[Virtuoso-users] Prepared statements with SPARQL queries

[Timo Westkämper]

Hi.

I am trying to use prepared statements together with SPARQL SELECT 
queries, but I am struggling to get literal queries right.

I am using the function bif:__rdf_long_from_batch_params(??,??,??) and 
the same bind logic as in the Sesame 3 adapter, but for certain literals 
it fails.

The template is something like this

   sparql select * where { graph ?g { `iri(??)` `iri(??)` 
`bif:__rdf_long_from_batch_params(??,??,??)` }}

I got it working for resources, blank nodes and integer typed literals 
as objects, but it failed for xsd:string literals.

Any known issues with this?

I don't want to construct SPARQL queries with String concatenation, as 
this enables code injection attacks etc without proper escaping.

Br,
Timo Westkämper