Re: Cleaning strings for SQL with WebCat
This WebDNA talk-list message is from 2005
It keeps the original formatting.
numero = 63675
interpreted = N
texte = Thanks Donovan. Doesn't [URL] mostly handle line breaks and spaces? I guess my point is, what I am most concerned with is quotes, single quotes, semi-colons, etc. Those type of characters are *legal* within a -url if I am not mistaken. That is why I thought perhaps [grep] could detect quotes and replace them with \" -which is compatible with sql. For some reason this didn't work, perhaps I am doing it wrong.I am trying to do something like this:ex:cBody = "Hello World" , 'Hello World'[text]cBody=[grep search="&replace=\"][cBody][/grep] --- look for quotes and escape them[text]cBody=[grep search="&replace=\'][cBody][/grep] --- look for single quotes and escape them.Needed result: cBody = \"Hello World\" , \'Hello World\'Basically, look into the message body for quotes and single quotes and escape them for the sql db. Seems like the above should work, but it doesn't.Donovan Brooke wrote:> Adam O'Connor wrote:>>> Can anyone tell me the general method on cleaning strings with webcat >> for preparation to sql. For instance, is there a webcat method of >> cleaning/escaping strings like php's clean() or .net's string >> cleaning? I have been working with [convertchars] and [grep], but >> still haven't been too sucessful. Figure if I would ask before >> considering other methods, ie php, c#. Any help appriciated.>>>> -thanks for answering my last question Nitai>>>> [url][/url]>> will create asc11 characters of the non-url compatible characters..>> Donovan>>>-------------------------------------------------------------This message is sent to you because you are subscribed to the mailing list
.To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://webdna.smithmicro.com/
Associated Messages, from the most recent to the oldest:
Thanks Donovan. Doesn't [url] mostly handle line breaks and spaces? I guess my point is, what I am most concerned with is quotes, single quotes, semi-colons, etc. Those type of characters are *legal* within a -url if I am not mistaken. That is why I thought perhaps [grep] could detect quotes and replace them with \" -which is compatible with sql. For some reason this didn't work, perhaps I am doing it wrong.I am trying to do something like this:ex:cBody = "Hello World" , 'Hello World'[text]cBody=[grep search="&replace=\"][cBody][/grep] --- look for quotes and escape them[text]cBody=[grep search="&replace=\'][cBody][/grep] --- look for single quotes and escape them.Needed result: cBody = \"Hello World\" , \'Hello World\'Basically, look into the message body for quotes and single quotes and escape them for the sql db. Seems like the above should work, but it doesn't.Donovan Brooke wrote:> Adam O'Connor wrote:>>> Can anyone tell me the general method on cleaning strings with webcat >> for preparation to sql. For instance, is there a webcat method of >> cleaning/escaping strings like php's clean() or .net's string >> cleaning? I have been working with [convertchars] and [grep], but >> still haven't been too sucessful. Figure if I would ask before >> considering other methods, ie php, c#. Any help appriciated.>>>> -thanks for answering my last question Nitai>>>> [url][/url]>> will create asc11 characters of the non-url compatible characters..>> Donovan>>>-------------------------------------------------------------This message is sent to you because you are subscribed to the mailing list .To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://webdna.smithmicro.com/
"Adam O'Connor"
DOWNLOAD WEBDNA NOW!
Top Articles:
Talk List
The WebDNA community talk-list is the best place to get some help: several hundred extremely proficient programmers with an excellent knowledge of WebDNA and an excellent spirit will deliver all the tips and tricks you can imagine...
Related Readings:
cart info (1998)
Languages (1997)
PCS Frames-Default page is solution! (1997)
emailer (1997)
Show if file exists (2004)
Using [random] (1999)
summ=T (2003)
[INCLUDE] Limitations (1998)
Search Question (2003)
can WC render sites out? (1997)
Error Messages Returned to User (1997)
Sku numbers (1997)
RE: too many nested [xxx] (1997)
unique ascending numbers (2003)
How to redirect based on price subtotal? (1998)
Searchable WebCat (etc.) Docs ? (1997)
WebMerchant Problem (1999)
select multiple (1997)
form data submission gets truncated (1997)
Re:Email Problem (1997)