德爾福/ MySql：轉義字符串的問題

Question

N00b在這裏，有轉義字符串的問題。我使用QuotedStr（）函數 - 應該不夠。

不幸的是，我想引用的字符串是相當混亂，但我會張貼在這裏萬一有人想將其粘貼到的WinMerge或KDiff3等

我試圖存儲整個德爾福形成到數據庫中，而不是形成一個.DFM文件。它只有一個字段，一個TEdit編輯框。

調試器顯示（）的形式爲文本作爲

'object Form1: TScriptForm'#$D#$A' Left = 0'#$D#$A' Top = 0'#$D#$A' Align = alClient'#$D#$A' BorderStyle = bsNone'#$D#$A' ClientHeight = 517'#$D#$A' ClientWidth = 993'#$D#$A' Color = clBtnFace'#$D#$A' Font.Charset = DEFAULT_CHARSET'#$D#$A' Font.Color = clWindowText'#$D#$A' Font.Height = -11'#$D#$A' Font.Name = 'MS Sans Serif''#$D#$A' Font.Style = []'#$D#$A' OldCreateOrder = False'#$D#$A' SaveProps.Strings = ('#$D#$A' 'Visible=False')'#$D#$A' PixelsPerInch = 96'#$D#$A' TextHeight = 13'#$D#$A' object Edit1: TEdit'#$D#$A' Left = 192'#$D#$A' Top = 64'#$D#$A' Width = 121'#$D#$A' Height = 21'#$D#$A' TabOrder = 8'#$D#$A' end'#$D#$A'end'#$D#$A 

主叫QuotedStr之前和

''object Form1: TScriptForm'#$D#$A' Left = 0'#$D#$A' Top = 0'#$D#$A' Align = alClient'#$D#$A' BorderStyle = bsNone'#$D#$A' ClientHeight = 517'#$D#$A' ClientWidth = 993'#$D#$A' Color = clBtnFace'#$D#$A' Font.Charset = DEFAULT_CHARSET'#$D#$A' Font.Color = clWindowText'#$D#$A' Font.Height = -11'#$D#$A' Font.Name = ''MS Sans Serif'''#$D#$A' Font.Style = []'#$D#$A' OldCreateOrder = False'#$D#$A' SaveProps.Strings = ('#$D#$A' ''Visible=False'')'#$D#$A' PixelsPerInch = 96'#$D#$A' TextHeight = 13'#$D#$A' object Edit1: TEdit'#$D#$A' Left = 192'#$D#$A' Top = 64'#$D#$A' Width = 121'#$D#$A' Height = 21'#$D#$A' TabOrder = 8'#$D#$A' end'#$D#$A'end'#$D#$A''' 

之後。

奇怪的是，我的完整的命令

'INSERT INTO designerFormDfm(designerFormDfmText) VALUES ("'object Form1: TScriptForm'#$D#$A' Left = 0'#$D#$A' Top = 0'#$D#$A' Align = alClient'#$D#$A' BorderStyle = bsNone'#$D#$A' ClientHeight = 517'#$D#$A' ClientWidth = 993'#$D#$A' Color = clBtnFace'#$D#$A' Font.Charset = DEFAULT_CHARSET'#$D#$A' Font.Color = clWindowText'#$D#$A' Font.Height = -11'#$D#$A' Font.Name = ''MS Sans Serif'''#$D#$A' Font.Style = []'#$D#$A' OldCreateOrder = False'#$D#$A' SaveProps.Strings = ('#$D#$A' ''Visible=False'')'#$D#$A' PixelsPerInch = 96'#$D#$A' TextHeight = 13'#$D#$A' object Edit1: TEdit'#$D#$A' Left = 192'#$D#$A' Top = 64'#$D#$A' Width = 121'#$D#$A' Height = 21'#$D#$A' TabOrder = 8'#$D#$A' end'#$D#$A'end'#$D#$A''");' 

在MySQL控制檯執行，而不是從德爾福，我在那裏傳遞命令的參數command的功能，

ADOCommand.CommandText := command; 
    ADOCommand.CommandType := cmdText; 
    ADOCommand.Execute(); 

我只能假設我有escpaing包含單引號的序列的問題（並且QuotedStr（）似乎無法避免背底（?!））

我在做什麼顯然是明顯錯誤的？

Answer 1

@mawg，@ da-soft建議沒問題，與插入和更新交互的最佳方式是使用參數。

檢查該樣本

var 
ADOCommand : TADOCommand; 
begin 
    ADOCommand:=TADOCommand.Create(nil); 
    try 
    ADOCommand.Connection:=AdoConnection; 
    ADOCommand.Parameters.Clear; 
    ADOCommand.CommandText:='INSERT INTO designerFormDfm (designerFormDfmText) VALUES (:designerFormDfmText)'; 
    ADOCommand.ParamCheck:=False; 
    ADOCommand.Parameters.ParamByName('designerFormDfmText').Value:= YourData; 
    ADOCommand.Execute; 
    finally 
    ADOCommand.Free; 
    end; 
end; 

Answer 2

簡短的答案 - 使用參數化查詢！