Hi,
I'm somewhat stumped at the moment due to problems with inserting
strings in postgresql containing 's.
Normally, I'd just add a \ to escape the ' and everything would be just fine.
But for some reason, Ruby won't let me do this.
ruby 1.8.6 (2007-09-24 patchlevel 111) [i686-linux]
irb(main):033:0* s = "blah'blah"
=> "blah'blah"
irb(main):034:0> s.gsub(/'/, "\\'")
=> "blahblahblah"
irb(main):035:0> s.gsub("'", "\\'")
=> "blahblahblah"
I've seen myself blind on this one ...and I still can't see where the
problem is. Any clues ?
···
--
J-H Johansen
--
There are 10 kinds of people in the world: Those who understand binary and
those who don't...
irb(main):033:0* s = "blah'blah"
=> "blah'blah"
irb(main):034:0> s.gsub(/'/, "\\'")
=> "blahblahblah"
String#gsub interprets the backslashes (for use with e.g. \1). In this case it's replaced with everything after the '. Escape it doubly to ge
t what you want:
>> s = "blah'blah"
=> "blah'blah"
>> puts s.gsub(/'/, "\\\\'")
blah\'blah
···
On May 29, 2008, at 10:47, J-H Johansen wrote:
--
Name = "Mikael Høilund"; Email = Name.gsub %r/\s/,%#=?,# ## visit
*a=e=?=,!???,:??,?,Email.downcase![eval(%["\\%o\\%o"]% ## http://
[?**2+?o,?\\*2])]="o";Email.gsub! %%\%c%*3%a, %?%c? % ?@ ## hoilund
def The(s)%%\%s.%%s+%.org\n.end; :Go and print The Email ## dot org
This use of gsub processes the escaping of the sub string twice,
the Ruby one for the literal string and a second one for backreferences,
so you'll need:
irb(main):001:0> a = "blah'blah"
irb(main):002:0> a.gsub("'", "\\\\'")
=> "blah\\'blah"
irb(main):005:0> a.gsub("'", "\\\\'").length
=> 10
Hope this helps,
Jesus.
···
On Thu, May 29, 2008 at 10:47 AM, J-H Johansen <ondemannen@gmail.com> wrote:
Hi,
I'm somewhat stumped at the moment due to problems with inserting
strings in postgresql containing 's.
Normally, I'd just add a \ to escape the ' and everything would be just fine.
But for some reason, Ruby won't let me do this.
ruby 1.8.6 (2007-09-24 patchlevel 111) [i686-linux]
irb(main):033:0* s = "blah'blah"
=> "blah'blah"
irb(main):034:0> s.gsub(/'/, "\\'")
=> "blahblahblah"
irb(main):035:0> s.gsub("'", "\\'")
=> "blahblahblah"
I've seen myself blind on this one ...and I still can't see where the
problem is. Any clues ?
# irb(main):034:0> s.gsub(/'/, "\\'")
# => "blahblahblah"
faq. try the block form for less headache.
irb(main):006:0> s.gsub(/'/){"\\'"}
=> "blah\\'blah"
kind regards -botp
···
From: J-H Johansen [mailto:ondemannen@gmail.com]
Somewhat offtopic, but you shouldn't have to do this. First hit off Google for
Postgres Ruby bindings shows support for bind values, if not prepared
statements.
So, if you're doing this:
questionable_string.gsub!(... #try to escape stuff
connection.query "INSERT INTO my_table (some_column) VALUES
(#{questionable_string})"
Do this instead:
connection.query 'INSERT INTO my_table (some_column) VALUES (?)',
questionable_string
That way, either a library will do the substitution for you, or there's
actually going to be some protocol used in the communication with the
Postgres server which avoids parsing the bind values as code.
My own SQL may be a little rusty, but the concept is the same.
···
On Thursday 29 May 2008 03:47:59 J-H Johansen wrote:
Hi,
I'm somewhat stumped at the moment due to problems with inserting
strings in postgresql containing 's.
Thanks to Jesús, Mikael, botp and David for clearing up a few things.
I also realized that my version of ruby postgres lib could use an update.
=)
Cheers
···
--
J-H Johansen
--
There are 10 kinds of people in the world: Those who understand binary and
those who don't...
From: J-H Johansen [mailto:ondemannen@gmail.com]
# irb(main):034:0> s.gsub(/'/, "\\'")
# => "blahblahblah"
faq. try the block form for less headache.
... and less performance. Proper escaping is the way to go.
irb(main):006:0> s.gsub(/'/){"\\'"}
=> "blah\\'blah"
But in this case I agree with David: bind variables are much better
(also safe against SQL injection).
Cheers
robert
···
2008/5/29 Peña, Botp <botp@delmonte-phil.com>:
--
use.inject do |as, often| as.you_can - without end
# > faq. try the block form for less headache.
···
From: Robert Klemme [mailto:shortcutter@googlemail.com]
# 2008/5/29 Peña, Botp <botp@delmonte-phil.com>:
#
# ... and less performance.
by how much?
Benchmark.realtime{9999.times{s.gsub(/'/){"\\'"}}}
#=> 0.139999866485596
Benchmark.realtime{9999.times{s.gsub(/'/,"\\\\'")}}
#=> 0.108999967575073
# ... Proper escaping is the way to go.
yeh, while losing flexibility/easeofuse 
that's what's giving me the headache (especially now that i have four eyes and my head's getting heavier. "Proper" is relative, pick one that works best for you 
puts "\\\\'"
\\'
#=> nil
puts "\\'"
\'
i'd wish ruby2 would do
s.gsub(/'/)("\\'")
#=> "blah\\'blah"
ie, backreferences and company should use the more flexible block form
s.gsub(/'/){"\\'"}
#=> "blah\\'blah"
kind regards -botp
From: Robert Klemme [mailto:shortcutter@googlemail.com] # > faq. try the block form for less headache.
# # ... and less performance.
by how much?
Benchmark.realtime{9999.times{s.gsub(/'/){"\\'"}}}
#=> 0.139999866485596
Benchmark.realtime{9999.times{s.gsub(/'/,"\\\\'")}}
#=> 0.108999967575073
robert@fussel ~
$ ruby -r benchmark <<XXX
> Benchmark.bmbm do |r|
> r.report "block" do
> 1_000_000.times { "foobarbaz".gsub(/o/){'X'} }
> end
> r.report "str" do
> 1_000_000.times { "foobarbaz".gsub(/o/,'X') }
> end
> XXX
Rehearsal -----------------------------------------
block 10.438000 0.000000 10.438000 ( 10.583000)
str 5.109000 0.000000 5.109000 ( 5.310000)
------------------------------- total: 15.547000sec
user system total real
block 10.578000 0.000000 10.578000 ( 10.816000)
str 5.219000 0.000000 5.219000 ( 5.326000)
robert@fussel ~
$
Similar results for 1.8 and 1.9.
# ... Proper escaping is the way to go.
yeh, while losing flexibility/easeofuse 
that's what's giving me the headache (especially now that i have four eyes and my head's getting heavier. "Proper" is relative, pick one that works best for you 
My reasoning is as follows: you need to use the block form if you need to _calculate_ the replacement string for every match. If the replacement follows a particular pattern or is constant use the string form.
Kind regards
robert
···
On 30.05.2008 03:16, Peña wrote:
# 2008/5/29 Peña, Botp <botp@delmonte-phil.com>:
that's what's giving me the headache (especially now that i have four eyes and my head's getting heavier. "Proper" is relative, pick one that works best for you 