- Notifications
You must be signed in to change notification settings - Fork139
Dibi - smart database abstraction layer
License
dg/dibi
Folders and files
| Name | Name | Last commit message | Last commit date | |
|---|---|---|---|---|
Repository files navigation
Dibi - smart database layer for PHP
Database access functions in PHP are not standardised. This libraryhides the differences between them, and above all, it gives you a very handy interface.
Do you like Dibi? Are you looking forward to the new features?
Thank you!
Install Dibi via Composer:
composer require dibi/dibi
The Dibi 5.0 requires PHP version 8.2 and supports PHP up to 8.4.
Refer to theexamples directory for examples. Dibi documentation isavailable on thehomepage.
The database connection is represented by the objectDibi\Connection:
$database =newDibi\Connection(['driver' =>'mysqli','host' =>'localhost','username' =>'root','password' =>'***','database' =>'table',]);$result =$database->query('SELECT * FROM users');
Alternatively, you can use thedibi static register, which maintains a connection object in a globally available storage and calls all the functions above it:
dibi::connect(['driver' =>'mysqli','host' =>'localhost','username' =>'root','password' =>'***','database' =>'test','charset' =>'utf8',]);$result = dibi::query('SELECT * FROM users');
In the event of a connection error, it throwsDibi\Exception.
We query the database queries by the methodquery() which returnsDibi\Result. Rows are objectsDibi\Row.
You can try all the examplesonline at the playground.
$result =$database->query('SELECT * FROM users');foreach ($resultas$row) {echo$row->id;echo$row->name;}// array of all rows$all =$result->fetchAll();// array of all rows, key is 'id'$all =$result->fetchAssoc('id');// associative pairs id => name$pairs =$result->fetchPairs('id','name');// the number of rows of the result, if known, or number of affected rows$count =$result->getRowCount();
Method fetchAssoc() can return a more complex associative array.
You can easily add parameters to the query, note the question mark:
$result =$database->query('SELECT * FROM users WHERE name = ? AND active = ?',$name,$active);// or$result =$database->query('SELECT * FROM users WHERE name = ?',$name,'AND active = ?',$active););$ids = [10,20,30];$result =$database->query('SELECT * FROM users WHERE id IN (?)',$ids);
WARNING: Never concatenate parameters to SQL. It would create aSQL injection vulnerability.
$result = $database->query('SELECT * FROM users WHERE id = ' . $id); // BAD!!!Instead of a question mark, so-called modifiers can be used.
$result =$database->query('SELECT * FROM users WHERE name = %s',$name);
In case of failurequery() throwsDibi\Exception, or one of the descendants:
ConstraintViolationException- violation of a table constraintForeignKeyConstraintViolationException- invalid foreign keyNotNullConstraintViolationException- violation of the NOT NULL conditionUniqueConstraintViolationException- collides unique index
You can use also shortcuts:
// returns associative pairs id => name, shortcut for query(...)->fetchPairs()$pairs =$database->fetchPairs('SELECT id, name FROM users');// returns array of all rows, shortcut for query(...)->fetchAll()$rows =$database->fetchAll('SELECT * FROM users');// returns row, shortcut for query(...)->fetch()$row =$database->fetch('SELECT * FROM users WHERE id = ?',$id);// returns field, shortcut for query(...)->fetchSingle()$name =$database->fetchSingle('SELECT name FROM users WHERE id = ?',$id);
In addition to the? wildcard char, we can also use modifiers:
| modifier | description |
|---|---|
| %s | string |
| %sN | string, but '' translates as NULL |
| %bin | binary data |
| %b | boolean |
| %i | integer |
| %iN | integer, but 0 is translates as NULL |
| %f | float |
| %d | date (accepts DateTime, string or UNIX timestamp) |
| %dt | datetime (accepts DateTime, string or UNIX timestamp) |
| %n | identifier, ie the name of the table or column |
| %N | identifier, treats period as a common character, ie alias or a database name (%n AS %N orDROP DATABASE %N) |
| %SQL | SQL - directly inserts into SQL (the alternative is Dibi\Literal) |
| %ex | SQL expression or array of expressions |
| %lmt | special - adds LIMIT to the query |
| %ofs | special - adds OFFSET to the query |
Example:
$result =$database->query('SELECT * FROM users WHERE name = %s',$name);
If $name is null, the NULL is inserted into the SQL statement.
If the variable is an array, the modifier is applied to all of its elements and they are inserted into SQL separated by commas:
$ids = [10,'20',30];$result =$database->query('SELECT * FROM users WHERE id IN (%i)',$ids);// SELECT * FROM users WHERE id IN (10, 20, 30)
The modifier%n is used if the table or column name is a variable. (Beware, do not allow the user to manipulate the content of such a variable):
$table ='blog.users';$column ='name';$result =$database->query('SELECT * FROM %n WHERE %n = ?',$table,$column,$value);// SELECT * FROM `blog`.`users` WHERE `name` = 'Jim'
Three special modifiers are available for LIKE:
| modifier | description |
|---|---|
%like~ | the expression starts with a string |
%~like | the expression ends with a string |
%~like~ | the expression contains a string |
%like | the expression matches a string |
Search for names beginning with a string:
$result =$database->query('SELECT * FROM table WHERE name LIKE %like~',$query);
The parameter entered in the SQL query can also be an array. These modifiers determine how to compile the SQL statement:
| modifier | result | |
|---|---|---|
| %and | key1 = value1 AND key2 = value2 AND ... | |
| %or | key1 = value1 OR key2 = value2 OR ... | |
| %a | assoc | key1 = value1, key2 = value2, ... |
| %l %in | list | (val1, val2, ...) |
| %v | values | (key1, key2, ...) VALUES (value1, value2, ...) |
| %m | multi | (key1, key2, ...) VALUES (value1, value2, ...), (value1, value2, ...), ... |
| %by | ordering | key1 ASC, key2 DESC ... |
| %n | names | key1, key2 AS alias, ... |
Example:
$arr = ['a' =>'hello','b' =>true,];$database->query('INSERT INTO table %v',$arr);// INSERT INTO `table` (`a`, `b`) VALUES ('hello', 1)$database->query('UPDATE `table` SET %a',$arr);// UPDATE `table` SET `a`='hello', `b`=1
In the WHERE clause modifiers%and nebo%or can be used:
$result =$database->query('SELECT * FROM users WHERE %and', ['name' =>$name,'year' =>$year,]);// SELECT * FROM users WHERE `name` = 'Jim' AND `year` = 1978
The modifier%by is used to sort, the keys show the columns, and the boolean value will determine whether to sort in ascending order:
$result =$database->query('SELECT id FROM author ORDER BY %by', ['id' =>true,// ascending'name' =>false,// descending]);// SELECT id FROM author ORDER BY `id`, `name` DESC
We insert the data into an SQL query as an associative array. Modifiers and wildcards? are not required in these cases.
$database->query('INSERT INTO users', ['name' =>$name,'year' =>$year,]);// INSERT INTO users (`name`, `year`) VALUES ('Jim', 1978)$id =$database->getInsertId();// returns the auto-increment of the inserted record$id =$database->getInsertId($sequence);// or sequence value
Multiple INSERT:
$database->query('INSERT INTO users', ['name' =>'Jim','year' =>1978,], ['name' =>'Jack','year' =>1987,]);// INSERT INTO users (`name`, `year`) VALUES ('Jim', 1978), ('Jack', 1987)
Deleting:
$database->query('DELETE FROM users WHERE id = ?',$id);// returns the number of deleted rows$affectedRows =$database->getAffectedRows();
Update:
$database->query('UPDATE users SET', ['name' =>$name,'year' =>$year,],'WHERE id = ?',$id);// UPDATE users SET `name` = 'Jim', `year` = 1978 WHERE id = 123// returns the number of updated rows$affectedRows =$database->getAffectedRows();
Insert an entry or update if it already exists:
$database->query('INSERT INTO users', ['id' =>$id,'name' =>$name,'year' =>$year,],'ON DUPLICATE KEY UPDATE %a', [// here the modifier %a must be used'name' =>$name,'year' =>$year,]);// INSERT INTO users (`id`, `name`, `year`) VALUES (123, 'Jim', 1978)// ON DUPLICATE KEY UPDATE `name` = 'Jim', `year` = 1978
There are three methods for dealing with transactions:
$database->begin();$database->commit();$database->rollback();
In order to play with Dibi a little, there is atest() method that you pass parameters like toquery(), but instead of executing the SQL statement, it is echoed on the screen.
The query results can be echoed as a table using$result->dump().
These variables are also available:
dibi::$sql;// the latest SQL querydibi::$elapsedTime;// its duration in secdibi::$numOfQueries;dibi::$totalTime;
The parameter may also be an objectDateTime.
$result =$database->query('SELECT * FROM users WHERE created < ?',newDateTime);$database->query('INSERT INTO users', ['created' =>newDateTime,]);
Or SQL literal:
$database->query('UPDATE table SET', ['date' =>$database->literal('NOW()'),]);// UPDATE table SET `date` = NOW()
Or an expression in which you can use? or modifiers:
$database->query('UPDATE `table` SET', ['title' =>$database::expression('SHA1(?)','secret'),]);// UPDATE `table` SET `title` = SHA1('secret')
When updating, modifiers can be placed directly in the keys:
$database->query('UPDATE table SET', ['date%SQL' =>'NOW()',// %SQL means SQL ;)]);// UPDATE table SET `date` = NOW()
In conditions (ie, for%and and%or modifiers), it is not necessary to specify the keys:
$result =$database->query('SELECT * FROM `table` WHERE %and', ['number > 10','number < 100',]);// SELECT * FROM `table` WHERE (number > 10) AND (number < 100)
Modifiers or wildcards can also be used in expressions:
$result =$database->query('SELECT * FROM `table` WHERE %and', [['number > ?',10],// or $database::expression('number > ?', 10)['number < ?',100],['%or', ['left' =>1,'top' =>2,]],]);// SELECT * FROM `table` WHERE (number > 10) AND (number < 100) AND (`left` = 1 OR `top` = 2)
The%ex modifier inserts all items of the array into SQL:
$result =$database->query('SELECT * FROM `table` WHERE %ex', [$database::expression('left = ?',1),'AND','top IS NULL',]);// SELECT * FROM `table` WHERE left = 1 AND top IS NULL
Conditional SQL commands are controlled by three modifiers%if,%else, and%end. The%if must be at the end of the string representing SQL and is followed by the variable:
$user = ???$result =$database->query('SELECT *FROM table%if',isset($user),'WHERE user=%s',$user,'%endORDER BY name');
The condition can be supplemented by the section%else:
$result =$database->query('SELECT *FROM %if',$cond,'one_table %else second_table');
Conditions can nest together.
SQL itself goes through processing to meet the conventions of the database. The identifiers (names of tables and columns) can be entered into square brackets or backticks, strings are quoted with single or double quotation marks, but the server always sends what the database asks for. Example:
$database->query("UPDATE `table` SET [status]='I''m fine'");// MySQL: UPDATE `table` SET `status`='I\'m fine'// ODBC: UPDATE [table] SET [status]='I''m fine'
The quotation marks are duplicated inside the string in SQL.
Example: returns results as an associative field, where the key will be the value of theid field:
$assoc =$result->fetchAssoc('id');
The greatest power offetchAssoc() is reflected in a SQL query joining several tables with different types of joins. The database will make a flat table, fetchAssoc returns the shape.
Example: Let's take a customer and order table (N:M binding) and query:
$result =$database->query(' SELECT customer_id, customers.name, order_id, orders.number, ... FROM customers INNER JOIN orders USING (customer_id) WHERE ...');
And we'd like to get a nested associative array by Customer ID and then Order ID:
$all =$result->fetchAssoc('customer_id|order_id');// we will iterate like this:foreach ($allas$customerId =>$orders) {foreach ($ordersas$orderId =>$order) {... }}
An associative descriptor has a similar syntax as when you type the array by assigning it to PHP. Thus'customer_id|order_id' represents the assignment series$all[$customerId][$orderId] = $row; sequentially for all rows.
Sometimes it would be useful to associate by the customer's name instead of his ID:
$all =$result->fetchAssoc('name|order_id');// the elements then proceeds like this:$order =$all['Arnold Rimmer'][$orderId];
But what if there are more customers with the same name? The table should be in the form of:
$row =$all['Arnold Rimmer'][0][$orderId];$row =$all['Arnold Rimmer'][1][$orderId];...
So we can distinguish between multiple possible Rimmers using an array. The associative descriptor has a format similar to the assignment, with the sequence array representing[]:
$all =$result->fetchAssoc('name[]order_id');// we get all the Arnolds in the resultsforeach ($all['Arnold Rimmer']as$arnoldOrders) {foreach ($arnoldOrdersas$orderId =>$order) {... }}
Returning to the example with thecustomer_id|order_id descriptor, we will try to list the orders of each customer:
$all =$result->fetchAssoc('customer_id|order_id');foreach ($allas$customerId =>$orders) {echo"Customer$customerId":foreach ($ordersas$orderId =>$order) {echo"ID number:$order->number";// customer name is in $order->name }}
It would be a nice to echo customer name too. But we would have to look for it in the$orders array. So let's adjust the results to such a shape:
$all[$customerId]->name ='John Doe';$all[$customerId]->order_id[$orderId] =$row;$all[$customerId]->order_id[$orderId2] =$row2;
So, between$clientId and$orderId, we will also insert an intermediate item. This time not the numbered indexes as we used to distinguish between individual Rimmers, but a database row. The solution is very similar, just remember that the row symbolizes the arrow:
$all =$result->fetchAssoc('customer_id->order_id');foreach ($allas$customerId =>$row) {echo"Customer$row->name":foreach ($row->order_idas$orderId =>$order) {echo"ID number:$order->number"; }}
Table and column names can contain variable parts. You will first define:
// create new substitution :blog: ==> wp_$database->substitute('blog','wp_');
and then use it in SQL. Note that in SQL they are quoted by the colon:
$database->query("UPDATE [:blog:items] SET [text]='Hello World'");// UPDATE `wp_items` SET `text`='Hello World'
Dibi automatically detects the types of query columns and converts fields them to native PHP types. We can also specify the type manually. You can find the possible types in theDibi\Type class.
$result->setType('id',Dibi\Type::Integer);// id will be integer$row =$result->fetch();is_int($row->id)// true
Dibi has a built-in logger that lets you track all SQL statements executed and measure the length of their duration. Activating the logger:
$database->connect(['driver' =>'sqlite','database' =>'sample.sdb','profiler' => ['file' =>'file.log',],]);
A more versatile profiler is a Tracy panel that is activated when connected to Nette.
Connect toNette
In the configuration file, we will register the DI extensions and add thedibi section to create the required objects and also the database panel in theTracy debugger bar.
extensions:dibi:Dibi\Bridges\Nette\DibiExtension3dibi:host:localhostusername:rootpassword:***database:foolazy:true
Then the object of connection can beobtained as a service from the container DI, eg:
class Model{private$database;publicfunction__construct(Dibi\Connection$database){$this->database =$database;}}
About
Dibi - smart database abstraction layer