use prepare for insert when AE is enabled

This commit is contained in:
Jenny Tam 2017-10-06 16:34:49 -07:00
parent 371a8c0442
commit 6eed2f8b5f

View file

@ -351,8 +351,9 @@ function insertRow($conn, $tbname, $inputs, &$r = null, $api = INSERT_QUERY)
break;
}
} else {
// if AE is on, must bind param
// if AE is enabled, must bind param
$insertSql = getInsertSqlPlaceholders($tbname, $inputs);
echo $insertSql . "\n";
$params = array();
foreach ($inputs as $key => $input) {
if (is_object($input)) {
@ -362,12 +363,11 @@ function insertRow($conn, $tbname, $inputs, &$r = null, $api = INSERT_QUERY)
}
}
if ($api == INSERT_PREPARE_PARAMS) {
$stmt = sqlsrv_prepare($conn, $insertSql, $params);
$r = sqlsrv_execute($stmt);
} else {
$stmt = sqlsrv_query($conn, $insertSql, $params);
}
var_dump($params);
// use prepare for inserts when AE is enabled
$stmt = sqlsrv_prepare($conn, $insertSql, $params);
$r = sqlsrv_execute($stmt);
}
return $stmt;
}