From: Nathan Day <nathan_day@...>
Date: 2008-06-05T14:47:13+09:00
Subject: bind variables

I am extremely new to Ruby, my company is in the process of evaluating  
it for a large new report system and administration system. One  
concern with Ruby is the use  of bind variables, we need to use bind  
variables for performance concerns, I am sure I am getting different  
concepts mixed up. It seems the default SQL library with Ruby on Rails  
does not support bind variables, there does seem to be at least one  
other SQL library for SQL Sequel, which can  perform parameterized  
queries, is this true bind variables or are they just turning into a  
string underneath for us, the fact that it is documented as to  
protection against SQL injection. Seems to suggest it is true bind  
variable.

Another feature which is not critical but would be nice, I haven't  
been able to find information about this for Sequel, but sqlite-ruby  
has this though is of no use to use since we need to support oracle,  
postsql initially and more latter on.