Re: [Vala] Escape string for use in sqlite



On Tue, Mar 6, 2012 at 8:30 PM, Rodrigo Herefeld <rodrigo herefeld gmail com
wrote:

Did not understand... the exec statment already uses
db.prepare;db.step;db.finalize , how could it help me to
insert a string that could cause sql to fail?


When you bind a string parameter it will be escaped.

-- 
www.debian.org - The Universal Operating System


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]