From: Rupa Schomaker <rupa-list@rupa.com>
To: pgsql-sql@postgresql.org
Subject: Re: Special characters in SQL queries
Date: Tue, 11 Mar 2003 21:50:36 -0800
Message-ID: <m3hea9qgk3.fsf@shakti.rupa.com> (raw)
References: <3E6E0191.B8F06EBB@rodos.fzk.de>
<WTXVVUJGX3286IDIG87B697UXR87BA.3e6ea975@kimiko>
-----BEGIN PGP SIGNED MESSAGE-----
Vernon Wu <vernonw@gatewaytech.com> writes:
> I don't program in C at all, but Java. Although I can make a way to
> call the C library function from Java, it isn't suitable solution, I
> believe.
>
> I only desire to find out all the type of characters at the present
> time so that I can strip out any potential problem sources in
> text. Who know what characters a user will enter.
Why not strictly use bind variables? That way you never have to worry
about escaping and you get the added bonus of using prepared
statements?
- --
- -rupa
-----BEGIN PGP SIGNATURE-----
Version: 2.6.3ia
Charset: noconv
Comment: Processed by Mailcrypt 3.5.7, an Emacs/PGP interface
iQEVAwUBPm7KqnHDM4ucEopdAQFs+Af/d2DMjOWrLhN5S0TdwJGrelvYMwCvpSd3
QZrdx2fv3tGHx1JjqlZgKRKrn08GWMe+AjN2I89FfjyG0vurOqLSAJA4pGI0guGF
9cqXWQJTXd5yMEencG3Va7VhF8WcEmGX1iC891s7xdssmQW1myKZIKwrLPO3jVla
SRFqh4xPycyJk8L6McbWoGwQa5I+xvLKWlS38tr1tQZu4bbg0o4pDnTYVLvdswH/
oM6ZOk4fHwK7/E4071jNYTWe9azmylJfWpqJCELc+9k4afibcdOTLXvWk0Re438d
6wGadJ5tpT65onaSYzpUENTmedY1CPAG+ViL+t8rMgBI/jGoKFXxJg==
=t25X
-----END PGP SIGNATURE-----
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-sql@postgresql.org
Cc: rupa-list@rupa.com
Subject: Re: Special characters in SQL queries
In-Reply-To: <m3hea9qgk3.fsf@shakti.rupa.com>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox