Why translate sql queries into Zend_Db style?

Question

I would like to ask why people use zend_db style?

e.g.

     $select = $d2b->select()
             ->from('users', array('userid','username'))
             ->where('userid=?', 2);

 $result = $d2b->fetchRow($select);
 echo $result->username;

instead of

$result = $d2b->fetchAll('SELECT * FROM users WHERE userid = ?', 2);
echo $result[0]->username;

Which one is better? Or is it the same, just for maintainability.

Both have advantages and disadvantages.

Richard Ye
– Richard Ye

2012-07-12 20:51:59 +00:00
Commented Jul 12, 2012 at 20:51 — Richard Ye
– Richard Ye, Commented Jul 12, 2012 at 20:51

Richard Ye · Accepted Answer · 2012-07-11 20:06:12Z

6

One reason is that using Zend_db style abstracts out the generation of SQL; this means that we switching between database engines can be as easy as swapping out a class, rather than having to re-write incompatible queries.

Furthermore, Zend_db abstracts out SQL query escaping, greatly reducing the risk of SQL injection attacks. It also provides database querying functionality for those who do not know SQL.

answered Jul 11, 2012 at 20:06

Richard Ye

6954 silver badges12 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

Slay Over a year ago

thanks! sorry, my english isnt that good. When you say abstract out, do you mean we do not need to specially cater for sql injection(like addslashes etc) when we adopt zend_db style? It's done automaticaly on zend db classes?

Richard Ye Over a year ago

Abstraction is basically "something else does the work for you", usually a simple, repeatable task. For instance, the + operator is an abstraction of the addition function. The function itself actually manipulates a bunch of bits in memory, but that's something you don't have to do because it's been abstracted out for you.

Tim Fountain · Accepted Answer · 2012-07-11 20:04:50Z

5

The end result is the same, so it's down to your personal preferences on readabiliy and maintainability.

The one advantage of the fluent interface style is that it makes it easier to build the queries up programatically, e.g.:

$select = $d2b->select()
         ->from('users', array('userid','username'));

if ([some condition]) {
    $select->where('userid = ?', 2);
} else {
    $select->where('userid = ?', 62);
}

answered Jul 11, 2012 at 20:04

Tim Fountain

33.2k5 gold badges44 silver badges70 bronze badges

1 Comment

Tadeck Over a year ago

+1 plus what Richard Ye mentioned (portability between the RDBMSs).

Collectives™ on Stack Overflow

Why translate sql queries into Zend_Db style?

2 Answers 2

2 Comments

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

2 Comments

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related