B4J Question I'm working on a new KVS library, MySQL problem.

[LWGShane]

I'm working on a new KVS library (version 3.0) and am having a bit of a problem with the MySQL part of the library: I cannot Get an object that was serialized with my Put method.

I have created a test MySQL server so don't worry about the credentials being visible or weak, etc.
Project is attached. Any ideas?

 

[Erel]

1. You should use parameterized queries:

Dim RS As ResultSet = SQL1.ExecQuery($"SELECT `Value` FROM `${Table}` WHERE `Key` = "${Key}""$)

This code will fail if the key includes a character that needs to be escaped and it is also vulnerable to SQL injections.

2. Same here:

SQL1.ExecNonQuery($"REPLACE INTO `${Table}`(`Key`,`Value`) VALUES("${Key}","${Ser.ConvertObjectToBytes(Value)}")"$)

This code will not create a valid blob. You must use ExecNonQuery2.