Sujet : Re: Byte Addressability And Beyond
De : ldo (at) *nospam* nz.invalid (Lawrence D'Oliveiro)
Groupes : comp.archDate : 04. Jun 2024, 02:45:58
Autres entêtes
Organisation : A noiseless patient Spider
Message-ID : <v3lrkm$48om$8@dont-email.me>
References : 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15
User-Agent : Pan/0.158 (Avdiivka; )
On Thu, 30 May 2024 15:35:37 GMT, Anton Ertl wrote:
Actually what you check for is meta-characters like ; " '. They are all
ASCII, so as long as your code is 8-bit-clean, your SQL string sanitizer
needs to know nothing about UTF-8.
According to the official spec, an SQL string literal is delimited by “"”
characters, and an embedded double-quote is escaped by writing it twice:
“""”.
That’s it. Nothing else is special, so any other character/byte value in
the string can be simply passed through as is.
Of course, things like LIKE and REGEXP clauses are an entirely separate
matter ...
Re: Byte Addressability And Beyond