Skip to Content.
Sympa Menu

internetworkers - RE: [internetworkers] mySql JDBC driver not properly escapingcharacters

internetworkers AT lists.ibiblio.org

Subject: Internetworkers: http://www.ibiblio.org/internetworkers/

List archive

Chronological Thread  
  • From: "Tony Spencer" <tony AT tonyspencer.com>
  • To: "'Internetworkers: http://www.ibiblio.org/internetworkers/'" <internetworkers AT lists.ibiblio.org>
  • Subject: RE: [internetworkers] mySql JDBC driver not properly escapingcharacters
  • Date: Fri, 20 Aug 2004 10:30:20 -0400

Hmm. I'm using Jakarta Torque for the persistence layer. Perhaps they don't
used prepared statements. I'll dig through the source code and find out.

Thanks for the tip.




> -----Original Message-----
> From: internetworkers-bounces AT lists.ibiblio.org
> [mailto:internetworkers-bounces AT lists.ibiblio.org] On Behalf
> Of Kevin Sonney
> Sent: Friday, August 20, 2004 10:21 AM
> To: Internetworkers: http://www.ibiblio.org/internetworkers/
> Subject: Re: [internetworkers] mySql JDBC driver not properly
> escapingcharacters
>
> On Fri, 20 Aug 2004 10:01:50 -0400, Tony Spencer
> <tony AT tonyspencer.com> wrote:
> > Isn't it the duty of my JDBC driver to handle proper escaping of
> > characters before performing an insert into my mySQl database?
>
> Not if you are building the query/insert as a string and
> using a standard Statement object. Using a preparedStatement
> instead will allow you to do what you want easily.
>
> --
> -- Kevin Sonney
> -- ksonney AT gmail.com
> ---
> Come and play at the InterNetWorkers Web site!
> http://www.ibiblio.org/internetworkers/
> You are currently subscribed to InterNetWorkers mailing list
> To unsubscribe visit
> http://lists.ibiblio.org/mailman/listinfo/internetworkers
>
>





Archive powered by MHonArc 2.6.24.

Top of Page