Re: Special characters in SQL queries - Mailing list pgsql-sql

From Rupa Schomaker
Subject Re: Special characters in SQL queries
Date
Msg-id m3hea9qgk3.fsf@shakti.rupa.com
Whole thread Raw
In response to Re: Special characters in SQL queries  (Christoph Haller <ch@rodos.fzk.de>)
List pgsql-sql
-----BEGIN PGP SIGNED MESSAGE-----

Vernon Wu <vernonw@gatewaytech.com> writes:

> I don't program in C at all, but Java. Although I can make a way to
> call the C library function from Java, it isn't suitable solution, I
> believe.
>
> I only desire to find out all the type of characters at the present
> time so that I can strip out any potential problem sources in
> text. Who know what characters a user will enter.

Why not strictly use bind variables?  That way you never have to worry
about escaping and you get the added bonus of using prepared
statements?

- -- 
- -rupa

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3ia
Charset: noconv
Comment: Processed by Mailcrypt 3.5.7, an Emacs/PGP interface

iQEVAwUBPm7KqnHDM4ucEopdAQFs+Af/d2DMjOWrLhN5S0TdwJGrelvYMwCvpSd3
QZrdx2fv3tGHx1JjqlZgKRKrn08GWMe+AjN2I89FfjyG0vurOqLSAJA4pGI0guGF
9cqXWQJTXd5yMEencG3Va7VhF8WcEmGX1iC891s7xdssmQW1myKZIKwrLPO3jVla
SRFqh4xPycyJk8L6McbWoGwQa5I+xvLKWlS38tr1tQZu4bbg0o4pDnTYVLvdswH/
oM6ZOk4fHwK7/E4071jNYTWe9azmylJfWpqJCELc+9k4afibcdOTLXvWk0Re438d
6wGadJ5tpT65onaSYzpUENTmedY1CPAG+ViL+t8rMgBI/jGoKFXxJg==
=t25X
-----END PGP SIGNATURE-----



pgsql-sql by date:

Previous
From: "Susan Hoddinott"
Date:
Subject: Using update statements in create function statements
Next
From: Björn Lundin
Date:
Subject: Re: Beginner needs help