rendered paste body 1. function get_quizzes($uid) { 2. $db = QzDB::get(); $uid = (int) $uid; 3. return $db->get_results("SELECT qzid, title FROM qz_quizzes WHERE uid = '$uid'"); 4. } 5. 6. function add_question($question, $quiz_id) { 7. $db = QzDB::get(); 8. $db->escape($question); $qzid = (int) $quiz_id; 9. $db->query("INSERT INTO qz_questions(question, qzid) VALUES('$question', '$qzid')"); 10. } 11. 12. /* etc. etc. etc. */ 13. 14. /* writing a query function to do these in one line, like so: */ 15. 16. query('qz_quizzes',, 'select', array('uid' => $uid)); 17. query('qz_questions', 'insert', array('qzid' => $qzid, 'question' => $question)); 18. 19. /* Current status */ 20. 21. function query($table, $action, $vars = array()) } 22. 23. foreach($vars as &$name => $value) { 24. $value = sanitize($name, $value) 25. } 26. } 27. 28. function sanitize($type, $value) { 29. $inputs['int'] = 'uid'; 30. if(in_array($type, $inputs['int'])) { 31. $'sanitize_'.$type($ 32. } 33. } 34. 35. function sanitize_int($value) { 36. if(!is_numeric($value)) trigger_error('omgfux', E_USER_WARNING); 37. return (int) $value; 38. }