Coder Forum

PHP Quellcode

<?php
$tablename_allowed = array('hauptkategorie', 'unterkategorie', 'unterunterkategorie');
$tablename_default = 'hauptkategorie';
$tablename = isset($_REQUEST['name']) ? $_REQUEST['name'] : $tablename_default;
 
// check whitelist
if(!in_array($tablename, $tablename_allowed)) {
	die($tablename.' not allowed');
}
 
$sql = "SELECT	id, text
	FROM	".$tablename."
	WHERE	parentID = :id"; 
$stmt = MyDB::getInstance()->prepare($sql); 
$stmt->execute(array( 
	':id' => isset($_REQUEST['id']) ? $_REQUEST['id'] : 0
));
$return = $stmt->fetchAll();
 
echo json_encode($return);
?>

SQL Code

CREATE TABLE hauptkategorie (
  id int(10) UNSIGNED NOT NULL AUTO_INCREMENT,
  `text` varchar(32) NOT NULL,
  parentID int(10) UNSIGNED NOT NULL,
  PRIMARY KEY (id)
) ENGINE=MyISAM  DEFAULT CHARSET=utf8;
 
INSERT INTO hauptkategorie (id, text, parentID) VALUES
(1, 'A', 0),
(2, 'B', 0),
(3, 'AA', 1),
(4, 'BB', 2);
 
CREATE TABLE unterkategorie (
  id int(10) UNSIGNED NOT NULL AUTO_INCREMENT,
  `text` varchar(32) NOT NULL,
  parentID int(10) UNSIGNED NOT NULL,
  PRIMARY KEY (id)
) ENGINE=MyISAM  DEFAULT CHARSET=utf8;
 
INSERT INTO unterkategorie (id, text, parentID) VALUES
(1, 'A', 3),
(2, 'B', 4);
 
CREATE TABLE unterunterkategorie (
  id int(10) UNSIGNED NOT NULL AUTO_INCREMENT,
  `text` varchar(32) NOT NULL,
  parentID int(10) UNSIGNED NOT NULL,
  PRIMARY KEY (id)
) ENGINE=MyISAM  DEFAULT CHARSET=utf8;
 
INSERT INTO unterunterkategorie (id, text, parentID) VALUES
(1, 'A', 1),
(2, 'B', 2);