3 ms·
What about some_user has characters that need to be escaped?
by nextaccountic 4y ago
What about some_user has characters that need to be escaped?
- rickboyce 4y agoThe parent article touches on this point too - both Oracle and SQL Server (and any other major db) supports parameterising values in dynamic sql. some_user would become @some_user (SQL Server) or :some_user (Oracle). (The characters never actually get escaped with parameterisation - they are not part of the query text when it is parsed so can’t affect it - hence parameterising a value in sql query replaces the need to escape it with something much more robust.)
- deleted 4y ago[deleted]