Re: [Juglist] Does the JDK have a tool to escape a String?

[Richard O. Hammer]

Thanks to Phillip and James, for pointing out open source tools to 
escape SQL strings being fed from Java into a database.

I've since learned that the JDK does have a tool to escape Strings: 
java.sql.PreparedStatement.setString(int, String) escapes the String 
parameter as needed, although I haven't seen that the documentation 
tells about it.

When I encountered my problem, I was using the more ordinary 
Statement.execute(String) which does not do the escaping.

Rich



_______________________________________________
Juglist mailing list
[EMAIL PROTECTED]
http://trijug.org/mailman/listinfo/juglist_trijug.org