Re: [Boost-users] Library Interface Design

From: loufoque (mathias.gaunard_at_[hidden])
Date: 2006-09-12 14:31:26

Paul Davis wrote :

> 
> id = "2 ; delete from persons ;" 
> 
>     sql << "select first_name, last_name, date_of_birth "
>             "from persons where id = " << id
> 
> 
> Someone just deleted your persons table.  Oops.

In my example sql was supposed to be a special stream type overloaded to 
escape types correctly. I thought SOCI worked that way, but in fact it 
seems it is not the case.

You could do this, though

std::string name;
sql << "select phone from phonebook where name = :name",
     use(name);