Return-Path: 
 <taglibs-dev-return-3796-qmlist-jakarta-archive-taglibs-dev=jakarta.apache.org@jakarta.apache.org>
Delivered-To: apmail-jakarta-taglibs-dev-archive@apache.org
Received: (qmail 79140 invoked from network); 14 Jan 2002 21:17:00 -0000
Received: from unknown (HELO nagoya.betaversion.org) (192.18.49.131)
  by daedalus.apache.org with SMTP; 14 Jan 2002 21:17:00 -0000
Received: (qmail 4522 invoked by uid 97); 14 Jan 2002 21:17:01 -0000
Delivered-To: qmlist-jakarta-archive-taglibs-dev@jakarta.apache.org
Received: (qmail 4483 invoked by uid 97); 14 Jan 2002 21:16:59 -0000
Mailing-List: contact taglibs-dev-help@jakarta.apache.org; run by ezmlm
Precedence: bulk
List-Unsubscribe: <mailto:taglibs-dev-unsubscribe@jakarta.apache.org>
List-Subscribe: <mailto:taglibs-dev-subscribe@jakarta.apache.org>
List-Help: <mailto:taglibs-dev-help@jakarta.apache.org>
List-Post: <mailto:taglibs-dev@jakarta.apache.org>
List-Id: "Tag Libraries Developers List" <taglibs-dev.jakarta.apache.org>
Reply-To: "Tag Libraries Developers List" <taglibs-dev@jakarta.apache.org>
Delivered-To: mailing list taglibs-dev@jakarta.apache.org
Received: (qmail 16623 invoked from network); 14 Jan 2002 18:47:43 -0000
Message-ID: <002601c19d2b$e563ebd0$0c01a8c0@smithfamily.dk>
From: =?iso-8859-1?Q?Bj=F8rn_Bouet_Smith?= <bbs@bsw.dk>
To: <taglibs-dev@jakarta.apache.org>
Subject: possible bug in DBTags
Date: Mon, 14 Jan 2002 19:47:20 +0100
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
Disposition-Notification-To: =?iso-8859-1?Q?Bj=F8rn_Bouet_Smith?= <bbs@bsw.dk>
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Rating: daedalus.apache.org 1.6.2 0/1000/N
X-Spam-Rating: daedalus.apache.org 1.6.2 0/1000/N

Hi there,

Today I was trying to insert the following into my mySQL database via JSP
and the DBTags.

<P class='articletitle'> \

This made my JSP trash with an SQL exception:

javax.servlet.ServletException: java.sql.SQLException: Syntax error or
access violation: You have an error in your SQL syntax near '/P>'
	where urlid=23' at line 7
	at org.apache.jasper.runtime.PageContextImpl.handlePageException(Unknown
Source)
	at savechangedstarturl_2._jspService(savechangedstarturl_2.java:1064)
	at org.apache.jasper.runtime.HttpJspBase.service(Unknown Source)
	at javax.servlet.http.HttpServlet.service(HttpServlet.java)
	at org.apache.tomcat.facade.ServletHandler.doService(Unknown Source)
	at org.apache.tomcat.core.Handler.invoke(Unknown Source)
	at org.apache.tomcat.core.Handler.service(Unknown Source)
	at org.apache.tomcat.facade.ServletHandler.service(Unknown Source)
	at org.apache.tomcat.core.ContextManager.internalService(Unknown Source)
	at org.apache.tomcat.core.ContextManager.service(Unknown Source)
	at
org.apache.tomcat.modules.server.Ajp12Interceptor.processConnection(Unknown
Source)
	at org.apache.tomcat.util.net.TcpWorkerThread.runIt(Unknown Source)
	at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(Unknown
Source)
	at java.lang.Thread.run(Thread.java:484)
Root cause:
javax.servlet.jsp.JspTagException: java.sql.SQLException: Syntax error or
access violation: You have an error in your SQL syntax near '/P>'
	where urlid=23' at line 7
	at
org.apache.taglibs.jdbc.statement.ExecuteTag.doEndTag(ExecuteTag.java:111)
	at savechangedstarturl_2._jspService(savechangedstarturl_2.java:973)
	at org.apache.jasper.runtime.HttpJspBase.service(Unknown Source)
	at javax.servlet.http.HttpServlet.service(HttpServlet.java)
	at org.apache.tomcat.facade.ServletHandler.doService(Unknown Source)
	at org.apache.tomcat.core.Handler.invoke(Unknown Source)
	at org.apache.tomcat.core.Handler.service(Unknown Source)
	at org.apache.tomcat.facade.ServletHandler.service(Unknown Source)
	at org.apache.tomcat.core.ContextManager.internalService(Unknown Source)
	at org.apache.tomcat.core.ContextManager.service(Unknown Source)
	at
org.apache.tomcat.modules.server.Ajp12Interceptor.processConnection(Unknown
Source)
	at org.apache.tomcat.util.net.TcpWorkerThread.runIt(Unknown Source)
	at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(Unknown
Source)
	at java.lang.Thread.run(Thread.java:484)

It seems like the DBTags dont escape \, as it escapes single quotes.
Is this a bug, or is it supposed to be like that?

Best  regards.
Bjorn Smith



--
To unsubscribe, e-mail:   <mailto:taglibs-dev-unsubscribe@jakarta.apache.org>
For additional commands, e-mail: <mailto:taglibs-dev-help@jakarta.apache.org>