Bug #40440 for DBD-Pg: DBI->quote(quotemeta("foo-bar")) returns invalid string

Why are you using quotemeta here? Please describe in detail what sort of crash occurs. You should in general be using placeholders, and not trying to construct queries from the output of quote().

On Oct 27, 2008, at 17:58, Greg Sabino Mullane via RT wrote: Show quoted text
Also, what version of PostgreSQL are you using and against what version did you compile DBD::Pg? David

On Oct 28, 2008, at 11:12, Frédéric Buclin via RT wrote: Show quoted text
Which part of that is $word? Bet, David

Show quoted text
There's the problem. You can't just plug the output of $dbh->quote back into a random string. The only guarantee is that passing the output back to the *database* will produce the original string. If you look at the DBI docs for DBI, you'll see this example: === It is valid for the quote() method to return an SQL expression that evaluates to the desired string. For example: $quoted = $dbh->quote("one\ntwo\0three") may return something like: CONCAT('one', CHAR(12), 'two', CHAR(0), 'three') === What you need to do is to quote the final compiled string, and pass that directly in. That's far inferior to using a placeholder in the first place, but it should suffice. Other than that, there is no way around it - E'' is now the official Postgres way. Best: .. 'AND bugs.keywords ~* ?' If you must: $string = $dbh->quote( q{(^|[^a-z0-9])} . quotemeta('foo-bar') . q{($|[^a-z0-9])} ); $SQL .= "AND bugs.keywords ~* $safestring";