1 files changed, 138 insertions, 0 deletions
diff --git a/ext/pdo/pdo_sql_parser.re b/ext/pdo/pdo_sql_parser.re
new file mode 100644
index 0000000000..08ea83df23
--- /dev/null
+++ b/ext/pdo/pdo_sql_parser.re
@@ -0,0 +1,138 @@
+#include "php.h"
+#include "php_pdo_driver.h"
+
+#define TEXT 1
+#define BIND 2
+#define EOI 3
+
+#define RET(i) {s->cur = cursor; return i; }
+
+#define YYCTYPE         char
+#define YYCURSOR        cursor
+#define YYLIMIT         s->lim
+#define YYMARKER        s->ptr
+#define YYFILL(n)
+
+typedef struct Scanner {
+	char 	*lim, *ptr, *cur, *tok;
+} Scanner;
+
+static int scan(Scanner *s) 
+{
+	char *cursor = s->cur;
+	std:
+		s->tok = cursor;
+	/*!re2c
+	BINDCHR		= [:][a-zA-Z0-9]+;
+	SPECIALS	= [:"];
+	ESC     	= [\\]["];
+	EOF			= [\000];
+	ANYNOEOF	= [\001-\377];
+	*/
+
+	/*!re2c
+		(["] (ESC|ANYNOEOF\[\\"])* ["])		{ RET(TEXT); }
+		BINDCHR	{ RET(BIND); }
+		SPECIALS	{ RET(TEXT); }
+		(ANYNOEOF\SPECIALS)+ { RET(TEXT); }
+		EOF		{ RET(EOI); }
+	*/	
+}
+
+int pdo_parse_params(pdo_stmt_t *stmt, char *inquery, int inquery_len, char **outquery, 
+                        int *outquery_len)
+{
+	Scanner s;
+	char *ptr;
+	int t;
+	int bindno = 0;
+	int newbuffer_len;
+	HashTable *params = stmt->bound_params;
+	struct pdo_bound_param_data *param;
+
+	/* allocate buffer for query with expanded binds, ptr is our writing pointer */
+	newbuffer_len = inquery_len;
+	if(params) {
+		zend_hash_internal_pointer_reset(params);
+		while (SUCCESS == zend_hash_get_current_data(params, (void**)&param)) {
+			if(param->parameter) {
+				convert_to_string(param->parameter);
+				/* accomodate a string that needs to be fully quoted
+                   bind placeholders are at least 2 characters, so
+                   the accomodate their own "'s
+                */
+				newbuffer_len += 2 * Z_STRLEN_P(param->parameter);
+			}
+			zend_hash_move_forward(params);
+		}
+	}
+	*outquery = (char *) emalloc(newbuffer_len + 1);
+	*outquery_len = 0;
+
+	ptr = *outquery;
+	s.cur = inquery;
+	s.lim = inquery + inquery_len;
+	while((t = scan(&s)) != EOI) {
+		if(t == TEXT) {
+			memcpy(ptr, s.tok, s.cur - s.tok);
+			ptr += (s.cur - s.tok);
+			*outquery_len += (s.cur - s.tok);
+		}
+		else if(t == BIND) {
+			if(!params) { 
+				/* error */
+				efree(*outquery);
+				return 0;
+			}
+			/* lookup bind first via hash and then index */
+			if((SUCCESS == zend_hash_find(params, s.tok+1, s.cur-s.tok,(void **)&param))  
+			    ||
+			   (SUCCESS == zend_hash_index_find(params, bindno, (void **)&param))) 
+			{
+				char *quotedstr;
+				int quotedstrlen;
+				/* currently everything is a string here */
+				
+				/* add leading quote */
+				*ptr = '"';
+				ptr++;
+				(*outquery_len)++;
+
+				/* quote the bind value if necessary */
+				if(stmt->dbh->methods->quoter(stmt->dbh, Z_STRVAL_P(param->parameter), 
+					Z_STRLEN_P(param->parameter), &quotedstr, &quotedstrlen TSRMLS_CC))
+				{
+					memcpy(ptr, quotedstr, quotedstrlen);
+					ptr += quotedstrlen;
+					*outquery_len += quotedstrlen;
+					efree(quotedstr);
+				} else {
+					memcpy(ptr, Z_STRVAL_P(param->parameter), Z_STRLEN_P(param->parameter));
+					ptr += Z_STRLEN_P(param->parameter);
+					*outquery_len += (Z_STRLEN_P(param->parameter));
+				}
+				/* add trailing quote */
+				*ptr = '"';
+				ptr++;
+				(*outquery_len)++;
+			}
+			else {
+				/* error and cleanup */
+				efree(*outquery);
+				return 0;
+			}
+			bindno++;
+		}	
+	}	
+	*ptr = '\0';
+	return 1;
+}
+
+/*
+ * Local variables:
+ * tab-width: 4
+ * c-basic-offset: 4
+ * End:
+ * vim600: noet sw=4 ts=4 fdm=marker
+ * vim<600: noet sw=4 ts=4
+ */