Revision history for SQL::Abstract

2.000003 - 2026-11-06
  - SECURITY, CVE-2026-121265: generate() (and so AUTOLOAD with
    allow_autoload) also treats an arrayref in its hashref or arrayref
    as one bind value. 2.000002 fixed only insert(), update() and
    values(): generate('update t', { name => [ "(SELECT ...)" ] })
    still gave UPDATE T SET name = (SELECT ...). \[ $sql, @bind ] is
    literal SQL in generate() too; array_datatypes => 0 restores the
    old behaviour.
  - every module has a $VERSION, the same as SQL::Abstract

2.000002 - 2026-11-05
  - SECURITY, CVE-2026-121265: array_datatypes is on by default, so an
    arrayref as a column value in insert() or update() (and values())
    is one bind value. Before, it was literal SQL and its first element
    went into the SQL text: a JSON array or a repeated form field like
    { name => [ "x, is_admin = 1" ] } gave
    UPDATE t SET name = x, is_admin = 1. Literal SQL is
    \[ $sql, @bind ]; array_datatypes => 0 restores the old behaviour.
    Incompatible for code that used a plain arrayref as literal SQL.
  - SECURITY, CVE-2026-121007: the where / having / set values of a
    nested statement ({ -select => ... }, { -update => ... } ...) in a
    select list, ORDER BY, GROUP BY, RETURNING, FROM (-as) or JOIN (to)
    became identifiers and went into the SQL text instead of @bind -
    without quote_char unescaped, so { id => "1 OR 1=1" } ended up as
    WHERE id = 1 OR 1=1. They are bind values again. The same goes for
    the rows of a { -values => ... } in FROM.
  - SECURITY, CVE-2026-121008: the html profile of SQL::Abstract::Tree
    HTML-escapes the SQL text and the filled in bind values (new
    html_escape option); before, a bind value like <script> went into
    the page as-is
  - SECURITY, CVE-2026-121009: injection_guard also checks the name of
    an explicit { -func => [ $name, ... ] }, as documented; it only
    checked the { -name => ... } shorthand before
  - quote_char without name_sep: a dotted name like a.b renders as
    "a"."b" (name_sep defaults to "."); before it came out as "a""b",
    which is the single identifier a"b. An empty name_sep keeps a.b
    as the single identifier "a.b".
  - SQL::Abstract::Parts->format keeps every part of the statement when
    it folds it across lines: a folded AND / OR list starts each
    continuation line with its operator, a folded comma list keeps the
    comma before its last item, a folded group keeps its closing
    bracket, and a part longer than max_width gets a line of its own;
    the folded text ends without a newline, like a statement that fits
    on one line
  - t/01generate.t: the infinite recursion watchdog gives each case 30
    seconds instead of 1 and always switches its alarm off again; on
    slow smokers a leftover alarm killed the whole test with
    "Terminating on signal SIGALRM(14)" (seen on Win32)
  - Docs: SQL::Abstract::Plugin::BangOverrides has an abstract and a
    SYNOPSIS section
  - SQL::Abstract::Tree: the indentmap understands "and", "or" and ","
    to put AND / OR conditions and the items of a clause list (select
    list, ORDER BY, GROUP BY, SET ...) on lines of their own; off in all
    profiles unless asked for (idea from Ryan P. Kelly's format-sql branch)
  - ORDER BY: { -asc => $col, -nulls => "first" } (or -desc, or "last")
    renders $col ASC NULLS FIRST; the -nulls key applies to every column
    of its -asc / -desc hash (idea and tests from ilmari)
  - SQL::Abstract::Tree: an operator followed by a parenthesised
    expression in a list (trunc(a - (b + c), 2)) no longer gets a comma
    inserted in front of it, and a backslash-escaped question mark
    operator for DBD::Pg (\?, \?|, \?&, \?-| ...) is kept as one operator
    instead of being split up as a placeholder (tests by ilmari)
  - New README.md (for the repository) and LICENSE file; the LICENSE is
    now part of the repository and shipped as-is in the tarball
  - New SECURITY.md: how to report security issues privately, which
    versions get fixes and what counts as a security issue (RT#167662)
  - Docs: new "SQL::Abstract, DBIx::Class and DBIO" section - DBIx::Class
    uses SQL::Abstract::Classic since 0.082842 and no longer this module,
    DBIO (a DBIx::Class fork) builds on SQL::Abstract 2.x and
    SQL::Abstract::Tree; the "SQL::Abstract developers" link now points
    at our own SUPPORT section instead of DBIx::Class, and SEE ALSO
    lists DBIO and SQL::Abstract::Classic
  - Docs: new "CAVEAT: untrusted input in ORDER BY" section - order by
    columns are identifiers, not bind values, so map user input onto an
    allow-list (and set quote_char) instead of passing it through
    (RT#117059)
  - SQL::Abstract::Tree: an empty placeholder_surround (or one with only
    a left part) fills in placeholders without "Use of uninitialized
    value $left / $right" warnings (RT#117234)
  - Docs: the literal SQL examples no longer use the deprecated
    operator-inside-the-literal style: -ident for column comparisons,
    { "=" => \[ ... ] }, { -in => \[ $sub_stmt, @sub_bind ] } and
    { ">" => \[ "ALL (...)", ... ] } for subqueries (with the real bind
    order); the special_ops and unary_ops sections show how the defined
    operator is used, and unary_ops handlers are documented to return
    ($sql, @bind) (RT#127116, KES)
  - Docs: where() is documented as where($where, $order) like select(), with
    hashref and arrayref examples; the WHERE CLAUSES introduction and the
    logic option say how the @where array examples are passed (\@where),
    and the "pending%" OR example has balanced parenthesis and the real
    bind order (RT#127117, KES)
  - An undef element in an -in / -not_in list no longer dies with the
    "!!!AUDIT YOUR CODE AND DATA!!!" exception; it now renders the
    logically correct SQL that exception promised:
    ( col IN (...) OR col IS NULL ) and
    ( col NOT IN (...) AND col IS NOT NULL ) (RT#127356)
  - SQL::Abstract::Tree: quoted strings and identifiers ('...', "...",
    `...`) are no longer split up at the commas, parenthesis, whitespace
    or keywords inside them. A Postgres range literal such as '(]' no
    longer dies with "missing closing ')'", and 'a,b' is no longer
    reformatted as 'a, b' (RT#132994, RT#105625)
  - SQL::Abstract::Tree: an unknown operator followed by a function call
    (foo <@ tstzrange(...)) next to an AND/OR is kept as one operand
    instead of getting an AND/OR inserted after the operator
  - New constructor option array_as_in: renders col => [ 1, 2, 3 ] as
    col IN ( ?, ?, ? ) instead of a chain of OR-ed equalities (much
    faster on MySQL for long lists); undef elements become an extra
    OR col IS NULL. Off by default, and only applied where the meaning
    is identical (RT#156818)
  - Docs/metadata: now maintained by Torsten Raudssus; support moved from
    the DBIx::Class mailing list to IRC #dbio on irc.perl.org (also in
    META x_IRC); dropped the dead git.shadowcat.co.uk repository links in
    favour of GitHub; updated Nathan Wiger's contact address; META author
    is now the maintainer; added a COPYRIGHT section
  - t/05in_between.t: the subclass test packages no longer use the
    `package NAME { ... }` syntax (perl 5.14+) or `use mro`/`use parent`,
    so the test suite compiles and passes on perl 5.8 - 5.12 again
  - SQL::Abstract::Parts: drop the leftover `use Module::Runtime`. It was
    never called, and Module::Runtime stopped being a prerequisite in
    2.000001, so on a system without it installed loading Parts.pm (and
    hence the whole render path that builds Parts objects) died at compile
    time
  - SQL::Abstract::Tree: pad_keyword() no longer emits "Use of
    uninitialized value" warnings when a caller supplies an indentmap
    without a newline (it now guards newline the way _unparse already
    does)
  - SQL::Abstract::Tree: a (NOT) BETWEEN now parses both of its bounds
    into a single AND grouped under the BETWEEN node
    (BETWEEN[val, AND[low, high]]) instead of letting the upper bound
    leak out as a sibling in the enclosing expression. The re-parse that
    was meant to do this never fired, because it compared an arrayref
    node against the string '-LITERAL'. Emitted SQL text round-trips
    unchanged; only the parsed tree (parse()) is affected.
  - select() now dies when given more than the four positional arguments
    (source, fields, where, order) instead of rendering garbage SQL from a
    flat clause list that was meant to be a hashref (RT#148271, Ovid)
  - ExtraClauses: -join accepts the dashed spellings -as / -on / -using /
    -type / -to / -from like the surrounding from_list does, and dies on
    an unknown key instead of silently dropping it (RT#148271, Ovid)
  - SQL::Abstract::Tree: recognise Oracle's MINUS as an expression start
    keyword, like EXCEPT (RT#134245, DAMI)
  - SQL::Abstract::Tree: anchor the unrollable-operator regex so that ON
    no longer matches inside function names such as GROUP_CONCAT or
    CONCAT_WS and strips their parenthesis on unparse/format
    (RT#105563, RT#117234)
  - An undef element in a -row (and so in -values and the ExtraClauses
    insert rowvalues clause) is now a NULL bind instead of being silently
    dropped, which lost placeholders and bind values in bulk inserts
    (RT#137357)
  - Add regression coverage confirming an empty arrayref given to -and /
    -or in a where clause emits no SQL and no trailing AND/OR (correct
    since the v2 engine; locks it against regressions) (RT#126990, GH#15,
    fabzzap)
  - Document that the bundled DBIx::Class::* helper modules require
    DBIx::Class at runtime (intentionally not a prereq, to avoid a
    dependency cycle)
  - Document the limits of the default injection_guard and the safe
    handling of untrusted input (bind values, quote_char) (RT#117059)
  - generate() in scalar context now interpolates each placeholder
    exactly once, so a bind value that contains a '?' no longer
    swallows the following bind values
  - Reword the "removed in 2.0" deprecation warnings to "a future
    version", since those code paths still ship in the 2.x line
  - Do not warn when a plain hashref is passed as a bind value to
    insert() - this is how Postgres json/jsonb columns are supplied
    (GH#18, RT#120676, kraih)
  - Speed up the top-level special-op check with a single precompiled
    regex instead of a List::Util::first scan (GH#21, larryl)
  - Fix ExtraClauses POD NAME/synopsis to the real package name and
    the documented plugin('+ExtraClauses') usage
  - Correct the 'pending%' bind value in the -like POD example
    (GH#24, lucas1)
  - SQL::Abstract::Tree: preserve a real 0 / '0' bind value in
    fill_in_placeholder() instead of blanking it (was `|| ''`)
    (RT#125760)
  - Add DBIx::Class::SQLMaker::Role::SQLA2Passthrough to Makefile.PL
    no_index so the proof-of-concept role is not indexed under
    SQL-Abstract on CPAN
  - Refactor subclass method override grandfathering system
  - Remove old SQLA::More compat code (will restore a better set later)
  - Fix for empty 'order by' to ->select (dakkar)
  - Remove vestigial possibly-special-op name conversion, which stopped
    special_ops regexes matching op names containing underscores (RT#143837)
  - Fixes for _where_field_IN/BETWEEN overrides (jjatria)
  - Correctly handle literal passed to insert from/values key
  - Make puke() and belch() methods, ala the SQLA::Classic change
  - Syntax error fixes for 5.8 from ilmari

2.000001 - 2021-01-23
  - Remove Module::Runtime requirement

2.000000 - 2021-01-21
  - Collapse custom join conditions back to something DBIC might understand

1.90_03 - 2019-10-13
   - Add proof of concept DBIx::Class::SQLMaker::Role::SQLA2Passthrough
   - _where_field_IN/BETWEEN are documented as subclassable; feature restored

1.90_02 - 2019-10-12
    - fix DBIC ident op expander compat wrapper to handle call as unop

1.90_01 - 2019-10-09
    - Complete overhaul of the internals, see the SQL::Abstract::Reference
      docs to understand the new implementation's affordances.

1.87 - 2020-06-02
    - Add runtime dependency on Test::Deep and Test::Builder::Module for
      SQL::Abstract::Test (RT#131623)

1.86 - 2018-07-09
    - Remove obsolete documentation about arrayrefref as the $source
      argument for ->select (removed in version 1.74)
    - Factor out the field list part of SELECT for subclassability (GH#13)
    - Do not replace literal '0' with empty string in WHERE clauses (GH#14)

1.85 - 2018-01-27
    - Restore perl version requirement missed in the Distar port
    - Factor out the SET ... part of UPDATE for subclassability (GH#12)

1.84 - 2017-04-03
    - Restore 'dynamic_config => 0' missed in the Distar port

1.83 - 2017-04-03
    - Support for DELETE ... RETURNING (GH#9)
    - Port to Distar

revision 1.82  2017-03-20
-------------------------
    - Add explicit dependency on Sub::Quote (GH#8)
    - Fix syntax errors in ORDER BY docs (GH#7)

revision 1.81_01  2017-02-28
----------------------------
    - Fix order clauses with bind parameters in ->where
    - Fix ->insert($table, \@values) with >26 values (RT#112684)
    - Teach ::Tree that ILIKE (PostgreSQL) and REGEXP (MySQL) are binary ops
    - Support for UPDATE ... RETURNING
    - Documentation improvements for ORDER BY

revision 1.81  2014-10-25
----------------------------
    - Fix overly-enthusiastic parenthesis unroller (RT#99503)

revision 1.80  2014-10-05
----------------------------
    - Fix erroneous behavior of is_literal_value($) wrt { -ident => ... }
    - Explicitly croak on top-level special ops (they didn't work anyway)

revision 1.79  2014-09-25
----------------------------
    - New exportable functions: is_literal_value($) and is_plain_value($)
    - New attribute 'escape_char' allowing for proper escape of quote_chars
      present in an identifier
    - Deprecate { "" => \... } constructs
    - Treat { -value => undef } as plain undef in all cases
    - Explicitly throw on { -ident => undef }

revision 1.78  2014-05-28
----------------------------
    - Fix parsing of binary ops to correctly take up only a single LHS
      element, instead of gobbling up the entire parse-to-date
    - Explicitly handle ROW_NUMBER() OVER as the snowflake-operator it is
    - Improve signatures/documentation of is_same_sql_bind / eq_sql_bind
    - Retire script/format-sql - the utility needs more work to be truly
      end-user convenient

revision 1.77  2014-01-17
----------------------------
    - Reintroduce { -not => undef } column operator (regression from 1.75)

revision 1.75  2013-12-27
----------------------------
    - *UPCOMING INCOMPATIBLE BUGFIX*: SQLA used to generate incorrect SQL
      on undef-containing lists fed to -in and -not_in. An exception will
      be raised for a while before properly fixing this, to avoid quiet
      but subtle changes to query results in production
    - Deprecate and warn when supplying an empty arrayref to like/not_like
      operators (likely to be removed before 2.0)

    - Warn when using an inequality operator with a multi-value array to
      arrive at what amounts to a 1=1 condition (no pre-2.0 plans to fix
      this behavior due to backwards comp concerns)
    - Fix false negative comparison of ORDER BY <function> ASC
    - More improvements of incorrect parsing (placeholder at end of list
      element)
    - Fix typos in POD and comments (RT#87776)
    - Augment -not_bool example with nesting (RT#89601)

revision 1.74  2013-06-04
----------------------------
    - Fix insufficient parenthesis unroll during operator comparison
    - 'ORDER BY foo' and 'ORDER BY foo ASC' are now considered equal
      by default (with a switch to reenable old behavior when necessary)
    - Change parser to not eagerly slurp RHS expressions it doesn't recognize

revision 1.73  2012-07-10
----------------------------
    - Fix parsing of ORDER BY foo + ?
    - Stop filling in placeholders in `format-sql` since it does not support
      passing values for them anyway
    - Fix parsing of NOT EXISTS
    - Fix over-eager parenthesis unrolling
    - Fix deep recursion warnings while parsing obnoxiously long sql statements
    - Fix incorrect comparison of malformed lists
    - Fix incorrect reporting of mismatch-members in SQLA::Test
    - Migrate the -ident operator from DBIC into SQLA
    - Migrate the -value operator from DBIC into SQLA

revision 1.72  2010-12-21
----------------------------
    - Extra checks of search arguments for possible SQL injection attacks
    - Remove excess parentheses in debug SQL
    - Fix parsing of foo.* in SQLA::Tree
    - Fix bindtype fail when using -between with arrayrefref literals
    - Add handling for NULL for -in
    - The -nest operator has entered semi-deprecated status and has been
      undocumented. Please do not use it in new code

revision 1.71  2010-11-09
----------------------------
    - Add EXECUTING for clarity of long running SQL
    - Add "squash_repeats" option to fix it such that repeated SQL gets ellided
      except for placeholders
    - Highlight transaction keywords
    - Highlight HAVING
    - Leave quotes from DBIC in bindargs
    - Add error checking on "profile" for SQLA::Tree
    - Hide bulk inserts from DBIx::Class
    - Fix missing doc (RT#62587)
    - Format functions in MySQL-friendly manner foo( ... ) vs foo ( ... )

revision 1.69  2010-10-22
----------------------------
    - Add quotes for populated placeholders and make the background
      magenta instead of cyan
    - Color and indent pagination keywords
    - Fix a silly bug which broke placeholder fill-in in DBIC
    - Installs format-sql to format SQL passed in over STDIN
    - Switch the tokenizer to precompiled regexes (massive speedup)
    - Rudimentary handling of quotes ( 'WHERE' vs WHERE )
    - Fix extended argument parsing by IN/BETWEEN
    - Add proper handling of lists (foo,bar,?)
    - Better handling of generic -function's during AST construction
    - Special handle IS NOT? NULL
    - Make sure unparse() does not destroy a passed in \@bindargs
    - Support ops with _'s in them (valid in Oracle)
    - Properly parse both types of default value inserts
    - Allow { -func => $val } as arguments to UPDATE

revision 1.68  2010-09-16
----------------------------
    - Document methods on Tree
    - Add affordances for color coding placeholders
    - Change ::Tree::whitespace to whitespace_keyword

revision 1.67_03  2010-09-11
----------------------------
    - Add docs for SQL::Abstract::Tree->new
    - correcty merge profile and parameters
    - added fill_in_placeholders option for excellent copy/pasta

revision 1.67_02  2010-09-08
----------------------------
    - rename DBIx::Class::Storage::PrettyPrinter to DBIx::Class::Storage::Debug::PrettyPrint
    - decreased a lot of indentation from ::Tree
    - cleaned up handling of newlines inside of parens

revision 1.67_01  2010-09-06
----------------------------
    - Add SQL::Abstract::Tree
    - Add unindexed DBIx::Class::Storage::PrettyPrinter
    - Better documentation of undef/NULL in where clause
    - Depend on bugfixed Module::Install (now again installs
      on old < 5.8.3 perls)

revision 1.67  2010-05-31 14:21 (UTC)
----------------------------
    - Fix SQL::Test failure when first chunk is an unrecognized
      literal
    - Generic -not operator tests
    - More columns-bindtype assertion checks

revision 1.66  2010-04-27 02:44 (UTC)
----------------------------
    - Optimized the quoting mechanism, winning nearly 10%
      speedup on repeatable sql generation

revision 1.65  2010-04-11 19:59 (UTC)
----------------------------
    - Rerelease last version to not include .svn files
      and grab MANIFEST.SKIP from DBIx::Class so it
      won't happen again

revision 1.64  2010-04-11 16:58 (UTC)
----------------------------
    - Fix multiple generic op handling regressions by
      reverting the auto-equality assumption (turned out
      to be a very very bad idea)

revision 1.63  2010-03-24 09:56 (UTC)
----------------------------
    - Add ILIKE to the core list of comparision ops

revision 1.62  2010-03-15 11:06 (UTC)
----------------------------
    - Fixed open outer parens for a multi-line literal
    - Allow recursively-nested column-functions in WHERE
    - Bumped minimum perl to 5.6.2 and changed tests to
      rely on core dependencies

revision 1.61  2010-02-05 16:28 (UTC)
----------------------------
    - Allow INSERT to take additional attributes
    - Support for INSERT ... RETURNING
    - Another iteration of SQL::Abstract::Test fixes and improvements

revision 1.60  2009-09-22 11:03 (UTC)
----------------------------
    - fix a well masked error in the sql-test tokenizer

revision 1.59  2009-09-22 08:39 (UTC)
----------------------------
    - fixed a couple of untrapped undefined warnings
    - allow -in/-between to accept literal sql in all logical
      variants - see POD for details
    - unroll multiple parenthesis around IN arguments to accomodate
      crappy databases

revision 1.58  2009-09-04 15:20 (UTC)
----------------------------
    - expanded the scope of -bool and -not_bool operators
    - added proper testing support

revision 1.57  2009-09-03 20:18 (UTC)
----------------------------
    - added -bool and -not_bool operators

revision 1.56  2009-05-30 16:31 (UTC)
----------------------------
    - support for \[$sql, @bind] in order_by clauses e.g.:
      { -desc => \['colA LIKE ?', 'somestring'] }

revision 1.55  2009-05-17 22:54 (UTC)
----------------------------
    - make sure that sql generation does not mutate the supplied
      where condition structure

revision 1.54  2009-05-07 17:23 (UTC)
----------------------------
    - allow special_operators to take both code refs and method names
      (makes it possible to properly subclass the builtin ones)

revision 1.53  2009-04-30 14:58 (UTC)
----------------------------
    - make sure hash keys are sorted in all search sub-conditions
    - switch installer from EU::MM to M::I

revision 1.52  2009-04-28 23:14 (UTC)
----------------------------
    - allow -between to handle [\"", \""] and \["", @bind]
    - allow order_by to handle -asc|desc => [qw/colA colB/] (artifact from DBIx::Class)
    - more tests and clearing up of some corner cases
    - t/10test.t does not run by default (developer only, too cpu intensive)

----------------------------
revision 1.51  2009-03-28 10:00 (UTC)
    - fixed behavior of [-and => ... ] depending on the current
      condition scope. This introduces backwards comp with 1.24

----------------------------
revision 1.50  2009-03-10 12:30 (UTC)
    - fixed the problem with values() not behaving the same as the rest of the code (RT#43483)
    - fixed interjecting arrayrefref into a where clause
    - added value-only insert test with a literal SQL snippet
    - cleanup and enhancement of t/03values.t
    - better handling of borked SQL in tests
    - deal properly with parentheses in is_same_sql_bind()
    - fixed test subs (is_same_*) in SQL::Abstract::Test to return the correct test value
    - do not version MANIFEST

    Version 1.50 was a major internal refactoring of SQL::Abstract.
    Great care has been taken to preserve the published behavior
    documented in previous versions in the 1.* family; however,
    some features that were previously undocumented, or behaved.
    differently from the documentation, had to be changed in order
    to clarify the semantics. Hence, client code that was relying
    on some dark areas of SQL::Abstract v1.* might behave differently
    in v1.50.

----------------------------
revision 1.49_04  2009-03-03
    - add support for a [\%column_meta => value] bind value format

----------------------------
revision 1.49_03  2009-02-17
    - clarify syntax of \['...', @bind] when used with a bindtype
      of 'columns'

----------------------------
revision 1.49_02  2009-02-16
    - added an AST-aware SQL::Abstract::Test library for sql syntax tests
    - vastly expanded test coverage
    - support for the { operator => \'...'|\['...', @bind] } syntax
      allowing to embed arbitrary operators on the LHS
    - fixed multiple regressions wrt DBIx::Class

----------------------------
revision 1.49_01  2009-02-11
    - support for literal SQL through the [$sql, bind] syntax.
    - added -nest1, -nest2 or -nest_1, -nest_2, ...
    - optional support for array datatypes
    - defensive programming : check arguments to functions/methods
    - fixed bug with global logic of -and/-or (no side-effects any more)
    - changed logic for distributing an op over arrayrefs
    - fixed semantics of  _bindtype on array args
    - dropped the _anoncopy of the %where tree. No longer necessary.
    - dropped the _modlogic function
    - Make col => [] and col => {$op => [] } DTRT or die instead of generating
      broken SQL. Added tests for this.
    - Added { -desc => 'column' } order by support
    - Tiny "$_"-related fix for { -desc => 'columns'} order by support
      tests + docs

----------------------------
revision 1.20
date: 2005/08/18 18:41:58;  author: nwiger;  state: Exp;  lines: +104 -50
- added patch from Dan Kubb enabling quote_char and name_sep options
- added patch from Andy Grundman to enhance _anoncopy for deep refs
----------------------------
revision 1.19
date: 2005/04/29 18:20:30;  author: nwiger;  state: Exp;  lines: +34 -20
added _anoncopy to prevent destroying original; updated docs
----------------------------
revision 1.18
date: 2005/03/07 20:14:12;  author: nwiger;  state: Exp;  lines: +201 -65
added support for -and, -or, and -nest; see docs for details
----------------------------
revision 1.17
date: 2004/08/25 20:11:27;  author: nwiger;  state: Exp;  lines: +58 -46
added patch from Eric Kolve to iterate over all hashref elements
----------------------------
revision 1.16
date: 2004/06/10 17:20:01;  author: nwiger;  state: Exp;  lines: +178 -12
added bindtype param to allow this to work with Orasuck 9+
----------------------------
revision 1.15
date: 2003/11/05 23:40:40;  author: nwiger;  state: Exp;  lines: +18 -6
several bugfixes, including _convert being applied wrong and
the edge case field => { '!=', [qw/this that/] } not working
----------------------------
revision 1.14
date: 2003/11/04 21:20:33;  author: nwiger;  state: Exp;  lines: +115 -34
added patch from Philip Collins, and also added 'convert' option
----------------------------
revision 1.13
date: 2003/05/21 17:22:29;  author: nwiger;  state: Exp;  lines: +230 -74
added "IN" and "BETWEEN" operator support, as well as "NOT"
modified where() to support ORDER BY, and fixed some bugs too
added PERFORMANCE and FORMBUILDER doc sections
fixed several bugs in _recurse_where(), it now works as expected
added test suite, many thanks to Chas Owens
modified all hash access to return keys sorted, to allow cached queries
----------------------------
revision 1.12
date: 2003/05/08 20:10:56;  author: nwiger;  state: Exp;  lines: +181 -96
1.11 interim checking; major bugfixes and order_by, 1.12 will go to CPAN
----------------------------
revision 1.11
date: 2003/05/02 00:07:30;  author: nwiger;  state: Exp;  lines: +52 -12
many minor enhancements to add querying flexibility
----------------------------
revision 1.10
date: 2002/09/27 18:06:25;  author: nwiger;  state: Exp;  lines: +6 -2
added precatch for messed up where string
----------------------------
revision 1.9
date: 2002/08/29 18:04:35;  author: nwiger;  state: Exp;  lines: +4 -3
CPAN
----------------------------
revision 1.8
date: 2001/11/07 22:18:12;  author: nwiger;  state: Exp;  lines: +31 -14
added embedded SCALAR ref capability to insert() and update()
----------------------------
revision 1.7
date: 2001/11/07 01:23:28;  author: nwiger;  state: Exp;  lines: +3 -3
damn uninit warning
----------------------------
revision 1.6
date: 2001/11/06 21:09:44;  author: nwiger;  state: Exp;  lines: +14 -6
oops, had to actually *implement* the order by for select()!
----------------------------
revision 1.5
date: 2001/11/06 03:13:16;  author: nwiger;  state: Exp;  lines: +43 -4
lots of docs
----------------------------
revision 1.4
date: 2001/11/06 03:07:42;  author: nwiger;  state: Exp;  lines: +16 -7
added extra layer of ()'s to ensure correct semantics on AND
----------------------------
revision 1.3
date: 2001/11/06 01:16:31;  author: nwiger;  state: Exp;  lines: +11 -10
updated all statements so that they use wantarray to just return SQL if asked
----------------------------
revision 1.2
date: 2001/10/26 22:23:46;  author: nwiger;  state: Exp;  lines: +112 -15
added scalar ref for SQL verbatim in where, fixed bugs, array ref, docs
----------------------------
revision 1.1
date: 2001/10/24 00:26:43;  author: nwiger;  state: Exp;
Initial revision