You right, I would know how bind multiple values...

Solution:

session_.find<User>().where("email = ? AND pwd = ?").bind(email).bind(pwd);

Tks, John

On 06/03/2011 06:46 AM, Dmitriy Igrishin wrote:
> You should avoid this syntax anyway because its insecure --
> risk of the successful SQL injection attack if values of email and pwd
> are from untrusted input (such as user input).



------------------------------------------------------------------------------
Simplify data backup and recovery for your virtual environment with vRanger.
Installation's a snap, and flexible recovery options mean your data is safe,
secure and there when you need it. Discover what all the cheering's about.
Get your free trial download today. 
http://p.sf.net/sfu/quest-dev2dev2 
_______________________________________________
witty-interest mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/witty-interest

Reply via email to