From mboxrd@z Thu Jan  1 00:00:00 1970
X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on polar.synack.me
X-Spam-Level: 
X-Spam-Status: No, score=-0.3 required=5.0 tests=BAYES_00,
	REPLYTO_WITHOUT_TO_CC autolearn=no autolearn_force=no version=3.4.4
Path: 
 eternal-september.org!reader01.eternal-september.org!reader02.eternal-september.org!news.eternal-september.org!mx02.eternal-september.org!feeder.eternal-september.org!aioe.org!.POSTED!not-for-mail
From: "Dmitry A. Kazakov" <mailbox@dmitry-kazakov.de>
Newsgroups: comp.lang.ada
Subject: Re: Weakness of Ada is expensive / security / etc. ? Anything else?
Date: Wed, 22 Jul 2015 12:31:12 +0200
Organization: cbb software GmbH
Message-ID: <9pqdzj14r0o9$.1rcqwmok1hb5v.dlg@40tude.net>
References: <1npnbotrqohbb$.cj0by0oyo31r$.dlg@40tude.net>
 <momffm$9l9$1@dont-email.me> <1gd0gija14183.15myz6cud3dc9.dlg@40tude.net>
 <monf7m$s2h$1@dont-email.me> <1hnmt53q1lopg$.6mgo90i4enn7$.dlg@40tude.net>
 <monq7n$594$1@dont-email.me>
Reply-To: mailbox@dmitry-kazakov.de
NNTP-Posting-Host: 5ZS5s7Q3rAN7MBP/UXLPIQ.user.speranza.aioe.org
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Complaints-To: abuse@aioe.org
User-Agent: 40tude_Dialog/2.0.15.1
X-Notice: Filtered by postfilter v. 0.8.2
Xref: news.eternal-september.org comp.lang.ada:26972
Date: 2015-07-22T12:31:12+02:00
List-Id: <comp.lang.ada>

On Wed, 22 Jul 2015 12:12:33 +0200, G.B. wrote:

> On 22.07.15 09:37, Dmitry A. Kazakov wrote:
>> On Wed, 22 Jul 2015 09:04:57 +0200, Georg Bauhaus wrote:
>>
>>> On 22.07.15 08:13, Dmitry A. Kazakov wrote:
>>>> On Tue, 21 Jul 2015 22:01:26 +0000 (UTC), Georg Bauhaus wrote:
>>>>
>>>>> "Dmitry A. Kazakov" <mailbox@dmitry-kazakov.de> wrote:
>>>>>
>>>>>> ODBC does the job. There is no serious
>>>>>> reasons to use DB-specific bindings.
>>>>> try quoting a name portably.
>>>> Never use literals, always bind variables.
>>>>
>>> Can you portably use ODBC like this:
>>>
>>>     SELECT ... FROM ? WHERE ...
>>>
>>> instead of:
>>>
>>>     SELECT ... FROM "T" WHERE ...
>>>     SELECT ... FROM `T` WHERE ...
>>>     SELECT ... FROM [T] WHERE ...
>>
>> Yes.
> 
> Interesting.
> 
> As I, and many others, tend to see syntax errors or other
> errors when a statement having ? in a place of a table's
> name is sent via ODBC, I'm sure many would like to see how.

Ah, you meant table names? I see.

Well, that is not a literal, it is an identifier. Binding does not work for
them. And you want too much from SQL. SQL is a very low-level language
where tables are not objects and have no type (to have common operations
where a table could be a parameter)

-- 
Regards,
Dmitry A. Kazakov
http://www.dmitry-kazakov.de