Skip to Content.
Sympa Menu

freetds - Re: [freetds] SQL Server parameter substitution

freetds AT lists.ibiblio.org

Subject: FreeTDS Development Group

List archive

Chronological Thread  
  • From: Frediano Ziglio <freddy77 AT gmail.com>
  • To: FreeTDS Development Group <freetds AT lists.ibiblio.org>
  • Subject: Re: [freetds] SQL Server parameter substitution
  • Date: Wed, 29 Feb 2012 00:28:38 +0100

2012/2/28 James K. Lowden <jklowden AT freetds.org>:
> On Mon, 27 Feb 2012 15:53:54 -0800
> Mike Sela <mikesela AT gmail.com> wrote:
>
>> by the time it gets to the DB, it looks like this:
>>
>> SELECT * FROM Customers WHERE CustomerId = 572;
>>
>> The actual parameter substitution appears to be occurring in the
>> pymssql layer, but they tell me that that's because of a limitation
>> in FreeTDS, where parameterized SQL is not handled.  Is that true?
>
> ODBC supports parameterized queries.
>
> db-lib supports parameterized queries for stored procedures.
>
> ct-lib supports parameterized queries for TDS 4.2 and 5.0.  The API
> definition requires the library to get the parameter's on-server
> datatype from the server, a feature not available on Microsoft
> servers.
>
> HTH.
>

pymssql use dblib and build strings before sending query. You can use
pyodbc which use correctly parameter bindings.

Regards
Frediano Ziglio




Archive powered by MHonArc 2.6.24.

Top of Page