Bear Bibeault wrote:What prevents you from using a PreparedStatement?
Hi Bear,
My problem with prepared statement is the Where clause is so variable it can match of any number of fields depending on the user's request lots of ands and ors, some numeric comparisons and some likes. I suppose an alternative is to build the statement template but even that's not straight forward because fields can be strings, ints, floats, and soon timestamps.
I tried simplifying the process but the users revolted and said a 10+ sec query that is easy for them to construct is better than making the request harder to specify.
If I can quote the strings the algorithm works but all these unquoted strings make me really, really nervous.
Joe