Ron Stephan [mailto:[EMAIL PROTECTED] wrote:
 
> I am lost trying figure out what occurs to me a really simple problem.
> 
> 
> CGI->Perl->MySQL.
> 
> 
> Users pounding data into a CGI-Perl web page feeding MySQL.
> 
> If the user enters a special character it crashes.
> 
> As in "Bob's Market"...  Yeah - trap for special chars and escape them.
> 
> This seems so simple - yet the solutions that come to mind make me feel
> like I am reinventing the wheel.
> 
> There must be some really simple solution everybody is using.

The best solution is to use placeholders.  An alternative solution is to
call $dbh->quote() on the values before interpolating them into the string. 

Ronald


Reply via email to