On 21 May 2015, at 8:51pm, Baruch Burstein <bmburstein at gmail.com> wrote:

> Does that mean that I can't prepare this: "SAVEPOINT :name"? What would be
> the recommended method of preventing SQL injection for this?

Is there really a need to use ad-hoc savepoint names ?  You can keep reusing 
the same name during successive savepoints, or you can use several different 
names, but would you want to make up names inside your program ?

Simon.

Reply via email to