Re: [gnome-db] patch to replace gda_connection_escape_string() with gda_connection_value_to_sql_string()

[Bas Driessen <bas driessen xobas com>]

On Tue, 2005-04-19 at 10:37 +0800, Alan Knowles wrote:
> Bas, can you try this patch, it builds ok here, and should export the
> method to the right place.
>
> http://devel.akbkhome.com/svn/index.php/libgda/to_sql_string_fixes.diff.txt
>
> At present the to_sql_local is susceptable to SQL injection attacks, so
> it's probably better to use the string escaping in this.
>
> Regards
> Alan

Thanks Allan, will try it later today/this evening and let you know results.

Bas.