[ILUG] php

[Kenn Humborg]

> Kenn Humborg wrote:
> >>Moreover... I'm still not seeing a huge advantage in using automagic ADO
> >>parameters... at all really.
> >>
> >>Perhaps you could give some more examples ?
> >
> >
> > Maybe I want to allow strings in fields to contain "special"
> > chars like '"; without having to worry about quoting rules.
>
> Uh huh.
>
> http://phplens.com/lens/adodb/docs-adodb.htm
>
> I haven't used this ... so... I can't comment on whether it's
> good/bad/indifferent.

I'll take a look at some point.

> > See that line above with the single period?  That's the marker for
> > end of body text in SMTP.  Yet I can still include it in an email
> > and it gets through unmodified.
> >
>
> Uh huh, but, I strongly suspect your mail client did something
> did such that
>
> .
>
> Didn't terminate the SMTP session...

Yes - it sent it as CR LF . . CR LF.

> Thus if you could 'inject' CRLF.CRLF into your mail client's Data
> payload that *would* break the SMTP session

Yes.  But my point is that my mail reader knows do to that.  Similarly,
the data access layer should know about quoting rules, not the
application layer.  Because they are different in different databases.
Unfortunately.

> Aside from the php ADO layer, which I can't and won't comment on since,
> I've no experience of it... solutions like the following
>
> http://www.webmasterstop.com/63.html
>
> Don't seem to be a "Turning test" level difficulty in a non ADO world.

And that is MySQL-specific.

But the upshot of all this seems to be that best practice in PHP seems to be
manual insertion of arguments in SQL queries.

I personally don't think that's a good idea, but I don't write PHP
code for a living, so I'm not going to get into a long discussion
about it.

Later,
Kenn