http://qs321.pair.com?node_id=680614


in reply to DBI "drop table"

As others have said, placeholders are for data -- table names are not data. Kudos, though, for thinking about placeholders and the implication that you care about safety in DBI-based scripts!

What you want in this case is quote_identifier to properly quote the table name, then inline that into a do:

sub drop { my ($dbh, $table_name) = @_; my $quoted_name = $dbh->quote_identifier($table_name); $dbh->do("DROP TABLE $quoted_name"); }

This would be called as drop($dbh,'perl'); to drop a table named 'perl'.

<radiant.matrix>
Ramblings and references
The Code that can be seen is not the true Code
I haven't found a problem yet that can't be solved by a well-placed trebuchet