> > I would be surprised if there was not a document
> >somewhere that specified what is and is not valid to pass via a "?".
> >
> >
> If there is any, I've never heard of it...
>
Just as a data point, both postgresql's documentation for PREPARE
http://www.postgresql.org/docs/view.php?version=7.3&idoc=0&file=sql-prepare.html
and IBM's
http://www-3.ibm.com/cgi-bin/db2www/data/db2/udb/winos2unix/support/document.d2w
/report?fn=db2v7s0sqls0645.htm#HDRPREPH2
imply that only data can be passed in. Its by implication because they discuss
the "data" having a "datatype". I'm not sure this would make sense if you were
allowed to pass in strings containing SQL syntax.
Darin