> i don't want to start talking to myself, but i think i am narrowing in on the
>  problem :-)
> i now have:
> 
> [% sort = params.sort %]
> [% statement = DBI.prepare('SELECT * FROM people  LEFT JOIN bios USING (idn) 
> ORDER BY ?') %]
> [% FOREACH person = statement.execute("${sort}") %]
>                                        ^
>                                        leaving out these quotes breaks the te
> mplate.
> 
> so it looks like the problem is somwhere admist all the reference magic perfo
> rmed by TT.
> i would leave it here, but since i'm grabbing the binding variable
> from the query string i would like to do:
> 
> [% sort = DBI.quote(params.sort) %]
> 
> but this breaks the template again.
>                                        
> i'll go research dereferencing.

This doesn't sound like a TT issue.

You should use DBI.quote to quote something that you are
putting into the prepare() or query() string, not for bind
or placeholder values.

Reply via email to