Open Bug 483318 Opened 11 years ago Updated 3 years ago
IStorage Statement Params doesn't let you bind an array
And we really should be able to bind an array of ints, which is how we return binary blobs anyway.
bindBlobParameter() works fine, but i notice it's deprecated..
(In reply to comment #1) > bindBlobParameter() works fine, but i notice it's deprecated.. bindBlobByName or bindBlobByIndex have replaced it.
We could use https://www.sqlite.org/carray.html but we should be careful, the provided query should never allow an user provided argument, we should only support it through Storage API. Note: I'm not sure which part of the carray syntax, if any, can be bound, I'm assuming its arguments can, so the idea currently is: parse queries for "carray" and throw if the any of its 2 arguments is not bound. Sqlite.jsm may also allow something like "IN :myarray" or "IN ?" and just do a string replacement internally, while cpp API may only support a straight carray(?,?) or carray(:myarray, :mylen).
You need to log in before you can comment on or make changes to this bug.