Received: from smaug.polygnosis.com ([195.139.160.221]) by postgresql.org (8.11.3/8.11.1) with ESMTP id f65AO5a71573 for ; Thu, 5 Jul 2001 06:24:05 -0400 (EDT) (envelope-from gunnar@smaug.polygnosis.com) Received: (from gunnar@localhost) by smaug.polygnosis.com (8.11.0/8.11.0) id f65ANR615773; Thu, 5 Jul 2001 12:23:27 +0200 To: "George Koras" Cc: "Barry Lind" , "Arsalan Zaidi" , "PostgreSQL jdbc list" Subject: Re: Re: [INTERFACES] New code for JDBC driver References: <200106301642.f5UGgkj14915@candle.pha.pa.us> <3B3E7A94.209@xythos.com> <00b801c102c4$fdd49ea0$4301a8c0@directi.com> <3B409F8F.7050408@xythos.com> <00b501c10386$00ab1e80$4301a8c0@directi.com> <3B41E22B.5000901@xythos.com> <005101c1052d$0a519330$1a49e98f@cres.gr> <010d01c1053c$24f5cdf0$1a49e98f@cres.gr> From: Gunnar =?iso-8859-1?q?R=F8nning?= Date: 05 Jul 2001 12:23:27 +0200 In-Reply-To: <010d01c1053c$24f5cdf0$1a49e98f@cres.gr> Message-ID: Lines: 16 User-Agent: Gnus/5.0808 (Gnus v5.8.8) Emacs/20.7 MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-Archive-Number: 200107/32 X-Sequence-Number: 952 * "George Koras" wrote: | | Yes, I agree that it certainly has to be done before SQL is sent to the | driver, i.e. in the middle tier! | Is it a performance bottleneck? Would PreparedStatement be more efficient? | Depends on your application, but doing escaping on all queries would certainly increase the overhead for some queries. With PreparedStatement you only escape the part of the query that is string input, so, yes, it would be more efficient. -- Gunnar Rønning - gunnar@polygnosis.com Senior Consultant, Polygnosis AS, http://www.polygnosis.com/