Getsqlvaluestring / mysqli_real_escape_string / Notice: Undefined variable: mysqli

Question

I am trying to convert a function to Mysqli, to use with PHP7.1. I am having difficulties with mysqli_real_escape_string, and mysqli_escape_string.

Error:

Notice: Undefined variable: mysqli in config.php on line 16

Warning: mysqli_escape_string() expects Parameter 1 to be mysqli, null Given in > config.php on line 16

CONFIG.PHP FILE

require_once('Connections/conexao.php');

$mysqli = new mysqli($hostname_conexao,$username_conexao,$password_conexao,$database_conexao); if($mysqli->connect_error){echo "Erro";exit();}

if (!function_exists("GetSQLValueString")) {
    function GetSQLValueString($theValue, $theType, $theDefinedValue = "", $theNotDefinedValue = "")
    {
        if (PHP_VERSION < 6) {
            $theValue = get_magic_quotes_gpc() ? stripslashes($theValue) : $theValue;
        }

        $theValue = function_exists("mysql_real_escape_string") ? mysqli_real_escape_string($mysqli, $theValue) : mysqli_escape_string($mysqli, $theValue);

        switch ($theType) {
            case "text":
                $theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";
                break;
            case "long":
            case "int":
                $theValue = ($theValue != "") ? intval($theValue) : "NULL";
                break;
            case "double":
                $theValue = ($theValue != "") ? doubleval($theValue) : "NULL";
                break;
            case "date":
                $theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";
                break;
            case "defined":
                $theValue = ($theValue != "") ? $theDefinedValue : $theNotDefinedValue;
                break;
        }
        return $theValue;
    }
}

What I need to do?

Answer 1

Exchange the mysql for mysqli, I believe it’s a misspelling of yours.

Would look like this:

$theValue = function_exists("mysqli_real_escape_string") ? mysqli_real_escape_string($mysqli, $theValue) : mysqli_escape_string($mysqli, $theValue);

In oriented object mode, it asks only one parameter, it would look like this:

$theValue = function_exists("mysqli_real_escape_string") ? mysqli->real_escape_string($theValue) : mysqli->escape_string($theValue);

Answer 2

The problem is that the function GetSQLValueString is trying to access a variable that is outside of it, ie the variable is in a different scope, to adjust use the global thus:

function GetSQLValueString($theValue, $theType, $theDefinedValue = "", $theNotDefinedValue = "")
{

     global $mysqli;

You can also try other approaches like OOP, but this is another story, it’s just a suggestion.