davidwiesner / simple-database-api

A simple API for Database Access

DBoho\IO\DataAccess

A simple API for Database Access

Features

• Simple API
• prevent SQL injection with automatic whitelist column filter and pdo prepared statements

Install with Composer

$ composer require dboho/simple-database-api

Usage

# select
$result = $da->select('books', ['title'], ['author'=>'Rasmus Lerdorf']);
echo(json_encode($result));

# insert
$da->insert('books', ['title'=>'Using the New DB2', 'author'=>'Don Chamberlin']);

# update
$da->update('books', ['price'=>9.80], ['id'=>1023]);

# delete
$da->delete('books', ['id'=>1021]);

Automatic Whitelist Column Filter

To prevent SQL injection all attributes that are used as column names will be filtered with a whitelist. This whitelist is build for each queried database table.

Example

Books Table

id	title	author	price
1	Programming PHP	Rasmus Lerdorf	39.99

Whitelist for the books table will contain id, title, author and price.

simple-database-api's Issues

Allow native where statements

Allow native where statements for select, update and delete.

Add whitelist cache

Cache the white listed colums. Clear cache on a drop, alter, or create sql statement

Add documentation

Accept simple filter conditions

Allow simple filter conditions as suffix in array keys.
E.g.: $da->select('books', ['price<', 20.0])
Possible suffixes can be: <, >,!, ~