Re: Correct escaping of untrusted data

> Is the 7.4.x multibyte support bombproof? How would we avoid problems
> like this:
> http://groups.google.com/groups?hl=en&lr=&ie=UTF-8&c2coff=1&safe=off&edition=us&selm=20020502171830J.t-ishii%40sra.co.jp

Well, maybe using UTF-8 encoding would fix this ?

> update tablea set data=3-? where a=1;

Add parentheses :

> update tablea set data=3-(?) where a=1;

Or do it in your program... but you can't do this if you have a db field
or function instead of the 3.