Re: Special characters in SQL queries

From: Rupa Schomaker <rupa-list(at)rupa(dot)com>
To: pgsql-sql(at)postgresql(dot)org
Subject: Re: Special characters in SQL queries
Date: 2003-03-12 05:50:36
Message-ID: m3hea9qgk3.fsf@shakti.rupa.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-sql

-----BEGIN PGP SIGNED MESSAGE-----

Vernon Wu <vernonw(at)gatewaytech(dot)com> writes:

> I don't program in C at all, but Java. Although I can make a way to
> call the C library function from Java, it isn't suitable solution, I
> believe.
>
> I only desire to find out all the type of characters at the present
> time so that I can strip out any potential problem sources in
> text. Who know what characters a user will enter.

Why not strictly use bind variables? That way you never have to worry
about escaping and you get the added bonus of using prepared
statements?

- --
- -rupa

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3ia
Charset: noconv
Comment: Processed by Mailcrypt 3.5.7, an Emacs/PGP interface

iQEVAwUBPm7KqnHDM4ucEopdAQFs+Af/d2DMjOWrLhN5S0TdwJGrelvYMwCvpSd3
QZrdx2fv3tGHx1JjqlZgKRKrn08GWMe+AjN2I89FfjyG0vurOqLSAJA4pGI0guGF
9cqXWQJTXd5yMEencG3Va7VhF8WcEmGX1iC891s7xdssmQW1myKZIKwrLPO3jVla
SRFqh4xPycyJk8L6McbWoGwQa5I+xvLKWlS38tr1tQZu4bbg0o4pDnTYVLvdswH/
oM6ZOk4fHwK7/E4071jNYTWe9azmylJfWpqJCELc+9k4afibcdOTLXvWk0Re438d
6wGadJ5tpT65onaSYzpUENTmedY1CPAG+ViL+t8rMgBI/jGoKFXxJg==
=t25X
-----END PGP SIGNATURE-----

In response to

Browse pgsql-sql by date

  From Date Subject
Next Message Andre Schubert 2003-03-12 06:27:45 Re: Help on indexing timestamps
Previous Message Rajesh Kumar Mallah 2003-03-12 04:55:10 Re: Novice needs help