Re: SQL update/insert for a string contain " ' "

["Fred Kulack" <kulack@xxxxxxxxxx>]

On 10/04/2001 at 11:18:54 AM, java400-l-admin@midrange.com wrote:
I would recommend (for portability) that you also use substitution for the
key.
so DESCRIPTION = ? where ID = 1"); becomes
DESCRIPTION = ? where ID = ?");

--- end of excerpt ---

I agree completely.
>From the original example source, I'd guess that this statement
could then be used in other places in the app with different
ID values, reducing the total number of prepared statements
required.


In every single ethnic, religious or racial group, there are a
very few truly evil people. For each of those people there
are many, many, many good people.
Assuming anything (evilness or capability for evil) about the
particular group is bigotry and idiocy. Don't do it.  -- Me

Fred A. Kulack  -  AS/400e  Java and Java DB2 access, Jdbc, JTA, etc...
IBM in Rochester, MN  (Phone: 507.253.5982   T/L 553-5982)
mailto:kulack@us.ibm.com   Personal: mailto:kulack@magnaspeed.net
AOL Instant Messenger: Home:FKulack  Work:FKulackWrk