Re: ANNOUNCE: DBI 1.31

2002-11-29 Thread Tatsuhiko Miyagawa
DBI 1.31 can't compile with perl 5.005_03. Patch applied. I know there's a plan to deprecate 5.005_03 in future DBI release, but at this time I can't find a documentation actually saying that. And some tweaks for DBI::Profile{Data,Dumper}.pm also applied. At Sat, 30 Nov 2002 01:04:23 +, Tim B

ANNOUNCE: DBI 1.31

2002-11-29 Thread Tim Bunce
file: $CPAN/authors/id/T/TI/TIMB/DBI-1.31.tar.gz size: 276605 bytes md5: cd6d40e37ac2cad6db53e7dfbb1baf1c =head1 Changes in DBI 1.31,29th November 2002 The fetchall_arrayref method, when called with a $maxrows parameter, no longer gives an error if called again after all rows ha

CPAN Upload: T/TI/TIMB/DBI-1.31.tar.gz

2002-11-29 Thread PAUSE
The uploaded file DBI-1.31.tar.gz has entered CPAN as file: $CPAN/authors/id/T/TI/TIMB/DBI-1.31.tar.gz size: 276605 bytes md5: cd6d40e37ac2cad6db53e7dfbb1baf1c No action is required on your part Request entered by: TIMB (Tim Bunce) Request entered on: Sat, 30 Nov 2002 00:49:09 GMT Re

Re: DBI insert a NULL with a prepared statement?

2002-11-29 Thread Michael A Chase
On Fri, 29 Nov 2002 10:37:59 -0800 Eric <[EMAIL PROTECTED]> wrote: > Using DBI 1.30 on FreeBSD 4.6 with mySQL 4.04, DBD::mysql 2.0416, and > Perl 5.06 > > Is it possible to insert a NULL with query like this? > > $insert = qq! > > INSERT INTO blah a,b,c VALUES (?,?,?) > > !; > > $inse

Re: [PATCH] DBI.pm 1.30 documentation

2002-11-29 Thread Tim Bunce
Thanks. That one had already been reported to me and is fixed in the next release - due any day now. But do keep looking :-) Tim. On Fri, Nov 29, 2002 at 04:33:07PM +0100, Slaven Rezic wrote: > Here's a small documentation fix: > > --- ../build/DBI-1.30/DBI.pm Thu Jul 18 16:24:04 2002 > +++ DB

Re: ANNOUNCE: DBD::Pg 1.20

2002-11-29 Thread Dave Rolsky
I found a bug in the ->tables method. It includes all the system tables. A patch is at the bottom of the message. The SQL was correct in 1.13 so I'm not sure how this happened. There's also no real test of this method in the test suite, other than testing to make sure that calling it doesn't die

Re: DBI insert a NULL with a prepared statement?

2002-11-29 Thread Paul Boutros
I don't know about mySQL in particular, but in general DBI interprets undef as a NULL. So if I have a place-holder query like that I'll often load everything into an array and then do something like: for (my $i = 0; $i < scalar(@array); $i++) { if (!$array[$i]) { $array[$i] = undef; }

DBI insert a NULL with a prepared statement?

2002-11-29 Thread Eric
Hi, Using DBI 1.30 on FreeBSD 4.6 with mySQL 4.04, DBD::mysql 2.0416, and Perl 5.06 Is it possible to insert a NULL with query like this? $insert = qq! INSERT INTO blah a,b,c VALUES (?,?,?) !; $insert_hnd = $dbh->prepare($insert_orders); $insert_hnd->execute($var1,$var2,$var3); Ok, so I

Re: "SQL Injection" attacks - database security issues

2002-11-29 Thread Michael Peppler
On Fri, 2002-11-29 at 03:18, Tim Bunce wrote: > An interesting article on SQL Injection attacks (where a database > query can be modified to perform unintended actions): > > http://online.securityfocus.com/infocus/1644 > > The article has a strong Oracle focus but the issues apply to many > d

[PATCH] DBI.pm 1.30 documentation

2002-11-29 Thread Slaven Rezic
Here's a small documentation fix: --- ../build/DBI-1.30/DBI.pmThu Jul 18 16:24:04 2002 +++ DBI-1.30/DBI.pm Fri Nov 29 16:27:49 2002 @@ -4513,7 +4513,7 @@ all the rows in one go. =item C - $hash_ref = $dbh->fetchall_hashref($key_field); + $hash_ref = $sth->fetchall_hashref($key_field

[Fwd: using place holders with freetds/DBD::Sybase/MSSQL Server]

2002-11-29 Thread John Ulmer
Good enough. I'll keep an eye on the freetds guys and do without in the mean time. Thanks. Michael Peppler wrote: > On Wed, 2002-11-27 at 12:26, John Ulmer wrote: > > Hello all, > > > > I am trying to use place holders to stream line some database interaction.. > > RH 8 - kernel 2.4.18-18.7 > >

Re: Subtle binding bug

2002-11-29 Thread Bart Lateur
On Thu, 28 Nov 2002 11:29:04 +, Tony Bowden wrote: >> I don't know how MySQL handles placeholders, so this is just a guess. It >> may simply be interpolating the string 'nine' into the query string, in the >> same way it interpolated the number 9, that is, without qotes: >> INSERT INTO user

"SQL Injection" attacks - database security issues

2002-11-29 Thread Tim Bunce
An interesting article on SQL Injection attacks (where a database query can be modified to perform unintended actions): http://online.securityfocus.com/infocus/1644 The article has a strong Oracle focus but the issues apply to many databases (even more so to those that allow multiple statemen

RE: Calling SQLServer Stored Procedures

2002-11-29 Thread Brien Pirkle
Roger, Thank you v. much. This is exactly the info I was looking for. Rgds, Brien -Original Message- From: Roger Perttu To: Brien Pirkle; '[EMAIL PROTECTED] ' Sent: 28/11/02 16:47 Subject: Re: Calling SQLServer Stored Procedures Brien Pirkle wrote: >Jeff, > >So, assuming sp_foo takes

Re: avoiding mysql corruptions on server-crashes

2002-11-29 Thread Tim Bunce
On Thu, Nov 28, 2002 at 06:58:00PM -0600, Moritz von Schweinitz wrote: > Tim Bunce wrote: > > >On Tue, Nov 26, 2002 at 03:54:56PM -0600, Moritz von Schweinitz wrote: > > > >>Hi there, > >> > >>this is kinda OT, since i fear it's more of a mysql than dbi issue, but > >>here goes... > >> > >>the thi