Gdn_SQLDriver::namedParameter PHP Method

namedParameter() public method

Takes a parameter name and makes sure it is cleaned up to be used as a named parameter in a pdo prepared statement.
public namedParameter ( string $Name, boolean $CreateNew = false, $Value = null ) : string
$Name string The name of the parameter to cleanup
$CreateNew boolean Wether or not this is a new or existing parameter.
return string The cleaned up named parameter name.
    public function namedParameter($Name, $CreateNew = false, $Value = null)
    {
        // Format the parameter name so it is safe for sql
        $NiceName = ':' . preg_replace('/([^\\w])/', '', $Name);
        // Removes everything from the string except letters, numbers and underscores
        if ($CreateNew) {
            // Make sure that the new name doesn't already exist.
            $NumberedName = $NiceName;
            $i = 0;
            while (array_key_exists($NumberedName, $this->_NamedParameters)) {
                $NumberedName = $NiceName . $i;
                ++$i;
            }
            $NiceName = $NumberedName;
        }
        if (!is_null($Value)) {
            $this->_NamedParameters[$NiceName] = $Value;
        }
        return $NiceName;
    }