Thank you for the quick answer. On Mon, May 14, 2012 at 4:55 PM, Richard Hipp <d...@sqlite.org> wrote:
> On Mon, May 14, 2012 at 9:49 AM, Baruch Burstein <bmburst...@gmail.com > >wrote: > > > Are text parameters bound with sqlite3_bind_text automatically escaped > and > > quoted, just escaped, just quoted, or neither? > > > > > Both. And neither. > > The content of the parameter is not modified in any way. It is copied > directly into the database file, byte for byte. This has the same effect > as if the parameter had been both escaped and quoted and inserted into the > SQL and then parsed, but is much faster since no conversions take place. > > > > > > -- > > Programming today is a race between software engineers striving to build > > bigger and better idiot-proof programs, and the Universe trying to > produce > > bigger and better idiots. So far, the Universe is winning. - Rich Cook > > _______________________________________________ > > sqlite-users mailing list > > sqlite-users@sqlite.org > > http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users > > > > > > -- > D. Richard Hipp > d...@sqlite.org > _______________________________________________ > sqlite-users mailing list > sqlite-users@sqlite.org > http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users > -- Programming today is a race between software engineers striving to build bigger and better idiot-proof programs, and the Universe trying to produce bigger and better idiots. So far, the Universe is winning. - Rich Cook _______________________________________________ sqlite-users mailing list sqlite-users@sqlite.org http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users
