Re: [Pharo-users] How to convert avoiding parser

2017-09-13 Thread Esteban A. Maringolo
Hi, Side note: Please sanitize the strings you use for the concatenation or use prepared statements, otherwise you could be vulnerable to SQL INJECTION attacks. Best regards, Esteban A. Maringolo 2017-09-13 17:34 GMT-03:00 Sven Van Caekenberghe : > >> On 13 Sep 2017, at 19:44, Casimiro de Alme

Re: [Pharo-users] How to convert avoiding parser

2017-09-13 Thread Sven Van Caekenberghe
> On 13 Sep 2017, at 19:44, Casimiro de Almeida Barreto > wrote: > > Hello, > > Perhaps someone can help me with this problem: I'm saving a key pair in a > mariadb/mysql table as follows: > > str := 'INSERT INTO chaves_de_encriptacao (numero_funcional, > chave_privada, chave_publica) '.

[Pharo-users] How to convert avoiding parser

2017-09-13 Thread Casimiro de Almeida Barreto
Hello, Perhaps someone can help me with this problem: I'm saving a key pair in a mariadb/mysql table as follows:     str := 'INSERT INTO chaves_de_encriptacao (numero_funcional, chave_privada, chave_publica) '.     str := str,'VALUES ('''.     str := str, self personId leaId asString, ''', '