Level Extreme platform
Subscription
Corporate profile
Products & Services
Support
Legal
Français
SQL Passthrough and string delimiters
Message
General information
Forum:
Visual FoxPro
Category:
Client/server
Miscellaneous
Thread ID:
00054934
Message ID:
00055351
Views:
28
Edward,

>cString=chrtran(lcText,chr(34),chr(39))
>=sqlExec('INSERT SomeTable(SomeMemo) VALUES("'+cString+'")'

Huh? How does this solve anything?

What if you have both single and double quotes... you can only have
one delimiter for the embedded string constant.

Here's why I'm making a fuss about this {g} - I have a Web application
where users can and will input garbage. A good way to cause an error
is to use embedded delimiters.

I've been playing with this on some Web sites that use SQL Server and
it's funny how you can break some pages in this fashion. Admittedly,
it doesn't do any harm, but there might be legit reasons to use
these characters, especially in binary data.

There's gotta be a way to do this - especially for binary data???

+++ Rick ---
+++ Rick ---

West Wind Technologies
Maui, Hawaii

west-wind.com/
West Wind Message Board
Rick's Web Log
Markdown Monster
---
Making waves on the Web

Where do you want to surf today?
Previous
Reply
Map
View

Click here to load this message in the networking platform