Tor Erik Soenvisen <[EMAIL PROTECTED]> writes: > # Protect against SQL injection by escaping quotes
Don't ever do that, safe or not. Use query parameters instead. That's what they're for. -- http://mail.python.org/mailman/listinfo/python-list
- Protecting against SQL injection Tor Erik Soenvisen
- Re: Protecting against SQL injection Paul Rubin
- Re: Protecting against SQL injection Ben Finney
- Re: Protecting against SQL injection Fredrik Lundh
- Re: Protecting against SQL injection Steve Holden
- Re: Protecting against SQL injection Aahz
