On Mon, Nov 16, 2015 at 3:02 AM, Nader Lavasani <nader.lavasani99 at gmail.com> wrote: > Bug? or my silly mistake?!
>From the documentation for sqlite3_prepare_v2: "The calling procedure is responsible for deleting the compiled SQL statement using sqlite3_finalize() after it has finished with it." You're not doing this. Also, really consider using sqlite3_bind_text or one of the other bind APIs instead of generating SQL statements in code that can contain user input.
