passing string in a query to MySQL database in MATLAB -
i using mysql matlab, , want name user, , pass table in mysql, rejecting variable name in place of string
var_name=input('enter name:'); mysql('insert table (name) values (var_name)'); any suggestions?
i believe problem having same 1 in this other question. sounds want create command string contains ' delimited string, require escape each ' ' when create command string (note first example in this string handling documentation). note may want use 's' option input function:
var_name = input('enter name: ','s'); %# treats input string commandstring = sprintf('insert table (name) values (''%s'')', var_name); %# note 2 apostrophes --^ mysql(commandstring); if enter ken input, string commandstring contain following:
insert table (name) values ('ken') and of course, others have mentioned, beware injection vulnerabilities.
Comments
Post a Comment