Re: [Templates] Passing a list to DBI execute? (solved)

[Vivek Khera]

On Dec 6, 2004, at 5:55 PM, Larry Leszczynski wrote:

Thanks for the idea Harald! I had previously tried using eval but without
success. It now works using the following:

   [%
      sth  = DBI.prepare(query);
      params_list = "'" _ bind_params.join("','") _ "'";
      "[% rows = sth.execute($params_list) %" _ "]" FILTER eval;
      FOREACH row IN rows;
         ...do stuff...
      END;
   -%]

I hope your bind_params have no funky SQL characters in them, especially single quotes. You really should call the DBI's quote() method on each value, then join that result with just a comma.

Vivek Khera, Ph.D.
+1-301-869-4449 x806

smime.p7s

Description: S/MIME cryptographic signature