Dirk
Dirk

Reputation: 6884

What's the equivalent of escaping strings for MySQL database input in Perl?

What's the equivalent of escaping strings for MySql database input in perl?

Is Quote the best way?

Upvotes: 4

Views: 145

Answers (1)

mechanical_meat
mechanical_meat

Reputation: 169364

You can use DBI placeholders.

Here is an example (from this link):

#! /usr/bin/perl

use DBI;

print "Enter the city you live in: ";
chomp( $city = <STDIN> );
print "Enter the state you live in: ";
chomp( $state = <STDIN> );

$dbh = DBI->connect(your db info here);
$sth = $dbh->prepare( "SELECT name WHERE city = ? AND state = ?" );
$sth->execute( $city, $state );

Upvotes: 10

Related Questions