I misunderstood the example from the book. Thanks for clearing that up. @table_arr is reading from a file now but I can use your suggestion if I have to make the process more interactive.
Thanks Shane -----Original Message----- From: Michael Fowler [mailto:[EMAIL PROTECTED]] Sent: Friday, February 01, 2002 12:53 PM To: McElwee, Shane Cc: '[EMAIL PROTECTED]' Subject: Re: Perl DBI - using parameters On Fri, Feb 01, 2002 at 12:13:41PM -0500, McElwee, Shane wrote: > foreach $i (@table_arr){ > $content = $i; > # print ("table name is: $i \n"); > open( CONTENT, ">$content" ) || die "Can't open file $content"; > my $sth = $dbh->prepare("select * from ?"); > $sth->bind_param(1, $i); > > my $row; > > $sth->execute or die "Can't execute SQL statement: ", $sth->errstr(), > "\n"; > $row = $sth->dump_results(80, "\n", ':',\*CONTENT); > } Placeholders are for data, not SQL syntax. A placeholder doesn't just insert the text as is, it quotes it. In your case, the quoting is preventing the database from being able to parse it. Instead of using a placeholder just use Perl to interpolate: my $sth = $dbh->prepare("select * from $i"); Also, if $i is input from a user make sure to check it; I'd suggest not allowing anything except [A-Za-z0-9_]. Michael -- Administrator www.shoebox.net Programmer, System Administrator www.gallanttech.com -- -- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
