MINI Sh3ll

<?php
class plant {
	private $objdb;

	public function __construct(){

		$this->objdb=new database;
		return true;
	}

	public function getPlantByCompanyId($id){
		$sql = "SELECT p.*,c.name as company_name from plants p JOIN companies c ON c.id = p.company_id WHERE p.status in (0,1) ";

		if($id != ""){
			$sql.="AND p.company_id = ".$id;
		}
		$result = $this->objdb->get_records($sql);
		return $result;
	}

	public function getPlantDetailsById($id){
		$sql = "SELECT * from plants p WHERE p.id = ".$id;

		$result = $this->objdb->get_records($sql);
		return $result[0];
	}

	public function addPlant($plant){
		$sql = "insert into plants(name, code, address, city, state, country, company_id, capacity, logger_details, inverter_details, longitude, latitude,manager_id,created_by) values(
            '".mysql_escape($this->objdb->connection, $plant['name'])."',             
            '".mysql_escape($this->objdb->connection, $plant['code'])."',             
            '".mysql_escape($this->objdb->connection, $plant['address'])."',             
            '".mysql_escape($this->objdb->connection, $plant['city'])."', 
            '".mysql_escape($this->objdb->connection, $plant['state'])."', 
            '".mysql_escape($this->objdb->connection, $plant['country'])."', 
            '".mysql_escape($this->objdb->connection, $plant['company_id'])."', 
            '".mysql_escape($this->objdb->connection, $plant['capacity'])."', 
            '".mysql_escape($this->objdb->connection, $plant['logger_details'])."', 
            '".mysql_escape($this->objdb->connection, $plant['inverter_details'])."', 
            '".mysql_escape($this->objdb->connection, $plant['longitude'])."', 
            '".mysql_escape($this->objdb->connection, $plant['latitude'])."', 
            '".mysql_escape($this->objdb->connection, $plant['manager_id'])."', 
            '".mysql_escape($this->objdb->connection, $plant['created_by'])."'
        )";
        $result = $this->objdb->saveRecords($sql);
        return $result;
	}

	public function updatePlantDetails($plant){
		$sql = "UPDATE plants p SET name = '".$plant['name']."', code = '".$plant['code']."', address = '".$plant['address']."', city = '".$plant['city']."', state = '".$plant['state']."', country = '".$plant['country']."', company_id = '".$plant['company_id']."', capacity = '".$plant['capacity']."', logger_details = '".$plant['logger_details']."', inverter_details = '".$plant['inverter_details']."', longitude = '".$plant['longitude']."', latitude = '".$plant['latitude']."', modified_by = '".$plant['modified_by']."' WHERE p.id = ".$plant['id'];
		$result = $this->objdb->saveRecords($sql);
        return $result;
	}

	public function updatePlantStatus($plant){
		$sql = "update plants SET status = ".$plant['status']." WHERE id = '".$plant['id']."'";
        $result = $this->objdb->saveRecords($sql);
        return $result;
	}
}