I have a sql statement in a library like:
$insert_sql = "INSERT INTO SCRIPTCASE.mutf_casestep (CASE_ID, CASE_FLOWSTEP, STARTDATE, REMARKS, " .
"EMPLID_CTRL, STATUS, CASE_FLOWSTEP_SEQ, EMPLID_CLAIM, SC_APPID, DEADLINE, ROLE_CTRL) VALUES ".
"('$caseid','".$rs->fields[2]."', TO_DATE('$datum', 'YYYY-MM-DD HH24:MI:SS'),'".$rs->fields[5]."', '".$rs->fields[3]."','WAIT', 0, ".
"0,'$appid', TO_DATE('$deadline', 'YYYY-MM-DD HH24:MI:SS'), '".$rs->fields[9]."')";
This parses well (after some fiddling).
“(’$caseid’,’”…
is changed to the casenumber as espected. However if you add a field like $rs->fields[2] in the same manner then wrong code is being generated. That’s why you have to split the sql statement and put the $rs->fields[2] outside of the string. So “where something > ‘$rs->fields[2]’” is not parsed correct and generates rubbish. This needs to be “where something >’”.$rs->fields[2]."’";
An error IMHO.