RE: [Zope] Using sql to search in zope

2000-06-02 Thread peter

Where's the 'LIKE' ?

Such as SELECT * FROM table1 WHERE table1_id LIKE %field1_value%

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
[EMAIL PROTECTED]
Sent: 02 June 2000 09:10
To: [EMAIL PROTECTED]
Subject: [Zope] Using sql to search in zope


Hi All,

I tried to build a search feature using sql in zope, this is what I normal
do in sql to do a range search :

select * from table1 where table1_id = %field1_value%

But when I try it with zope, it will become

select * from table1 where table1_id = %'value'%

Which return an error : [ODBC Microsoft Access 97 Driver] Syntax error in
query expression 'table1_id alike %'field1_value'%'.")

Any idea or work around ??

Please help

Cheers

Wai


___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )


___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




Re: [Zope] Using sql to search in zope

2000-06-02 Thread Graham Chiu

In article [EMAIL PROTECTED],
[EMAIL PROTECTED] writes
Hi All,

I tried to build a search feature using sql in zope, this is what I normal
do in sql to do a range search :

select * from table1 where table1_id = %field1_value%

where table1_id = dtml-sqlvar "'%'+ field1_value + '%'" type=string  


-- 
Regards,  Graham Chiu
gchiuatcompkarori.co.nz
http://www.compkarori.co.nz/index.php
Powered by Interbase and Zope

___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




Re: [Zope] Using sql to search in zope

2000-06-02 Thread Jim Sanford

dtml-sqlvar " '%' + _.string.strip(field1_value) + '%'" type=string


- Original Message - 
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, June 02, 2000 3:10 AM
Subject: [Zope] Using sql to search in zope


Hi All,

I tried to build a search feature using sql in zope, this is what I normal
do in sql to do a range search :

select * from table1 where table1_id = %field1_value%

But when I try it with zope, it will become

select * from table1 where table1_id = %'value'%

Which return an error : [ODBC Microsoft Access 97 Driver] Syntax error in
query expression 'table1_id alike %'field1_value'%'.")

Any idea or work around ??

Please help

Cheers

Wai


___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




Re: [Zope] Using sql to search in zope

2000-06-02 Thread Stuart 'Zen' Bishop

On Fri, 2 Jun 2000 [EMAIL PROTECTED] wrote:

 I tried to build a search feature using sql in zope, this is what I normal
 do in sql to do a range search :
 
 select * from table1 where table1_id = %field1_value%
 
 But when I try it with zope, it will become
 
 select * from table1 where table1_id = %'value'%

The quoting is there to protect you (if value contains the SQL delimiter ';'
or whatever it is in Access, bad things can happen and might be a big
hairy security hole).

Try:

dtml-let field1_value="'%' + field1_value + '%'"

select * from table1 
where 
dtml-sqltest field1_value column=table1_id type=nb

/dtml-let


You might need an 'op=like' attribute to the sqltest tag (I don't know Access).

-- 
Stuart Bishop  Work: [EMAIL PROTECTED]
Senior Systems Alchemist   Play: [EMAIL PROTECTED]
Computer Science, RMIT University


___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )