Commit d1959f9f authored by Tom Lane's avatar Tom Lane

Improve testlibpq3.c's example of PQexecParams() usage to include sending

a parameter in binary format.  Also, add a TIP explaining how to use casts
in the query text to avoid needing to specify parameter types by OID.
Also fix bogus spacing --- apparently somebody expanded the tabs in the
example programs to 8 spaces instead of 4 when transposing them into SGML.
parent 61abd9a3
<!-- <!--
$PostgreSQL: pgsql/doc/src/sgml/libpq.sgml,v 1.195 2005/10/20 21:04:14 neilc Exp $ $PostgreSQL: pgsql/doc/src/sgml/libpq.sgml,v 1.196 2005/10/20 23:57:51 tgl Exp $
--> -->
<chapter id="libpq"> <chapter id="libpq">
...@@ -1187,6 +1187,26 @@ than one nonempty command.) This is a limitation of the underlying protocol, ...@@ -1187,6 +1187,26 @@ than one nonempty command.) This is a limitation of the underlying protocol,
but has some usefulness as an extra defense against SQL-injection attacks. but has some usefulness as an extra defense against SQL-injection attacks.
</para> </para>
<tip>
<para>
Specifying parameter types via OIDs is tedious, particularly if you prefer
not to hard-wire particular OID values into your program. However, you can
avoid doing so even in cases where the server by itself cannot determine the
type of the parameter, or chooses a different type than you want. In the
SQL command text, attach an explicit cast to the parameter symbol to show what
data type you will send. For example,
<programlisting>
select * from mytable where x = $1::bigint;
</programlisting>
This forces parameter <literal>$1</> to be treated as <type>bigint</>, whereas
by default it would be assigned the same type as <literal>x</>. Forcing the
parameter type decision, either this way or by specifying a numeric type OID,
is strongly recommended when sending parameter values in binary format, because
binary format has less redundancy than text format and so there is less chance
that the server will detect a type mismatch mistake for you.
</para>
</tip>
<para> <para>
<variablelist> <variablelist>
<varlistentry> <varlistentry>
...@@ -4226,7 +4246,7 @@ testlibpq.o(.text+0xa4): undefined reference to `PQerrorMessage' ...@@ -4226,7 +4246,7 @@ testlibpq.o(.text+0xa4): undefined reference to `PQerrorMessage'
/* /*
* testlibpq.c * testlibpq.c
* *
* Test the C version of LIBPQ, the POSTGRES frontend library. * Test the C version of libpq, the PostgreSQL frontend library.
*/ */
#include &lt;stdio.h&gt; #include &lt;stdio.h&gt;
#include &lt;stdlib.h&gt; #include &lt;stdlib.h&gt;
...@@ -4250,10 +4270,9 @@ main(int argc, char **argv) ...@@ -4250,10 +4270,9 @@ main(int argc, char **argv)
j; j;
/* /*
* If the user supplies a parameter on the command line, use it as * If the user supplies a parameter on the command line, use it as the
* the conninfo string; otherwise default to setting dbname=postgres * conninfo string; otherwise default to setting dbname=postgres and using
* and using environment variables or defaults for all other connection * environment variables or defaults for all other connection parameters.
* parameters.
*/ */
if (argc &gt; 1) if (argc &gt; 1)
conninfo = argv[1]; conninfo = argv[1];
...@@ -4272,10 +4291,10 @@ main(int argc, char **argv) ...@@ -4272,10 +4291,10 @@ main(int argc, char **argv)
} }
/* /*
* Our test case here involves using a cursor, for which we must be * Our test case here involves using a cursor, for which we must be inside
* inside a transaction block. We could do the whole thing with a * a transaction block. We could do the whole thing with a single
* single PQexec() of "select * from pg_database", but that's too * PQexec() of "select * from pg_database", but that's too trivial to make
* trivial to make a good example. * a good example.
*/ */
/* Start a transaction block */ /* Start a transaction block */
...@@ -4288,8 +4307,8 @@ main(int argc, char **argv) ...@@ -4288,8 +4307,8 @@ main(int argc, char **argv)
} }
/* /*
* Should PQclear PGresult whenever it is no longer needed to avoid * Should PQclear PGresult whenever it is no longer needed to avoid memory
* memory leaks * leaks
*/ */
PQclear(res); PQclear(res);
...@@ -4396,10 +4415,9 @@ main(int argc, char **argv) ...@@ -4396,10 +4415,9 @@ main(int argc, char **argv)
int nnotifies; int nnotifies;
/* /*
* If the user supplies a parameter on the command line, use it as * If the user supplies a parameter on the command line, use it as the
* the conninfo string; otherwise default to setting dbname=postgres * conninfo string; otherwise default to setting dbname=postgres and using
* and using environment variables or defaults for all other connection * environment variables or defaults for all other connection parameters.
* parameters.
*/ */
if (argc &gt; 1) if (argc &gt; 1)
conninfo = argv[1]; conninfo = argv[1];
...@@ -4429,8 +4447,8 @@ main(int argc, char **argv) ...@@ -4429,8 +4447,8 @@ main(int argc, char **argv)
} }
/* /*
* should PQclear PGresult whenever it is no longer needed to avoid * should PQclear PGresult whenever it is no longer needed to avoid memory
* memory leaks * leaks
*/ */
PQclear(res); PQclear(res);
...@@ -4505,6 +4523,10 @@ main(int argc, char **argv) ...@@ -4505,6 +4523,10 @@ main(int argc, char **argv)
* t = (11 bytes) 'joe's place' * t = (11 bytes) 'joe's place'
* b = (5 bytes) \000\001\002\003\004 * b = (5 bytes) \000\001\002\003\004
* *
* tuple 0: got
* i = (4 bytes) 2
* t = (8 bytes) 'ho there'
* b = (5 bytes) \004\003\002\001\000
*/ */
#include &lt;stdio.h&gt; #include &lt;stdio.h&gt;
#include &lt;stdlib.h&gt; #include &lt;stdlib.h&gt;
...@@ -4524,6 +4546,66 @@ exit_nicely(PGconn *conn) ...@@ -4524,6 +4546,66 @@ exit_nicely(PGconn *conn)
exit(1); exit(1);
} }
/*
* This function prints a query result that is a binary-format fetch from
* a table defined as in the comment above. We split it out because the
* main() function uses it twice.
*/
static void
show_binary_results(PGresult *res)
{
int i,
j;
int i_fnum,
t_fnum,
b_fnum;
/* Use PQfnumber to avoid assumptions about field order in result */
i_fnum = PQfnumber(res, "i");
t_fnum = PQfnumber(res, "t");
b_fnum = PQfnumber(res, "b");
for (i = 0; i &lt; PQntuples(res); i++)
{
char *iptr;
char *tptr;
char *bptr;
int blen;
int ival;
/* Get the field values (we ignore possibility they are null!) */
iptr = PQgetvalue(res, i, i_fnum);
tptr = PQgetvalue(res, i, t_fnum);
bptr = PQgetvalue(res, i, b_fnum);
/*
* The binary representation of INT4 is in network byte order, which
* we'd better coerce to the local byte order.
*/
ival = ntohl(*((uint32_t *) iptr));
/*
* The binary representation of TEXT is, well, text, and since libpq
* was nice enough to append a zero byte to it, it'll work just fine
* as a C string.
*
* The binary representation of BYTEA is a bunch of bytes, which could
* include embedded nulls so we have to pay attention to field length.
*/
blen = PQgetlength(res, i, b_fnum);
printf("tuple %d: got\n", i);
printf(" i = (%d bytes) %d\n",
PQgetlength(res, i, i_fnum), ival);
printf(" t = (%d bytes) '%s'\n",
PQgetlength(res, i, t_fnum), tptr);
printf(" b = (%d bytes) ", blen);
for (j = 0; j &lt; blen; j++)
printf("\\%03o", bptr[j]);
printf("\n\n");
}
}
int int
main(int argc, char **argv) main(int argc, char **argv)
{ {
...@@ -4531,17 +4613,14 @@ main(int argc, char **argv) ...@@ -4531,17 +4613,14 @@ main(int argc, char **argv)
PGconn *conn; PGconn *conn;
PGresult *res; PGresult *res;
const char *paramValues[1]; const char *paramValues[1];
int i, int paramLengths[1];
j; int paramFormats[1];
int i_fnum, uint32_t binaryIntVal;
t_fnum,
b_fnum;
/* /*
* If the user supplies a parameter on the command line, use it as * If the user supplies a parameter on the command line, use it as the
* the conninfo string; otherwise default to setting dbname=postgres * conninfo string; otherwise default to setting dbname=postgres and using
* and using environment variables or defaults for all other connection * environment variables or defaults for all other connection parameters.
* parameters.
*/ */
if (argc &gt; 1) if (argc &gt; 1)
conninfo = argv[1]; conninfo = argv[1];
...@@ -4560,12 +4639,14 @@ main(int argc, char **argv) ...@@ -4560,12 +4639,14 @@ main(int argc, char **argv)
} }
/* /*
* The point of this program is to illustrate use of PQexecParams() * The point of this program is to illustrate use of PQexecParams() with
* with out-of-line parameters, as well as binary transmission of * out-of-line parameters, as well as binary transmission of data.
* results. By using out-of-line parameters we can avoid a lot of *
* tedious mucking about with quoting and escaping. Notice how we * This first example transmits the parameters as text, but receives the
* don't have to do anything special with the quote mark in the * results in binary format. By using out-of-line parameters we can
* parameter value. * avoid a lot of tedious mucking about with quoting and escaping, even
* though the data is text. Notice how we don't have to do anything
* special with the quote mark in the parameter value.
*/ */
/* Here is our out-of-line parameter value */ /* Here is our out-of-line parameter value */
...@@ -4587,52 +4668,46 @@ main(int argc, char **argv) ...@@ -4587,52 +4668,46 @@ main(int argc, char **argv)
exit_nicely(conn); exit_nicely(conn);
} }
/* Use PQfnumber to avoid assumptions about field order in result */ show_binary_results(res);
i_fnum = PQfnumber(res, "i");
t_fnum = PQfnumber(res, "t");
b_fnum = PQfnumber(res, "b");
for (i = 0; i &lt; PQntuples(res); i++) PQclear(res);
{
char *iptr;
char *tptr;
char *bptr;
int blen;
int ival;
/* Get the field values (we ignore possibility they are null!) */
iptr = PQgetvalue(res, i, i_fnum);
tptr = PQgetvalue(res, i, t_fnum);
bptr = PQgetvalue(res, i, b_fnum);
/*
* The binary representation of INT4 is in network byte order,
* which we'd better coerce to the local byte order.
*/
ival = ntohl(*((uint32_t *) iptr));
/* /*
* The binary representation of TEXT is, well, text, and since * In this second example we transmit an integer parameter in binary
* libpq was nice enough to append a zero byte to it, it'll work * form, and again retrieve the results in binary form.
* just fine as a C string.
* *
* The binary representation of BYTEA is a bunch of bytes, which * Although we tell PQexecParams we are letting the backend deduce
* could include embedded nulls so we have to pay attention to * parameter type, we really force the decision by casting the parameter
* field length. * symbol in the query text. This is a good safety measure when sending
* binary parameters.
*/ */
blen = PQgetlength(res, i, b_fnum);
printf("tuple %d: got\n", i); /* Convert integer value "2" to network byte order */
printf(" i = (%d bytes) %d\n", binaryIntVal = htonl((uint32_t) 2);
PQgetlength(res, i, i_fnum), ival);
printf(" t = (%d bytes) '%s'\n", /* Set up parameter arrays for PQexecParams */
PQgetlength(res, i, t_fnum), tptr); paramValues[0] = (char *) &amp;binaryIntVal;
printf(" b = (%d bytes) ", blen); paramLengths[0] = sizeof(binaryIntVal);
for (j = 0; j &lt; blen; j++) paramFormats[0] = 1; /* binary */
printf("\\%03o", bptr[j]);
printf("\n\n"); res = PQexecParams(conn,
"SELECT * FROM test1 WHERE i = $1::int4",
1, /* one param */
NULL, /* let the backend deduce param type */
paramValues,
paramLengths,
paramFormats,
1); /* ask for binary results */
if (PQresultStatus(res) != PGRES_TUPLES_OK)
{
fprintf(stderr, "SELECT failed: %s", PQerrorMessage(conn));
PQclear(res);
exit_nicely(conn);
} }
show_binary_results(res);
PQclear(res); PQclear(res);
/* close the connection to the database and cleanup */ /* close the connection to the database and cleanup */
......
...@@ -17,6 +17,10 @@ ...@@ -17,6 +17,10 @@
* t = (11 bytes) 'joe's place' * t = (11 bytes) 'joe's place'
* b = (5 bytes) \000\001\002\003\004 * b = (5 bytes) \000\001\002\003\004
* *
* tuple 0: got
* i = (4 bytes) 2
* t = (8 bytes) 'ho there'
* b = (5 bytes) \004\003\002\001\000
*/ */
#include <stdio.h> #include <stdio.h>
#include <stdlib.h> #include <stdlib.h>
...@@ -36,6 +40,66 @@ exit_nicely(PGconn *conn) ...@@ -36,6 +40,66 @@ exit_nicely(PGconn *conn)
exit(1); exit(1);
} }
/*
* This function prints a query result that is a binary-format fetch from
* a table defined as in the comment above. We split it out because the
* main() function uses it twice.
*/
static void
show_binary_results(PGresult *res)
{
int i,
j;
int i_fnum,
t_fnum,
b_fnum;
/* Use PQfnumber to avoid assumptions about field order in result */
i_fnum = PQfnumber(res, "i");
t_fnum = PQfnumber(res, "t");
b_fnum = PQfnumber(res, "b");
for (i = 0; i < PQntuples(res); i++)
{
char *iptr;
char *tptr;
char *bptr;
int blen;
int ival;
/* Get the field values (we ignore possibility they are null!) */
iptr = PQgetvalue(res, i, i_fnum);
tptr = PQgetvalue(res, i, t_fnum);
bptr = PQgetvalue(res, i, b_fnum);
/*
* The binary representation of INT4 is in network byte order, which
* we'd better coerce to the local byte order.
*/
ival = ntohl(*((uint32_t *) iptr));
/*
* The binary representation of TEXT is, well, text, and since libpq
* was nice enough to append a zero byte to it, it'll work just fine
* as a C string.
*
* The binary representation of BYTEA is a bunch of bytes, which could
* include embedded nulls so we have to pay attention to field length.
*/
blen = PQgetlength(res, i, b_fnum);
printf("tuple %d: got\n", i);
printf(" i = (%d bytes) %d\n",
PQgetlength(res, i, i_fnum), ival);
printf(" t = (%d bytes) '%s'\n",
PQgetlength(res, i, t_fnum), tptr);
printf(" b = (%d bytes) ", blen);
for (j = 0; j < blen; j++)
printf("\\%03o", bptr[j]);
printf("\n\n");
}
}
int int
main(int argc, char **argv) main(int argc, char **argv)
{ {
...@@ -43,11 +107,9 @@ main(int argc, char **argv) ...@@ -43,11 +107,9 @@ main(int argc, char **argv)
PGconn *conn; PGconn *conn;
PGresult *res; PGresult *res;
const char *paramValues[1]; const char *paramValues[1];
int i, int paramLengths[1];
j; int paramFormats[1];
int i_fnum, uint32_t binaryIntVal;
t_fnum,
b_fnum;
/* /*
* If the user supplies a parameter on the command line, use it as the * If the user supplies a parameter on the command line, use it as the
...@@ -72,10 +134,13 @@ main(int argc, char **argv) ...@@ -72,10 +134,13 @@ main(int argc, char **argv)
/* /*
* The point of this program is to illustrate use of PQexecParams() with * The point of this program is to illustrate use of PQexecParams() with
* out-of-line parameters, as well as binary transmission of results. By * out-of-line parameters, as well as binary transmission of data.
* using out-of-line parameters we can avoid a lot of tedious mucking *
* about with quoting and escaping. Notice how we don't have to do * This first example transmits the parameters as text, but receives the
* anything special with the quote mark in the parameter value. * results in binary format. By using out-of-line parameters we can
* avoid a lot of tedious mucking about with quoting and escaping, even
* though the data is text. Notice how we don't have to do anything
* special with the quote mark in the parameter value.
*/ */
/* Here is our out-of-line parameter value */ /* Here is our out-of-line parameter value */
...@@ -97,51 +162,46 @@ main(int argc, char **argv) ...@@ -97,51 +162,46 @@ main(int argc, char **argv)
exit_nicely(conn); exit_nicely(conn);
} }
/* Use PQfnumber to avoid assumptions about field order in result */ show_binary_results(res);
i_fnum = PQfnumber(res, "i");
t_fnum = PQfnumber(res, "t");
b_fnum = PQfnumber(res, "b");
for (i = 0; i < PQntuples(res); i++) PQclear(res);
{
char *iptr;
char *tptr;
char *bptr;
int blen;
int ival;
/* Get the field values (we ignore possibility they are null!) */
iptr = PQgetvalue(res, i, i_fnum);
tptr = PQgetvalue(res, i, t_fnum);
bptr = PQgetvalue(res, i, b_fnum);
/*
* The binary representation of INT4 is in network byte order, which
* we'd better coerce to the local byte order.
*/
ival = ntohl(*((uint32_t *) iptr));
/* /*
* The binary representation of TEXT is, well, text, and since libpq * In this second example we transmit an integer parameter in binary
* was nice enough to append a zero byte to it, it'll work just fine * form, and again retrieve the results in binary form.
* as a C string.
* *
* The binary representation of BYTEA is a bunch of bytes, which could * Although we tell PQexecParams we are letting the backend deduce
* include embedded nulls so we have to pay attention to field length. * parameter type, we really force the decision by casting the parameter
* symbol in the query text. This is a good safety measure when sending
* binary parameters.
*/ */
blen = PQgetlength(res, i, b_fnum);
printf("tuple %d: got\n", i); /* Convert integer value "2" to network byte order */
printf(" i = (%d bytes) %d\n", binaryIntVal = htonl((uint32_t) 2);
PQgetlength(res, i, i_fnum), ival);
printf(" t = (%d bytes) '%s'\n", /* Set up parameter arrays for PQexecParams */
PQgetlength(res, i, t_fnum), tptr); paramValues[0] = (char *) &binaryIntVal;
printf(" b = (%d bytes) ", blen); paramLengths[0] = sizeof(binaryIntVal);
for (j = 0; j < blen; j++) paramFormats[0] = 1; /* binary */
printf("\\%03o", bptr[j]);
printf("\n\n"); res = PQexecParams(conn,
"SELECT * FROM test1 WHERE i = $1::int4",
1, /* one param */
NULL, /* let the backend deduce param type */
paramValues,
paramLengths,
paramFormats,
1); /* ask for binary results */
if (PQresultStatus(res) != PGRES_TUPLES_OK)
{
fprintf(stderr, "SELECT failed: %s", PQerrorMessage(conn));
PQclear(res);
exit_nicely(conn);
} }
show_binary_results(res);
PQclear(res); PQclear(res);
/* close the connection to the database and cleanup */ /* close the connection to the database and cleanup */
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment