Re: Printf and quoting in general, SQL injection in particular [was: Emacs Modular Configuration: the preferable way]

[Jean Louis]

* Eli Zaretskii <eliz@gnu.org> [2021-06-26 03:15]:
> > Date: Sat, 26 Jun 2021 08:46:06 +0200
> > From:  Emanuel Berg via Users list for the GNU Emacs text editor 
> > <help-gnu-emacs@gnu.org>
> > 
> > Jean Louis wrote:
> > 
> > > (format "%s/%s/" (rcd-crm-directory-by-id) id))
> > > (concat (rcd-crm-directory) "/" (cadr (rcd-crm-directory-data))))
> > > (concat (rcd-crm-directory) "/" (cadr (rcd-crm-directory-data))))
> > 
> > Is this what you are not allowed to do?
> > 
> > I ask because it looks similar to mine, only not as good,
> > perhaps. Ha.
> > 
> > OK, how is it suppose to look then?
> 
> Like this:
> 
>   (expand-file-name (cadr (rcd-crm-directory-data)) (rcd-crm-directory))

I have to improve various functions based on our conversation:

This is for example not meant to be without slash on the end:

(expand-file-name (cadr (rcd-crm-directory-data)) (rcd-crm-directory))
⇒ "/home/data1/protected/hyperscope/3/5/5/8/2/By-ID"

So there is work to do by using the function `file-name-as-directory'
wherever directory is meant to be.


Jean

Take action in Free Software Foundation campaigns:
https://www.fsf.org/campaigns

In support of Richard M. Stallman
https://stallmansupport.org/