Ticket #1376: patch_to_make_work.txt

diff -ur gui_/include/class.database.php /var/www/ispcp/gui/include/class.database.php
--- gui_/include/class.database.php     2008-07-02 23:12:12.000000000 +0300
+++ /var/www/ispcp/gui/include/class.database.php       2008-07-03 13:30:04.000000000 +0300
@@ -35,6 +35,14 @@
                return $this->_db->errorInfo();
        }
        
+       public function MyQuery($sql) {
+               if(preg_match("/((ALTER )|(CREATE )|(DROP )|(GRANT )|(REVOKE )|(FLUSH ))/i", $sql, $matches) > 0) $this->_db->setAttribute(PDO::MYSQL_ATTR_DIRECT_QUERY, true);
+               else $this->_db->setAttribute(PDO::MYSQL_ATTR_DIRECT_QUERY, false);
+               $ret = $this->_db->query($sql);
+               if ($ret instanceof PDOStatement) return new DatabaseResult($ret);
+               return $ret;
+       }
+       
        public function Execute($sql, $param = null) {
                if ($sql instanceof PDOStatement) {
                        if (is_array($param))
Only in /var/www/ispcp/gui/include/htmlpurifier/HTMLPurifier/DefinitionCache/Serializer/HTML: 3.1.1,730b6e78af390b2943b70942a5354214,1.ser
diff -ur gui_/include/sql.php /var/www/ispcp/gui/include/sql.php
--- gui_/include/sql.php        2008-07-02 23:12:12.000000000 +0300
+++ /var/www/ispcp/gui/include/sql.php  2008-07-03 13:53:18.000000000 +0300
@@ -39,26 +39,52 @@
 Config::set('DB_USER', null);
 Config::set('DB_PASS', null);
 
+function _pseudo_Prepare($query){
+               if(!is_array($query)||!isset($query[0])||!isset($query[1])){
+                       throw new Exception('Invalid query');
+                       return false;
+               }
+               $params=$query[1];
+               if (is_string($params) || is_int($params))
+                       $params = array($params);
+               $params[]='';
+               $query=explode('?',$query[0]);
+               if(count($params)!=count($query)){
+                       throw new Exception('Invalid query');
+                       return false;
+               }
+               $fquery='';
+               foreach($query as $key=>$value)
+                       $fquery.=$value.'\''.addslashes($params[$key]).'\'';
+               return substr($fquery,0,-2);
+}
+
 function execute_query (&$sql, $query) {
-       $rs = $sql->Execute($query);
+       if(version_compare(PHP_VERSION,'5.2.5','<')){
+                       $query=_pseudo_Prepare(array($query,array()));
+                       $rs = $sql->MyQuery($query);
+       } else {
+               $rs = $sql->Execute($query);
+       }
        if (!$rs) system_message($sql->ErrorMsg());
        return $rs;
 }
 
 function exec_query(&$sql, $query, $data = array(), $failDie = true) {
-       $query = $sql->Prepare($query);
-       $rs = $sql->Execute($query, $data);
-
+       if(version_compare(PHP_VERSION,'5.2.5','<')){
+                       $query=_pseudo_Prepare(array($query,$data));
+                       $rs = $sql->MyQuery($query);
+       } else {
+               $query = $sql->Prepare($query);
+               $rs = $sql->Execute($query, $data);
+       }
        if (!$rs && $failDie) {
-//             var_dump($query);
-//             var_dump($data);
                if($query instanceof PDOStatement)
                        $msg = $query->errorInfo();
                else
                        $msg = $sql->errorInfo();
                system_message(isset($msg[2]) ? $msg[2] : $msg);
        }
-
        return $rs;
 }