Database.MySQL.Simple.Param

The Param typeclass, for rendering a parameter to a SQL query.

Documentation

data Action

How to render an element when substituting it into a query.

Constructors

Plain Builder

Render without escaping or quoting. Use for non-text types such as numbers, when you are certain that they will not introduce formatting vulnerabilities via use of characters such as spaces or "'".

Escape SB.ByteString

Escape and enclose in quotes before substituting. Use for all text-like types, and anything else that may contain unsafe characters when rendered.

Many [Action]

Concatenate a series of rendering actions.

Instances

Show Action

Param Action

class Param a where

A type that may be used as a single parameter to a SQL query.

Methods

render :: a -> Action

Prepare a value for substitution into a query string.

Instances

Param Bool

Param Double

Param Float

Param Int

Param Int8

Param Int16

Param Int32

Param Int64

Param Integer

Param Word

Param Word8

Param Word16

Param Word32

Param Word64

Param SB.ByteString

Param LB.ByteString

Param TimeOfDay

Param UTCTime

Param Day

Param Text

Param Text

Param Null

Param Action

Param [Char]

Param a => Param (Maybe a)

Param (Binary SB.ByteString)

Param (Binary LB.ByteString)

Param a => Param (VaArgs [a])

Param a => Param (In [a])

inQuotes :: Builder -> Builder

Surround a string with single-quote characters: "'"

This function does not perform any other escaping.