From 0f3b6437f8cb196a9b6eb84556e6472010a4fb2f Mon Sep 17 00:00:00 2001 From: clsung Date: Wed, 16 Jan 2008 12:42:56 +0000 Subject: SQL::Interp converts a list of intermixed SQL fragments and variable references into a conventional SQL string and list of bind values suitable for passing onto DBI. This simple technique creates database calls that are simpler to create and easier to read, while still giving you full access to custom SQL. SQL::Interp properly binds or escapes variables. This recommended practice safeguards against "SQL injection" attacks. The DBI documentation has several links on the topic. Besides the simple techniques shown above, The SQL-Interpolate distribution includes the optional DBIx::Interp module. WWW: http://search.cpan.org/dist/SQL-Interp/ --- databases/Makefile | 1 + 1 file changed, 1 insertion(+) (limited to 'databases/Makefile') diff --git a/databases/Makefile b/databases/Makefile index 39f506f059ae..4635f06438ad 100644 --- a/databases/Makefile +++ b/databases/Makefile @@ -302,6 +302,7 @@ SUBDIR += p5-Rose-DB-Object SUBDIR += p5-SQL-Abstract SUBDIR += p5-SQL-Abstract-Limit + SUBDIR += p5-SQL-Interp SUBDIR += p5-SQL-ReservedWords SUBDIR += p5-SQL-Statement SUBDIR += p5-SQL-Translator -- cgit