Hi Denis,

Whew, I'm glad this still works. This means that the SQL injection
protection is still functional :)

DSL.inline() is for creating "inlined variables" (or constants), like
DSL.val(), which creates "ordinary bind variables". See:
http://www.jooq.org/doc/latest/manual/sql-building/bind-values/inlined-parameters

What you're looking for is DSL.field(), which gives you access to the plain
SQL API at your own SQL injection risk. See:
http://www.jooq.org/doc/latest/manual/sql-building/plain-sql

Hope this helps,
Lukas

2016-11-22 13:31 GMT+01:00 Denis Miorandi <[email protected]>:

> Hi Lukas,
>
> I'm building a field to use in my select, but
>
> Field<String> padded=inline("SUBSTRING("+AGENCIES.ID.getName()+",
> PATINDEX('%[^0]%', "+AGENCIES.ID.getName()+"+'.'),
> LEN("+AGENCIES.ID.getName()+"))");
>
> but the following has duplicated quote '' instead of '
>
> 'SUBSTRING(ID, PATINDEX(''%[^0]%'', ID+''.''), LEN(ID))'
>
> any ideas how to achieve this?
>
> --
> You received this message because you are subscribed to the Google Groups
> "jOOQ User Group" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to [email protected].
> For more options, visit https://groups.google.com/d/optout.
>

-- 
You received this message because you are subscribed to the Google Groups "jOOQ 
User Group" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/d/optout.

Reply via email to