JEMBOT MAWOT Bypass Shell

<?php
/**
 * Class that operate on table 'genre'. Database Mysql.
 *
 * @author: http://phpdao.com
 * @date: 2015-01-28 23:26
 */
class GenreMySqlDAO implements GenreDAO{

	/**
	 * Get Domain object by primry key
	 *
	 * @param String $id primary key
	 * @return GenreMySql 
	 */
	public function load($id){
		$sql = 'SELECT * FROM genre WHERE pkGenre = ?';
		$sqlQuery = new SqlQuery($sql);
		$sqlQuery->setNumber($id);
		return $this->getRow($sqlQuery);
	}

	/**
	 * Get all records from table
	 */
	public function queryAll(){
		$sql = 'SELECT * FROM genre';
		$sqlQuery = new SqlQuery($sql);
		return $this->getList($sqlQuery);
	}
	
	/**
	 * Get all records from table ordered by field
	 *
	 * @param $orderColumn column name
	 */
	public function queryAllOrderBy($orderColumn){
		$sql = 'SELECT * FROM genre ORDER BY '.$orderColumn;
		$sqlQuery = new SqlQuery($sql);
		return $this->getList($sqlQuery);
	}
	
	/**
 	 * Delete record from table
 	 * @param genre primary key
 	 */
	public function delete($pkGenre){
		$sql = 'DELETE FROM genre WHERE pkGenre = ?';
		$sqlQuery = new SqlQuery($sql);
		$sqlQuery->setNumber($pkGenre);
		return $this->executeUpdate($sqlQuery);
	}
	
	/**
 	 * Insert record to table
 	 *
 	 * @param GenreMySql genre
 	 */
	public function insert($genre){
		$sql = 'INSERT INTO genre (genre) VALUES (?)';
		$sqlQuery = new SqlQuery($sql);
		
		$sqlQuery->set($genre->genre);

		$id = $this->executeInsert($sqlQuery);	
		$genre->pkGenre = $id;
		return $id;
	}
	
	/**
 	 * Update record in table
 	 *
 	 * @param GenreMySql genre
 	 */
	public function update($genre){
		$sql = 'UPDATE genre SET genre = ? WHERE pkGenre = ?';
		$sqlQuery = new SqlQuery($sql);
		
		$sqlQuery->set($genre->genre);

		$sqlQuery->setNumber($genre->pkGenre);
		return $this->executeUpdate($sqlQuery);
	}

	/**
 	 * Delete all rows
 	 */
	public function clean(){
		$sql = 'DELETE FROM genre';
		$sqlQuery = new SqlQuery($sql);
		return $this->executeUpdate($sqlQuery);
	}

	public function queryByGenre($value){
		$sql = 'SELECT * FROM genre WHERE genre = ?';
		$sqlQuery = new SqlQuery($sql);
		$sqlQuery->set($value);
		return $this->getList($sqlQuery);
	}


	public function deleteByGenre($value){
		$sql = 'DELETE FROM genre WHERE genre = ?';
		$sqlQuery = new SqlQuery($sql);
		$sqlQuery->set($value);
		return $this->executeUpdate($sqlQuery);
	}


	
	/**
	 * Read row
	 *
	 * @return GenreMySql 
	 */
	protected function readRow($row){
		$genre = new Genre();
		
		$genre->pkGenre = $row['pkGenre'];
		$genre->genre = $row['genre'];

		return $genre;
	}
	
	protected function getList($sqlQuery){
		$tab = QueryExecutor::execute($sqlQuery);
		$ret = array();
		for($i=0;$i<count($tab);$i++){
			$ret[$i] = $this->readRow($tab[$i]);
		}
		return $ret;
	}
	
	/**
	 * Get row
	 *
	 * @return GenreMySql 
	 */
	protected function getRow($sqlQuery){
		$tab = QueryExecutor::execute($sqlQuery);
		if(count($tab)==0){
			return null;
		}
		return $this->readRow($tab[0]);		
	}
	
	/**
	 * Execute sql query
	 */
	protected function execute($sqlQuery){
		return QueryExecutor::execute($sqlQuery);
	}
	
		
	/**
	 * Execute sql query
	 */
	protected function executeUpdate($sqlQuery){
		return QueryExecutor::executeUpdate($sqlQuery);
	}

	/**
	 * Query for one row and one column
	 */
	protected function querySingleResult($sqlQuery){
		return QueryExecutor::queryForString($sqlQuery);
	}

	/**
	 * Insert row to table
	 */
	protected function executeInsert($sqlQuery){
		return QueryExecutor::executeInsert($sqlQuery);
	}
}
?>