Skip navigation
Help

Database abstraction layer

  1. drupal
    1. 6 drupal/includes/database.inc
    2. 7 drupal/includes/database/database.inc

Allow the use of different database servers using the same code base.

Drupal provides a slim database abstraction layer to provide developers with the ability to support multiple database servers easily. The intent of this layer is to preserve the syntax and power of SQL as much as possible, while letting Drupal control the pieces of queries that need to be written differently for different servers and provide basic security checks.

Most Drupal database queries are performed by a call to db_query() or db_query_range(). Module authors should also consider using pager_query() for queries that return results that need to be presented on multiple pages, and tablesort_sql() for generating appropriate queries for sortable tables.

For example, one might wish to return a list of the most recent 10 nodes authored by a given user. Instead of directly issuing the SQL query

  SELECT n.nid, n.title, n.created FROM node n WHERE n.uid = $uid LIMIT 0, 10;

one would instead call the Drupal functions:

  $result = db_query_range('SELECT n.nid, n.title, n.created
    FROM {node} n WHERE n.uid = %d', $uid, 0, 10);
  while ($node = db_fetch_object($result)) {
    // Perform operations on $node->body, etc. here.
  }

Curly braces are used around "node" to provide table prefixing via db_prefix_tables(). The explicit use of a user ID is pulled out into an argument passed to db_query() so that SQL injection attacks from user input can be caught and nullified. The LIMIT syntax varies between database servers, so that is abstracted into db_query_range() arguments. Finally, note the common pattern of iterating over the result set using db_fetch_object().

Functions & methods

NameDescription
db_affected_rowsDetermine the number of rows changed by the preceding query.
db_affected_rowsDetermine the number of rows changed by the preceding query.
db_affected_rowsDetermine the number of rows changed by the preceding query.
db_check_setupVerify if the database is set up correctly.
db_column_existsCheck if a column exists in the given table.
db_column_existsCheck if a column exists in the given table.
db_column_existsCheck if a column exists in the given table.
db_connectInitialize a database connection.
db_connectInitialise a database connection.
db_connectInitialize a database connection.
db_decode_blobReturns text from a Binary Large Object value.
db_decode_blobReturns text from a Binary Large OBject value.
db_decode_blobReturns text from a Binary Large OBject value. In case of PostgreSQL decodes data after select from bytea field.
db_distinct_fieldAdds the DISTINCT flag to the supplied query and returns the altered query.
db_encode_blobReturns a properly formatted Binary Large OBject value.
db_encode_blobReturns a properly formatted Binary Large Object value.
db_encode_blobReturns a properly formatted Binary Large OBject value. In case of PostgreSQL encodes data for insert into bytea field.
db_errorDetermine whether the previous query caused an error.
db_errorDetermine whether the previous query caused an error.
db_errorDetermine whether the previous query caused an error.
db_escape_stringPrepare user input for use in a database query, preventing SQL injection attacks.
db_escape_stringPrepare user input for use in a database query, preventing SQL injection attacks.
db_escape_stringPrepare user input for use in a database query, preventing SQL injection attacks. Note: This function requires PostgreSQL 7.2 or later.
db_escape_tableRestrict a dynamic table, column or constraint name to safe characters.
db_fetch_arrayFetch one result row from the previous query as an array.
db_fetch_arrayFetch one result row from the previous query as an array.
db_fetch_arrayFetch one result row from the previous query as an array.
db_fetch_objectFetch one result row from the previous query as an object.
db_fetch_objectFetch one result row from the previous query as an object.
db_fetch_objectFetch one result row from the previous query as an object.
db_is_activeReturns a boolean depending on the availability of the database.
db_last_insert_idReturns the last insert id. This function is thread safe.
db_lock_tableLock a table.
db_lock_tableLock a table.
db_lock_tableLock a table. This function automatically starts a transaction.
db_placeholdersGenerate placeholders for an array of query arguments of a single type.
db_prefix_tablesAppend a database prefix to all tables in a query.
db_queryRuns a basic query in the active database.
db_query_rangeRuns a limited-range query in the active database.
db_query_rangeRuns a limited-range query in the active database.
db_query_rangeRuns a limited-range query in the active database.
db_query_temporaryRuns a SELECT query and stores its results in a temporary table.
db_query_temporaryRuns a SELECT query and stores its results in a temporary table.
db_query_temporaryRuns a SELECT query and stores its results in a temporary table.
db_resultReturn an individual result field from the previous query.
db_resultReturn an individual result field from the previous query.
db_resultReturn an individual result field from the previous query.
db_rewrite_sqlRewrites node, taxonomy and comment queries. Use it for listing queries. Do not use FROM table1, table2 syntax, use JOIN instead.
db_set_activeActivate a database for future queries.
db_status_reportReport database status.
db_status_reportReport database status.
db_status_reportReport database status.
db_table_existsCheck if a table exists.
db_table_existsCheck if a table exists.
db_table_existsCheck if a table exists.
db_unlock_tablesUnlock all locked tables.
db_unlock_tablesUnlock all locked tables.
db_unlock_tablesUnlock all locked tables. This function automatically commits a transaction.
db_versionReturns the version of the database server currently in use.
db_versionReturns the version of the database server currently in use.
db_versionReturns the version of the database server currently in use.
pager_queryPerform a paged database query.
tablesort_sqlCreate an SQL sort clause.
update_sqlPerform an SQL query and return success or failure.
_db_error_pageHelper function to show fatal database errors.
_db_queryHelper function for db_query().
_db_queryHelper function for db_query().
_db_queryHelper function for db_query().
_db_query_callbackHelper function for db_query().
_db_rewrite_sqlHelper function for db_rewrite_sql.

Constants

NameDescription
DB_QUERY_REGEXPIndicates the place holders that should be replaced in _db_query_callback().

File

drupal/includes/database.inc, line 15
Wrapper for database interface code.