SQLite Parameters – Not allowing tablename as parameter

by

Generally one cannot use SQL parameters/placeholders for database identifiers (tables, columns, views, schemas, etc.) or database functions (e.g., CURRENT_DATE), but instead only for binding literal values.

With server-side support for parameterized (a.k.a. prepared) statements, the DB engine parses your query once, remembering out the peculiars of any parameters — their types, max lengths, precisions, etc. — that you will bind in subsequent executions of the already-parsed query. But the query cannot be properly parsed into its syntactic elements if critical bits, like database objects, are unknown.

So, one generally has to substitute table names oneself, in a stored procedure or in client code which dynamically concats/interpolates/whatevers the SQL statement to be properly executed. In any case, please remember to use your SQL API’s function for quoting database identifiers, since the API won’t do it for you.

More Related Contents:

  1. How to pass “Null” (a real surname!) to a SOAP web service in ActionScript 3
  2. Flex MVC Frameworks [closed]
  3. Flex 3 – how to support HTTP Authentication URLRequest?
  4. How to deal with Number precision in Actionscript?
  5. How to catch all exceptions in Flex?
  6. Force Garbage Collection in AS3?
  7. Adobe AIR to execute program
  8. How can I get an instance’s “memory location” in ActionScript?
  9. Flex’s FileReference.save() can only be called in a user event handler — how can I get around this?
  10. Setting background color for datagrid row in Adobe Flex
  11. In sqlite I would do, But how in mongodb c#
  12. Android Database Transaction
  13. Best place to close database connection
  14. How to split comma-separated value in SQLite?
  15. How to get the total number of rows of a GROUP BY query?
  16. Can SQLite support multiple users?
  17. Python CSV to SQLite
  18. How to retrieve data from sqlite database in android and display it in TextView
  19. Export from sqlite to csv using shell script
  20. Android: column ‘_id’ does not exist
  21. Problems using Entity Framework 6 and SQLite
  22. GroupingError: ERROR: column must appear in the GROUP BY clause or be used in an aggregate function
  23. SQLite simultaneous reading and writing
  24. SQLiteDatabase close() function causing NullPointerException when multiple threads
  25. Android SQLite rawquery parameters
  26. how to get rowNum like column in sqlite IPHONE
  27. How to store JSON object in SQLite database
  28. What are the max number of allowable parameters per database provider type?
  29. UPSERT *not* INSERT or REPLACE
  30. Drop column from SQLite table

Leave a Comment