----- Forwarded message from "LAWS, MICHAEL H" <ml340k@att.com> -----
Date: Tue, 16 Aug 2016 21:04:20 +0000
From: "LAWS, MICHAEL H" <ml340k@att.com>
To: "timb@cpan.org" <timb@cpan.org>
Subject: DBD::Oracle quote_identifier
Hello,
I was using quote_identifier for table names on an oracle database.
My code uses DBI, which implements the specifics in this case via DBD::Oracle.
It appears to be using backticks which oracle throws an error when it sees an invalid character.
Substituting all instances of backtick with the double quote, from oracle documentation,
Causes it to work and is hopefully still more secure than not using quote functions at all.
Am I missing something or would this be an open or previously closed issue?
Thanks,
Michael Laws
----- End forwarded message -----
Date: Tue, 16 Aug 2016 21:04:20 +0000
From: "LAWS, MICHAEL H" <ml340k@att.com>
To: "timb@cpan.org" <timb@cpan.org>
Subject: DBD::Oracle quote_identifier
Hello,
I was using quote_identifier for table names on an oracle database.
My code uses DBI, which implements the specifics in this case via DBD::Oracle.
It appears to be using backticks which oracle throws an error when it sees an invalid character.
Substituting all instances of backtick with the double quote, from oracle documentation,
Causes it to work and is hopefully still more secure than not using quote functions at all.
Am I missing something or would this be an open or previously closed issue?
Thanks,
Michael Laws
----- End forwarded message -----