DarkBlue> Following is a code snippet from a pythoncard app
DarkBlue> the problem is with the sql string called iq1
DarkBlue> If either mysubject or mytalktext contains an
DarkBlue> apostrophe the update fails :
DarkBlue> Example: mysubject="Let's Eat" this fails
DarkBlue> mysubject="Lets Eat" this works fine
DarkBlue> What options do I have to avoid this issue but still can use
DarkBlue> apostrophes in my input data ?
You don't mention what database adapter you're communicating with, but they
all have argument quoting facilities. You should be using them instead of
doing the string interpolation yourself.
For example, if I was using MySQL, my code might look something like this:
self.cur.execute("update MSGTALK"
" set msgdate='NOW', subject=%s, talktext=%s"
" where msgno=%s",
(self.components.TextField1.text,
self.components.TextArea1.text,
self.myamsgno))
Skip
--
http://mail.python.org/mailman/listinfo/python-list
