> Pls. *don't* use this style of writing SQL queries! Otherwise you'll always have to watch your back for Little Bobby Tables. http://xkcd.com/327/
On Feb 15, 7:07 am, Sebastian Roth <[email protected]> wrote: > On Tue, Feb 15, 2011 at 3:19 PM, Abhilash baddam < > > [email protected]> wrote: > > > My problem was solved like this.. > > myDB.execSQL("DELETE FROM favourites where month=' "+str1+" ' "); > > Pls. *don't* use this style of writing SQL queries! > > JAlexoid (Aleksandr Panzin) had a good suggestion for you. > > The reason is "SQL Injection". Pls. have a read > here:http://en.wikipedia.org/wiki/SQL_injection > > BR, > Sebastian -- You received this message because you are subscribed to the Google Groups "Android Developers" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/android-developers?hl=en
