No. The user (Me) can only select the order through popups, not by entering a string. I understand the concern, but, depending on what the user selects, the code will generate the string based on the users click.
On Thu, Oct 5, 2017 at 2:52 PM, Simon Slavin <slav...@bigfraud.org> wrote: > > > It looks like you need to create a string for the entire command rather > than just binding values. This, of course, introduces security problems if > you allow your users to set substrings themselves rather than picking them > from lists you prepare. > > Simon. > _______________________________________________ > sqlite-users mailing list > sqlite-users@mailinglists.sqlite.org > http://mailinglists.sqlite.org/cgi-bin/mailman/listinfo/sqlite-users > _______________________________________________ sqlite-users mailing list sqlite-users@mailinglists.sqlite.org http://mailinglists.sqlite.org/cgi-bin/mailman/listinfo/sqlite-users
