ibatis-user-java mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Warren <war...@clarksnutrition.com>
Subject Re: table name and quotes:
Date Thu, 14 Jun 2007 22:30:28 GMT
Thanks

Brandon Goodin wrote:
> you would need to use the literal notation of $tablename$. Caution, it 
> opens you to the possibility of of SQL injection.
> 
> Brandon
> 
> On 6/14/07, *Warren* <warren@clarksnutrition.com 
> <mailto:warren@clarksnutrition.com>> wrote:
> 
>     I am using the copy command of postgres and have an sql map like this:
> 
>        <statement id="importTextFile" parameterClass="java.util.Map">
>          COPY sometable FROM #filename#
>        </statement>
> 
>     I would like to use something like this:
> 
>        <statement id="importTextFile" parameterClass="java.util.Map">
>          COPY #tablename# FROM #filename#
>        </statement>
> 
>     The sql map at the top works, but the one below it does not. It
>     constructs the statement as:
> 
>          COPY 'sometable' FROM 'somefile'
> 
>     I need the quotes removed around the table name.
> 
>     -- 
>     Thanks,
> 
>     Warren
> 
> 


-- 
Thanks,

Warren Bell
Systems Administrator
Clark's Nutritional Centers
4225 Market St.
Riverside, CA 92501
951-321-1960 ext. 142
909-645-8864 mobile

Mime
View raw message