The coding guidelines require that you use the new database wrapper class. The minimum is that you use the mysql-wrapper functions instead of hardcoded calls.

This is easy though. Just look at these examples:

$res = mysql(TYPO3_db, 'SELECT * FROM mytable WHERE uid=123 AND title LIKE "%blabla%" ORDER BY title LIMIT 5');

while($row = mysql_fetch_assoc($res)) {

    echo $row['title'].'<br />';

}

$res = mysql(TYPO3_db, 'INSERT INTO mytable (pid,title) VALUES (123, "My Title")');

$res = mysql(TYPO3_db, 'UPDATE mytable SET title="My Title" WHERE uid=123');

$res = mysql(TYPO3_db, 'DELETE FROM mytable WHERE uid=123');

This would be re-written to:

$res = $GLOBALS['TYPO3_DB']->sql(TYPO3_db, 'SELECT * FROM mytable WHERE uid=123 AND title LIKE "%blabla%" ORDER BY title LIMIT 5');

while($row = $GLOBALS['TYPO3_DB']->sql_fetch_assoc($res)) {

    echo $row['title'].'<br />';

}

$res = $GLOBALS['TYPO3_DB']->sql(TYPO3_db, 'INSERT INTO mytable (pid,title) VALUES (123, "My Title")');

$res = $GLOBALS['TYPO3_DB']->sql(TYPO3_db, 'UPDATE mytable SET title="My Title" WHERE uid=123');

$res = $GLOBALS['TYPO3_DB']->sql(TYPO3_db, 'DELETE FROM mytable WHERE uid=123');

As you can see “mysql_fetch_assoc()” has “my...” stripped and the global database object prepended and thus becomes “$GLOBALS['TYPO3_DB']->sql_fetch_assoc()”. This is the same for all other supported MySQL calls.

Notice: It is not every single MySQL call that is supported. Only those found used in the core of TYPO3 at the time of the implementation of t3lib_DB was included. Please see “class.t3lib_DB.php” for the complete list of support.

You can also use the wrapper class to build your queries. The greatest advantage of this is that you avoid SQL injection possibilities in all INSERT and UPDATE queries and generally get a more clean code. The idea is that you call a function with some parameters and in return you will get a SQL query you can pass to $GLOBALS['TYPO3_DB']->sql()

Look at the SQL examples above; this is how the same set of code would look using the query building functions in the wrapper class:

// SELECT:

$query = $GLOBALS['TYPO3_DB']->SELECTquery(

                '*',         // SELECT ...

                'mytable',     // FROM ...

                'uid=123 AND title LIKE "%blabla%"',    // WHERE...

                '',            // GROUP BY...

                'title',    // ORDER BY...

                '5'            // LIMIT ...

            );

$res = $GLOBALS['TYPO3_DB']->sql(TYPO3_db, $query);

// INSERT:

$insertArray = array(

    'pid' => 123,

    'title' => "My Title"

);

$query = $GLOBALS['TYPO3_DB']->INSERTquery('mytable', $insertArray);

$res = $GLOBALS['TYPO3_DB']->sql(TYPO3_db, $query);

// UPDATE:

$updateArray = array(

    'title' => "My Title"

);

$query = $GLOBALS['TYPO3_DB']->UPDATEquery('mytable', 'uid=123', $updateArray);

$res = $GLOBALS['TYPO3_DB']->sql(TYPO3_db, $query);

// DELETE

$query = $GLOBALS['TYPO3_DB']->DELETEquery('mytable', 'uid=123');

$res = $GLOBALS['TYPO3_DB']->sql(TYPO3_db, $query);

As you can see the methods SELECTquery, UPDATEquery, INSERTquery and DELETEquery are called to create the actual SQL queries.

It might seem as overhead at first glance but in particular the INSERT and UPDATE queries will help make you code much better since you fill in an associated array which you simply pass to a function and say “Please, give me the SQL needed to insert / update this record in the database”.

Looking at the select statement that is broken into 6 pieces/arguments. The function is very easy to use if you are used to putting together a SELECT query:

Creating this select query is easily done...

SELECT [arg1] FROM [arg2] WHERE [arg3] GROUP BY [arg4] ORDER BY [arg5] LIMIT [arg6]

... by calling

$GLOBALS['TYPO3_DB']->SELECTquery('[arg1]', '[arg2]', '[arg3]', '[arg4]', '[arg5]', '[arg6]');

The advantage is that we can control more tightly each part of the SELECT query if needed. In particular the “LIMIT” argument differs among databases and therefore important to separate. But it might also come in handy to have the other parts separated.

The best possibly solution which will provide 100% database abstraction support is if you use the functions in the wrapper class prepended with “exec_” - they all do the same as the query building functions but they execute the query immediately after thus returning a result pointer which can be traverse by ->sql_fetch_assoc() as usual.

Example (compare to listing above):

// SELECT:

$res = $GLOBALS['TYPO3_DB']->exec_SELECTquery(

                '*',         // SELECT ...

                'mytable',     // FROM ...

                'uid=123 AND title LIKE "%blabla%"',    // WHERE...

                '',            // GROUP BY...

                'title',    // ORDER BY...

                '5,10'            // LIMIT to 10 rows, starting with number 5 (MySQL compat.)

            );

// INSERT:

$insertArray = array(

    'pid' => 123,

    'title' => "My Title"

);

$res = $GLOBALS['TYPO3_DB']->exec_INSERTquery('mytable', $insertArray);

// UPDATE:

$updateArray = array(

    'title' => "My Title"

);

$res = $GLOBALS['TYPO3_DB']->exec_UPDATEquery('mytable', 'uid=123', $updateArray);

// DELETE

$res = $GLOBALS['TYPO3_DB']->exec_DELETEquery('mytable', 'uid=123');