Re: Stripping apostrophes from data - Mailing list pgsql-general

From Leon Mergen
Subject Re: Stripping apostrophes from data
Date
Msg-id 5eaaef180708201008n2c83c88eh8a1b6445c3845c1a@mail.gmail.com
Whole thread Raw
In response to Re: Stripping apostrophes from data  ("Joshua D. Drake" <jd@commandprompt.com>)
List pgsql-general


On 8/20/07, Joshua D. Drake <jd@commandprompt.com> wrote:
>   Alternately, is there some way of inserting or selecting data from the db which doesn't require the use of apostrophes for non-numeric fields?

Uhmm just prepare all your statements and this shouldn't be an issue.

.. which is a good idea anyway when you're dealing with data which cannot easily be verified as 'safe' (such as text data) -- it's a great way to prevent all SQL injections, even when you're not expecting quotes.

--
Leon Mergen
http://www.solatis.com

pgsql-general by date:

Previous
From: Michael Glaesemann
Date:
Subject: Re: Stripping apostrophes from data
Next
From: luca.ciciriello@email.it
Date:
Subject: Re: Installation problems