Re: MySQLdb not allowing hyphen

2012-02-08 Thread John Nagle
On 2/5/2012 2:46 PM, Chris Rebert wrote: On Sun, Feb 5, 2012 at 2:41 PM, Emeka wrote: Hello All, I noticed that MySQLdb not allowing hyphen may be way to prevent injection attack. I have something like below: "insert into reviews(message, title)values('%s', '%s')" %( "We don't know where to

Re: MySQLdb not allowing hyphen

2012-02-05 Thread Emeka
Dennis , Chris Thanks so much! On Mon, Feb 6, 2012 at 1:23 AM, Dennis Lee Bieber wrote: > On Mon, 6 Feb 2012 00:41:24 +0200, Emeka wrote: > > >Hello All, > > > >I noticed that MySQLdb not allowing hyphen may be way to prevent injection > >attack. > > What hyphen? > > >I have something

Re: MySQLdb not allowing hyphen

2012-02-05 Thread Chris Rebert
On Sun, Feb 5, 2012 at 2:41 PM, Emeka wrote: > > Hello All, > > I noticed that MySQLdb not allowing hyphen may be way to prevent injection > attack. > I have something like below: > > "insert into reviews(message, title)values('%s', '%s')" %( "We don't know > where to go","We can't wait till morro