Bug #6673 | Expressions not available as LIMIT parameters | ||
---|---|---|---|
Submitted: | 17 Nov 2004 0:13 | Modified: | 8 Aug 2007 12:54 |
Reporter: | Michael Long | Email Updates: | |
Status: | Verified | Impact on me: | |
Category: | MySQL Server: DML | Severity: | S4 (Feature request) |
Version: | 4.1.7 | OS: | Windows (Win XP) |
Assigned to: | Marc ALFF | CPU Architecture: | Any |
[17 Nov 2004 0:13]
Michael Long
[17 Nov 2004 0:29]
MySQL Verification Team
Please see: http://dev.mysql.com/doc/mysql/en/SELECT.html where you should find that the LIMIT clause can takes 2 arguments and must be integers constants. Thank you for the bug report
[17 Nov 2004 2:45]
Michael Long
So? Why should it be limited to integer constants? The fact that it's written up that way doesn't make it the correct, or most useful, behaviour.
[17 Nov 2004 10:29]
Sergei Golubchik
While it make be useful to have expressions in LIMIT, inability to do so is not a bug. I'm chaning this into a feature request
[8 Aug 2007 12:54]
Konstantin Osipov
Thank you for a valid feature request.
[8 Aug 2007 12:55]
Konstantin Osipov
See also Bug#8094 Variables in the LIMIT Clause
[21 Mar 2008 22:18]
Anthony Taylor
Unless I am looking at this wrong, it seems as if the prepared statement approach could create a serious security hole in an application. In conventional stored procedures, everything is compiled so a user should not be able to perform basic sql injection attacks. In the prepared statement approach, a user could pass in anything that may slip past the data validation.
[26 Mar 2008 10:19]
Susanne Ebrecht
Set bug #33856 as duplicate of this bug here.
[2 Jun 2008 7:37]
James Low
I really hope you do this soon, though the quickest way would be to allow a variable in the limit clause: http://bugs.mysql.com/bug.php?id=8094 and then you could do the expression before and asign it to the variable.
[9 Jul 2008 3:10]
Ilkka Huotari
Please add this. Not having this leads to horrible code in stored procedures.
[15 Dec 2008 16:52]
MySQL Verification Team
Bug http://bugs.mysql.com/bug.php?id=41479 marked as duplicate of this one.
[16 Dec 2011 20:32]
Valeriy Kravchuk
Bug #27184 was marked as a duplicate of this one.