>Open your application, please, and in any textbox that is used for a >SELECT operation, enter this: "'] (exactly as I typed - double quote, >single quote, close square bracket). And please let me know what happened.
What would happen is that my application would say that was an invalid entry since it does not conform to the proper data type for any searchable field. No SELECT operation would be executed. >How come? You don't have any textbox that allow strings? Or you specifically >prohibit those characters? If you prohibit, how do they search for a >customer named O'Hara? First, my seach engine surrounds a text string being searched for with double quotes. In your example, the result would be: ""'] Two double quotes starting a string followed by some other character would be an error in VFP--wouldn't even need my validation code to detect that. And yes, my base business object class has code that looks for invalid characters in a string to be searched for and throws out an "Invalid Entry" message. In order to search for "O'Hara", the user would have to enter, in the text box, O'Hara with no other characters. If a user searched on '] The result would be "no match" since the system would not find "']" in the searched field. Ken Dibble www.stic-cil.org _______________________________________________ Post Messages to: [email protected] Subscription Maintenance: http://leafe.com/mailman/listinfo/profox OT-free version of this list: http://leafe.com/mailman/listinfo/profoxtech Searchable Archive: http://leafe.com/archives/search/profox This message: http://leafe.com/archives/byMID/profox/[email protected] ** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.
