Escape characters for SQL

Help me out here! i'm having a problem updating our database with this call:
update table
set name = 'dave's store'
where id = '2';
The problem of course is that single quote in the name. i've check many sites and have tired everything.
-i have tried to escape the quote with a back (and forward!) slash, and nothing.
-i have padded the quote with another single quite (ie ''), but that doesn't work.
-i have have nearly all combinations of single and double quotes, with and without escape characters!
according to the documention, just the blackslash so be fine! any one have this problem as well?
any help would be greatly appreciated! thanks.

Very related question.
Is there a way to make sure that all 'weird' characters in an SQL statement are escaped properly before the statement is executed?
I'm hoping that there is a method like this:
Statement stmt = stmt.escapeAllBadChars();
Is there such a method anywhere?
I can't find it anywhere :(
If not, is there a list of all 'bad characters' anywhere?
Thanks,
Otis
null

Similar Messages

Setting escape characters for a MySQL insertion

Hello all. I'm trying to format an incoming string with escaped characters so I can insert them into a mysql database... a quick rundown would be
' replaced with \'
" replaced with \"
escaping newline characters with the literal text "\n" (without quotes)
escaping arriage return characters with the literal text "\r" (without quotes)
for some reason it's not working out. Here's the method I made to handle it:
public static String mysqlEncode(String stringToEncode) {
    String returnString = stringToEncode;
    // Replace " with \"
    if (returnString.matches("\\\"")) returnString = returnString.replaceAll("\\\"", "\\\"");
    // Replace ' with \'
    if (returnString.matches("'")) returnString = returnString.replaceAll("'", "\\'");
    // Replace \ with \\
    if (returnString.matches("\\\\")) returnString = returnString.replaceAll("\\\\", "\\\\");
    // Replace newlines with \n
    if (returnString.matches("\\n")) returnString = returnString.replaceAll("\\n", "\\n");
    // Replace carriage returns with \r
    if (returnString.matches("\\r")) returnString = returnString.replaceAll("\\r", "\\r");
    return returnString;
}and it keeps bombing out , I'm on my 3rd hour at this and it's really starting to irk me...
questions:
are my regular expressions formed correctly?
is that if statement calling the .matches() method necessary?
Thanks so much for your help.

String sql = "SELECT * FROM MyTable WHERE author = ? AND text = ?";
PreparedStatement pstm = connection.prepareStatement(sql);
synchronized(pstm){ // if you're doing multithreading stuff (if single thread..you can ignore the synchronized
    pstm.clearParameters();
    pstm.setString(1, "Anne Rice");    // 1 = the first question mark in the String sql
    pstm.setString(2, "The Vampire Lestat's long fangs");
ResultSet res = pstm.executeQuery();
while (res.next()){
}same thing for INSERT, UPDATE, etc..

Official documents on escaping characters in SQL Server query statements

Hi,
Are there any official documents on how to escaping special characters in SQL Server query statements? I find a lot of online resources discussing about this, but there are no definitive conclusions on:
Which characters should be escaped? (Some only said single-quote needs to be escaped, double-quote does not need. While others said both need to be escaped)
How to escape characters? (Some said using two single-quote to escape a single-quote. Others said using a backslash, etc.)
So I just wonder if there is an official document from Microsoft regarding this?
Thanks
Alan

Depends on where you're using them
If its string values then single quotes(') should be escaped by putting one more single quote before it.
If its LIKE operator you can use ESCAPE keyword or use [] to escapre special characters
see
http://visakhm.blogspot.in/2013/01/wildcard-character-based-pattern-search.html
If inside SSIS expression you can escape characters like \ " etc by adding an extra \ before the characters
Please Mark This As Answer if it helps to solve the issue Visakh ---------------------------- http://visakhm.blogspot.com/ https://www.facebook.com/VmBlogs

Escape code for sql scripts

Hello,
I have a sql script with an insert statement with the character '&' in the values clause, but it always prompts me for a value.
Does exist an escape character for the '&'?
Thanks

Hi,
Add
SET SCAN OFF
in the begining of the SQL script.
Regds,
-Sreeram

Managing escape characters in SQL and Java

Hello All,
How can I manage special characters(ESPECIALLY single quotes) in my select statements?? If I have to query the database for the rows with name O'brain for example, I am writing a query
String SQL = "SELECT Name FROM MyTable where Name like 'O/'brain%' {escape '/'}";
But this is not working for me. I am using Sybase database. Can anyone help me out with this ?? I don't want to use prepared statements.
Thanks & Regards,
Sarada.

This might sort you out:
http://jregex.sourceforge.net/gstarted.html#appendix-d

Escaping characters ( ) [ ] in sql contains

Please, help!
select * from mytable where (contains(BINARY_DATA, '<query-string>' ) > 0)where binary_data is BLOB field (indexed)
And i need to put, such strings for the query to work well : ( ) [    ]
% and _ were succesfully escaped, but i didnt find information on how the parentheses are escaped. Could you please help?
Thanks in advance.

Also, ()[] are not indexed by basic lexer, therefore
where contains(text,'Hello\(World') > 0will match 'Hello ) World', 'Hello[World', etc:
[code]
SQL> drop table test_table
2 /
Table dropped.
SQL> create table test_table (id number,text blob)
2 /
Table created.
SQL> insert into test_table values (1,utl_raw.cast_to_raw ('Hello World'))
2 /
1 row created.
SQL> insert into test_table values (2,utl_raw.cast_to_raw ('Hello(World'))
2 /
1 row created.
SQL> insert into test_table values (3,utl_raw.cast_to_raw ('Hello)World'))
2 /
1 row created.
SQL> insert into test_table values (4,utl_raw.cast_to_raw ('Hello[World'))
2 /
1 row created.
SQL> insert into test_table values (5,utl_raw.cast_to_raw ('Hello]World'))
2 /
1 row created.
SQL> insert into test_table values (6,utl_raw.cast_to_raw ('Hello([World'))
2 /
1 row created.
SQL> insert into test_table values (7,utl_raw.cast_to_raw ('Hello(_World'))
2 /
1 row created.
SQL> create index test_table_idx on test_table (text) indextype is ctxsys.context
2 /
Index created.
SQL> select id from test_table where contains(text,'Hello World') > 0
2 /
ID
1
2
3
4
5
6
7
7 rows selected.
SQL> select id from test_table where contains(text,'Hello$World') > 0
2 /
ID
1
2
3
4
5
6
7
7 rows selected.
SQL> select id from test_table where contains(text,'Hello$World') > 0
2 /
ID
1
2
3
4
5
6
7
7 rows selected.
SQL> select id from test_table where contains(text,'Hello\[World') > 0
2 /
        ID
         1
         2
         3
         4
         5
         6
         7
7 rows selected.
SQL> select id from test_table where contains(text,'Hello\]World') > 0
2 /
ID
1
2
3
4
5
6
7
7 rows selected.
You need to add ()[] as printjoins:
SQL> begin
2    begin
3      ctx_ddl.drop_preference('test_lexer');
4    exception
5      when others then null;
6    end;
7    ctx_ddl.create_preference('test_lexer', 'BASIC_LEXER');
8    ctx_ddl.set_attribute('test_lexer', 'printjoins', '()[]');
9 end;
10 /
PL/SQL procedure successfully completed.
SQL> drop table test_table
2 /
Table dropped.
SQL> create table test_table (id number,text blob)
2 /
Table created.
SQL> insert into test_table values (1,utl_raw.cast_to_raw ('Hello World'))
2 /
1 row created.
SQL> insert into test_table values (2,utl_raw.cast_to_raw ('Hello(World'))
2 /
1 row created.
SQL> insert into test_table values (3,utl_raw.cast_to_raw ('Hello)World'))
2 /
1 row created.
SQL> insert into test_table values (4,utl_raw.cast_to_raw ('Hello[World'))
2 /
1 row created.
SQL> insert into test_table values (5,utl_raw.cast_to_raw ('Hello]World'))
2 /
1 row created.
SQL> insert into test_table values (6,utl_raw.cast_to_raw ('Hello([World'))
2 /
1 row created.
SQL> insert into test_table values (7,utl_raw.cast_to_raw ('Hello(_World'))
2 /
1 row created.
SQL> create index test_table_idx on test_table (text) indextype is ctxsys.context
2 parameters('lexer test_lexer')
3 /
Index created.
SQL> select id from test_table where contains(text,'Hello World') > 0
2 /
        ID
         1
SQL> select id from test_table where contains(text,'Hello$World') > 0
2 /
        ID
         2
SQL> select id from test_table where contains(text,'Hello$World') > 0
2 /
        ID
         3
SQL> select id from test_table where contains(text,'Hello\[World') > 0
2 /
        ID
         4
SQL> select id from test_table where contains(text,'Hello\]World') > 0
2 /
        ID
         5
SQL> SY.

Escape codes for substring and bold????

i am writing a servlet to process a form i made with HTML.
The servlet works with the form data and sends an e-mail.
I use escape characters for returns, tabs and stuff like that. Is there a code to BOLD or SUPERSCRIPT a peice of the output?
THANKS!

The HTML code for bold is <b>bold</b>, if that's what you were asking. And there's <sub> too. If you weren't asking that, what were you asking?

What is escape sequence for * in SQL

I am using oracle 9. When I run a select query with a where clause as
AND UPPER (bnm.name_value_tx) LIKE '*/*%' ESCAPE '\'
I got an exception as
ORA-29902: error in executing ODCIIndexStart() routine ORA-20000: Oracle Text error: DRG-51030: wildcard query expansion resulted in too many terms ]; nested exception is java.sql.SQLException: ORA-29902: error in executing ODCIIndexStart() routine ORA-20000: Oracle Text error: DRG-51030: wildcard query expansion resulted in too many terms
Is there any escape sequence to handle the character * in query? or any other solution to this problem?

If what I understand in my limited knowledge is correct, then u want to search the character * or ** with any character after that as u have used %. But 1st of all, u dont need an escape character for * . Thats only required for _ and % if u use any of it as a search character. So go straight:
AND UPPER (bnm.name_value_tx) LIKE '**%' ....
(if u want to search for ** at the beginning of the field with any characters afterwards.)
Use Escape Characters like:
select first_name,job_id from employees where job_id like 'SA\_%' escape '\'

I need a query that returns the average amount of characters for a text colum in MS SQL.

I need a query that returns the average amount of characters
for a text colum in MS SQL.
Could someone show me how?

Sorted, i need the
DATALENGTH
function

How can I use escaped-characters in an option

I have the following code that is used to retrieve city-names including parent-child relations from a database and place them in an array:
<%@ page contentType="application/x-javascript" %>
<%@ taglib prefix="c" uri="http://java.sun.com/jstl/core" %>
<%@ taglib prefix="sql" uri="http://java.sun.com/jstl/sql" %>
<sql:setDataSource dataSource="jdbc/KADOS" var="Raak" scope="session" />
<sql:query var="bewaringSQL" dataSource="${Raak}">
SELECT bewaringcode, vestigingsplaats FROM BEWARING order by vestigingsplaats
</sql:query>
bewaringen = new Array(
<c:forEach items="${bewaringSQL.rows}" var="plaats" varStatus="s" >
new Array( "<c:out value="${plaats.BEWARINGCODE}" />",
"<c:out value="${plaats.VESTIGINGSPLAATS}" />" )
<c:if test="${not s.last}">,</c:if>
</c:forEach>
i=0;
<c:forEach items="${bewaringSQL.rows}" var="plaats" varStatus="s" >
<sql:query var="bewaringGemSQL" dataSource="${Raak}" sql="SELECT KADGEMCODE, KGMNAAM FROM KADGEMEENTE where BEWARINGCODE=? order by KGMNAAM">
<sql:param value="${plaats.BEWARINGCODE}" />
</sql:query>
tmp = new Array(
<c:forEach items="${bewaringGemSQL.rows}" var="gem" varStatus="s" >
new Array( "<c:out value="${gem.KGMNAAM}" />",
"<c:out value="${gem.KADGEMCODE}" />" )
<c:if test="${not s.last}">,</c:if>
</c:forEach>
bewaringen[2] = tmp;
i = i+1;
</c:forEach>
function bewaringenList(selectCtrl, itemArray) {
for (i=0; i<itemArray.length; i++) {
selectCtrl.options[i] = new Option(itemArray[i][1]);
selectCtrl.options[i].value = itemArray[i][0];
function setList(selectCtrl, itemArray) {
for (i=selectCtrl.options.length; i>=0; i--) {
selectCtrl.options[i] = null;
for (i=0; i<itemArray.length; i++) {
optie = filter(itemArray[i][0]);
selectCtrl.options[i] = new Option(optie);
selectCtrl.options[i].value = itemArray[i][1];
function filter( invoer) {
retour = invoer;
retour = retour.replace("'", "\'");
return retour;
The function 'bewaringenList' populates a <SELECT> with parent-names and
"setList(document.VraagForm.gemSelect, bewaringen[this.selectedIndex][2]);" populates the depending <SELECT> with child-names.
Some names contain single quotes (like "'t Zandt") and are displayd in the select-box as "&#039t Zandt".
I expected that the quotes could be replaced by escape-characters by 'filter(invoer)' but this does not work.
Is there a generic way to show these characters?
Ben

I don't understand why but this filter solved the problem:
function filter( invoer) {
retour = invoer;
retour = retour.replace("'", "'");
return retour;

Escape characters using Oracle JDBC

We use Oracle JDBC driver to do some operations on an Oracle 9i database, and ran into some problems with escape characters. Basically we'd like to escape the _ and % characters.
The following two example statements both work:
ResultSet rs = stmt.executeQuery("select * from identifier_protein where upper(IDENTIFIER_ACCNO) like 'NM\\_%' escape '\\' ");
ResultSet rs = stmt.executeQuery("select * from identifier_protein where upper(IDENTIFIER_ACCNO) like 'NM\\_%' {escape '\\' }");
However, when we have multiple query terms and the "escape" clause doesn't immediately follows EACH "like" clause, we got errors saying the sql statement does not end properly. One such example is the following:
ResultSet rs = stmt.executeQuery("select * from identifier_protein where upper(IDENTIFIER_ACCNO) like 'NM\\_%' and creator = 'ABC' {escape '\\'} ");
If we put an "escape" clause following each "like" clause, then it works.
My question is, is there a smart way of letting JDBC knows that you want to use an escape character everywhere in the query? We often do very complicated dynamic queries, frequently with table joins and boolean logic and subqueries with tons of query terms. Trying to add the escape clause to each "like" clause is very painful. Any help is highly appreciated. Thanks!
BL

I'd use PreparedStatements, if you're not already. Let the JDBC driver escape things properly for you. That's what the setString() and setDate() methods are all about.

What is escape character for for Carriage Return, Line Feed, Form Feed

Hi
I need to a text file which should have following characters
Carriage Return, Line Feed, Form Feed
How do i insert them in a string
i know "\f" is carriage return,
but what are characters for line feed and form feed
Ashish

uncle_alice wrote:
jverd wrote:
remus.dragos wrote:
I forgot that it does not exist in Java. A good thing
from my point of view.Running the following makes my computer beep.
public class Bell {
public static void main(String... args) {
System.out.println("\u0007");
Sure, sending a BEL character to the console rings the bell, but that has nothing to do with Java. Anyway, I think he meant Java doesn't support the \a escape sequence in string and char literals.
>
>
>I forgot that it does not exist in Java. A good thing
from my point of view.
Running the following makes my computer beep.
public class Bell {
public static void main(String... args) {
System.out.println("\u0007");
} Sure, sending a BEL character to the console rings the bell, but that has nothing to do with Java. Anyway, I think he meant Java doesn't support the \a escape sequence in string and char literals.
Ah, I thought he was saying Java doesn't support ringing the bell.

GeoRaptor 3.0 for SQL Developer 3.0 and 2.1 has now been released

Folks,
I am pleased to announce that, after 5 months of development and testing, a new release of GeoRaptor for SQL Developer 2.1 and 3.0 is now available.
GeoRaptor for SQL Developer 3 is available via the SQL Developer Update centre. GeoRaptor 3 for SQL Developer 2.1 is being made available
via a download fro the GeoRaptor website.
No release notes have been compiled as the principal developer (oops, that's me!) is currently busy doing real work for a change (another 3 weeks), earning a living
and keeping the wolves at bay. More extensive notes (with images) will be compiled when I get back. (Unless anyone is offering! See next.)
We are still looking for people to:
1. Provide translations of the English dialog menus etc.
2. Write more extensive user documentation. If you use a particular part of GeoRaptor a lot and think
you have found out all its functionality and quirks, contact us and offer to write a few pages of
documentation on it. (Open Office or Microsoft Word is fine.) Easiest way to do this is to simply
make screen captures and annotate with text.
3. Conduct beta testing.
Here are the things that are in the new release.
New functionality:
Overhaul of Validation Functionality.
1. User can specify own validation SELECT SQL as long as it returns three required columns. The SQL is thus totally editable.
2. Validation update code now allows user to associate a PL/SQL function with an error number which is applied in the UPDATE SQL.
3. UPDATE SQL can use WHERE clause of validation SELECT SQL (1) to update specific errors.
   NOTE: The generated UPDATE statement can be manually edited. It is NEVER run by GeoRaptor. To run any UPDATE, copy the statement
   to the clipboard and run in an appropriate SQL Worksheet session within SQL Developer.
4. Main validation table allows:
   a. Sorting (click on column header) and
   b. Filtering.
   c. Copying to Clipboard via right mouse click sub menu of:
      - Geometry's SDO_ELEM_INFO array constructor.
      - SDO_GEOMETRY constructor
      - Error + validation string.
   d. Access to Draw/Zoom functions which were previously buttons.
   e. Added a new right mouse click menu "Show Feature's Individual Errors" that gathers up all the errors
      it can process - along with the ring / element that is host to the error (if it can) - and displays
      them in the Attribute/Geometry tabs at the bottom of the Map Window (where "Identify" places its results).
      The power of this will be evident to all those who have wanted a way of stepping through errors in a geometry.
   f. Selected rows can now be deleted (select rows: press <DELETE> key or right mouse click>Delete).
   g. Table now has only one primary key column, and has a separate error column holding the actual error code.
   h. Right mouse click men added to table menu to display description of error in the new column (drawn from Oracle documentation)
   i. Optimisations added to improve performance for large error lists.
5. Functionality now has its own validation layer that is automatically added to the correct view.
   Access to layer properties via button on validation dialog or via normal right mouse click in view/layer tree.
Improved Rendering Options.
1. Linestring colour can now be random or drawn from column in database (as per Fill and Point colouring)
2. Marking of SDO_GEOMETRY objects overhauled.
   - Ability to mark or LABEL vertices/points of all SDO_GEOMETRY types with coordinate identifier and
     option {X,Y} location. Access is via Labelling tab in layer>properties. Thus, coordinate 25 of a linestring
     could be shown as: <25> or {x,y} or <25> {x,y}
   - There is a nice "stacked" option where the coordinate {x,y} can be written one line below the id.
   - For linestrings and polygons the <id> {x,y} label can be oriented to the angle between the vectors or
     edges that come in, and go out of, a vertex. Access is via "Orient" tick box in Labelling tab.
   - Uses Tools>Preferences>GeoRaptor>Visualisation>SDO_ORDINATE_ARRAY bracket around x,y string.
3. Start point of linestring/polygon and all other vertices can be marked with user selectable point marker
   rather than previously fixed markers.
4. Can now set a NULL point marker by selecting "None" for point marker style pulldown menu.
5. Positioning of the arrow for linestring/polygons has extra options:
   * NONE
   * START    - All segments of a line have the arrow positioned at the start
   * MIDDLE   - All segments of a line have the arrow positioning in the middle.
   * END      - All segments of a line have the arrow positioning in the END.
   * END_ONLY - Only the last segment has an arrow and at its end.
ScaleBar.
1. A new graphic ScaleBar option has been added for the map of each view.
   For geographic/geodetic SRIDs distances are currently shown in meters;
   For all SRIDs an attempt is made to "adapt" the scaleBar units depending
   on the zoom level. So, if you zoom right in you might get the distance shown
   as mm, and as you zoom out, cm/m/km as appropriate.
2. As the scaleBar is drawn, a 1:<DEMONINATOR> style MapScale value is written
   to the map's right most status bar element.
3. ScaleBar and MapScale can be turned off/on in View>Properties right mouse
   click menu.
Export Capabilities.
1. The ability to export a selection from a result set table (ie result of
   executing ad-hoc SQL SELECT statement to GML, KML, SHP/TAB (TAB file
   adds TAB file "wrapper" over SHP) has been added.
2. Ability to export table/view/materialised view to GML, KML, SHP/TAB also
   added. If no attributes are selected when exporting to a SHP/TAB file, GeoRaptor
   automatically adds a field that holds a unique row number.
3. When exporting to KML:
   * one can optionally export attributes.
   * Web sensitive characters < > & etc for KML export are replaced with > < & etc.
   * If a column in the SELECTION or table/view/Mview equals "name" then its value is
     written to the KML tag <name> and not to the list of associated attributes.
     - Similarly for "description" -> <description> AND "styleUrl" -> <styleUrl>
4. When exporting to GML one can optionally export attributes in FME or OGR "flavour".
5. Exporting Measured SDO_GEOMETRY objects to SHP not supported until missing functionality
   in GeoTools is corrected (working with GeoTools community to fix).
6. Writing PRJ and MapInfo CoordSys is done by pasting a string into appropriate export dialog box.
   Last value pasted is remembered between sessions which is useful for users who work with a single SRID.
7. Export directory is remembered between sessions in case a user uses a standard export directory.
8. Result sets containing MDSYS.SDO_POINT and/or MDSYS.VERTEX_TYPE can also be written to GML/KML/SHP/TAB.
   Example:
   SELECT a.geom.sdo_point as point
     FROM (SELECT sdo_geometry(2002,null,sdo_point_type(1,2,null),sdo_elem_info_array(1,2,1),sdo_ordinate_array(1,1,2,2)) as geom
             FROM DUAL) a;
   SELECT mdsys.vertex_type(a.x,a.y,a.z,a.w,a.v5,a.v6,a.v7,a.v8,a.v9,a.v10,a.v11,a.id) as vertex
     FROM TABLE(mdsys.sdo_util.getVertices(mdsys.sdo_geometry(2002,null,null,sdo_elem_info_array(1,2,1),sdo_ordinate_array(1,1,2,2)))) a;
9. A dialog appears at the end of each export which details (eg total) what was exported when the exported recordset/table contains more
   than on shape type. For example, if you export only points eg 2001/3001 from a table that also contains multipoints eg 2005/3005 then
   the number of points exported, and multipoints skipped will be displayed.
10. SHP/TAB export is "transactional". If you set the commit interval to 100 then only 100 records are held in memory before writing.
    However, this does not currently apply to the associated DBASE records.
11. SHP/TAB export supports dBase III, dBase III + Memo, dBase IV and dBase IV + Memo.
    Note: Memo allows text columns > 255 characters to be exported. Non-Memo formats do not and any varchar2 columns will be truncated
    to 255 chars. Some GIS packages support MEMO eg Manifold GIS, some do not.
12. Note. GeoRaptor does not ensure that the SRID of SDO_GEOMETRY data exported to KML is in the correct Google Projection.
    Please read the Oracle documentation on how to project your data is this is necessary. An example is:
    SELECT OBJECTID,
           CODIGO as name,
           NOME as description,
           MI_STYLE,
           SDO_CS.TRANSFORM(shape,'USE_SPHERICAL',4055) as shape
      FROM MUB.REGIONAL;
13. NOTE: The SHP exporter uses the Java Topology Suite (JTS) to convert from SDO_GEOMETRY to the ESRI Shape format. JTS does not handle
    circular curves in SDO_GEOMETRY objects you must "stroke" them using sdo_util.arc_densify(). See the Oracle documentation on how
    to use this.
Miscellaneous.
1. Selection View - Measurement has been modified so that the final result only shows those geometry
   types that were actually measured.
2. In Layer Properties the Miscellaneous tab has been removed because the only elements in it were the
   Geometry Output options which have now been replaced by the new GML/KML/etc export capabilities.
3. Shapefile import's user entered tablename now checked for Oracle naming convention compliance.
4. Identify based on SDO_NN has been removed from GeoRaptor given the myriad problems that it seems to create across versions
   and partitioned/non-partitioned tables. Instead SDO_WITHIN_DISTANCE is now used with the actual search distance (see circle
   in map display): everything within that distance is returned.
5. Displaying/Not displaying embedded sdo_point in line/polygon (Jamie Keene), is now controlled by
   a preference.
6. New View Menu options to switch all layers on/off
7. Tools/Preferences/GeoRaptor layout has been improved.
8. If Identify is called on a geometry a new right mouse click menu entry has been added called "Mark" which
   has two sub-menus called ID and ID(X,Y) that will add the labeling to the selected geometry independently of
   what the layer is set to being.
9. Two new methods for rendering an SDO_GEOMETRY object in a table or SQL recordset have been added: a) Show geometry as ICON
   and b) Show geometry as THUMBNAIL. When the latter is chosen, the actual geometry is shown in an image _inside_ the row/column cell it occupies.
   In addition, the existing textual methods for visualisation: WKT, KML, GML etc have been collected together with ICON and THUMBNAIL in a new
   right mouse click menu.
10. Tables/Views/MViews without spatial indexes can now be added to a Spatial View. To stop large tables from killing rendering, a new preference
    has been added "Table Count Limit" (default 1,000) which controls how many geometry records can be displayed. A table without a spatial
    index will have its layer name rendered in Italics and will write a warning message in red to the status bar for each redraw. Adding an index
    which the layer exists will be recognised by GeoRaptor during drawing and switch the layer across to normal rendering.
Some Bug Fixes.
* Error in manage metadata related to getting metadata across all schemas
* Bug with no display of rowid in Identify results fixed;
* Some fixes relating to where clause application in geometry validation.
* Fixes bug with scrollbars on view/layer tree not working.
* Problem with the spatial networks fixed. Actions for spatial networks can now only be done in the
schema of the current user, as it could happen that a user opens the tree for another schema that
has the same network as in the user's schema. Dropping a drops only the network of the current connected user.
* Recordset "find sdo_geometry cell" code has been modified so that it now appears only if a suitable geometry object is
in a recordset. Please note that there is a bug in SQL Developer (2.1 and 3.0) that causes SQL Developer to not
register a change in selection from a single cell to a whole row when one left clicks at the left-most "row number"
column that is not part of the SELECT statements user columns, as a short cut to selecting a whole row. It appears
that this is a SQL Developer bug so nothing can be done about it until it is fixed. To select a whole row, select all
cells in the row.
* Copy to clipboard of SDO_GEOMETRY with M and Z values forgot has extraneous "," at the end.
* Column based colouring of markers fixed
* Bunch of performance improvements.
* Plus (happily) others that I can't remember!If you find any bugs register a bug report at our website.
If you want to help with testing, contact us at our website.
My thanks for help in this release to:
1. John O'Toole
2. Holger Labe
3. Sandro Costa
4. Marco Giana
5. Luc van Linden
6. Pieter Minnaar
7. Warwick Wilson
8. Jody Garnett (GeoTools bug issues)
Finally, when at the Washington User Conference I explained the willingness of the GeoRaptor Team to work
for some sort of integration of our "product" with the new Spatial extension that has just been released in SQL
Developer 3.0. Nothing much has come of that initial contact and I hope more will come of it.
In the end, it is you, the real users who should and will decide the way forward. If you have ideas, wishes etc,
please contact the GeoRaptor team via our SourceForge website, or start a "wishlist" thread on this forum
expressing ideas for future functionality and integration opportunities.
regards
Simon
Edited by: sgreener on Jun 12, 2011 2:15 PM

Thank you for this.
I have been messing around with this last few days, and i really love the feature to pinpoint the validation errors on map.
I has always been so annoying to try pinpoint these errors using some other GIS software while doing your sql.
I have stumbled to few bugs:
1. In "Validate geometry column" dialog checking option "Use DimInfo" actually still uses value entered in tolerance text box.
I found this because in my language settings , is the decimal operators
2. In "Validate geometry column" dialog textboxs showing sql, doesn't always show everything from long lines of text (clipping text from right)
3. In "Validate geometry column" dialog the "Create Update SQL" has few bugs:
- if you have selected multiple rows from results and check the "Use Selected Geometries" the generated IN-clause in SQL with have same rowid (rowid for first selected result) for all entries
Also the other generated IN clause in WHERE-clause is missing separator if you select more than one corrective function
4. "Validate geometry column" dialog stays annoyingly top most when using "Create Update SQL" dialog

Issue with escaping characters and php

Greetings,
We are working on a web page using php and Oracle. We have troubles dealing with the diferent escaping characters when inserting/retrieving data (magic quotes is on but adding the backslash doesn't help :( ).
We would like to know the correct way of dealing with those characters ( ' " / /n ...).
Thank you in advance,
Sincerely,
Oriol Nonell

Do NOT use addslashes/stripslashes to escape your queries. I use this function to do the escaping:
function escapeSQL($string, $wildcard=false)
$result = str_replace("'","''",$string);
if ($wildcard == true) $result = str_replace("%","%%",$result);
return $result;
It basically replaces ' with ''.
If you set $wildcard to false, then '%' is considered to be an actual '%' (for 'like' expressions). If you set it to true, a % is escaped to %% too.

Script to fix invalid characters for SharePoint synced share

I'm hoping for some help implementing a script that will rename files with characters that are invalid for SharePoint, in a synced file share that is accessed by everyone at an office.
Some background: I'm working for a small nonprofit that has a SBS 2012 server and a local domain with about 30 users. I'm the sole volunteer IT person here. We have a network file share on the server that everyone stores their documents on. Recently,
we signed up with Office 365 Online and I set up a SharePoint library and synced it with the document share on our server. A few files aren't being uploaded, though, because of invalid characters (For instance, a file like "Outline/Team plan #3.doc"
Expecting everyone to remember not to use any of the invalid characters isn't really a solution, particularly since I'm not here full-time if things go wrong. I'm looking for a script to run on the server every few minutes that will rename any incompatible
files so that they can be uploaded to SharePoint. Personally, I think it's just plain criminal that Microsoft hasn't provided this functionality itself (it's the least they could do) but that's another rant for another time. Unfortunately, while
I do have a couple of years of experience with basic server administration and group policy, I'm not experienced at all when it comes to PowerShell scripting. I can string together some command line commands in a batch file, and that's about it.
I did find this promising post here:
http://community.spiceworks.com/scripts/show/2097-fix-file-names-for-skydrive-pro-syncing
I was hoping for opinions - is this the sort of thing I'm looking for, and what would be the best way to implement it (eg, every few minutes as a scheduled event)? Also, is this a straight-up powershell script, or are there additional languages/resources
involved? (Like I said, I'm sort of a script newbie).
Additional background: I posted a similar question asking if it could be done with GPOs, and they directed me here, suggesting it could be done with scripts.
Thanks!!

That script that Mike linked to is a good one, i've used it myself a fair few times. Just to weigh in with a bit of information on why those characters are forbidden:
The reason that some characters aren't allowed is that those characters are used as special characters in URLs. If you were to allow them to go into the file names (without 'escaping' them) then all the traffic to and from SharePoint would start to
go horribly wrong.
Now it is theoretically possible to build a tool that recognises the characters, escapes them, then uploads them. As well as updating the SharePoint interface to 'unescape' the characters when it renders them. However it's not a trivial bit of engineering,
you'd have to gut SharePoint and re-do some of the core behaviour. You've then got to re-test it and make sure it doesn't break any previous SharePoint behaviour.
The way MS want you to work is to save the files directly to SharePoint, which would pick up that you have protected characters and prompt the user to correct them. That does break down a bit with OneDrive as you can use the characters locally, it's only
the next step that fails...

Escape characters for SQL

Similar Messages

Maybe you are looking for