variables inside SQL statements

Anonymous Monk has asked for the wisdom of the Perl Monks concerning the following question:

Replies are listed 'Best First'.
Re: variables inside SQL statements by indigo (Scribe) on Oct 11, 2000 at 02:24 UTC
Note - Interpolating variables into SQL is bad. Instead, use 'bind' variables, like so: `my $sql = 'INSERT INTO table ( path ) VALUES (:1)'; # Compile sql my $sth = $dbh->prepare($sql) or die $dbh->errstr; # Bind path to :1 $sth->execute('/path/to/this') or die $dbh->errstr;` [download]	[reply] [d/l]
RE: Answer: variables inside SQL statements by merlyn (Sage) on Oct 11, 2000 at 03:44 UTC
And if you use `?` instead of `:1`, it'll work with any DBD, not just MySQL. Rule number 3: be portable! -- Randal L. Schwartz, Perl hacker	[reply]
RE: RE: Answer: variables inside SQL statements by indigo (Scribe) on Oct 12, 2000 at 22:29 UTC
You mean there are databases other than mySQL and Oracle? I don't understand. :)	[reply]
Re: variables inside SQL statements by dragonchild (Archbishop) on Mar 28, 2004 at 17:05 UTC
Go to the DBI docs and look up placeholders.	[reply]
Re: variables inside SQL statements by Anonymous Monk on Mar 28, 2004 at 16:53 UTC
nothing wrong with the previous answers for your precise need. If it weren't paths, perhaps a string like "Where's the beef O'Reilly?" you can also use: `$dbh->quote( "Where's the beef O'Reilly?" );` [download] Originally posted as a Categorized Answer.	[reply] [d/l]
Re: variables inside SQL statements by AgentM (Curate) on Oct 11, 2000 at 00:23 UTC
huh? you can probably connect from within your perl script to the SQL database using <a href="http://www.unixodbc.com>unixODBC or the more popular albeit older alternative DBI. DBI provides question mark semantics that provide exactly the solution you are looking for... Originally posted as a Categorized Answer.	[reply]
A reply falls below the community's threshold of quality. You may see it by logging in.