Example of a prepared INSERT statement using ruby pg gem
The pg gem wants you to use numbered placeholders ($1, $2, ...) rather than positional placeholders (?):
conn = PG.connect(:dbname => 'db1')conn.prepare('statement1', 'insert into table1 (id, name, profile) values ($1, $2, $3)')conn.exec_prepared('statement1', [ 11, 'J.R. "Bob" Dobbs', 'Too much is always better than not enough.' ])The fine manual has this to say:
- (PGresult) prepare(stmt_name, sql[, param_types ])
[...]
PostgreSQL bind parameters are represented as $1, $1, $2, etc., inside the SQL query.
And again for exec_prepared:
PostgreSQL bind parameters are represented as $1, $1, $2, etc., inside the SQL query. The 0th element of the params array is bound to $1, the 1st element is bound to $2, etc.