?NSString *sql = [NSString stringWithFormat:@"INSERT INTO %@ (%@) VALUES ('%@');",@"表名",@"key",@"value"];
?[dbexecuteUpdate:sql];
以上的寫法正常情況不存在問題,當(dāng)時當(dāng)value中存在單引號時,會導(dǎo)致插入/更新數(shù)據(jù)失敗。
FMDB建議是用 ? 當(dāng)做占位符
?NSString *sql = [NSString stringWithFormat:@"INSERT INTO %@ (%@) VALUES (?);",@"表名",@"key"];
?[dbexecuteUpdate:sql,@"value"];