internetworkers AT lists.ibiblio.org
Subject: Internetworkers: http://www.ibiblio.org/internetworkers/
List archive
RE: [internetworkers] mySql JDBC driver not properly escapingcharacters
- From: "Tony Spencer" <tony AT tonyspencer.com>
- To: "'Internetworkers: http://www.ibiblio.org/internetworkers/'" <internetworkers AT lists.ibiblio.org>
- Subject: RE: [internetworkers] mySql JDBC driver not properly escapingcharacters
- Date: Fri, 20 Aug 2004 10:30:20 -0400
Hmm. I'm using Jakarta Torque for the persistence layer. Perhaps they don't
used prepared statements. I'll dig through the source code and find out.
Thanks for the tip.
> -----Original Message-----
> From: internetworkers-bounces AT lists.ibiblio.org
> [mailto:internetworkers-bounces AT lists.ibiblio.org] On Behalf
> Of Kevin Sonney
> Sent: Friday, August 20, 2004 10:21 AM
> To: Internetworkers: http://www.ibiblio.org/internetworkers/
> Subject: Re: [internetworkers] mySql JDBC driver not properly
> escapingcharacters
>
> On Fri, 20 Aug 2004 10:01:50 -0400, Tony Spencer
> <tony AT tonyspencer.com> wrote:
> > Isn't it the duty of my JDBC driver to handle proper escaping of
> > characters before performing an insert into my mySQl database?
>
> Not if you are building the query/insert as a string and
> using a standard Statement object. Using a preparedStatement
> instead will allow you to do what you want easily.
>
> --
> -- Kevin Sonney
> -- ksonney AT gmail.com
> ---
> Come and play at the InterNetWorkers Web site!
> http://www.ibiblio.org/internetworkers/
> You are currently subscribed to InterNetWorkers mailing list
> To unsubscribe visit
> http://lists.ibiblio.org/mailman/listinfo/internetworkers
>
>
-
[internetworkers] mySql JDBC driver not properly escaping characters,
Tony Spencer, 08/20/2004
-
Re: [internetworkers] mySql JDBC driver not properly escaping characters,
Kevin Sonney, 08/20/2004
- RE: [internetworkers] mySql JDBC driver not properly escapingcharacters, Tony Spencer, 08/20/2004
-
Re: [internetworkers] mySql JDBC driver not properly escaping characters,
Kevin Sonney, 08/20/2004
Archive powered by MHonArc 2.6.24.