SQL query with Ruby and backslash

Question

I have this query

  db.query("
  UPDATE tm
  SET DESCRIPTION = 'SQL Injection (CALL \'C_DB_FUNCTION\')'
  WHERE DESCRIPTION = 'SQL Injection (CALL \'C DB FUNCTION\')';
  ")

This query is working on the DB, but when I tried to run it via ruby with mysql2 gem, I got the below error,

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'C_DB_FUNCTION')' (Mysql2::Error)

I guess its because the backslash,

How I can escape it or fix it ?

Thanks!

db.query(" UPDATE tm SET DESCRIPTION = 'SQL Injection (CALL \\'C_DB_FUNCTION\\')' WHERE DESCRIPTION = 'SQL Injection (CALL \\'C DB FUNCTION\\')'; ") — dinesh
– dinesh, Commented Sep 28, 2016 at 11:26
@dinesh thanks ! write it as an answer and I will mark it as the correct answer for this issue. — Berlin
– Berlin, Commented Sep 28, 2016 at 11:29

dinesh · Accepted Answer · 2016-09-28 11:31:56Z

3

Special Character Escape Sequences please find the http://dev.mysql.com/doc/refman/5.7/en/string-literals.html#character-escape-sequences

db.query(" UPDATE tm SET DESCRIPTION = 'SQL Injection (CALL \\'C_DB_FUNCTION\\')' WHERE DESCRIPTION = 'SQL Injection (CALL \\'C DB FUNCTION\\')'; ")

answered Sep 28, 2016 at 11:31

dinesh

1812 silver badges13 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

SQL query with Ruby and backslash

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related