How do you query from a text .sql file attachment?

[Vigilante]

I want to make a distributed application and have it set up it's database by doing a query from a file attachment so the installation script doesn't need to change so often.

Does anyone know how I can accomplish this? I know how to make file attachment forms and access the variables but I don't know how to successfully query the contents of a text .sql file.

[Flameeyes]

I've wrote this function for my site admin tool (Drake Admin), isn't perfect because ignore the comments but if you insert another query after ; not in a new line, the query is ignored, but can help.

function execute_sql_script($filename)
{
	$fd = fopen($filename, "r");

$query = "";
while(!feof ( $fd ))
{
	$line = fgets($fd, 4096);
	if ( $line{1} == '#' )
		continue;
	if ( strstr($line, "#") != false )
		$line = substr($line, 0, strpos($line, "#"));
	if ( strstr($line, ";") != false )
	{
		$query .= substr($line, 0, strpos($line, ";"));
		mysql_query($query);
		if ( mysql_errno() )
			echo "<font color=\"red\">Error executing query</font><br><pre>$query</pre><br>".mysql_errno().": ".mysql_error()."<br>\n";
		$query = "";
	} else
		$query .= $line;
}
}

[jasper]

MySQL has a query LOAD DATA INFILE. Beware, the newer versions of MySQL (3.23.49+ or so) have tightened security for this potentially dangerous command (http://www.mysql.com/doc/en/LOAD_DATA_LOCAL.html). A code example is available in PhpMyAdmin which also supports inserting entire SQL-files.

[Vigilante]

Thanks. I want the method I use to be as wide-ly usable and secure as possible.