On Monday, October 10, 2011 09:04:38 AM ijason wrote:
> $db->do("insert into tablename (column names) values
> ('$line[0]','$line[1]'...)");
This is cool, but may I suggest you instead hawk the parameterized use of
DBI::do:
$db->do('INSERT INTO tablename (col1, col2, ... ) VALUES (?, ?, ...)',
undef,
$line[0], $line[1], ... );
For more information on the virtues of parameterized database operations, see
< http://bobby-tables.com/ >.
--
Doran L. Barton - Hypermoo Inc. - <[email protected]> - 801-520-9875
Open source consulting, custom development, systems/network administration
"This is goods for those who wish to enjoy simple and rational lives."
-- Label on a wastebasket for sale in Japan
/*
PLUG: http://plug.org, #utah on irc.freenode.net
Unsubscribe: http://plug.org/mailman/options/plug
Don't fear the penguin.
*/
