Don't insert plain text into a SQL statement!!! Escape properly or use placeholders.
my $sql = "SELECT script FROM scripts where name=?"; my $sth = $dbh->prepare($sql); $sth->execute($ref->{name});
What's with putting everything in quotes?
"$sql" -> $sql "$row_hash->{script}" -> $row_hash->{script} "$script" -> $script
Or a here-doc?
$r->puts(<<"END"); \ $post > $->puts($post) END /
Why loop when you only want one variable?
my $row_hash = $sth->fetchrow_hashref() or die(...); $script = $row_hash->{script};
Finally, "doesn't work" is a very useless problem description. Please provide more details.
...although returning one probably won't help if you use it that way.
my $result = eval $script; defined($result) or die(...); $post .= $result;
In reply to Re^3: Executing code stored in a database..
by ikegami
in thread Executing code stored in a database..
by jbinaustin
| For: | Use: | ||
| & | & | ||
| < | < | ||
| > | > | ||
| [ | [ | ||
| ] | ] |