Re: [SLUG] Blogging system recommendations

2007-04-23 Thread Oded Arbel
On Friday 20 April 2007 14:06:12 Amos Shapira wrote: > as I wrote in my previous message - when I tried to use them with MS > SQL I was hit on the head with a stick with "Don't you remember MS SQL > doesn't support placeholders?!" on it. > > However, using the Sybase libraries to query an MS-SQL

Re: [SLUG] Blogging system recommendations

2007-04-20 Thread Amos Shapira
On 20/04/07, Amos Shapira <[EMAIL PROTECTED]> wrote: I'm not 100% sure what's the relation between Sybase and MS SQL these days. Has anyone in this forum actually managed to use place holders on MS SQL 2005 through Perl? Actually here is my answer from the page you sent (http://tinyurl.com/yjev

Re: [SLUG] Blogging system recommendations

2007-04-20 Thread Amos Shapira
On 19/04/07, Oded Arbel <[EMAIL PROTECTED]> wrote: I wasn't following the beginning of the thread, but if you are referring to perl's DBI, then it does support place holders: http://search.cpan.org/~mewp/DBD-Sybase-1.07/Sybase.pm#Using_%3F_Placeholders_%26_bind_parameters_to_%24sth-%3Eexecute Y

Re: [SLUG] Blogging system recommendations

2007-04-19 Thread Oded Arbel
On Thursday 19 April 2007 08:37:34 Amos Shapira wrote: > On 19/04/07, Adam Kennedy <[EMAIL PROTECTED]> wrote: > > The biggest example is probably SQL placeholders, which pretty much > > remove any chance of SQL injections attack in one fell swoop. > > > > I know for DBI it's very difficult to do an

Re: [SLUG] Blogging system recommendations

2007-04-18 Thread Amos Shapira
On 19/04/07, Adam Kennedy <[EMAIL PROTECTED]> wrote: The biggest example is probably SQL placeholders, which pretty much remove any chance of SQL injections attack in one fell swoop. I know for DBI it's very difficult to do any non-trivial work without using them. I was just bitten (again) by