[Qt-interest] OT: Re: Proper way to update a BLOB field

[Dusan Zatkovsky]

On Wednesday 14 of April 2010 14:47:57 David Boosalis wrote:
> QString str = "UPDATE MyTable SET x='" + QString::number(myClass->x) +
>     "', y='" + QString::number(myClass->y) +
>      ", headerState" + myClass->byteArray +
>       " WHERE id='" + QString::number(myClass->id));

OT, this is the best example how sql statement must !not! be constructed due 
to sql injection.

-- 
Dusan
_______________________________________________
Qt-interest mailing list
Qt-interest@xxxxxxxxxxxxx
http://lists.trolltech.com/mailman/listinfo/qt-interest