Re: PHP: query with parameter for SET

Поиск
Список
Период
Сортировка
От Pavel Stehule
Тема Re: PHP: query with parameter for SET
Дата
Msg-id CAFj8pRCg75L+na+ah=BkEr2yd-05F7Npr1zjSbYw1308ULABFA@mail.gmail.com
обсуждение исходный текст
Ответ на PHP: query with parameter for SET  (Ray O'Donnell <ray@rodonnell.ie>)
Ответы Re: PHP: query with parameter for SET  (Ray O'Donnell <ray@rodonnell.ie>)
Список pgsql-general
Hi

út 27. 7. 2021 v 19:10 odesílatel Ray O'Donnell <ray@rodonnell.ie> napsal:
Hi everyone,

Using PHP (or indeed maybe more generally), is it possible to issue a
SET TIME ZONE statement with a parameter for the new runtime setting?

In a PHP application I'm issuing a SET TIME ZONE command just after the
database connection is created, and for security I'd like to pass the
time zone value in a parameter, as it's coming from a configuration file
- something like this:

     $pdo = new PDO(/* DSN goes here */);

     $statement = $pdo->prepare('set time zone :tz');
     $statement->execute([':tz' => 'Europe/Dublin']);

However, in the logs I see:

ERROR:  syntax error at or near "to" at character 15
STATEMENT:  set time zone $1

Is this possible? I've also tried the "set timezone ..." variant with
similar results. I'm wondering too if the limitation (if such it is) is
in PHP or whether it's a Postgres thing.

When you use client side prepared statements, then it can be possible. But I don't know how it works in PHP.

Server side prepared statements are not possible in this case. "set" statement has not execution plan. But you  You can use Adrian's proposal, and you can prepare the query 'select set_config($1, false)'

Regards

Pavel


Thanks,

Ray.

--
Raymond O'Donnell // Galway // Ireland
ray@rodonnell.ie


В списке pgsql-general по дате отправления:

Предыдущее
От: Adrian Klaver
Дата:
Сообщение: Re: PHP: query with parameter for SET
Следующее
От: Ray O'Donnell
Дата:
Сообщение: Re: PHP: query with parameter for SET