Hello,

Is there a way for me to execute a prepared SQL statement? For example, something like:

<esql:query>UPDATE User SET display_name=? WHERE ID=?</esql:query>

It would be quite a security risk if I just used the user-submitted data instead of the ? here. Any way to do this?

Thanks, Csaba


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to