Quoting SQL in Magento

Share
Posted on July 18th, 2011 | Posted by admin

Well, most of new Magento developers feel that writing queries again database is quite complicated. And so, they try to use the simplest way to do this:

$data = Mage::getSingleton(‘core/resource’) ->getConnection(‘core_read’)->query($sql);

However, sometimes you may make Mysql injection error by this way. To avoid this, the best way is using quoting sql supported by Zend Db before calling query().

There are 3 kinds of quoting: quote(), quoteInto() and quoteIdentifier(). It’s very important to use these functions before execute query. It helps us to defend against SQL injection issues.

1. quote(): this method is used to turn a string or variable into a quoted SQL string:

$where = $db->quote(“April’s coder”);

$db->query(“Select * from `coders` where `award`=$where”);

In the first command, we will have $where = ‘April\’s coder’; notice that 2 quotes added to the string.

Fancy product module in magento

Share
Posted on July 17th, 2011 | Posted by admin

OVERVIEW

Fancy products extension is the ideal solution for any online shop. With this extension, it is easy for you to show lastest product, featured product, bestseller products, mostviewed products, new products. It allow you choose. It allow you to select the display mode ( LASTEST PRODUCTS, FEATURED PRODUCTS, BESTSELLER PRODUCTS, MOSTVIEWED PRODUCTS, NEW PRODUCTS ) in the admin with some effects ( SWING, EASEOUTBOUNCE, EASEINBOUNCE ) display products.

FEATURES

  1. Easy config option admin
  2. Some mode display products you enjoy
  3. Some effects for display products
  4. Our modules include one year of free updates/upgrades.
  5. Seperated HTML/CSS, W3C validated
  6. Support Magento Version 1.4.x and 1.5.x
  7. 100% open source
  8. Support free guarantee
  9. Live support is always ready

Easy cart module in magento

Share
Posted on July 17th, 2011 | Posted by admin

OVERVIEW
This module is an useful extension that allows the customers to review and access their cart. In a few simple steps, you can provide your customers the easiest way to access card that saves their time and increases the quality and the profession of your store.
FEATURES

  1. Allow to specify left/right position
  2. Admin configuration option
  3. Easy installation
  4. Our modules include one year of free updates/upgrades.
  5. Seperated HTML/CSS, W3C validated
  6. Support Magento Version 1.4.x and 1.5.x
  7. 100% open source
  8. Support free guarantee
  9. Live support is always ready

Quick login module in magento

Share
Posted on July 17th, 2011 | Posted by admin

OVERVIEW
Quick Login is an useful extension that allows the customers to easy login. Customers will find very easy and convenient when accessing your online store. Allow the customers to login and access their dashboard easily and quickly Allow selecting customer sessions that are shown on the dropdown menu.
FEATURES

  1. Admin configuration option
  2. Easy installation
  3. Our modules include one year of free updates/upgrades.
  4. Seperated HTML/CSS, W3C validated
  5. Support Magento Version 1.4.x and 1.5.x
  6. 100% open source
  7. Support free guarantee
  8. Live support is always ready

Product Image Preview module in magento

Share
Posted on July 17th, 2011 | Posted by admin

This extension will install a wonderful and ready-to-use product image preview widget in your Magento store. This is an impressive script that allows your visitors to conveniently zoom out an product image that they want to view. Installation is very easy via FTP and no coding experience is required to have module up-and-running.
FEATURES

  1. Allow customers zoom out product images they want to view
  2. Allow admin to configure the following parameters: Image Preview size, Border Image Preview, Border Color for Image Preview, Text Image Preview, Text color
  3. Our modules include one year of free updates/upgrades.
  4. Seperated HTML/CSS, W3C validated
  5. Support Magento Version 1.4.x and 1.5.x
  6. 100% open source
  7. Support free guarantee
  8. Live support is always ready