php操作类
<?php /** +---------------------- * Mysql操作类 +---------------------- * 文件名称 Db.class.php +---------------------- * 文件描述 mysql操作类 +---------------------- */ class Db{ //数据库连接标识 protected $link = null; //当前操作的表 public $table = ''; //查询参数 protected $options = array(); //当前执行的SQL语句 protected $sql = ''; //用什么编码传递数据 protected $dbCharset = 'utf8'; //缓存路径 protected $cachePath = './cache/'; //缓存扩展名 protected $cacheFileExt = "php"; //缓存文件名 protected $cacheFileName; //是否缓存 protected $cache = false; //缓存更新时间秒数 protected $cacheLimitTime = 60; //数据返回类型, 1代表数组, 2代表对象 protected $returnType = 1; /* * 根据当前动态文件生成缓存文件名 */ function setCacheFileName($fileName) { $cacheFileName = $this->cachePath . strtoupper(md5($fileName)).".".$this->cacheFileExt; $this->cacheFileName=$cacheFileName; } /* * 根据当前动态文件生成缓存文件名 */ function getCacheFileName() { return $this->cacheFileName; } /** * 连接数据库 * * @access public * @param array $db 数据库配置 * @return resource 数据库连接标识 */ public function connect($db){ //根据配置使用不同函数连接数据库 $db['host'] = isset($db['port']) ? $db['host'].':'.$db['port']: $db['host']; $db['char'] = isset($db['char']) ? $db['char']: $this->dbCharset; $func = $db['pconnect'] ? 'mysql_pconnect' : 'mysql_connect'; $this->link = $func($db['host'], $db['user'], $db['pwd']); mysql_select_db($db['database'], $this->link); mysql_query("SET NAMES '{$db['char']}'"); $this->cachePath = isset($db['cachepath']) ? $db['cachepath']: $this->cachePath; return $this->link; } /** * 查询符合条件的一条记录 * * @access public * @param string $where 查询条件 * @param string $field 查询字段 * @param string $table 表 * @return mixed 符合条件的记录 */ public function find($where = NULL, $field = '*', $table = ''){ return $this->findAll($where = NULL, $field = '*', $table = '', FALSE); } /** * 查询符合条件的所有记录 * * @access public * @param string $where 查询条件 * @param string $field 查询字段 * @param string $table 表 * @return mixed 符合条件的记录 */ public function findAll($where = NULL, $field = '*', $table = '', $all = TRUE){ $this->options['where'] = is_null($where) ? @$this->options['where']: $where; $this->options['field'] = isset($this->options['field']) ? $this->options['field']: $field; $this->options['table'] = $table == '' ? $this->table: $table; $sql = "SELECT {$this->options['field']} FROM `{$this->options['table']}` "; $sql .= isset($this->options['join']) ? ' LEFT JOIN '.$this->options['join']: ''; $sql .= isset($this->options['where']) ? ' WHERE '.$this->options['where']: ''; $sql .= isset($this->options['group']) ? ' GROUP BY '.$this->options['group']: ''; $sql .= isset($this->options['having']) ? ' HAVING '.$this->options['having']: ''; $sql .= isset($this->options['order']) ? ' ORDER BY '.$this->options['order']: ''; $sql .= isset($this->options['limit']) ? ' LIMIT '.$this->options['limit']: ''; $this->sql = $sql; $row = NULL; //如果开启了缓存, 那么重缓存中获取数据 if ($this->cache === TRUE){ $this->setCacheFileName($this->sql); $row = $this->readCache(); } //如果读取失败, 或则没有开启缓存 if (is_null($row)){ $result = $this->query(); $row = $all === TRUE ? $this->fetchAll($result): $this->fetch($result); //如果开启了缓存, 那么就写入 if ($this->cache === TRUE){ $this->writeCache($row); } $this->options = array(); } return $row; } /** * 读取结果集中的所有记录到数组中 * * @access public * @param resource $result 结果集 * @return array */ public function fetchAll($result = NULL){ $rows = array(); while ($row = $this->fetch($result)){ $rows[] = $row; } return $rows; } /** * 读取结果集中的一行记录到数组中 * * @access public * @param resource $result 结果集 * @param int $type 返回类型, 1为数组, 2为对象 * @return mixed 根据返回类型返回 */ public function fetch($result = NULL, $type = NULL){ $result = is_null($result) ? $this->result: $result; $type = is_null($type) ? $this->returnType: $type; $func = $type === 1 ? 'mysql_fetch_assoc' : 'mysql_fetch_object'; return $func($result); } /** * 执行SQL命令 * * @access public * @param string $sql SQL命令 * @param resource $link 数据库连接标识 * @return mixed 数据库结果集 */ public function query($sql = '', $link = NULL){ $sql = empty($sql) ? $this->sql: $sql; $link = is_null($link) ? $this->link: $link; $this->result = mysql_query($sql, $link); if (is_resource($this->result)){ return $this->result; } //如果执行SQL出现错误, 那么抛出异常 exit('<strong>Mysql error:</strong>'.$this->getError()); } /** * 执行SQL命令 * * @access public * @param string $sql SQL命令 * @param resource $link 数据库连接标识 * @return bool 是否执行成功 */ public function execute($sql = '', $link = NULL){ $sql = empty($sql) ? $this->sql: $sql; $link = is_null($link) ? $this->link: $link; if (mysql_query($sql, $link)){ return TRUE; } return FALSE; } /** * 插入记录 * * @access public * @param array $data 插入的记录, 格式:array('字段名'=>'值', '字段名'=>'值'); * @param string $table 表名 * @return bool 当前记录id */ public function add($data, $table = NULL){ $table = is_null($table) ? $this->table: $table; $sql = "INSERT INTO `{$table}`"; $fields = $values = array(); $field = $value = ''; //遍历记录, 格式化字段名称与值 foreach($data as $key => $val){ $fields[] = "`{$table}`.`{$key}`"; $values[] = is_numeric($val) ? $val : "'{$val}'"; } $field = join(',', $fields); $value = join(',', $values); unset($fields, $values); $sql .= "({$field}) VALUES({$value})"; $this->sql = $sql; $this->execute(); return $this->insertId(); } /** * 删除记录 * * @access public * @param string $where 条件 * @param string $table 表名 * @return bool 影响行数 */ public function delete($where = NULL, $table = NULL){ $table = is_null($table) ? $this->table: $table; $where = is_null($where) ? @$this->options['where']: $where; $sql = "DELETE FROM `{$table}` WHERE {$where}"; $this->sql = $sql; $this->execute(); return $this->affectedRows(); } /** * 更新记录 * * @access public * @param array $data 更新的数据 格式:array('字段名' => 值); * @param string $where 更新条件 * @param string $table 表名 * @return bool 影响多少条信息 */ public function update($data, $where = NULL, $table = NULL){ $table = is_null($table) ? $this->table: $table; $where = is_null($where) ? @$this->options['where']: $where; $sql = "UPDATE `{$table}` SET "; $values = array(); foreach($data as $key => $val){ $val = is_numeric($val) ? $val : "'{$val}'"; $values[] = "`{$table}`.`{$key}` = {$val}"; } $value = join(',', $values); $this->sql = $sql.$value." WHERE {$where}"; $this->execute(); return $this->affectedRows(); } /** * 读取缓存 * * @access public * @return mixed 如果读取成功返回缓存内容, 否则返回NULL */ protected function readCache(){ $file = $this->getCacheFileName(); if (file_exists($file)){ //缓存过期 if ((filemtime($file) + $this->cacheLimitTime) returnType){ $row = include $file; } else{ $data = file_get_contents($file); $row = unserialize($data); } return $row; } return NULL; } /** * 写入缓存 * * @access public * @param mixed $data 缓存内容 * @return bool 是否写入成功 */ public function writeCache($data){ $file = $this->getCacheFileName(); if ($this->makeDir(dirname($file))){ if (1 === $this->returnType){ $data = '<?php return '.var_export($data, TRUE).';?>'; }else{ $data = serialize($data); } } return file_put_contents($file, $data); } /* * 清除缓存文件 * string $fileName 指定文件名(含函数)或者all(全部) * 返回:清除成功返回true,反之返回false */ function clearCache( $fileName = "all" ) { if( $fileName != "all" ) { if( file_exists( $fileName ) ) { return @unlink( $fileName ); }else return false; } if ( is_dir( $this->cachePath ) ) { if ( $dir = @opendir( $this->cachePath ) ) { while ( $file = @readdir( $dir ) ) { $check = is_dir( $file ); if ( !$check ) @unlink( $this->cachePath . $file ); } @closedir( $dir ); return true; }else{ return false; } }else{ return false; } } /* * 连续建目录 * string $dir 目录字符串 * int $mode 权限数字 * 返回:顺利创建或者全部已建返回true,其它方式返回false */ function makeDir( $dir, $mode = "0777" ) { if( ! $dir ) return 0; $dir = str_replace( "\\", "/", $dir ); $mdir = ""; foreach( explode( "/", $dir ) as $val ) { $mdir .= $val."/"; if( $val == ".." || $val == "." || trim( $val ) == "" ) continue; if( ! file_exists( $mdir ) ) { if(!@mkdir( $mdir, $mode )){ return false; } } } return true; } //自动加载函数, 实现特殊操作 public function __call($func, $args) { if(in_array($func, array('field', 'join', 'where', 'order', 'group', 'limit', 'having'))) { $this->options[$func] = array_shift($args); return $this; } elseif($func === 'table'){ $this->options['table'] = array_shift($args); $this->table = $this->options['table']; return $this; } //如果函数不存在, 则抛出异常 exit('Call to undefined method Db::' . $func . '()'); } //------------------------------------------- //返回上一次操作所影响的行数 public function affectedRows($link = null){ $link = is_null($link) ? $this->link : $link; return mysql_affected_rows($link); } //返回上一次操作记录的id public function insertId($link = null){ $link = is_null($link) ? $this->link : $link; return mysql_insert_id($link); } //清空结果集 public function free($result = null){ $result = is_null($result) ? $this->result : $result; return mysql_free_result($result); } //返回错误信息 public function getError($link = NULL){ $link = is_null($link) ? $this->link : $link; return mysql_error($link); } //返回错误编号 public function getErrno($link = NULL){ $link = is_null($link) ? $this->link : $link; return mysql_errno($link); } } ?>

To protect the application from session-related XSS attacks, the following measures are required: 1. Set the HttpOnly and Secure flags to protect the session cookies. 2. Export codes for all user inputs. 3. Implement content security policy (CSP) to limit script sources. Through these policies, session-related XSS attacks can be effectively protected and user data can be ensured.

Methods to optimize PHP session performance include: 1. Delay session start, 2. Use database to store sessions, 3. Compress session data, 4. Manage session life cycle, and 5. Implement session sharing. These strategies can significantly improve the efficiency of applications in high concurrency environments.

Thesession.gc_maxlifetimesettinginPHPdeterminesthelifespanofsessiondata,setinseconds.1)It'sconfiguredinphp.iniorviaini_set().2)Abalanceisneededtoavoidperformanceissuesandunexpectedlogouts.3)PHP'sgarbagecollectionisprobabilistic,influencedbygc_probabi

In PHP, you can use the session_name() function to configure the session name. The specific steps are as follows: 1. Use the session_name() function to set the session name, such as session_name("my_session"). 2. After setting the session name, call session_start() to start the session. Configuring session names can avoid session data conflicts between multiple applications and enhance security, but pay attention to the uniqueness, security, length and setting timing of session names.

The session ID should be regenerated regularly at login, before sensitive operations, and every 30 minutes. 1. Regenerate the session ID when logging in to prevent session fixed attacks. 2. Regenerate before sensitive operations to improve safety. 3. Regular regeneration reduces long-term utilization risks, but the user experience needs to be weighed.

Setting session cookie parameters in PHP can be achieved through the session_set_cookie_params() function. 1) Use this function to set parameters, such as expiration time, path, domain name, security flag, etc.; 2) Call session_start() to make the parameters take effect; 3) Dynamically adjust parameters according to needs, such as user login status; 4) Pay attention to setting secure and httponly flags to improve security.

The main purpose of using sessions in PHP is to maintain the status of the user between different pages. 1) The session is started through the session_start() function, creating a unique session ID and storing it in the user cookie. 2) Session data is saved on the server, allowing data to be passed between different requests, such as login status and shopping cart content.

How to share a session between subdomains? Implemented by setting session cookies for common domain names. 1. Set the domain of the session cookie to .example.com on the server side. 2. Choose the appropriate session storage method, such as memory, database or distributed cache. 3. Pass the session ID through cookies, and the server retrieves and updates the session data based on the ID.


Hot AI Tools

Undresser.AI Undress
AI-powered app for creating realistic nude photos

AI Clothes Remover
Online AI tool for removing clothes from photos.

Undress AI Tool
Undress images for free

Clothoff.io
AI clothes remover

Video Face Swap
Swap faces in any video effortlessly with our completely free AI face swap tool!

Hot Article

Hot Tools

Zend Studio 13.0.1
Powerful PHP integrated development environment

SublimeText3 Chinese version
Chinese version, very easy to use

MinGW - Minimalist GNU for Windows
This project is in the process of being migrated to osdn.net/projects/mingw, you can continue to follow us there. MinGW: A native Windows port of the GNU Compiler Collection (GCC), freely distributable import libraries and header files for building native Windows applications; includes extensions to the MSVC runtime to support C99 functionality. All MinGW software can run on 64-bit Windows platforms.

PhpStorm Mac version
The latest (2018.2.1) professional PHP integrated development tool

SublimeText3 Mac version
God-level code editing software (SublimeText3)