FreeTDS Development Group

["James K. Lowden" <jklowden AT freetds.org>]

On Mon, 27 Feb 2012 15:53:54 -0800
Mike Sela <mikesela AT gmail.com> wrote:

> by the time it gets to the DB, it looks like this:
> 
> SELECT * FROM Customers WHERE CustomerId = 572;
> 
> The actual parameter substitution appears to be occurring in the
> pymssql layer, but they tell me that that's because of a limitation
> in FreeTDS, where parameterized SQL is not handled.  Is that true?

ODBC supports parameterized queries.  

db-lib supports parameterized queries for stored procedures.  

ct-lib supports parameterized queries for TDS 4.2 and 5.0.  The API
definition requires the library to get the parameter's on-server
datatype from the server, a feature not available on Microsoft
servers.  

HTH.  

--jkl