Drone\Db\Driver\MySQL

Complexity

Total Complexity

40

Size/Duplication

Total Lines	258
Duplicated Lines	0 %

Importance

Changes

0

9 Methods

Rating	Name	Duplication	Size	Complexity
A	__construct()	0	11	4
A	connect()	0	26	5
A	autocommit()	0	4	1
A	toArray()	0	24	4
A	commit()	0	3	1
A	disconnect()	0	11	2
A	rollback()	0	3	1
A	__destruct()	0	5	3
F	execute()	0	98	19

<?php
/**
 * DronePHP (http://www.dronephp.com)
 *
 * @link      http://github.com/Pleets/DronePHP
 * @copyright Copyright (c) 2016-2018 Pleets. (http://www.pleets.org)
 * @license   http://www.dronephp.com/license
 * @author    Darío Rivera <fermius.us@gmail.com>
 */

namespace Drone\Db\Driver;

/**
 * MySQL class
 *
 * This is a database driver class to connect to MySQL
 */
class MySQL extends AbstractDriver implements DriverInterface
{
    /**
     * {@inheritDoc}
     *
     * @var object
     */
    protected $dbconn;

    /**
     * {@inheritDoc}
     *
     * @param array $options
     */
    public function __construct($options)
    {
        if (!array_key_exists("dbchar", $options))
            $options["dbchar"] = "utf8";

        parent::__construct($options);

        $auto_connect = array_key_exists('auto_connect', $options) ? $options["auto_connect"] : true;

        if ($auto_connect)
            $this->connect();
    }

    /**
     * Connects to database
     *
     * @throws RuntimeException
     * @throws Exception\ConnectionException
     *
     * @return \mysqli
     */
    public function connect()
    {
        if (!extension_loaded('mysqli'))
            throw new \RuntimeException("The Mysqli extension is not loaded");

        if (!is_null($this->dbport) && !empty($this->dbport))

The condition is_null($this->dbport) is always false.

            $conn = @new \mysqli($this->dbhost, $this->dbuser, $this->dbpass, $this->dbname, $this->dbport);
        else
            $conn = @new \mysqli($this->dbhost, $this->dbuser, $this->dbpass, $this->dbname);

        if ($conn->connect_errno)
        {
            /*
             * Use ever mysqli_connect_errno() and mysqli_connect_error()
             * over $this->dbconn->errno and $this->dbconn->error to prevent
             * the warning message "Property access is not allowed yet".
             */
            throw new Exception\ConnectionException(mysqli_connect_error(), mysqli_connect_errno());
        }
        else
        {
            $this->dbconn = $conn;
            $this->dbconn->set_charset($this->dbchar);
        }

        return $this->dbconn;
    }

    /**
     * Excecutes a statement
     *
     * @param string $sql
     * @param array $params
     *
     * @throws RuntimeException
     * @throws Exception\InvalidQueryException
     *
     * @return mysqli_result

The type Drone\Db\Driver\mysqli_result was not found. Did you mean mysqli_result? If so, make sure to prefix the type with \.

     */
    public function execute($sql, Array $params = [])
    {
        $this->numRows = 0;
        $this->numFields = 0;
        $this->rowsAffected = 0;

        $this->arrayResult = null;

        # Bound variables
        if (count($params))
        {
            $this->result = $stmt = @$this->dbconn->prepare($sql);

            if (!$stmt)
            {
                $this->error($this->dbconn->errno, $this->dbconn->error);
                throw new Exception\InvalidQueryException($this->dbconn->error, $this->dbconn->errno);
            }

            $param_values = array_values($params);

            $n_params = count($param_values);
            $bind_values = [];
            $bind_types = "";

            for ($i = 0; $i < $n_params; $i++)
            {
                if (is_string($param_values[$i]))
                    $bind_types .= 's';
                else if(is_float($param_values[$i]))
                    $bind_types .= 'd';
                # [POSSIBLE BUG] - To Future revision (What about non-string and non-decimal types ?)
                else
                    $bind_types .= 's';

                $bind_values[] = '$param_values[' . $i . ']';
            }

            $values = implode(', ', $bind_values);
            eval('$stmt->bind_param(\'' . $bind_types . '\', ' . $values . ');');

The use of eval() is discouraged.

            $r = $stmt->execute();

            if ($r)
            {
                if (is_object($stmt) && get_class($stmt) == 'mysqli_stmt')
                {
                    $res = $this->result->get_result();

                    /*
                     * if $res is false then there aren't results.
                     * It is useful to prevent rollback transactions on insert statements because
                     * insert statement do not free results.
                     */
                    if ($res)
                        $this->result = $res;
                }
            }
        }
        else
        {
            $prev_error_handler = set_error_handler(['\Drone\Error\ErrorHandler', 'errorControlOperator'], E_ALL);

            // may be throw a Fatal error (Ex: Maximum execution time)
            $r = $this->result = $this->dbconn->query($sql);

            set_error_handler($prev_error_handler);
        }

        if (!$r)
        {
            $this->error($this->dbconn->errno, $this->dbconn->error);
            throw new Exception\InvalidQueryException($this->dbconn->error, $this->dbconn->errno);
        }

        # identify SELECT, SHOW, DESCRIBE or EXPLAIN queries
        if (is_object($this->result) && property_exists($this->result, 'num_rows'))
            $this->numRows = $this->result->num_rows;
        else
        {
            # affected_rows return the same of num_rows on select statements!
            if (property_exists($this->dbconn, 'affected_rows'))
                $this->rowsAffected = $this->dbconn->affected_rows;
        }

        if (property_exists($this->dbconn, 'field_count'))
            $this->numFields = $this->dbconn->field_count;

        if ($this->transac_mode)
            $this->transac_result = is_null($this->transac_result) ? $this->result: $this->transac_result && $this->result;

The condition is_null($this->transac_result) is always false.

        /*
         * Because mysqli_query() returns FALSE on failure, a mysqli_result object for SELECT, SHOW, DESCRIBE or EXPLAIN queries,
         * and TRUE for other successful queries, it should be handled to return only objects or resources.
         *
         * Ref: http://php.net/manual/en/mysqli.query.php
         */
        return is_bool($this->result) ? $this->dbconn : $this->result;
    }

    /**
     * {@inheritDoc}
     */
    public function commit()
    {
        return $this->dbconn->commit();
    }

    /**
     * {@inheritDoc}
     */
    public function rollback()
    {
        return $this->dbconn->rollback();
    }

    /**
     * {@inheritDoc}
     */
    public function disconnect()
    {
        parent::disconnect();

        if ($this->dbconn->close())
        {
            $this->dbconn = null;
            return true;
        }

        return false;
    }

    /**
     * {@inheritDoc}
     */
    public function autocommit($value)
    {
        parent::autocommit($value);
        $this->dbconn->autocommit($value);
    }

    /**
     * Returns an array with the rows fetched
     *
     * @throws LogicException
     *
     * @return array
     */
    protected function toArray()
    {
        $data = [];

        if ($this->result && !is_bool($this->result))
        {
            while ($row = $this->result->fetch_array(MYSQLI_BOTH))
            {
                $data[] = $row;
            }
        }
        else
            /*
             * "This kind of exception should lead directly to a fix in your code"
             * So much production tests tell us this error is throwed because developers
             * execute toArray() before execute().
             *
             * Ref: http://php.net/manual/en/class.logicexception.php
             */
            throw new \LogicException('There are not data in the buffer!');

        $this->arrayResult = $data;

        return $data;
    }

    /**
     * By default __destruct() disconnects to database
     *
     * @return null
     */
    public function __destruct()
    {
        # prevent "Property access is not allowed yet" with @ on failure connections
        if ($this->dbconn !== false && !is_null($this->dbconn))
            @$this->dbconn->close();

It seems like you do not handle an error condition for close(). This can introduce security issues, and is generally not recommended.

    }
}