Re: Witango-Talk: SQL injection prevention

[Robert Garcia]

Yes, this is why escaping is preferred. Also, witango processor overhead on encode. Java bean for escape would be preferred, I will probably write one in the next couple of weeks. One nice thing about a bean, is I can use in witango, or in php if needed. But php has all those escape methods. --  Robert Garcia President - BigHead Technology VP Application Development - eventpix.com 13653 West Park Dr Magalia, Ca 95954 ph: 530.645.4040 x222 fax: 530.645.4040 [EMAIL PROTECTED] - [EMAIL PROTECTED] http://bighead.net/ - http://eventpix.com/ On Apr 4, 2006, at 1:52 PM, William M Conlon wrote: A couple of very salient points that could allow me to use DirectDBMS for my insert/updates with BLOBs.  The hex/unhex is cool, but doubles the packet size, so mysql's max_allowed_packet needs to be considered. ________________________________________________________________________ TO UNSUBSCRIBE: Go to http://www.witango.com/developer/maillist.taf