Mailing-List: contact user-help@cayenne.apache.org; run by ezmlm
Precedence: bulk
Reply-To: user@cayenne.apache.org
Received-SPF: pass (nike.apache.org: domain of apparition077@gmail.com
 designates 209.85.161.43 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=mime-version:sender:in-reply-to:references:date
         :x-google-sender-auth:message-id:subject:from:to:content-type
         :content-transfer-encoding;
        b=wR5tRpOkl6oXTRcXPof3iUrohOnjncw04yORevKlv8DwzNgr/sFkjqL9+D49gNnux2
         N8xdDxAW9mEQwfPtgRp7PAy3VZZPm5AFiDMKs2joeAbrIV99kKAD6Cup7DTUL3/VpBaJ
         xVEZYUk44W1IV7zau0mmrC+hJmu0N4T+tnGdw=
MIME-Version: 1.0
Sender: apparition077@gmail.com
In-Reply-To: <4C64756E.6030506@smaeur.com>
References: <4C64756E.6030506@smaeur.com>
Date: Fri, 13 Aug 2010 13:12:01 +0400
Message-ID: <AANLkTikper-BXiOew3xfnw_PJ5D_VaMkyHVWUcREr_p0@mail.gmail.com>
Subject: Re: Velocity parsing error with "##"
From: Evgeny Ryabitskiy <evgeny.ryabitskiy@gmail.com>
To: user@cayenne.apache.org
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

I suggest you could use #bind directive here.

SELECT COUNT(JOBNAME) AS RESULT FROM JMASTER WHERE SKDID =3D 67 AND
UPPER(JOBNAME) =3D #bind($JOB_PARAM)

So if you pass TEST## in JOB_PARAM it will be handled via JDBC as
String (not by Velocity), so it will be prepared statement.

Also it will protect your application from any SQL-Injection in this
param and it's usually faster to user prepared statements (depends
from DBMS type).

Evgeny.


2010/8/13 Laurent Marchal <lmarchal@smaeur.eu>:
> =A0Hi all,
>
> =A0 =A0After months of using Cayenne 3.0 (which is awesome BTW) I just
> discovered that when I put two "##" in some of my object names in databas=
e
> and then I use some SQLTemplate I have a Velocity error. It seems that
> Velocity does not like ## because it's detected as a bad directive. I loo=
ked
> in the Velocity documentation but to me =A0it's supposed to ignore single
> quoted string literals.
> <http://velocity.apache.org/engine/releases/velocity-1.6.4/user-guide.htm=
l#stringliterals>
>
> Caused by: org.apache.cayenne.CayenneRuntimeException: [v.3.0 Apr 26 2010
> 09:59:17] Error parsing template 'SELECT COUNT(JOBNAME) AS RESULT FROM
> JMASTER WHERE SKDID =3D 67 AND UPPER(JOBNAME) =3D 'TEST##'' : Lexical err=
or:
> org.apache.velocity.runtime.parser.TokenMgrError: Lexical error at line 1=
,
> column 92. =A0Encountered: <EOF> after : ""
> =A0 =A0at
> org.apache.cayenne.access.jdbc.SQLTemplateProcessor.buildStatement(SQLTem=
plateProcessor.java:149)
> =A0 =A0at
> org.apache.cayenne.access.jdbc.SQLTemplateProcessor.processTemplate(SQLTe=
mplateProcessor.java:122)
> =A0 =A0at
> org.apache.cayenne.access.jdbc.SQLTemplateAction.performAction(SQLTemplat=
eAction.java:125)
> =A0 =A0at
> org.apache.cayenne.access.DataNodeQueryAction.runQuery(DataNodeQueryActio=
n.java:87)
> =A0 =A0at org.apache.cayenne.access.DataNode.performQueries(DataNode.java=
:269)
>
> Do you have any advices to make Velocity ignore parsing these names ?
>
> Thanks.
>
>
>
>
>