Re: [Twisted-Python] util.quote deprecated

2009-03-03 Thread Pet
On Tue, Mar 3, 2009 at 2:04 PM, Tim Allen wrote: > On Tue, Mar 03, 2009 at 01:17:48PM +0100, Pet wrote: > > what is a proper way to escape user input in database query strings? > > I've used quote from twisted.enterprise.util, but it is deprecated now. > > Is there any other module for this purpo

Re: [Twisted-Python] util.quote deprecated

2009-03-03 Thread Tim Allen
On Tue, Mar 03, 2009 at 01:17:48PM +0100, Pet wrote: > what is a proper way to escape user input in database query strings? > I've used quote from twisted.enterprise.util, but it is deprecated now. > Is there any other module for this purpose? The correct way to escape user input is not to do it a

Re: [Twisted-Python] util.quote deprecated

2009-03-03 Thread Jean-Paul Calderone
On Tue, 3 Mar 2009 13:17:48 +0100, Pet wrote: Hi, what is a proper way to escape user input in database query strings? I've used quote from twisted.enterprise.util, but it is deprecated now. Is there any other module for this purpose? The proper way is with "bind parameters". This keeps SQL

Re: [Twisted-Python] util.quote deprecated

2009-03-03 Thread Amaury Forgeot d'Arc
On Tue, Mar 3, 2009 at 13:17, Pet wrote: > Hi, > > what is a proper way to escape user input in database query strings? > I've used quote from twisted.enterprise.util, but it is deprecated now. > Is there any other module for this purpose? I can't do better than quote the sqlite documentation. I

[Twisted-Python] util.quote deprecated

2009-03-03 Thread Pet
Hi, what is a proper way to escape user input in database query strings? I've used quote from twisted.enterprise.util, but it is deprecated now. Is there any other module for this purpose? Thanks, Pet ___ Twisted-Python mailing list Twisted-Python@twist