| From: | "Leon Mergen" <leon(at)solatis(dot)com> |
|---|---|
| To: | "Joshua D(dot) Drake" <jd(at)commandprompt(dot)com> |
| Cc: | "Andrew Edson" <cheighlund(at)yahoo(dot)com>, pgsql-general(at)postgresql(dot)org |
| Subject: | Re: Stripping apostrophes from data |
| Date: | 2007-08-20 17:08:50 |
| Message-ID: | 5eaaef180708201008n2c83c88eh8a1b6445c3845c1a@mail.gmail.com |
| Views: | Raw Message | Whole Thread | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-general |
On 8/20/07, Joshua D. Drake <jd(at)commandprompt(dot)com> wrote:
>
> > Alternately, is there some way of inserting or selecting data from the
> db which doesn't require the use of apostrophes for non-numeric fields?
>
> Uhmm just prepare all your statements and this shouldn't be an issue.
>
.. which is a good idea anyway when you're dealing with data which cannot
easily be verified as 'safe' (such as text data) -- it's a great way to
prevent all SQL injections, even when you're not expecting quotes.
--
Leon Mergen
http://www.solatis.com
| From | Date | Subject | |
|---|---|---|---|
| Next Message | luca.ciciriello | 2007-08-20 18:07:41 | Re: Installation problems |
| Previous Message | Viatcheslav Kalinin | 2007-08-20 16:43:09 | Re: Stripping apostrophes from data |