Re: [Vala] Escape string for use in sqlite

[Shawn Ferris <shawn ferris gmail com>]

On Tue, Mar 6, 2012 at 12:33 PM, Luca Bruno <lethalman88 gmail com> wrote:
> On Tue, Mar 6, 2012 at 8:30 PM, Rodrigo Herefeld <rodrigo herefeld gmail com
> > wrote:
>
> When you bind a string parameter it will be escaped.

I would add that database engines are usually better at optimizing SQL
with bind variables, as well, binds help prevent SQL Injection
attacks. The latter is the best reason of all, to use them, the other
two you get for free. :D

Shawn