the call specifies data types and values for each such symbol.
   <TT
CLASS="PARAMETER"
>read_only</TT
> and <TT
CLASS="PARAMETER"
>count</TT
> have
   the same interpretation as in <CODE
CLASS="FUNCTION"
>SPI_execute</CODE
>.
  </P
><P
>   The main advantage of this routine compared to
   <CODE
CLASS="FUNCTION"
>SPI_execute</CODE
> is that data values can be inserted
   into the command without tedious quoting/escaping, and thus with much
   less risk of SQL-injection attacks.
  </P
><P
>   Similar results