Use PDO datatype Constants in queries using bindPrams

photogabble · Feb 13, 2017 · a4bbe81 · a4bbe81
1 parent cae0cbd
commit a4bbe81
Show file tree

Hide file tree

Showing 51 changed files with 63 additions and 63 deletions.
diff --git a/attack.php b/attack.php
@@ -50,7 +50,7 @@
 // Get playerinfo from database
 $sql = "SELECT * FROM ::prefix::ships WHERE email=:email LIMIT 1";
 $stmt = $pdo_db->prepare($sql);
-$stmt->bindParam(':email', $_SESSION['username']);
+$stmt->bindParam(':email', $_SESSION['username'], \PDO::PARAM_STR);
 $stmt->execute();
 $playerinfo = $stmt->fetch(PDO::FETCH_ASSOC);
 

diff --git a/beacon.php b/beacon.php
@@ -33,7 +33,7 @@
 // Get playerinfo from database
 $sql = "SELECT * FROM ::prefix::ships WHERE email=:email LIMIT 1";
 $stmt = $pdo_db->prepare($sql);
-$stmt->bindParam(':email', $_SESSION['username']);
+$stmt->bindParam(':email', $_SESSION['username'], \PDO::PARAM_STR);
 $stmt->execute();
 $playerinfo = $stmt->fetch(PDO::FETCH_ASSOC);
 

diff --git a/bounty.php b/bounty.php
@@ -73,7 +73,7 @@
 // Get playerinfo from database
 $sql = "SELECT * FROM ::prefix::ships WHERE email=:email LIMIT 1";
 $stmt = $pdo_db->prepare($sql);
-$stmt->bindParam(':email', $_SESSION['username']);
+$stmt->bindParam(':email', $_SESSION['username'], \PDO::PARAM_STR);
 $stmt->execute();
 $playerinfo = $stmt->fetch(PDO::FETCH_ASSOC);
 

diff --git a/classes/Bases.php b/classes/Bases.php
@@ -35,7 +35,7 @@ public static function buildBase(\PDO $pdo_db, array $langvars, int $planet_id,
         // Get playerinfo from database
         $sql = "SELECT * FROM ::prefix::ships WHERE email=:email LIMIT 1";
         $stmt = $pdo_db->prepare($sql);
-        $stmt->bindParam(':email', $_SESSION['username']);
+        $stmt->bindParam(':email', $_SESSION['username'], \PDO::PARAM_STR);
         $stmt->execute();
         $playerinfo = $stmt->fetch(\PDO::FETCH_ASSOC);
 

diff --git a/classes/Character.php b/classes/Character.php
@@ -103,7 +103,7 @@ public static function getInsignia(\PDO $pdo_db, string $a_username, array $lang
         // Lookup players score.
         $sql = "SELECT score FROM ::prefix::ships WHERE email =:email";
         $stmt = $pdo_db->prepare($sql);
-        $stmt->bindParam(':email', $a_username);
+        $stmt->bindParam(':email', $a_username, \PDO::PARAM_STR);
         $stmt->execute();
         Db::logDbErrors($pdo_db, $sql, __LINE__, __FILE__);
         $res = $stmt->fetch();

diff --git a/classes/Player.php b/classes/Player.php
@@ -45,7 +45,7 @@ public static function auth(\PDO $pdo_db, string $lang, array $langvars, Reg $tk
         {
             $sql = "SELECT ip_address, password, last_login, ship_id, ship_destroyed, dev_escapepod FROM ::prefix::ships WHERE email=:email LIMIT 1";
             $stmt = $pdo_db->prepare($sql);
-            $stmt->bindParam(':email', $_SESSION['username']);
+            $stmt->bindParam(':email', $_SESSION['username'], \PDO::PARAM_STR);
             $stmt->execute();
             $playerinfo = $stmt->fetch();
 

diff --git a/classes/Players/PlayersGateway.php b/classes/Players/PlayersGateway.php
@@ -48,7 +48,7 @@ public function selectPlayerInfo(string $email)
     {
         $sql = "SELECT * FROM ::prefix::ships WHERE email = :email";
         $stmt = $this->pdo_db->prepare($sql);
-        $stmt->bindParam(':email', $email);
+        $stmt->bindParam(':email', $email, \PDO::PARAM_STR);
         $stmt->execute();
         \Tki\Db::logDbErrors($this->pdo_db, $sql, __LINE__, __FILE__); // Log any errors, if there are any
 

diff --git a/classes/Realspace.php b/classes/Realspace.php
@@ -26,7 +26,7 @@ public static function realSpaceMove(\PDO $pdo_db, array $langvars, int $destina
     {
         $sql = "SELECT * FROM ::prefix::ships WHERE email=:email";
         $stmt = $pdo_db->prepare($sql);
-        $stmt->bindParam(':email', $_SESSION['username']);
+        $stmt->bindParam(':email', $_SESSION['username'], \PDO::PARAM_STR);
         $stmt->execute();
         $playerinfo = $stmt->fetchAll(\PDO::FETCH_ASSOC);
 

diff --git a/classes/Ship.php b/classes/Ship.php
@@ -39,7 +39,7 @@ public static function isDestroyed(\PDO $pdo_db, string $lang, Reg $tkireg, arra
                                "dev_fuelscoop='N', dev_minedeflector=0, ship_destroyed='N', " .
                                "dev_lssd='N' WHERE email=:email";
                 $stmt = $pdo_db->prepare($sql);
-                $stmt->bindParam(':email', $_SESSION['username']);
+                $stmt->bindParam(':email', $_SESSION['username'], \PDO::PARAM_STR);
                 $stmt->execute();
                 Db::logDbErrors($pdo_db, $sql, __LINE__, __FILE__);
 

diff --git a/create_universe/80.php b/create_universe/80.php
@@ -239,7 +239,7 @@
 $stmt->bindParam(':character_name', $tkireg->admin_name);
 $stmt->bindParam(':password', $admin_hashed_password);
 $stmt->bindParam(':recovery_time', $admin_recovery_time);
-$stmt->bindParam(':email', $tkireg->admin_mail);
+$stmt->bindParam(':email', $tkireg->admin_mail, \PDO::PARAM_STR);
 $stmt->bindParam(':turns', $tkireg->start_turns);
 $stmt->bindParam(':armor_pts', $tkireg->start_armor);
 $stmt->bindParam(':credits', $tkireg->start_credits);

diff --git a/defence_report.php b/defence_report.php
@@ -31,7 +31,7 @@
 // Get playerinfo from database
 $sql = "SELECT * FROM ::prefix::ships WHERE email=:email LIMIT 1";
 $stmt = $pdo_db->prepare($sql);
-$stmt->bindParam(':email', $_SESSION['username']);
+$stmt->bindParam(':email', $_SESSION['username'], \PDO::PARAM_STR);
 $stmt->execute();
 $playerinfo = $stmt->fetch(PDO::FETCH_ASSOC);
 

diff --git a/device.php b/device.php
@@ -33,7 +33,7 @@
 // Get playerinfo from database
 $sql = "SELECT * FROM ::prefix::ships WHERE email=:email LIMIT 1";
 $stmt = $pdo_db->prepare($sql);
-$stmt->bindParam(':email', $_SESSION['username']);
+$stmt->bindParam(':email', $_SESSION['username'], \PDO::PARAM_STR);
 $stmt->execute();
 $playerinfo = $stmt->fetch(PDO::FETCH_ASSOC);
 

diff --git a/dump.php b/dump.php
@@ -30,7 +30,7 @@
 // Get playerinfo from database
 $sql = "SELECT * FROM ::prefix::ships WHERE email=:email LIMIT 1";
 $stmt = $pdo_db->prepare($sql);
-$stmt->bindParam(':email', $_SESSION['username']);
+$stmt->bindParam(':email', $_SESSION['username'], \PDO::PARAM_STR);
 $stmt->execute();
 $playerinfo = $stmt->fetch(PDO::FETCH_ASSOC);
 

diff --git a/emerwarp.php b/emerwarp.php
@@ -30,7 +30,7 @@
 // Get playerinfo from database
 $sql = "SELECT * FROM ::prefix::ships WHERE email=:email LIMIT 1";
 $stmt = $pdo_db->prepare($sql);
-$stmt->bindParam(':email', $_SESSION['username']);
+$stmt->bindParam(':email', $_SESSION['username'], \PDO::PARAM_STR);
 $stmt->execute();
 $playerinfo = $stmt->fetch(PDO::FETCH_ASSOC);
 

diff --git a/feedback.php b/feedback.php
@@ -32,7 +32,7 @@
 // Get playerinfo from database
 $sql = "SELECT * FROM ::prefix::ships WHERE email=:email LIMIT 1";
 $stmt = $pdo_db->prepare($sql);
-$stmt->bindParam(':email', $_SESSION['username']);
+$stmt->bindParam(':email', $_SESSION['username'], \PDO::PARAM_STR);
 $stmt->execute();
 $playerinfo = $stmt->fetch(PDO::FETCH_ASSOC);
 

diff --git a/galaxy.php b/galaxy.php
@@ -31,7 +31,7 @@
 // Get playerinfo from database
 $sql = "SELECT * FROM ::prefix::ships WHERE email=:email LIMIT 1";
 $stmt = $pdo_db->prepare($sql);
-$stmt->bindParam(':email', $_SESSION['username']);
+$stmt->bindParam(':email', $_SESSION['username'], \PDO::PARAM_STR);
 $stmt->execute();
 $playerinfo = $stmt->fetch(PDO::FETCH_ASSOC);
 

diff --git a/genesis.php b/genesis.php
@@ -34,7 +34,7 @@
 // Get playerinfo from database
 $sql = "SELECT * FROM ::prefix::ships WHERE email=:email LIMIT 1";
 $stmt = $pdo_db->prepare($sql);
-$stmt->bindParam(':email', $_SESSION['username']);
+$stmt->bindParam(':email', $_SESSION['username'], \PDO::PARAM_STR);
 $stmt->execute();
 $playerinfo = $stmt->fetch(PDO::FETCH_ASSOC);
 

diff --git a/ibank.php b/ibank.php
@@ -28,7 +28,7 @@
 Tki\Header::display($pdo_db, $lang, $template, $title, $body_class);
 
 $stmt = $pdo_db->prepare("SELECT * FROM ::prefix::ships WHERE email=:email");
-$stmt->bindParam(':email', $_SESSION['username']);
+$stmt->bindParam(':email', $_SESSION['username'], \PDO::PARAM_STR);
 $result = $stmt->execute();
 Tki\Db::logDbErrors($pdo_db, $result, __LINE__, __FILE__);
 $playerinfo = $stmt->fetch(PDO::FETCH_ASSOC);

diff --git a/kabal_control.php b/kabal_control.php
@@ -533,9 +533,9 @@
                 // Tki\Db::LogDbErrors($pdo_db, $result, __LINE__, __FILE__);
                 $sql = "SELECT email, character_name, ship_name FROM ::prefix::ships WHERE email=:email OR character_name=:character_name OR ship_name=:ship_name";
                 $stmt = $pdo_db->prepare($sql);
-                $stmt->bindParam(':email', $emailname);
-                $stmt->bindParam(':character_name', $character);
-                $stmt->bindParam(':ship_name', $shipname);
+                $stmt->bindParam(':email', $emailname, \PDO::PARAM_STR);
+                $stmt->bindParam(':character_name', $character, \PDO::PARAM_STR);
+                $stmt->bindParam(':ship_name', $shipname, \PDO::PARAM_STR);
                 $stmt->execute();
                 $playerinfo = $stmt->fetchAll(PDO::FETCH_ASSOC);
 

diff --git a/log.php b/log.php
@@ -41,7 +41,7 @@
 // Get playerinfo from database
 $sql = "SELECT * FROM ::prefix::ships WHERE email=:email LIMIT 1";
 $stmt = $pdo_db->prepare($sql);
-$stmt->bindParam(':email', $_SESSION['username']);
+$stmt->bindParam(':email', $_SESSION['username'], \PDO::PARAM_STR);
 $stmt->execute();
 $playerinfo = $stmt->fetch(PDO::FETCH_ASSOC);
 

diff --git a/logout.php b/logout.php
@@ -32,7 +32,7 @@
     // Get playerinfo from database
     $sql = "SELECT * FROM ::prefix::ships WHERE email=:email LIMIT 1";
     $stmt = $pdo_db->prepare($sql);
-    $stmt->bindParam(':email', $_SESSION['username']);
+    $stmt->bindParam(':email', $_SESSION['username'], \PDO::PARAM_STR);
     $stmt->execute();
     $playerinfo = $stmt->fetch(PDO::FETCH_ASSOC);
 

diff --git a/lrscan.php b/lrscan.php
@@ -46,7 +46,7 @@
 // Get playerinfo from database
 $sql = "SELECT * FROM ::prefix::ships WHERE email=:email LIMIT 1";
 $stmt = $pdo_db->prepare($sql);
-$stmt->bindParam(':email', $_SESSION['username']);
+$stmt->bindParam(':email', $_SESSION['username'], \PDO::PARAM_STR);
 $stmt->execute();
 $playerinfo = $stmt->fetch(PDO::FETCH_ASSOC);
 

diff --git a/mailto.php b/mailto.php
@@ -84,7 +84,7 @@
 // Get playerinfo from database
 $sql = "SELECT * FROM ::prefix::ships WHERE email=:email LIMIT 1";
 $stmt = $pdo_db->prepare($sql);
-$stmt->bindParam(':email', $_SESSION['username']);
+$stmt->bindParam(':email', $_SESSION['username'], \PDO::PARAM_STR);
 $stmt->execute();
 $playerinfo = $stmt->fetch(PDO::FETCH_ASSOC);
 

diff --git a/main.php b/main.php
@@ -35,7 +35,7 @@
 $sql_test = Tki\Db::LogDbErrors($pdo_db, $sql, __LINE__, __FILE__);
 if ($sql_test === true)
 {
-    $stmt->bindParam(':email', $_SESSION['username']);
+    $stmt->bindParam(':email', $_SESSION['username'], \PDO::PARAM_STR);
     $stmt->execute();
     $playerinfo = $stmt->fetch(PDO::FETCH_ASSOC);
 }
@@ -61,7 +61,7 @@
 // Pull sector info from database
 $sql = "SELECT * FROM ::prefix::universe WHERE sector_id=:sector_id";
 $stmt = $pdo_db->prepare($sql);
-$stmt->bindParam(':sector_id', $playerinfo['sector']);
+$stmt->bindParam(':sector_id', $playerinfo['sector'], \PDO::PARAM_INT);
 $stmt->execute();
 $sectorinfo = $stmt->fetch(PDO::FETCH_ASSOC);
 
@@ -85,7 +85,7 @@
 $i = 0;
 $sql = "SELECT * FROM ::prefix::links WHERE link_start=:link_start ORDER BY link_dest ASC";
 $stmt = $pdo_db->prepare($sql);
-$stmt->bindParam(':link_start', $playerinfo['sector']);
+$stmt->bindParam(':link_start', $playerinfo['sector'], \PDO::PARAM_INT);
 $stmt->execute();
 $link_present = $stmt->fetchAll(PDO::FETCH_ASSOC);
 if ($link_present !== null)
@@ -101,7 +101,7 @@
 $i = 0;
 $sql = "SELECT * FROM ::prefix::planets WHERE sector_id=:sector_id";
 $stmt = $pdo_db->prepare($sql);
-$stmt->bindParam(':sector_id', $playerinfo['sector']);
+$stmt->bindParam(':sector_id', $playerinfo['sector'], \PDO::PARAM_INT);
 $stmt->execute();
 $planet_present = $stmt->fetchAll(PDO::FETCH_ASSOC);
 if ($planet_present !== null)
@@ -117,7 +117,7 @@
 $i = 0;
 $sql = "SELECT * FROM ::prefix::sector_defense, ::prefix::ships WHERE ::prefix::sector_defense.sector_id=:sector_id AND ::prefix::ships.ship_id = ::prefix::sector_defense.ship_id";
 $stmt = $pdo_db->prepare($sql);
-$stmt->bindParam(':sector_id', $playerinfo['sector']);
+$stmt->bindParam(':sector_id', $playerinfo['sector'], \PDO::PARAM_INT);
 $stmt->execute();
 $defense_present = $stmt->fetchAll(PDO::FETCH_ASSOC);
 if ($defense_present !== null)
@@ -133,7 +133,7 @@
 // Grab zoneinfo from database
 $sql = "SELECT zone_id,zone_name FROM ::prefix::zones WHERE zone_id=:zone_id";
 $stmt = $pdo_db->prepare($sql);
-$stmt->bindParam(':zone_id', $sectorinfo['zone_id']);
+$stmt->bindParam(':zone_id', $sectorinfo['zone_id'], \PDO::PARAM_INT);
 $stmt->execute();
 $zoneinfo = $stmt->fetch(PDO::FETCH_ASSOC);
 
@@ -161,7 +161,7 @@
 
 if ($sql_test === true)
 {
-    $stmt->bindParam(':recp_id', $playerinfo['ship_id']);
+    $stmt->bindParam(':recp_id', $playerinfo['ship_id'], \PDO::PARAM_INT);
     $result = $stmt->execute();
     if ($result)
     {
@@ -506,7 +506,7 @@
             // Get planet owner from database
             $sql = "SELECT * FROM ::prefix::ships WHERE ship_id=:ship_id LIMIT 1";
             $stmt = $pdo_db->prepare($sql);
-            $stmt->bindParam(':ship_id', $planets[$i]['owner']);
+            $stmt->bindParam(':ship_id', $planets[$i]['owner'], \PDO::PARAM_INT);
             $stmt->execute();
             $planet_owner = $stmt->fetch(PDO::FETCH_ASSOC);
 

diff --git a/mines.php b/mines.php
@@ -40,7 +40,7 @@
 // Get playerinfo from database
 $sql = "SELECT * FROM ::prefix::ships WHERE email=:email LIMIT 1";
 $stmt = $pdo_db->prepare($sql);
-$stmt->bindParam(':email', $_SESSION['username']);
+$stmt->bindParam(':email', $_SESSION['username'], \PDO::PARAM_STR);
 $stmt->execute();
 $playerinfo = $stmt->fetch(PDO::FETCH_ASSOC);
 

diff --git a/modify_defences.php b/modify_defences.php
@@ -46,7 +46,7 @@
 // Get playerinfo from database
 $sql = "SELECT * FROM ::prefix::ships WHERE email=:email LIMIT 1";
 $stmt = $pdo_db->prepare($sql);
-$stmt->bindParam(':email', $_SESSION['username']);
+$stmt->bindParam(':email', $_SESSION['username'], \PDO::PARAM_STR);
 $stmt->execute();
 $playerinfo = $stmt->fetch(PDO::FETCH_ASSOC);
 

diff --git a/move.php b/move.php
@@ -32,7 +32,7 @@
 // Get playerinfo from database
 $sql = "SELECT * FROM ::prefix::ships WHERE email=:email LIMIT 1";
 $stmt = $pdo_db->prepare($sql);
-$stmt->bindParam(':email', $_SESSION['username']);
+$stmt->bindParam(':email', $_SESSION['username'], \PDO::PARAM_STR);
 $stmt->execute();
 $playerinfo = $stmt->fetch(PDO::FETCH_ASSOC);
 

diff --git a/navcomp.php b/navcomp.php
@@ -55,7 +55,7 @@
 // Get playerinfo from database
 $sql = "SELECT * FROM ::prefix::ships WHERE email=:email LIMIT 1";
 $stmt = $pdo_db->prepare($sql);
-$stmt->bindParam(':email', $_SESSION['username']);
+$stmt->bindParam(':email', $_SESSION['username'], \PDO::PARAM_STR);
 $stmt->execute();
 $playerinfo = $stmt->fetch(PDO::FETCH_ASSOC);
 

diff --git a/new2.php b/new2.php
@@ -83,7 +83,7 @@
 $flag = 0;
 $sql = "SELECT email, character_name, ship_name FROM ::prefix::ships WHERE email=:email || character_name=:character_name || ship_name=:shipname";
 $stmt = $pdo_db->prepare($sql);
-$stmt->bindParam(':email', $username);
+$stmt->bindParam(':email', $username, \PDO::PARAM_STR);
 $stmt->bindParam(':character_name', $character);
 $stmt->bindParam(':ship_name', $shipname);
 $stmt->execute();

diff --git a/option2.php b/option2.php
@@ -45,7 +45,7 @@
                 $sql = "UPDATE ::prefix::ships SET lang=:lang WHERE email=:email LIMIT 1";
                 $stmt = $pdo_db->prepare($sql);
                 $stmt->bindParam(':lang', $lang);
-                $stmt->bindParam(':email', $_SESSION['username']);
+                $stmt->bindParam(':email', $_SESSION['username'], \PDO::PARAM_STR);
                 $stmt->execute();
                 $lang_changed = $stmt->fetch(PDO::FETCH_ASSOC);
 
@@ -90,7 +90,7 @@
 
     $sql = "SELECT ship_id, password FROM ::prefix::ships WHERE email=:email LIMIT 1";
     $stmt = $pdo_db->prepare($sql);
-    $stmt->bindParam(':email', $_SESSION['username']);
+    $stmt->bindParam(':email', $_SESSION['username'], \PDO::PARAM_STR);
     $stmt->execute();
     $playerinfo = $stmt->fetch(PDO::FETCH_ASSOC);
 

diff --git a/planet.php b/planet.php
@@ -56,7 +56,7 @@
 // Get playerinfo from database
 $sql = "SELECT * FROM ::prefix::ships WHERE email=:email LIMIT 1";
 $stmt = $pdo_db->prepare($sql);
-$stmt->bindParam(':email', $_SESSION['username']);
+$stmt->bindParam(':email', $_SESSION['username'], \PDO::PARAM_STR);
 $stmt->execute();
 $playerinfo = $stmt->fetch(PDO::FETCH_ASSOC);
 

diff --git a/planet2.php b/planet2.php
@@ -162,7 +162,7 @@
 // Get playerinfo from database
 $sql = "SELECT * FROM ::prefix::ships WHERE email=:email LIMIT 1";
 $stmt = $pdo_db->prepare($sql);
-$stmt->bindParam(':email', $_SESSION['username']);
+$stmt->bindParam(':email', $_SESSION['username'], \PDO::PARAM_STR);
 $stmt->execute();
 $playerinfo = $stmt->fetch(PDO::FETCH_ASSOC);
 

diff --git a/planet3.php b/planet3.php
@@ -65,7 +65,7 @@
 // Get playerinfo from database
 $sql = "SELECT * FROM ::prefix::ships WHERE email=:email LIMIT 1";
 $stmt = $pdo_db->prepare($sql);
-$stmt->bindParam(':email', $_SESSION['username']);
+$stmt->bindParam(':email', $_SESSION['username'], \PDO::PARAM_STR);
 $stmt->execute();
 $playerinfo = $stmt->fetch(PDO::FETCH_ASSOC);
 

diff --git a/planet_report.php b/planet_report.php
@@ -35,7 +35,7 @@
 // Get playerinfo from database
 $sql = "SELECT * FROM ::prefix::ships WHERE email=:email LIMIT 1";
 $stmt = $pdo_db->prepare($sql);
-$stmt->bindParam(':email', $_SESSION['username']);
+$stmt->bindParam(':email', $_SESSION['username'], \PDO::PARAM_STR);
 $stmt->execute();
 $playerinfo = $stmt->fetch(PDO::FETCH_ASSOC);
 

diff --git a/port.php b/port.php
@@ -32,7 +32,7 @@
 // Get playerinfo from database
 $sql = "SELECT * FROM ::prefix::ships WHERE email=:email LIMIT 1";
 $stmt = $pdo_db->prepare($sql);
-$stmt->bindParam(':email', $_SESSION['username']);
+$stmt->bindParam(':email', $_SESSION['username'], \PDO::PARAM_STR);
 $stmt->execute();
 $playerinfo = $stmt->fetch(PDO::FETCH_ASSOC);
 

diff --git a/port2.php b/port2.php
@@ -30,7 +30,7 @@
 // Get playerinfo from database
 $sql = "SELECT * FROM ::prefix::ships WHERE email=:email LIMIT 1";
 $stmt = $pdo_db->prepare($sql);
-$stmt->bindParam(':email', $_SESSION['username']);
+$stmt->bindParam(':email', $_SESSION['username'], \PDO::PARAM_STR);
 $stmt->execute();
 $playerinfo = $stmt->fetch(PDO::FETCH_ASSOC);