Re: Printf and quoting in general, SQL injection in particular [was: Emacs Modular Configuration: the preferable way]

[Eli Zaretskii <eliz@gnu.org>]

> Date: Tue, 22 Jun 2021 15:37:46 +0300
> From: Jean Louis <bugs@gnu.support>
> Cc: help-gnu-emacs@gnu.org
> 
> >   (string-equal "~/foo" "/home/users/eliz/foo") => nil
> >   (file-equal-p "~/foo" "/home/users/eliz/foo") => t
> > 
> > and also:
> > 
> >   (string-equal "/home/users/eliz/foo" "/server/homes/users/eliz/foo") => nil
> >   (file-equal-p "/home/users/eliz/foo"
> >   "/server/homes/users/eliz/foo") => t
> 
> The above example is insightful. Though it does not change the fact
> that even `file-equal-p' function uses strings as its parameters.

We _represent_ file names as strings, but they are not normal strings.
Just like characters are represented as integers, but they are not
just simple integers, they have additional special attributes and
behaviors.