[gnome-db] gda escaping values and prepare/execute



Rodrigo,
A non-urgent message while you are away ;)

I spent some time today looking at gda_data_model_append_row, and the backend implimentations.

General escaping.
gda_mysql_value_to_sql_string (and posibly others), looks like it should really escape/quote the strings, as well as surrounding them with "", - this would reduce the necessity to make gda_*_provider_escape_string.


Prepare/execute:
for backends that support it (postgres? others etc.) - it looks like rather than building the SQL statement (append/update), using the prepare/execute may be more efficient?

where any design decisions ever consider on these?

Regards
Alan




[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]