mardi 1 mars 2016

cordova-sqlite-porter importSqlToDb sql injection

I use the sqlite-porter with importSqlToDb(). But now I have problem with single quota or with back slash in the string. Is there a solution for that?

Becouse I have to write the sql query like this : "INSERT INTO Artist(Id,Title) VALUES ('1','Fred's ball \ shoe');"; and can not use parameter.

Thanks in advance

Aucun commentaire:

Enregistrer un commentaire