in reply to Re^4: Simple question on SQL Injection
in thread Simple question on SQL Injection
I was unaware that SQL::Abstract did not quote table names. However, I am aware of the difference between placeholders and quoting (as I did a bit of pure DBI before using SQL::Abstract in conjunction with it). Your message does show the difference better than mine.