in reply to Handling delimiters
If you are using DBI, it's much easier to use placeholders because the interface will handle the escaping. This will also reduce security risks and will make your code more maintainable. Your code might look something like:
or, if you want something more dynamic,my $sql = <<EOSQL; SELECT * FROM G WHERE VAL1 = 'Y' AND G.FEAT_TYPE = ? EOSQL my $query = $dbh->prepare($sql); $query->execute($ftype);
my $sql = "SELECT * FROM G WHERE VAL1 = 'Y'"; my @args = (); if ($flag) { $sql .= ' AND G.FEAT_TYPE = ?'; push @args, $ftype; } my $query = $dbh->prepare($sql); $query->execute($ftype);
#11929 First ask yourself `How would I do this without a computer?' Then have the computer do it the same way.
|
|---|