18 Jun
2013
18 Jun
'13
2:13 p.m.
Supun Nakandala a écrit :
Hi devs, I am refactoring sql.php and I realized in line 389 of file the check for a call to a stored procedure is done by using regexp. I would like to know is it ok to keep it like that or is there any better approach to handle that.
Regards Supun.
Hi Supun, the better approach is to move this test to the SQL analyzer, like you did a few days ago for other cases.
Using preg_match() can lead to mistake (for example, a SQL comment located in the query and containing the word "call").
--
Marc Delisle
http://infomarc.info