Hi,

I noticed in apr_dbd_escape that it uses PQescapeString instead of
PQescapeStringConn.

PQescapeString is deprecated and dangerous. The documentation says,
  *it might give the wrong results*
http://www.postgresql.org/docs/9.1/static/libpq-exec.html

Is there any objection to changing the API call?

Thanks,
Bob

Reply via email to