Question

I need to convert this into PDO form for a class, but since I am new to all of this, can someone please help me out? My professor claims that every function can be converted, but I can’t find anything online that can help me.

<?php
    // rnfunctions.php
    $dbhost = 'localhost';
    $dbname = 'social_local';
    $dbuser = 'root';
    $dbpass = 'root';
    $appname = "Social Networking Test Site";
    try
    {
        $dbh = new PDO("mysql:host=$dbhost;dbname=$dbname", $dbuser, $dbpass);
    }
    catch ( PDOException $e )
    {
        echo $e->getMessage();
    }

    function createTable ($name, $query)
    {
        if (tableExists($name)) {
            echo "Table '$name' already exists<br />";
        } else {
            queryMysql("CREATE TABLE $name($query)");
            echo "Table '$name' created<br />";
        }
    }

    function tableExists ($name)
    {
        $result = queryMysql("SHOW TABLES LIKE '$name'");
        return mysql_num_rows($result);
    }

    function queryMysql ($query)
    {
        $result = mysql_query($query) or die(mysql_error());
        return $result;
    }

    function destroySession ()
    {
        $_SESSION = array();
        if (session_id() != "" || isset($_COOKIE[session_name()])) {
            setcookie(session_name(), '', time() - 2592000, '/');
        }
        session_destroy();
    }

    function sanitizeString ($var)
    {
        $var = strip_tags($var);
        $var = htmlentities($var);
        $var = stripslashes($var);
        return $var;
    }

    function showProfile ($user)
    {
        if (file_exists("$user.jpg")) {
            echo "<img src='$user.jpg' border='1' align='left' />";
        }
        $result = queryMysql("SELECT * FROM rnprofiles WHERE user='$user'");
        if (mysql_num_rows($result)) {
            $row = mysql_fetch_row($result);
            echo stripslashes($row[1]) . "<br clear=left /><br />";
        }
    }
    ?>

Answer 1

Something like this may help you :

$dbh = new PDO("mysql:host=localhost;dbname=yourBaseName", 'someLogin', 'somePassword');
$dbh->prepare('SELECT login FROM members WHERE login=? AND password=?');
$stm = $dbh->execute(array($login, $pass));
if (($row = $stm->fetchObject())) {
    echo "You are loggued!";
    // stuffs with loggued user
} else {
    echo "Invalid user or password";
    // login form again
}