[Gambas-user] gb.web - two observations

Benoît Minisini g4mba5 at gmail.com
Mon Jul 1 16:30:07 CEST 2019


Le 01/07/2019 à 15:29, T Lee Davidson a écrit :
> Observation 1: The single-quote is for comments. Within a line it 
> comments out all the text that follows it. So yes, it is correct editor 
> behavior.
> 
> Observation 2: With DB.Subst, DB represents a current database 
> connection. It requires that a connection is first established before 
> using it. Subst, on the other hand, has no such requirement.
> 

And Observation 3 : you MUST not use Subst() for making SQL request, 
unless you know what you are doing, which is obviously not the case. 
Otherwise your application will be subject to SQL request injections.

-- 
Benoît Minisini


More information about the User mailing list