MOON
Server: Apache
System: Linux e2e-78-16.ssdcloudindia.net 3.10.0-1160.45.1.el7.x86_64 #1 SMP Wed Oct 13 17:20:51 UTC 2021 x86_64
User: imensosw (1005)
PHP: 8.0.30
Disabled: exec,passthru,shell_exec,system
Upload Files
File: /home/imensosw/www/imenso.co/demo/resume-maker/include/memberclass.php
<?php

    class Memberclass {

        // The database connection
        protected static $connection;

        /**
         * Connect to the database
         * 
         * @return bool false on failure / mysqli MySQLi object instance on success
         */
        public function __construct() {    
            // Try and connect to the database
            if(!isset(self::$connection)) {
                //self::$connection = new mysqli('localhost','root','','enhance');
                self::$connection = new mysqli('localhost','enhancv','L(EmSSDQMHr5','enhancv');
            }

            // If connection was not successful, handle the error
            if(self::$connection === false) {
                // Handle error - notify administrator, log to a file, show an error screen, etc.
                echo "Failed";
            }

        }

        /**
         * Query the database
         *
         * @param $query The query string
         * @return mixed The result of the mysqli::query() function
         */
        public function query($query) {
            // Connect to the database
            // $connection = $this -> connect();

            // Query the database
            $result = self::$connection -> query($query);

            return $result;
        }

        /**
         * Fetch rows from the database (SELECT query)
         *
         * @param $query The query string
         * @return bool False on failure / array Database rows on success
         */
        public function select($query) {
            $rows = array();
            $result = $this -> query($query);
            if($result === false) {
                return false;
            }
            while ($row = $result -> fetch_assoc()) {
                $rows[] = $row;
            }
            return $rows;
        }

        public function insert($table, $dataArray) {

            $query = "INSERT INTO ".$table." ( ";
            $chk = 1;
            foreach ($dataArray as $key => $value) {
                if($chk ==1){
                    $query .= $key;
                }else{
                    $query .= ",".$key;
                }
                $chk++;
                
            }     

            //$query = rtrim($query, ",");      

            $query .= ") VALUES (";

            $chk = 1;
            foreach ($dataArray as $key => $value) {
                if($chk ==1){
                    $query .= "'".$value."' ";
                }else{
                    $query .= ",'".$value."'";
                }
                $chk++;
            }

            //$query = rtrim($query, ",");

            $query .= ")";
            // return $query;
            
            $result = $this -> insert_query($query);
            return $result;
        }

        public function update($table, $dataArray, $where) {
			
			$query = "update ".$table. " SET ";
			$chk = 1;
			foreach($dataArray as $key => $value) {
				
                if($chk == 1){
                    $query .= $key." = '".$value."' ";
                }else{
                    $query .= " , ".$key." = '".$value."' ";
                }
                $chk++;
			}
			
			$query = substr($query, 0, strlen($query)-1 );
			// $query = rtrim($query, ",");      
			// return $query;
			
			$query .= " where 1=1 ";
			
			foreach( $where as $key => $value) {
				
				if(is_numeric($value)) {
					$query .= " AND ".$key." = ".$value;
				} else {
					$query .= " AND ".$key." = '".$value."' ";
				}
			}
			
			//$query = substr($query, 0, strlen($query)-4 );
			//$query = trim($query, ",");
			// rtrim($string, ",")
			
			$result = $this -> update_query($query);
            // return $result;
			return $query;
			
		}

        public function insert_query($query) {
            $result = self::$connection -> query($query);
            return self::$connection->insert_id;
        }
		
		public function update_query($query) {
			$result = self::$connection -> query($query);
			return $result;
		}
		
		public function removeData($table, $where) {
			$query = "delete from ".$table." where ";
			$count_tot = count($where);
            $count = 1;
            foreach( $where as $key => $value) {
				if($count == $count_tot)
                {
                    if(is_numeric($value)) {
                        $query .= $key." = ".$value." ";
                    } else {
                        $query .= $key." = '".$value."' ";
                    }
                }
                else
                {
                    if(is_numeric($value)) {
                        $query .= $key." = ".$value." AND ";
                    } else {
                        $query .= $key." = '".$value."' AND ";
                    }
                }
				$count++;
			}
			
			$result = $this->query($query);
            return $result;
		}

        /**
         * Fetch the last error from the database
         * 
         * @return string Database error message
         */
        public function error() {
            $connection = $this -> connect();
            return $connection -> error;
        }

        /**
         * Quote and escape value for use in a database query
         *
         * @param string $value The value to be quoted and escaped
         * @return string The quoted and escaped string
         */
        public function quote($value) {
            $connection = $this -> connect();
            return "'" . $connection -> real_escape_string($value) . "'";
        }
    }