Recent changes to DatabaseQuery

DatabaseQuery modified by Hendrik Brummermann

Hendrik Brummermann — Sun, 12 Jul 2026 21:16:56 -0000

--- v10
+++ v11
@@ -26,6 +26,6 @@


 # Release Notes
-## Version 0.3 released on 2026-07-12 (Security Update)
+## Version 0.3 released on 2026-07-12

-- Replaced `$dbr->addSlashes` with `$dbr->addQuotes `to prevent SQL injection. Thanks to Wuzzy for the report
+- Replaced `$dbr->strencode` with `$dbr->addQuotes` because the [MediaWiki-documentation](https://www.mediawiki.org/wiki/Manual:Database.php) wrongly claims that it uses the insecure addSlashes internally. This results in false positive security reports . Thanks to Wuzzy for the report

DatabaseQuery modified by Hendrik Brummermann

Hendrik Brummermann — Sun, 12 Jul 2026 21:06:19 -0000

--- v9
+++ v10
@@ -1,3 +1,5 @@
+# Usage
+
 [[img src="example-releaselist.png" alt="Example of release list"]]
 A simple wiki extension to query database table.

@@ -26,4 +28,4 @@
 # Release Notes
 ## Version 0.3 released on 2026-07-12 (Security Update)

-- Replaced $dbr->addSlashes with $dbr->addQuotes to prevent SQL injection. Thanks to Wuzzy for the report
+- Replaced `$dbr->addSlashes` with `$dbr->addQuotes `to prevent SQL injection. Thanks to Wuzzy for the report

DatabaseQuery modified by Hendrik Brummermann

Hendrik Brummermann — Sun, 12 Jul 2026 21:05:33 -0000

--- v8
+++ v9
@@ -21,3 +21,9 @@
 The fourth parameter is the name of a template that is used for each row. The names of the columns from the result set are used as parameter names.

 The meaning of the last parameter depends on the query. For the recentreleased list, it is the number of entries to return. For the gamelist it is a filter on the game name (e. g. A% for a list of all games that start with the letter "A").
+
+
+# Release Notes
+## Version 0.3 released on 2026-07-12 (Security Update)
+
+- Replaced $dbr->addSlashes with $dbr->addQuotes to prevent SQL injection. Thanks to Wuzzy for the report

DatabaseQuery modified by Hendrik Brummermann

Hendrik Brummermann — Thu, 10 Oct 2013 22:35:24 -0000

--- v7
+++ v8
@@ -1,7 +1,7 @@
 [[img src="example-releaselist.png" alt="Example of release list"]]
 A simple wiki extension to query database table.

-It is used by [LibreGameWiki](https://libregamewiki.org) to render the "recently released" ticker on the main page.
+It is used by [LibreGameWiki](https://libregamewiki.org) to render the "recently released" ticker on the main page and the [New games and releases](https://libregamewiki.org/New_games_and_releases) page.

 Database queries are inlucded into a wikipage by using the parser function {{#databasequery}}:

DatabaseQuery modified by Hendrik Brummermann

Hendrik Brummermann — Tue, 13 Aug 2013 12:30:55 -0000

DatabaseQuery modified by Hendrik Brummermann

Hendrik Brummermann — Tue, 13 Aug 2013 12:25:28 -0000

--- v5
+++ v6
@@ -1,4 +1,4 @@
-[[img src="example-releaselist.png" alt="Example of release list"]]
+[[img src="example-releaselist.png" alt="Example of release list"]]
 A simple wiki extension to query database table.

 It is used by [LibreGameWiki](https://libregamewiki.org) to render the "recently released" ticker on the main page.

DatabaseQuery modified by Hendrik Brummermann

Hendrik Brummermann — Mon, 12 Aug 2013 21:38:16 -0000

--- v4
+++ v5
@@ -1,4 +1,4 @@
-[[img src=example-releaselist.png  alt=Example of release list]]
+[[img src="example-releaselist.png" alt="Example of release list"]]
 A simple wiki extension to query database table.

 It is used by [LibreGameWiki](https://libregamewiki.org) to render the "recently released" ticker on the main page.

DatabaseQuery modified by Hendrik Brummermann

Hendrik Brummermann — Mon, 12 Aug 2013 21:36:29 -0000

--- v3
+++ v4
@@ -1,3 +1,4 @@
+[[img src=example-releaselist.png  alt=Example of release list]]
 A simple wiki extension to query database table.

 It is used by [LibreGameWiki](https://libregamewiki.org) to render the "recently released" ticker on the main page.

DatabaseQuery modified by Hendrik Brummermann

Hendrik Brummermann — Mon, 12 Aug 2013 21:34:14 -0000

--- v2
+++ v3
@@ -10,8 +10,8 @@
 ~~~~

 The first parameter is the name of the query. In this alpha version, two queries are hard coded:
-* recentreleased
-* gamelist 
+- recentreleased
+- gamelist 

 The second parameter define the style for the table. `wikitable` and `sortable` are commonly used.

DatabaseQuery modified by Hendrik Brummermann

Hendrik Brummermann — Mon, 12 Aug 2013 21:31:50 -0000

--- v1
+++ v2
@@ -1,3 +1,22 @@
 A simple wiki extension to query database table.

-It is used by [LibreGameWiki](https://libregamewiki.org) to render the "recently released" ticket on the main page.
+It is used by [LibreGameWiki](https://libregamewiki.org) to render the "recently released" ticker on the main page.
+
+Database queries are inlucded into a wikipage by using the parser function {{#databasequery}}:
+
+~~~~
+{{#databasequery:recentreleased|tablestyle|Column header template|Row template|count}}
+{{#databasequery:gamelist|tablestyle|Column header template|Row template|filter}}
+~~~~
+
+The first parameter is the name of the query. In this alpha version, two queries are hard coded:
+* recentreleased
+* gamelist 
+
+The second parameter define the style for the table. `wikitable` and `sortable` are commonly used.
+
+The third parameter is the name of a template that is used to render the column headers.
+
+The fourth parameter is the name of a template that is used for each row. The names of the columns from the result set are used as parameter names.
+
+The meaning of the last parameter depends on the query. For the recentreleased list, it is the number of entries to return. For the gamelist it is a filter on the game name (e. g. A% for a list of all games that start with the letter "A").