Re: Problem with inserting newlines and ' characters

At 14:38 24/07/00 +0000, Alan Horn wrote:
>
>Hi,
>
>This may actually be more of a limitation with the DBD::Pg perl driver.
>I'm not sure.
>
>Basically I'm using DBD::Pg in a perl script which inserts data into a
>very simple table.
>
>The statement I'm using is thus :
>
>my($sth) = $dbh->prepare("insert into maintenance (sno, date, data) values
>('$sno', '$date', '$tmpstring')");
>
>(all on one line of course...)
>
>My problem is this. $tmpstring may well contain embedded newlines or '
>characters (these are the two characters I've had problems with so far).

I use embedded chars all the time, but with placeholders in the query. Try:

   my($sth) = $dbh->prepare("insert into maintenance (sno, date, data) values
            (?, ?, ?)");
then

    if (!$sth->execute($sno, $date, $tmpstring))
    die_horribly....

this way you'll get the value out of preparing the statement. You might
also want to use 'prepare_cached'.

I don't know if your original query should work, but it will have all sorts
of problems if, eg, you have a "'" in one of the strings.


----------------------------------------------------------------
Philip Warner                    |     __---_____
Albatross Consulting Pty. Ltd.   |----/       -  \
(A.C.N. 008 659 498)             |          /(@)   ______---_
Tel: (+61) 0500 83 82 81         |                 _________  \
Fax: (+61) 0500 83 82 82         |                 ___________ |
Http://www.rhyme.com.au          |                /           \|
                                 |    --________--
PGP key available upon request,  |  /
and from pgp5.ai.mit.edu:11371   |/