D&C GLug - Home Page

[ Date Index ] [ Thread Index ] [ <= Previous by date / thread ] [ Next by date / thread => ]

Re: [LUG] perl question

 

2008/5/10 Simon Avery <flash@xxxxxxxxxxxx>:
>  If building complicated queries, I find it easier to do a string first,
>  but that's just me.
>
>  my $sql = "SELECT * FROM table WHERE person_id = '$variable'";
>
> my $sth = $dbh->prepare($sql);

To quote the words of Bob The Angry flower :
"No! Wrong! Totally Wrong! Where did you learn this ? STOP DOING IT!"

Seriously, using directly interpolated strings is nearly as bad as
blindly executing values on the command line, suggesting somebody else
doing it is the kind of thing that the Shari'a law would condone
cutting off a limb for ;)

A.

-- 
http://www.aarontrevena.co.uk
LAMP System Integration, Development and Hosting

-- 
The Mailing List for the Devon & Cornwall LUG
http://mailman.dclug.org.uk/listinfo/list
FAQ: http://www.dcglug.org.uk/linux_adm/list-faq.html