Re: variables inside SQL statements

[indigo]

in reply to variables inside SQL statements

Note - Interpolating variables into SQL is bad. Instead, use 'bind' variables, like so:

my $sql = 'INSERT INTO table ( path ) VALUES (:1)';

# Compile sql

my $sth = $dbh->prepare($sql) or die $dbh->errstr;

# Bind path to :1

$sth->execute('/path/to/this') or die $dbh->errstr;

[merlyn]

And if you use ? instead of :1, it'll work with any DBD, not just MySQL.

Rule number 3: be portable!

-- Randal L. Schwartz, Perl hacker

[indigo]

You mean there are databases other than mySQL and Oracle? I don't understand. :)