CODEWITHSUNDEEP
phppythonsqlite
user2243116
user2243116

Reputation: 101

Python called from PHP but SQLite3 not working

I have this PHP script:

<?php
    if($_GET["name"] != null && $_GET["name"] != ""){
        $name = urlencode($_GET["name"]);
        $name = htmlentities($name);
        $title = urlencode($_GET["title"]);
        $title = htmlentities($title);
        $art = urlencode($_GET["art"]);
        $art = htmlentities($art);
        $output = array();
        exec("python add.py $name $title $art",$output);            
    }
?>

and here's the add.py file:

import sys
import sqlite3

name = sys.argv[1]
title = sys.argv[2]
art = sys.argv[3]
tup = (name,title,art)

conn = sqlite3.connect('arts.db')
c = conn.cursor()

c.execute('CREATE TABLE IF NOT EXISTS arts(name,title,art)')
c.execute('INSERT INTO arts VALUES(?,?,?)',tup)

conn.commit()
conn.close()

When the file runs there is no arts.db file in my current directory. Not only that, when I debugged my program by adding print statements every here and there I realised that my program runs till conn = sqlite3.connect('arts.db') and then exits before the statement is executed.

There is no error in my program because I used the python editor in the terminal (I use Ubuntu) and then I could execute this program successfully but this doesn't happen when I execute this from the PHP script.

Upvotes: 1

Views: 278

Answers (1)

Aya
Aya

Reputation: 42000

If you're trying to reference an existing arts.db file, which is not in the current directory when the PHP script runs, then it's probably easiest to refer to the file by its full path, i.e. change the line...

conn = sqlite3.connect('arts.db')

...to something like...

conn = sqlite3.connect('/the/full/path/to/arts.db')

If you're trying to create a new arts.db, it's highly probable that the webserver process doesn't have permission to create the file in the current directory when the PHP script runs.

It's probably safer not to give PHP permission to write to the directory containing the PHP script[s], so create a directory somewhere else to store the file, give it the appropriate permissions, and use the full path to that directory in the script.

Update

i have figured out that i dont have permissions to write hence i created a db using another program and created a table in it but still for inserting values into it i require permissions, can you tell me how to do that?

Problem is that any process spawned by the PHP script will inherit the permissions from the parent process, and will have the same limitations.

On recent versions of Ubuntu, the /var/tmp directory can always be written to by any user, so you could put it there with...

conn = sqlite3.connect('/var/tmp/arts.db')

...or you can put it anywhere else by modifying the permissions, with...

$ sudo chgrp www-data /the/full/path/to/directory
$ sudo chmod g+ws /the/full/path/to/directory

Of course, this means there's not much point in using a seprate Python script, so you may as well do it all in PHP.

Upvotes: 1

Related Questions