[Users] which is better: avp_db_load with scheme or avp_db_query?

[Daniel-Constantin Mierla]

Hello,

On 11/06/06 22:03, Alan Crosswell wrote:
> Hi,
>
> I want to pull the First+Last names of the subscriber for the $ru so I
> can stick an RPID in a 180 or 183 response (Polycom phones display the
> called party name when you do this).  Is it better practice to define
> two schemes and use avp_db_load to get the first and last name columns
> out of subscriber table or to use avp_db_query and do it in one shot?
>   
second is faster since you can load in one DB hit, but you have to 
protect against sql injection attacks -- check if values you want to use 
in queries contain single quote ' .

Cheers,
Daniel

> Thanks.
> /a
>
> _______________________________________________
> Users mailing list
> Users at openser.org
> http://openser.org/cgi-bin/mailman/listinfo/users
>
>