On 2007-08-15 06:04, Mike Meyer wrote:
>> Keep in mind that this is just my opinion, and I don't speak for the
>> entire DB-SIG community. It's your right to post a proposal and ask for
>> a vote.
> 
> I posted a proposal. The total vote was -1....

You can add another -1. We've been through these discussions many
times before, so in theory you'd have to add all those votes
as well :-)

The whole purpose of having bind parameters is that the database
can build a query/execution plan without having to know the
values you intend to use in the query beforehand.

This results in a massive speedup compared to having to reparse
and build the query/execution plan for every single combination
of parameter values.

Another nice side-effect is the prevention of SQL injection attacks
due to the fact that SQL commands and values are separated, much
like code and data is separated by todays OSes for applications.

-- 
Marc-Andre Lemburg
eGenix.com

Professional Python Services directly from the Source  (#1, Aug 15 2007)
>>> Python/Zope Consulting and Support ...        http://www.egenix.com/
>>> mxODBC.Zope.Database.Adapter ...             http://zope.egenix.com/
>>> mxODBC, mxDateTime, mxTextTools ...        http://python.egenix.com/
________________________________________________________________________

:::: Try mxODBC.Zope.DA for Windows,Linux,Solaris,MacOSX for free ! ::::


   eGenix.com Software, Skills and Services GmbH  Pastor-Loeh-Str.48
    D-40764 Langenfeld, Germany. CEO Dipl.-Math. Marc-Andre Lemburg
           Registered at Amtsgericht Duesseldorf: HRB 46611
_______________________________________________
DB-SIG maillist  -  DB-SIG@python.org
http://mail.python.org/mailman/listinfo/db-sig

Reply via email to