Text queries

To run a text query, use any of the following functions, passing a string-like object (convertible to string_view) containing valid SQL as the first parameter:

connection::execute or async_execute: these functions run the query and read the generated results into memory.
connection::start_execution and async_start_execution: these functions initiate a text query as a multi-function operation.

Almost any query that may be issued in the mysql command line can be executed using this method. This includes SELECTs, UPDATEs, INSERTs, DELETEs, CREATE TABLEs... In particular, you may start transactions issuing a START TRANSACTION, commit them using COMMIT and rolling them back using ROLLBACK.

Use cases

You should generally prefer prepared statements over text queries. Text queries can be useful for simple, non-parametrized queries:

"START TRANSACTION", "COMMIT" and "ROLLBACK" queries, for transactions.
"SET NAMES utf8mb4" and similar, to set variables for encoding, time zones and similar configuration options.
"CREATE TABLE ..." and similar DDL statements.

If you need to run parametrized SQL, involving user input, you have two options:

Use prepared statements instead of text queries.
If you don't mind using experimental features, you can use client-side SQL formatting to securely compose queries in the client.

	Warning
	SQL injection warning: if you compose queries by concatenating strings without sanitization, your code is vulnerable to SQL injection attacks. Use prepared statements or proper formatting functions instead!

Running multiple queries at once

You can run several semicolon-separated queries in a single execute() call by enabling the handshake_params::multi_queries option. You can find an example here.

Boost C++ Libraries

Text queries

Use cases

Running multiple queries at once