Hi,

I ran into a problem yesterday where I was adding a property which
happened to have an apostrophe in it. I got a nasty exception because
the apostrophe wasn't escaped.

Before fixing this (well, I have fixed it, but I want to be sure I'm
doing the right thing before committing it), I have a couple of
questions:
 Does JDBC give you any methods to do this automatically? (my current
implementation adds an escape() method to JDBCDescriptorStore)

 What characters does SQL need escaping? I'm currently just handling '
and \

 Which of the above characters are allowed, and where (by slide)? I've
made the assumption for the moment that slide allows them in URIs,
because I don't recall ever seeing anything in slide to disallow them.
As a result, ALL the uris need escaping throughout JDBCDescriptorStore. 

It's also probably true that the mysql-specific version of this store
needs the same treatment, and possibly (probably? I don't use it, and
haven't actually looked at it) the JDBContentStore.

Michael

Reply via email to