Re: SQL injection with guile-pg

2005-02-15 Thread Greg Troxel
I wasn't suggesing client-side caching; I agree that it seems not worthwhile, at least now. Bound parameters have two benefits, and a third in the guile-pg world: security (avoiding SQL injection) enabling server-side query caching since the variables are not part of the query proper any m

Re: SQL injection with guile-pg

2005-02-14 Thread Thien-Thi Nguyen
From: Greg Troxel <[EMAIL PROTECTED]> Date: 14 Feb 2005 08:23:08 -0500 http://www.saturn5.com/~jwb/dbi-performance.html thanks for the link. perhaps Guile-PG can provide some convenience procedures for the PREPARE and EXECUTE statements. is that what you had in mind? any templating/c

Re: SQL injection with guile-pg

2005-02-14 Thread Greg Troxel
For a bound parameter example, look at the 'stage 2' code fragment here: http://www.saturn5.com/~jwb/dbi-performance.html Basically, you have a query string with a variable name in it, and then execute a statement that binds a value to that name. People do this partly for efficiency, but it a