Gabor Hojtsy wrote: > But an UPDATE or INSERT query can be hacked in the same way, right? When > doing some form processing foolishly.
Right. I returned the example for PostgreSQL. We can rework the example to INSERT to work with SQLite too but the idea is obvious IMHO. Jakub Vrana
