ra.util.sql

Class EscapeString

java.lang.Object

ra.util.sql.EscapeString

public class EscapeString
extends java.lang.Object

Ray Li(modified)

Mysql util.

Author:

Ralph Ritoch rritoch@gmail.com copyright Ralph Ritoch 2011 ALL RIGHTS RESERVED http://www.vnetpublishing.com

Constructor Summary

Constructors

Constructor and Description
EscapeString()

Method Summary

Modifier and Type	Method and Description
static java.lang.String	mysqlRealEscapeString(java.lang.String str) Escape string to protected against SQL Injection
static java.lang.String	nameQuote(java.lang.String str) Escape identifier to protected against SQL Injection.
static java.lang.String	quote(java.lang.String str) Escape data to protected against SQL Injection.

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

EscapeString

public EscapeString()

Method Detail

mysqlRealEscapeString

public static java.lang.String mysqlRealEscapeString(java.lang.String str)

Escape string to protected against SQL Injection

You must add a single quote ' around the result of this function for data, or a backtick ` around table and row identifiers. If this function returns null than the result should be changed to "NULL" without any quote or backtick.

Parameters:

str - Waiting to protect against SQL Injection`s String

Returns:

finished to protect against SQL Injection`s String

quote

public static java.lang.String quote(java.lang.String str)
                              throws java.lang.Exception

Escape data to protected against SQL Injection.

Parameters:

str - Waiting to protect against SQL Injection`s String

Returns:

finished to protect against SQL Injection`s String

Throws:

java.lang.Exception - Exception

nameQuote

public static java.lang.String nameQuote(java.lang.String str)
                                  throws java.lang.Exception

Escape identifier to protected against SQL Injection.

Parameters:

str - Waiting to protect against SQL Injection`s String

Returns:

finished to protect against SQL Injection`s String

Throws:

java.lang.Exception - .