Re: [Templates] Passing a list to DBI execute? (solved)

> I've just tested it: TT2's parser converts q('a''b') to two separate

--Apple-Mail-5--336405911
Content-Transfer-Encoding: 7bit
Content-Type: text/plain;
	charset=US-ASCII;
	format=flowed

On Dec 8, 2004, at 3:33 AM, Harald Joerg wrote:

> I've just tested it: TT2's parser converts q('a''b') to two separate
> parameters 'a' and 'b'.  So, if you have funky SQL characters, you'd
> *really* better wait for TT3 :-)
>

Or sanitize your input from users some other way.  This could lead to a 
BIG SQL-injection hole.

Vivek Khera, Ph.D.
+1-301-869-4449 x806

--Apple-Mail-5--336405911
Content-Transfer-Encoding: base64
Content-Type: application/pkcs7-signature;
	name=smime.p7s
Content-Disposition: attachment;
	filename=smime.p7s

MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIGhzCCAz8w
ggKooAMCAQICAQ0wDQYJKoZIhvcNAQEFBQAwgdExCzAJBgNVBAYTAlpBMRUwEwYDVQQIEwxXZXN0
ZXJuIENhcGUxEjAQBgNVBAcTCUNhcGUgVG93bjEaMBgGA1UEChMRVGhhd3RlIENvbnN1bHRpbmcx
KDAmBgNVBAsTH0NlcnRpZmljYXRpb24gU2VydmljZXMgRGl2aXNpb24xJDAiBgNVBAMTG1RoYXd0
ZSBQZXJzb25hbCBGcmVlbWFpbCBDQTErMCkGCSqGSIb3DQEJARYccGVyc29uYWwtZnJlZW1haWxA
dGhhd3RlLmNvbTAeFw0wMzA3MTcwMDAwMDBaFw0xMzA3MTYyMzU5NTlaMGIxCzAJBgNVBAYTAlpB
MSUwIwYDVQQKExxUaGF3dGUgQ29uc3VsdGluZyAoUHR5KSBMdGQuMSwwKgYDVQQDEyNUaGF3dGUg
UGVyc29uYWwgRnJlZW1haWwgSXNzdWluZyBDQTCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEA
xKY8VXNV+065yplaHmjAdQRwnd/p/6Me7L3N9VvyGna9fww6YfK/Uc4B1OVQCjDXAmNaLIkVcI7d
yfArhVqqP3FWy688Cwfn8R+RNiQqE88r1fOCdz0Dviv+uxg+B79AgAJk16emu59l0cUqVIUPSAR/
p7bRPGEEQB5kGXJgt/sCAwEAAaOBlDCBkTASBgNVHRMBAf8ECDAGAQH/AgEAMEMGA1UdHwQ8MDow
OKA2oDSGMmh0dHA6Ly9jcmwudGhhd3RlLmNvbS9UaGF3dGVQZXJzb25hbEZyZWVtYWlsQ0EuY3Js
MAsGA1UdDwQEAwIBBjApBgNVHREEIjAgpB4wHDEaMBgGA1UEAxMRUHJpdmF0ZUxhYmVsMi0xMzgw
DQYJKoZIhvcNAQEFBQADgYEASIzRUIPqCy7MDaNmrGcPf6+svsIXoUOWlJ1/TCG4+DYfqi2fNi/A
9BxQIJNwPP2t4WFiw9k6GX6EsZkbAMUaC4J0niVQlGLH2ydxVyWN3amcOY6MIE9lX5Xa9/eH1sYI
Tq726jTlEBpbNU1341YheILcIRk13iSx0x1G/11fZU8wggNAMIICqaADAgECAgMMB/4wDQYJKoZI
hvcNAQEEBQAwYjELMAkGA1UEBhMCWkExJTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQdHkp
IEx0ZC4xLDAqBgNVBAMTI1RoYXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBJc3N1aW5nIENBMB4XDTA0
MDMzMDIwNDIxMVoXDTA1MDMzMDIwNDIxMVowgYoxHzAdBgNVBAMTFlRoYXd0ZSBGcmVlbWFpbCBN
ZW1iZXIxHjAcBgkqhkiG9w0BCQEWD3ZpdmVrQGtoZXJhLm9yZzEgMB4GCSqGSIb3DQEJARYRa2hl
cmFAa2NpbGluay5jb20xJTAjBgkqhkiG9w0BCQEWFnZpdmVrQG1haWxlcm1haWxlci5jb20wggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBSjHPUwN+eaM5uwCtKXo+khMQU4oD9GC4XhNN
rVzqx2Jgx/ep985wo5jxHZ2VJ9wKBt6MuKav8Q6H60oMRot3gW3FYPX5k7GkuMIoThjV0GzixL/u
tq5OacDiO8dupSH7CT13AxNfNGFSW3Q6O/PaJ0b2pupL7X+EHY3+lpzKV8+OMwcRUW71tI3sZghi
pVuiUeWZhrJQsuuxxZLM7IyGD0uepCQT3hCIiClpzJTGDygwW7nBPRuXI2tMAU4wFYZG34BH+JVR
YKfm4WH99/9IH7Fz55u0qNsvPL7FhZakIDA0QjEprv35zbO9uFSu/PY4Yj91Vaih8PtKkLi+rCVn
AgMBAAGjVzBVMEUGA1UdEQQ+MDyBD3ZpdmVrQGtoZXJhLm9yZ4ERa2hlcmFAa2NpbGluay5jb22B
FnZpdmVrQG1haWxlcm1haWxlci5jb20wDAYDVR0TAQH/BAIwADANBgkqhkiG9w0BAQQFAAOBgQA6
96KzrXtGrERiiN3zJBHZxIox5mVn1Bt/RL6JO8PRw4CFuFvLI77Vf9yCiduWd+J7ijfhCmEj3m/W
9KmWP4XEArbhIBBO1lBa2lyHd7LUNnhUTzruAbHdyc4e25PpS3TM3YbFX7e+wdrcdZYWZgiYDb1l
x60aJ4MtJ5+msGQeazGCAucwggLjAgEBMGkwYjELMAkGA1UEBhMCWkExJTAjBgNVBAoTHFRoYXd0
ZSBDb25zdWx0aW5nIChQdHkpIEx0ZC4xLDAqBgNVBAMTI1RoYXd0ZSBQZXJzb25hbCBGcmVlbWFp
bCBJc3N1aW5nIENBAgMMB/4wCQYFKw4DAhoFAKCCAVMwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEH
ATAcBgkqhkiG9w0BCQUxDxcNMDQxMjA4MTY1NDA2WjAjBgkqhkiG9w0BCQQxFgQU6O70rmiV6oyn
NWUzkWgRGuiuJAwweAYJKwYBBAGCNxAEMWswaTBiMQswCQYDVQQGEwJaQTElMCMGA1UEChMcVGhh
d3RlIENvbnN1bHRpbmcgKFB0eSkgTHRkLjEsMCoGA1UEAxMjVGhhd3RlIFBlcnNvbmFsIEZyZWVt
YWlsIElzc3VpbmcgQ0ECAwwH/jB6BgsqhkiG9w0BCRACCzFroGkwYjELMAkGA1UEBhMCWkExJTAj
BgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQdHkpIEx0ZC4xLDAqBgNVBAMTI1RoYXd0ZSBQZXJz
b25hbCBGcmVlbWFpbCBJc3N1aW5nIENBAgMMB/4wDQYJKoZIhvcNAQEBBQAEggEAUj6Dn3YSSE3Q
WZWSlfpvhH6XGvzonZ72EJSAMqJDrqOAaV1hNjxrJ4XU9sjHPJlo7Opvin5UEV3SKfgC4i0S5zLC
PMYwPtp27SUYt/PHiTTmnEDJoKZdeSy5WMW3t6fpJiWfy8zcFqpFbsD9AgwnMhaYQwlpi8STRmd7
9jROZdzvU5G1vFZN4L+mdvBJuEDgof7mi0RrFvBhvPY4GfmbIdnJ1TwTqoHacZH6T0NPyEg49TZx
FO2Ah4rYh8ldm8Yit6BmKiVhDPhAneoiBQhLGnHBXlTLwKP2jIrkpVliBhw20v9bF/TYEQ3MBlBN
+Nxoopcb4R+skmk8ev02Ktv2CAAAAAAAAA==

--Apple-Mail-5--336405911--

_______________________________________________
templates mailing list
templates@xxxxxxxxxxxxxxxx.xxx
http://lists.template-toolkit.org/mailman/listinfo/templates