existing tables in their database with a PHP script. The query itself is pretty simple, but people seem to get confused about the PHP side of it. Then again, once you look at the code, you might be surprised how easy it really is…

Printing tables with PHP

View Code PHP


$showtablequery = "
	SHOW TABLES
	FROM
	[database]
	";
 
$showtablequery_result	= mysql_query($showtablequery);
while($showtablerow = mysql_fetch_array($showtablequery_result))
{
	echo $showtablerow[0]."
";
}
 
?>

That query will show ALL tables, but you can use a LIKE function in the query as well, to get particular tables only.

Printing particular tables with PHP

View Code PHP


$showtablequery = "
	SHOW TABLES
	FROM
	[database]
	LIKE
	'%brightcherry%'
	";
 
$showtablequery_result	= mysql_query($showtablequery);
while($showtablerow = mysql_fetch_array($showtablequery_result))
{
	echo $showtablerow[0]."
";
}
 
?>

That query will pull out all tables with the word ‘brightcherry’ in.