c++ - C++ 中的 Char 数组并将其与其他合并

Question

我想在创建 char 数组时添加一些变量。我怎样才能做到这一点？ sqlite3_prepare_v2 需要 char[]。谢谢

unsigned int keyid = 10;
char buffer2[] = "SELECT * FROM table WHERE id = " + keyid; // problem (convert to char and merge)
sqlite3_prepare_v2(db, buffer2, strlen(buffer2), &stmt, 0);

Answer 1

您应该改为绑定(bind)您的参数。这也可以防止任何潜在的 SQL 注入(inject)攻击。

unsigned int keyid = 10;
const char buffer2[] = "SELECT * FROM table WHERE id = ?";
sqlite3_prepare_v2(db, buffer2, -1, &stmt, 0);
sqlite3_bind_int(&stmt, 1, keyid);