Re: Cleaning strings for SQL with WebCat
This WebDNA talk-list message is from 2005
It keeps the original formatting.
numero = 63675
interpreted = N
texte = Thanks Donovan. Doesn't [URL] mostly handle line breaks and spaces? I guess my point is, what I am most concerned with is quotes, single quotes, semi-colons, etc. Those type of characters are *legal* within a -url if I am not mistaken. That is why I thought perhaps [grep] could detect quotes and replace them with \" -which is compatible with sql. For some reason this didn't work, perhaps I am doing it wrong.I am trying to do something like this:ex:cBody = "Hello World" , 'Hello World'[text]cBody=[grep search="&replace=\"][cBody][/grep] --- look for quotes and escape them[text]cBody=[grep search="&replace=\'][cBody][/grep] --- look for single quotes and escape them.Needed result: cBody = \"Hello World\" , \'Hello World\'Basically, look into the message body for quotes and single quotes and escape them for the sql db. Seems like the above should work, but it doesn't.Donovan Brooke wrote:> Adam O'Connor wrote:>>> Can anyone tell me the general method on cleaning strings with webcat >> for preparation to sql. For instance, is there a webcat method of >> cleaning/escaping strings like php's clean() or .net's string >> cleaning? I have been working with [convertchars] and [grep], but >> still haven't been too sucessful. Figure if I would ask before >> considering other methods, ie php, c#. Any help appriciated.>>>> -thanks for answering my last question Nitai>>>> [url][/url]>> will create asc11 characters of the non-url compatible characters..>> Donovan>>>-------------------------------------------------------------This message is sent to you because you are subscribed to the mailing list
.To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://webdna.smithmicro.com/
Associated Messages, from the most recent to the oldest:
Thanks Donovan. Doesn't [url] mostly handle line breaks and spaces? I guess my point is, what I am most concerned with is quotes, single quotes, semi-colons, etc. Those type of characters are *legal* within a -url if I am not mistaken. That is why I thought perhaps [grep] could detect quotes and replace them with \" -which is compatible with sql. For some reason this didn't work, perhaps I am doing it wrong.I am trying to do something like this:ex:cBody = "Hello World" , 'Hello World'[text]cBody=[grep search="&replace=\"][cBody][/grep] --- look for quotes and escape them[text]cBody=[grep search="&replace=\'][cBody][/grep] --- look for single quotes and escape them.Needed result: cBody = \"Hello World\" , \'Hello World\'Basically, look into the message body for quotes and single quotes and escape them for the sql db. Seems like the above should work, but it doesn't.Donovan Brooke wrote:> Adam O'Connor wrote:>>> Can anyone tell me the general method on cleaning strings with webcat >> for preparation to sql. For instance, is there a webcat method of >> cleaning/escaping strings like php's clean() or .net's string >> cleaning? I have been working with [convertchars] and [grep], but >> still haven't been too sucessful. Figure if I would ask before >> considering other methods, ie php, c#. Any help appriciated.>>>> -thanks for answering my last question Nitai>>>> [url][/url]>> will create asc11 characters of the non-url compatible characters..>> Donovan>>>-------------------------------------------------------------This message is sent to you because you are subscribed to the mailing list .To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://webdna.smithmicro.com/
"Adam O'Connor"
DOWNLOAD WEBDNA NOW!
Top Articles:
Talk List
The WebDNA community talk-list is the best place to get some help: several hundred extremely proficient programmers with an excellent knowledge of WebDNA and an excellent spirit will deliver all the tips and tricks you can imagine...
Related Readings:
Summing fields (1997)
Friendly , quick 'security' check, please (2003)
Re:my First Ship table (1998)
Which Pref is faster? (1998)
wierd crashes for multi-sendmails on NT (1997)
serial number generation (1997)
Date sorting (1997)
WebCatalog 4.0.1b2 is now available (2000)
Available Server Space? (2004)
RE: redirect with more than 256 characters (1999)
WCS Newbie question (1997)
WebCat2b15MacPlugin - showing [math] (1997)
HEADER AND FOOTER (1997)
Listserver problem (1997)
[WebDNA] Crashing again (2008)
Re:Emailer and encryption (1997)
webcat and webkitty votes needed (1997)
Re:PCS Customer submissions ? (1997)
Showif for mulitple variations (1997)
[sendmail] and [formvariables] (1997)