Re: [sqlite] [Question] How can I recognize arguments are dynamic binding values in user defined function?

2013-04-03 Thread Yongil Jang
> > boun...@sqlite.org] On Behalf Of j.merr...@enlyton.com > > Sent: Wednesday, 03 April, 2013 17:17 > > To: sqlite-users@sqlite.org > > Subject: Re: [sqlite] [Question] How can I recognize arguments are > dynamic > > binding values in user defined function? > &

Re: [sqlite] [Question] How can I recognize arguments are dynamic binding values in user defined function?

2013-04-03 Thread Keith Medcalf
3 17:17 > To: sqlite-users@sqlite.org > Subject: Re: [sqlite] [Question] How can I recognize arguments are dynamic > binding values in user defined function? > > > The people who are using your software need a lesson about "SQL > injection". No one should create SQL sta

Re: [sqlite] [Question] How can I recognize arguments are dynamic binding values in user defined function?

2013-04-03 Thread j . merrill
he example) and the value to search for. It would then be your code that builds and runs the SQL statement using parameters. J. Merrill -Original Message- Date: Wed, 3 Apr 2013 22:41:01 +0900 From: Yongil Jang To: General Discussion of SQLite Database Subject: Re: [sqlite] [Questio

Re: [sqlite] [Question] How can I recognize arguments are dynamic binding values in user defined function?

2013-04-03 Thread Yongil Jang
Thank you, Simon and Igor. I will investigate about your opinion, as you mentioned. In general, if parameter string contains alphabets only, it doesn't make any problems. However, I couldn't check that my function is used correctly for every applications. Some developers don't know why does it f

Re: [sqlite] [Question] How can I recognize arguments are dynamic binding values in user defined function?

2013-04-03 Thread Igor Tandetnik
On 4/3/2013 8:58 AM, Yongil Jang wrote: For more information, I just made some functions that handling files path. But, if file name includes "Special characters(ex: '"') " or "Unicode" and it is used for myFunc() then it makes "Syntax error" error code and execution is failed. What I want to do

Re: [sqlite] [Question] How can I recognize arguments are dynamic binding values in user defined function?

2013-04-03 Thread Simon Slavin
On 3 Apr 2013, at 2:08pm, Yongil Jang wrote: > Thank you! > > I may need to make plan B. Create a third parameter that tells your function what to do. Simon. ___ sqlite-users mailing list sqlite-users@sqlite.org http://sqlite.org:8080/cgi-bin/mailma

Re: [sqlite] [Question] How can I recognize arguments are dynamic binding values in user defined function?

2013-04-03 Thread Yongil Jang
Thank you! I may need to make plan B. 2013. 4. 3. 오후 10:04에 "Richard Hipp" 님이 작성: > On Wed, Apr 3, 2013 at 8:58 AM, Yongil Jang wrote: > > > Is there any way that I can recognize there arguments are generated from > > dynamic binding (ex: "?") or static string? > > > > No. Applications-defined

Re: [sqlite] [Question] How can I recognize arguments are dynamic binding values in user defined function?

2013-04-03 Thread Richard Hipp
On Wed, Apr 3, 2013 at 8:58 AM, Yongil Jang wrote: > Is there any way that I can recognize there arguments are generated from > dynamic binding (ex: "?") or static string? > No. Applications-defined functions are call-by-value, as in C. If you have a C function, you cannot tell if the paramete

[sqlite] [Question] How can I recognize arguments are dynamic binding values in user defined function?

2013-04-03 Thread Yongil Jang
Hello, I have a question about user defined function. When I make user defined function, that function has argument count and values only. Is there any way that I can recognize there arguments are generated from dynamic binding (ex: "?") or static string? For following examples, there are two dif