Re: Escaping Strings

On 23/08/2024 04.33, Lawrence D'Oliveiro wrote:
> On Mon, 19 Aug 2024 11:24:06 +0200, J.O. Aho wrote:
> 
>> I would looked into using parameterized queries ...
> 
> There are lots of cases they don’t handle. Like for example LIKE and
> REGEXP operands.

LIKE:
select * from table where column1 like ?;

you have the %'s in the parameterized value.

If you have issues, you can always use functions or store procedures 
which you use with parametrization.

-- 
  //Aho