Re: [gnome-db] INSERT statement with binary data

On Tue, 2009-01-20 at 16:13 +0100, Vivien Malerba wrote:
> As a side remark: creating a SQL string containing values literals is
> not
> the way to go: use variables instead which have the double benefit of
> making
> statement execution faster (the statement is parsed only once) and
> prevents
> SQL injection problems. Please see
> for
> some
> code example.

In Glom we generate some fragments of SQL, for instance, for a where
clause or a sort clause, which we then use elsewhere in a complete SQL
query. Can libgda generate these, using parameters, or can it only
generate whole SQL queries?

Murray Cumming
murrayc murrayc com

[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]