Changed database access to PDO using prepared statements

This commit is contained in:
2023-02-22 10:50:24 +01:00
parent a4ecd1bff7
commit 7c300e0a8f
132 changed files with 5364 additions and 6091 deletions

View File

@@ -14,39 +14,13 @@ $vlan_id = sanitize($_GET['vlan_id']);
include("header.php");
// vlan
$query = "SELECT
vlan_name,
vlan_number
FROM
vlan
WHERE
vlan_id=" . $vlan_id;
$sql = "SELECT vlan_name, vlan_number FROM vlan WHERE vlan_id=?";
$sth = $dbh->prepare($sql);
$sth->execute([$vlan_id]);
$smarty->assign("vlan", $sth->fetch(PDO::FETCH_OBJ));
// run query
$vlan = $db->db_select($query);
$smarty->assign("subnet_options", db_get_options_subnet());
$smarty->assign("vlan_id", $vlan_id);
$smarty->assign("vlan_name", $vlan[0]['vlan_name']);
$smarty->assign("vlan_number", $vlan[0]['vlan_number']);
// setup subnet
$query = "SELECT
s.subnet_id,
s.subnet_address,
s.subnet_mask
FROM
subnetvlan AS v LEFT JOIN subnet AS s USING(subnet_id)
WHERE
v.vlan_id=" . $vlan_id . "
ORDER BY
INET_ATON(s.subnet_address)";
$subnets = $db->db_select($query);
foreach ($subnets as $subnet) {
$subnet_options[$subnet['subnet_id']] = $subnet['subnet_address'].'/'.$subnet['subnet_mask'];
}
$smarty->assign("subnet_options", $subnet_options);
$smarty->display("vlansubnetdel.tpl");
include("footer.php");