Re: [Dbix-class] Correct (and secure) searching using -like?

2012-10-09 Thread Octavian Rasnita
From: will trillich Octavian -- Inlining the values, as you say, would be fraught with peril -- DBI (and DBIx::Class) know better, so it's not a problem. It's not special to the -like operator, it's part of how DBIC works. [cut] So if someone put nefarious strings in one of the ID

Re: [Dbix-class] Correct (and secure) searching using -like?

2012-10-09 Thread Octavian Rasnita
From: Bill Moseley On Mon, Oct 8, 2012 at 12:49 AM, Octavian Rasnita orasn...@gmail.com wrote: It doesn't look to be very secure to quote the variable $name this way. It's still a bind parameter. But, what I do is remove any existing special characters and make sure $name has

[Dbix-class] resultset search question

2012-10-09 Thread Rajeev Prasad
Hello, I guess a very basic question. In the following example: from http://search.cpan.org/~mstrout/DBIx-Class-0.08202/lib/DBIx/Class/ResultSet.pm my @cds = $cd_rs-search({ year = 2001 }); # ... WHERE year = 2001 my $new_rs = $cd_rs-search({ year = 2005 }); are we to understand that, table

Re: [Dbix-class] resultset search question

2012-10-09 Thread Ian Docherty
On 9 October 2012 15:57, Rajeev Prasad rp.ne...@yahoo.com wrote: Hello, I guess a very basic question. In the following example: from http://search.cpan.org/~mstrout/DBIx-Class-0.08202/lib/DBIx/Class/ResultSet.pm my @cds= $cd_rs-search({ year = 2001 }); # ... WHERE year = 2001 my

[Dbix-class] _no_scope_identity_query error

2012-10-09 Thread Paul Rogers
I'm running ActivePerl v5.16.1 on Win2008 R2 x64. Anyone see the below error message before? Running same script on x86 machine produces no such error. P:\testperl test.pl Can't locate object method _no_scope_identity_query via package DBIx::Class::