Reputation: 15578
There is a procedure that add customer to customer table. Procedure call is made dynamically from google endpoints. When I enter /\ then following query is made.
But there is issue of / (slash).It avoid the next parameters as / hide the purpose of ' (quote)
call dim_add_customer('0','12','/\', '/\','2015-11-14','[email protected]')
How can I solve this ?
Upvotes: 0
Views: 27
Reputation: 8333
/
does not escape anything. \
does and thus has to be escaped itself as \\
.
call dim_add_customer('0','12','/\\', '/\\','2015-11-14','[email protected]')
Upvotes: 1