From: | Jean-Luc Lachance <jllachan(at)nsd(dot)ca> |
---|---|
To: | Martijn van Oosterhout <kleptog(at)svana(dot)org> |
Cc: | MT <mt(at)open2web(dot)com>, pgsql-general <pgsql-general(at)postgresql(dot)org>, Carlos Moreno <moreno(at)mochima(dot)com> |
Subject: | Re: UPDATE syntax problem |
Date: | 2002-12-09 16:36:46 |
Message-ID: | 3DF4C69E.CF9BACDF@nsd.ca |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-general |
Just to keep it clean, replace the last character with space before
adding "WHERE ...".
Martijn van Oosterhout wrote:
>
> On Sat, Dec 07, 2002 at 02:32:48PM -0500, MT wrote:
> > Hi,
> >
> > I'm developing a C++ script to update postgresql database records. The
> > user interacts with the script via an html form. That is, the user is
> > presented with the data from a particular record in an html form and
> > asked to update any number of fields in that record.
> >
> > To perform a multiple column update in postgres one does:
> >
> > UPDATE tablename
> > SET column1 = 'blahblah',
> > column2 = 'moreblahblah',
> > column3 = 1234
> > WHERE id = 555;
>
> Heh, my cheap and hacky why is to end each column = value clause with a
> comma. Then i finish it off with a "id=id WHERE ...". That clause becomes a
> noop and the syntax is fine.
>
> Oh yeah, check out the SQL injection attacks. Nasty :)
> --
> Martijn van Oosterhout <kleptog(at)svana(dot)org> http://svana.org/kleptog/
> > Support bacteria! They're the only culture some people have.
>
> ------------------------------------------------------------------------
> Part 1.2Type: application/pgp-signature
From | Date | Subject | |
---|---|---|---|
Next Message | Steve Crawford | 2002-12-09 16:56:21 | Re: bug? |
Previous Message | pginfo | 2002-12-09 15:55:24 | Re: pg 7.3 memory error |