[Zope-DB] Dynamically generate sql-query in ZSQL Method
Ian Bicking
ianb at colorstudy.com
Tue Apr 6 15:58:58 EDT 2004
hawelek_tlen wrote:
> Hi,
> I'm beginner in Zope,
> I want to generate dynamically sql-query in ZSQL Method,
> exactly i want to give whole sql-query like parameter to ZSQL Method for
> example in DTML Method,
I think you want a Z SQL method (we'll call it raw_sql) with a body like:
<dtml-var sql>
Then you call raw_sql(sql='select * from person'). That's all there is
to it! (Of course if you use this, be cautious of SQL injection
security holes)
Ian
More information about the Zope-DB
mailing list