SPI_execute_with_args
SPI_execute_with_args — execute a command with out-of-line parameters
Synopsis
int SPI_execute_with_args(const char *command, intnargs, const Oid *argtypes, const Datum *values, const char *nulls, boolread_only, longcount)
Description
SPI_execute_with_args executes a command that might
include references to externally supplied parameters. The command text
refers to a parameter as $, and
the call specifies data types and values for each such symbol.
nread_only and count have
the same interpretation as in SPI_execute.
The main advantage of this routine compared to
SPI_execute is that data values can be inserted
into the command without tedious quoting/escaping, and thus with much
less risk of SQL-injection attacks.
Similar results can be achieved with SPI_prepare followed by
SPI_execute_plan; however, when using this function
the query plan is always customized to the specific parameter values
provided.
For one-time query execution, this function should be preferred.
If the same command is to be executed with many different parameters,
either method might be faster, depending on the cost of re-planning
versus the benefit of custom plans.
Arguments
const char *commandcommand string
intnargsnumber of input parameters (
$1,$2, etc.)Oid *argtypesan array of length
nargs, containing the OIDs of the data types of the parametersDatum *valuesan array of length
nargs, containing the actual parameter valuesconst char *nullsan array of length
nargs, describing which parameters are nullIf
nullsisNULLthenSPI_execute_with_argsassumes that no parameters are null. Otherwise, each entry of thenullsarray should be' 'if the corresponding parameter value is non-null, or'n'if the corresponding parameter value is null. (In the latter case, the actual value in the correspondingvaluesentry doesn't matter.) Note thatnullsis not a text string, just an array: it does not need a'\0'terminator.boolread_onlytruefor read-only executionlongcountmaximum number of rows to return, or
0for no limit
Return Value
The return value is the same as for SPI_execute.
SPI_processed and
SPI_tuptable are set as in
SPI_execute if successful.
Report a documentation issue
Read the upstream documentation. For corrections, first check the current manual.