PHPのお勉強！

PHP TOP
PHP 8.4.2 Released!

    PDO::pgsqlCopyToFile

    (PHP 5 >= 5.3.3, PHP 7, PHP 8)

    PDO::pgsqlCopyToFile — のエイリアス Pdo\Pgsql::copyToFile()

    説明

    public PDO::pgsqlCopyToFile(
        string $tableName,
        string $filename,
        string $separator = "\t",
        string $nullAs = "\\\\N",
        ?string $fields = null
    ): bool

    このメソッドは次のメソッドのエイリアスです。 Pdo\Pgsql::copyToFile().

    Found A Problem?

    Learn How To Improve This Page • Submit a Pull Request • Report a Bug
    ＋add a note

    User Contributed Notes 1 note

    up
    2
    sage at sage dot sk
    3 months ago
    So I have been trying to use COPY (SELECT...) TO STDOUT WITH (FORMAT CSV, HEADER) but:

    - PDO::query() uses prepare, which COPY does not support
    - PDO::exec() does not return results
    - PDO::pgsqlCopyToFile() does not support additional parameters, only delimiter and nulls (and columns)

    But do you know what it does support? SQL Injections!

    https://github.com/php/php-src/blob/7dfbf4d1b74b5e629f2331261944fa072a92e1cb/ext/pdo_pgsql/pgsql_driver.c#L870

    spprintf(&query, 0, "COPY %s TO STDIN WITH DELIMITER E'%c' NULL AS E'%s'", ...

    There is no escaping around any of that, so you can call this method like so:

    <?php
    $db    ->pgsqlCopyToFile("(select * from t1 cross join t2 using (whatever))", '/tmp/test.csv', ',', '\' header--');
    ?>

    and that actually produces:

    COPY (select...) TO STDIN WITH DELIMITER E',' NULL AS E'' header--

    It still uses local filesystem, which I can live with, but at least I don't have to dance around the CSV headers.

    If anyone knows of a better way to do this without copying the (in my case gigantic) resultset into array and fputcsv(), I'm all ears. And I've tried every combination with pg_query and pg_copy_to to no avail.
    ＋add a note
    To Top