Mailing-List: contact user-java-help@ibatis.apache.org; run by ezmlm
Precedence: bulk
Reply-To: user-java@ibatis.apache.org
Received-SPF: pass (athena.apache.org: domain of larry.meadors@gmail.com
 designates 66.249.92.173 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=beta;
        h=received:message-id:date:from:reply-to:sender:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references:x-google-sender-auth;
        b=f5a6bMSmXNjVwnBH8db/iSoVV7Y8atpdfyB9JvRZqtQBI/YfxGudROlVw7gnwYXuYqB4YXbnAj9euD+ucqWq+llBMvagDNwthPLkz7Iq2SRptgWS4x/UAzfOjV9AZBNN1hVtE8oJfz6WUs77+Dmq28Lr/pOxi3xUhyKw3TfOASg=
Message-ID: <a10a823c0711021041q7ce353d8w6e0ff6ea811b38a@mail.gmail.com>
Date: Fri, 2 Nov 2007 11:41:19 -0600
From: "Larry Meadors" <lmeadors@apache.org>
Reply-To: lmeadors@apache.org
Sender: larry.meadors@gmail.com
To: user-java@ibatis.apache.org
Subject: Re: HowTo add parameter to part of regex in select
In-Reply-To: <472B5D35.3010701@gmx.de>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
References: <472B5D35.3010701@gmx.de>

You could to this:

SELECT *
FROM table
WHERE REGEXP_LIKE (id, '^($id$)\-[0]{4}[0-9][0-9][A-Z][0-9]{2}[A-Z]$$')

Doing this will open you up to SQL injection, so if id =3D " ');drop
table some_important_data; --", you'll be pissed.

I'd build the regex in java code and pass it in that way.

Larry


On 11/2/07, Heinrich G=F6tzger <goetzger@gmx.de> wrote:
> Hi,
>
> is there a possibility to get following to run with iBATIS?
>
> SELECT * FROM table WHERE
>         REGEXP_LIKE (id, '^(#id#)\-[0]{4}[0-9][0-9][A-Z][0-9]{2}[A-Z]$')
>
> (remark: this is not working)
>
> or would I need to prepare the regexp in the java-part and use it like:
>
> SELECT * FROM table WHERE
>         REGEXP_LIKE (id, #id#)
>
> (remark: this is working)
>
> Or in other words: can i get iBATIS to only get part of the regex passed
> and add it to the rest of an existing expression or would I need to
> build the complete expression in Java and pass it as a regular
> (string-)parameter to iBATIS-Layer?
>
> Thanks, cheers
>
> Heinrich
>