#!/usr/bin/ruby require 'mysql' # extend the String class so you can do html and sql escaping class String def html_escape gsub(/&/, '&').gsub(//, '>') end def sql_escape Mysql::quote self end end # get search string from command-line parameters, connect and query # database, and store the results in 'res' str = (ARGV.shift || '').sql_escape db = Mysql::connect 'localhost', 'videos-ro', 'videos-ro' res = db.query "select artist,title,filename from pablotron.videos where title like '%#{str}%' or artist like '%#{str}%' order by artist" STDERR.puts 'number of results: ' << res.num_rows.to_s # print initial html puts < Video Query: #{str.html_escape} EOH # print column titles puts '', "\n \n \n" # print results res.each { |r| puts "\n \n \n" } # close connection to db db.close # finish off html puts < EOF
" << (res.fetch_fields.map { |field| field.name.html_escape }.join "") << "
" << (r.map { |i| i.html_escape }.join "") << "