In message <[email protected]>, andrew 
cooke wrote:

> Lawrence D'Oliveiro wrote:
>> In message <[email protected]>, Peter Otten wrote:
>>
>>> While it may not matter here using placeholders instead of manually
>>> escaping user-provided values is a good habit to get into.
>>
>> Until you hit things it can't deal with.
> 
> Can you expand on your comment?  I assume you are thinking of how the
> library might handle some strange class.

Consider something as simple as a "like" clause.

--
http://mail.python.org/mailman/listinfo/python-list

Reply via email to