Don't forget to untaint that or you are going to hurt yourself. Passing arbitrary user input into SQL is like eating things given to you by random strangers. Don't do it.
Comment on Re^3: Need help with tricky regex creation
Arbitrary user input! I would never! I would trust my life to a Goldfish before I accepted unvalidated 'ab'user input!
The data string is constructed by me programmatically so the formatting of this argument will be under my control. Even if somebody decided to mess with it and constructed a incorrect call, it would just return 0 results or fail (hey, they asked for it).
======================
Sean Shrum
http://www.shrum.net