Re: Re: cvs: php-src /ext/pdo pdo_sql_parser.c pdo_sql_parser.re /ext/pdo/tests bug_43130.phpt
| From: | Lukas Kahwe Smith | Date: | Wed, 31 Oct 2007 22:08:45 +0000 |
| Subject: | Re: Re: cvs: php-src /ext/pdo pdo_sql_parser.c pdo_sql_parser.re /ext/pdo/tests bug_43130.phpt | ||
| References: | 1 2 | Groups: | php.cvs |
| Request: | Send a blank email to php-cvs+get-46847@lists.php.net to get a copy of this message | ||
On 30.10.2007, at 12:00, Johannes Schlüter wrote:
Ilia, I don't think this is right. SQL operators shouldn't be part of a parameter name imo.I talked to Christopher Jones (of Oracle fame) and Lorenzo (MDB2 maintainer). Its clear that the only named parameter supporting database I know does not support dash inside named parameters. Its also dangerous since it means that whitespace typos could have serious hard to spot issues. I think a safe regexp for bound parameters would look something like: /^[a-z0-9][a-z0-9_]{0,30}$/ regards, Lukas