Re: [gnome-db] patch to replace gda_connection_escape_string() with gda_connection_value_to_sql_string()

[Bas Driessen <bas driessen xobas com>]

On Tue, 2005-04-19 at 12:46 +1000, Bas Driessen wrote:
>     On Tue, 2005-04-19 at 10:37 +0800, Alan Knowles wrote: 
> > Bas, can you try this patch, it builds ok here, and should export the
> > method to the right place.
> >
> > http://devel.akbkhome.com/svn/index.php/libgda/to_sql_string_fixes.diff.txt
> >
> > At present the to_sql_local is susceptable to SQL injection attacks, so
> > it's probably better to use the string escaping in this.
> >
> > Regards
> > Alan
> >     

Preliminary testing indicates that all is OK with this modification this time. I am happy to have this patch applied  to CVS.

Thanks,
Bas.