5

I am wondering if I can make parameterized queries directly from C/C++ with libpq instead of using strings and if do how should this code look's like?

string tblins = "";
tblins = "INSERT INTO " + commtable + " "
         "(vdoc, bdoc, mytime, txml) VALUES ("
         "'" + cxml.vdoc + "', "
             + cxml.bdoc + ", " //integer
         "'" + cxml.mytime + "', "
         "'" + cxml.txml + "')";

result = PQexec(conn, tblins.c_str());

Thanks.

Wine Too
  • 4,515
  • 22
  • 83
  • 137

1 Answers1

5

Yes, you can use the PQexecParams function as explained in the documentation.

If parameters are used, they are referred to in the command string as $1, $2, etc. nParams is the number of parameters supplied; it is the length of the arrays paramTypes[], paramValues[], paramLengths[], and paramFormats[].

Greg Hewgill
  • 951,095
  • 183
  • 1,149
  • 1,285
  • it's also recommended you typecast parameters, so `$1::integer, $2::varchar` etc, so you can pass `NULL` for the `paramTypes` arg – user3791372 Aug 17 '14 at 20:12