Python, Mysql, insert NULL

Thomas Bartkus thomasbartkus at comcast.net
Thu Oct 6 09:13:05 EDT 2005


"Steve Holden" <steve at holdenweb.com> wrote in message
news:mailman.1588.1128583570.509.python-list at python.org...
> >
> If you don't understand parameterized SQL queries you would do well to
> refrain from offering database advice :-)

Did the poster ask a question about parameterized queries or server
security?

> Presumably you always check whether StrToConcatenateIntoSqlStatement
> contains no apostrophes before you actually construct the SQL?
>
> Can we say "SQL injection exploit"?

Not every query passes along public internet wires and all the guy asked for
was how to insert a Null.

But - I really do appreciate your concern :-)
Thomas Bartkus






More information about the Python-list mailing list