How do I save a dynamically generated XML document to a database using PHP?

Question

I can't seem to figure out how to save an XML file that I generated with the DOM objects to my database..

Here is my PHP:

$xmlraw = $doc->saveXML();

$xmlQuery=sprintf("INSERT INTO xmlTestTable (XMLString) VALUES ('%s')", $xmlraw); 

$result = mysql_query($xmlQuery);

I also tried:

$xmlQuery=sprintf("INSERT INTO xmlTestTable (XMLString) VALUES ('%s')", $doc->saveXML()); 

$result = mysql_query($xmlQuery);

Where $doc is the XML Document I created.

I am able to see the XML output in my browser when I do this:

echo $doc->saveXML();

There are no errors being outputted or anything...

My MySQL Column that this is being injected into is 'Long Text'

Thank you in advance!!

Pascal MARTIN · Accepted Answer · 2011-03-03 21:35:45Z

4

First of all, you need to get the XML string, using, as you guessed, the saveXML() method :

$xmlraw = $doc->saveXML();

Then, you need to insert this value ; but you must escape it properly !

Escaping a string to inject it into an SQL query is something you'll do using the specific function that's provided by the API you're using to connect to your database -- as you are using mysql_* functions, you'll use mysql_real_escape_string()

$escapedString = mysql_real_escape_string($xmlraw);

Now, you have the string you can inject into your SQL query :

$query = "INSERT INTO xmlTestTable (XMLString) VALUES ('$escapedString')";

You can also use sprintf, like you did, of course.

answered Mar 3, 2011 at 21:35

Pascal MARTIN

402k82 gold badges665 silver badges666 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

cweiske · Accepted Answer · 2011-03-03 21:41:12Z

1

Please escape the xml with mysql_real_escape_string - this will fix your problem, and it will save you from sql injection attacks.

answered Mar 3, 2011 at 21:41

cweiske

31.4k15 gold badges150 silver badges206 bronze badges

Collectives™ on Stack Overflow

How do I save a dynamically generated XML document to a database using PHP?

2 Answers 2

Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related