I'm trying to keep to using placeholders for my DBI query statements to avoid problems with problem user input. Unfortunately, I'm having a problem with trying to use placeholders for items in a REGEXP. The item I am searching for is on a ;-separated list, and I'm trying to match the
whole word, so
/(^|\;)$word(\;|$)/ would be an equilvalent perl expression.
I've tried to use (as the regexp expression) '(^|\;)?(\;|$)', but the DBI::Mysql handler doesn't seem to recognize that ? as a placeholder (and complains that it's expecting 0 inputs when I give it one). I've also tried
using "REGEXP ?", then passing the regexp expression with the desired field filled in, but the quoting that DBI does chews up the expression beyond usability.
I can do all the usual checks on the word before putting it into a DBI SQL expression that DOESN'T use placeholders, but I'd like to know if there's any possibilities for this.
Posts are HTML formatted. Put <p> </p> tags around your paragraphs. Put <code> </code> tags around your code and data!
Titles consisting of a single word are discouraged, and in most cases are disallowed outright.
Read Where should I post X? if you're not absolutely sure you're posting in the right place.
Please read these before you post! —
Posts may use any of the Perl Monks Approved HTML tags:
- a, abbr, b, big, blockquote, br, caption, center, col, colgroup, dd, del, details, div, dl, dt, em, font, h1, h2, h3, h4, h5, h6, hr, i, ins, li, ol, p, pre, readmore, small, span, spoiler, strike, strong, sub, summary, sup, table, tbody, td, tfoot, th, thead, tr, tt, u, ul, wbr
You may need to use entities for some characters, as follows. (Exception: Within code tags, you can put the characters literally.)
| |
For: |
|
Use: |
| & | | & |
| < | | < |
| > | | > |
| [ | | [ |
| ] | | ] |
Link using PerlMonks shortcuts! What shortcuts can I use for linking?
See Writeup Formatting Tips and other pages linked from there for more info.