Re: Prepared Statements

Поиск
Список
Период
Сортировка
От Kim Ho
Тема Re: Prepared Statements
Дата
Msg-id 1058550328.19657.168.camel@topanga.toronto.redhat.com
обсуждение исходный текст
Ответ на Re: Prepared Statements  (Dmitry Tkach <dmitry@openratings.com>)
Ответы Re: Prepared Statements  (Dmitry Tkach <dmitry@openratings.com>)
Список pgsql-jdbc
Can't you instead use setString(1, "x'a'")?

If not, this also brings up another thing. Did you want to treat "x'a'"
as a number now?

In any case, here is a revised version of the patch. =) Thanks for the
pointers.

Also, the remove radix thing is not meant for preventing SQL injection.
It is meant for this like:

create function integer_in(integer) ....

and then using things like select integer_in(1.11231E9)

Kim

On Fri, 2003-07-18 at 13:40, Dmitry Tkach wrote:
> Dmitry Tkach wrote:
>
> >
> > s.setObject (1, "x'a'");
> >
> I meant s.setObject (1, "x'a'", Types.INTEGER) of course...
>
> Dima
>
>


Вложения

В списке pgsql-jdbc по дате отправления:

Предыдущее
От: Dmitry Tkach
Дата:
Сообщение: Re: Prepared Statements
Следующее
От: Dmitry Tkach
Дата:
Сообщение: Re: Prepared Statements