No.  The user (Me) can only select the order through popups, not by
entering a string.  I understand the concern, but, depending on what the
user selects, the code will generate the string based on the users click.

On Thu, Oct 5, 2017 at 2:52 PM, Simon Slavin <> wrote:

> It looks like you need to create a string for the entire command rather
> than just binding values.  This, of course, introduces security problems if
> you allow your users to set substrings themselves rather than picking them
> from lists you prepare.
> Simon.
> _______________________________________________
> sqlite-users mailing list
sqlite-users mailing list

Reply via email to