Hi,

A lot of SQL requests into J2EEStore are made using java.sql.Statement 
and ' into them
as string delimiter.

Using URIs with special characters can easily lead to SQL errors if they 
are containing
for example ' character.

Would not it be a better idea to use java.sql.PreparedStatement instead 
to avoid all these
problems ?

Any opinion on this ?

Regards

Jp


--
To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>

Reply via email to