From: Doug Al <douga@...>
Date: 2011-02-24T09:21:00+09:00
Subject: Using CGI params with a MYSQL query

I am feeding CGI params to my program for testing purposes from the
keyboard, then using this value to build a MYSQL query.  The value is
coming in correctly, however, it seems to be stored in such a way that I
cannot use it in my query.

I have been searching an explanation of how the CGI params are stored
and work, but no luck.

The problem I am having is when using #{myparamvariable}, the MYSQL
query fails it seems because the query is seeing [" "] (brackets) around
the variable.

I am grabbing the CGI param as follows:

myparamvariable=params['mycgiparam']

my query is as follows:

result= dbh.query ("
SELECT *
FROM mytable
WHERE myfield= #{myparamvariable}
")

How can I use this param variable in my query?


Thanks

-- 
Posted via http://www.ruby-forum.com/.