public function queryInsert($tableName, array $arrayColums) {
if (!is_array($arrayColums) or ! is_string($tableName)) {
die('Неверный формат данных в запросе SELECT в запросе SQL');
}
$colums = $placeholders = '';
$values = array();
foreach ($arrayColums as $key => $value) {
if (!is_string($value) or ! is_string($key)) {
die('Неверный формат данных в запросе SQL');
}
$colums .= SequrityData::SequrityReturnData($key) . ', ';
$placeholders .= ':' . SequrityData::SequrityReturnData($key) . ', ';
$values[':' . SequrityData::SequrityReturnData($key)] = $value
}
$colums = substr($colums, 0, -2);
$placeholders = substr($placeholders, 0, -2);
$tableName = SequrityData::SequrityReturnData($tableName);
$insert = "INSERT INTO $tableName ($colums) VALUES ($placeholders)";
$query = $this->_PDO->prepare($insert);
$this->_PDO$query->execute($values);
}
try {
$this->_PDO$query->execute($values);
}
catch (PDOException $e) {
$logger = new ExceptionLogger();
$logger->error($e);
throw new MysqlAccessException('Unable to execute insert.');
}