mysql_real_escape_string / Говнокод #24273 Ссылка на оригинал

0

  1. 1
  2. 2
  3. 3
  4. 4
  5. 5
  6. 6
  7. 7
  8. 8
  9. 9
  10. 10
  11. 11
  12. 12
  13. 13
  14. 14
  15. 15
  16. 16
  17. 17
  18. 18
  19. 19
  20. 20
  21. 21
  22. 22
  23. 23
  24. 24
  25. 25
  26. 26
  27. 27
  28. 28
  29. 29
  30. 30
  31. 31
  32. 32
  33. 33
  34. 34
  35. 35
  36. 36
  37. 37
  38. 38
  39. 39
  40. 40
  41. 41
  42. 42
  43. 43
  44. 44
  45. 45
  46. 46
  47. 47
  48. 48
  49. 49
  50. 50
  51. 51
  52. 52
  53. 53
  54. 54
  55. 55
  56. 56
  57. 57
  58. 58
  59. 59
  60. 60
  61. 61
  62. 62
  63. 63
  64. 64
  65. 65
  66. 66
  67. 67
  68. 68
  69. 69
  70. 70
  71. 71
  72. 72
  73. 73
  74. 74
  75. 75
  76. 76
  77. 77
  78. 78
  79. 79
  80. 80
  81. 81
  82. 82
  83. 83
  84. 84
  85. 85
  86. 86
  87. 87
  88. 88
  89. 89
  90. 90
  91. 91
  92. 92
  93. 93
"SELECT " +
                    "2 AS recType," +
                    "1 AS cnt," +
                    "''  AS vndName," +
                    "'' AS catName," +
                    "off.orderBy1S AS orderBy1S," +
                    "off._id AS _id," +
                    "off.vendorCode AS vendorCode," +
                    "off.price AS price," +
                    "off.currencyId AS currencyId," +
                    "off.thumbnail AS thumbnail," +
                    "off.name AS name," +
                    "IFNULL(crt.quantity,0) AS quantityItem," +
                    "off.queryRest AS queryRest," +
                    "off.valueRest AS valueRest," +
                    "off.lastChangedRest AS lastChangedRest," +
                    "off.price_uah_ir AS price_uah_ir," +
                    "IFNULL(vlt.[rate],0) AS rate " + //валютный курс для currencyId товара
                    "FROM tOffer AS off " +
                    "LEFT JOIN tCart AS crt ON off.vendorCode=crt.offerId " +
                    "LEFT JOIN tCurrency AS vlt ON off.currencyId=vlt.valute " +

                    "WHERE  off.vendorName='" + BRAND_NAME + "' AND off.categoryId=" + CATEGORY_ID + " AND  (off.name LIKE " + nameFilter + ") " +
                    "UNION " +
                    "SELECT " +
                    "1," +
                    "COUNT(*)," +
                    "MAX(vnd.name)," +
                    "IFNULL(cat.name,'')," +
                    "0," +
                    "0," +
                    "0," +
                    "0," +
                    "''," +
                    "''," +
                    "vnd.name," +
                    "0," +
                    "0," +
                    "''," +
                    "''," +
                    "0," +
                    "0 " +
                    "FROM tOffer AS off " +
                    "LEFT JOIN tVendor AS vnd ON off.vendorName=vnd.name " +
                    "INNER JOIN tCategory AS cat ON off.categoryId=cat._id " +
                    "WHERE  off.vendorName='" + BRAND_NAME + "' AND off.categoryId=" + CATEGORY_ID + " AND  (off.name LIKE " + nameFilter + ") " +
                    "GROUP BY vnd.name HAVING COUNT(*)>0 " +
                    "UNION " +
                    "SELECT " +
                    "3," +
                    "COUNT(*)," +
                    "MAX('Другой товар')," +
                    "''," +
                    "0," +
                    "0," +
                    "0," +
                    "0," +
                    "''," +
                    "''," +
                    "'Другой товар'," +
                    "0," +
                    "0," +
                    "''," +
                    "''," +
                    "0," +
                    "0 " +
                    "FROM tOffer AS off " +
                    "WHERE  off.vendorName<>'" + BRAND_NAME + "' AND  (off.name LIKE " + nameFilter + ") " +
                    "GROUP BY 'Другой товар' HAVING COUNT(*)>0 " +
                    "UNION " +
                    "SELECT " +
                    "4," +
                    "1," +
                    "''," +
                    "''," +
                    "off.orderBy1S," +
                    "off._id," +
                    "off.vendorCode," +
                    "off.price," +
                    "off.currencyId," +
                    "off.thumbnail," +
                    "off.name," +
                    "IFNULL(crt.quantity,0)," +
                    "off.queryRest," +
                    "off.valueRest," +
                    "off.lastChangedRest," +
                    "off.price_uah_ir," +
                    "IFNULL(vlt.[rate],0) " + //валютный курс для currencyId товара
                    "FROM tOffer AS off " +
                    "LEFT JOIN tCart AS crt ON off.vendorCode=crt.offerId " +
                    "LEFT JOIN tCurrency AS vlt ON off.currencyId=vlt.valute " +
                    "WHERE  off.vendorName<>'" + BRAND_NAME + "' AND  (off.name LIKE " + nameFilter + ") " +
                    "ORDER BY  recType,orderBy1S ";

Комменты говорят, что это поиск по бренду и названию

Запостил: makesense makesense, (Updated )

Комментарии (5) RSS

Добавить комментарий

Помни, guest, за тобой могут следить!

    А не использовать ли нам bbcode?


    8