Parameterized Queries - MySQL

re: Parameterized Queries - MySQL

Erik — Thu, 10 Jun 2004 11:29:00 GMT

Thank you! Thank you! Thank you!

Coming from SQL Server and Oracle, I was so used to using named parameters that I totally forgot the questionmark approach. This being my first MySQL project, I was about to knock my head through the wall wondering why that database wasn't accepting my update statements.. as you pointed out, inject dynamic SQL is dangerous and not done.

Like the others I just assume that MySQL supported named parameters... doh!

re: Parameterized Queries - MySQL

anonymous thanks — Wed, 12 May 2004 19:13:00 GMT

Thank you so much for posting this (and thank the lord for google for helping me find this post). I was banging my head against the wall with this same issue and being new to MySql I hadn't realized it didn't support paramertized queries. Thanks!

re: Parameterized Queries - MySQL

Peter Lindeman — Wed, 12 May 2004 14:07:00 GMT

Thanks Chris, I will have to give it a shot. Not sure I am going to be able to figure out how to get it to work, but I will try.

re: Parameterized Queries - MySQL

Chris Turchin — Sun, 09 May 2004 21:03:00 GMT

I think Carlos G.A's managed firebird provider for .NET supports named parameters with the @-prefix, e.g. "select * from tbl_Name where id = @id" All the info is available here: http://www.go-mono.com/firebird.html

re: Parameterized Queries - MySQL

Peter Lindeman — Wed, 05 May 2004 23:18:00 GMT

I am having the same problems with interbase/firbird. I tried the ? marks and that did work. Does anyone know of a similar library for interbase/firebird so I can use named parameters? Thanks

re: Parameterized Queries - MySQL

heh — Sun, 11 Apr 2004 07:42:00 GMT

yes, it's really stupid mistake :)

re: Parameterized Queries - MySQL

drazic19 — Tue, 06 Apr 2004 14:48:00 GMT

glad to know my asp.net thread was of use to someone else as well as me.

drazic19

re: Parameterized Queries - MySQL

David Cumps — Mon, 05 Apr 2004 09:25:00 GMT

Good alternative, I thought of using it as well, but it will be in the next project :)

For others wanting it:
http://www.mysql.com/downloads/api-dotnet.html
MySQLDriverCS & ByteFX.Data

re: Parameterized Queries - MySQL

Ryan Gregg — Mon, 05 Apr 2004 03:07:00 GMT

You should look into using the ByteFX MySQL library. It's a native MySQL interface for .NET, so you don't have to use ODBC or ODBC drivers. It also supports name parameters, which could certainly make the code easier to understand and update.

Just a thought! I've been using the library for a project I've been working on, and it's worked great.

re: Parameterized Queries - MySQL

Bertg — Sun, 04 Apr 2004 23:38:00 GMT

noted into memory :p

small bug are hard to find :p