Parameters used together with quotes are ignored

[mariuszrak]

runQuery_ $ sqlSelect "users" $ do
  sqlWhere $ "name = "<?> "Jonathan" 
  sqlResult "id"

will execute a query select id from users where name='Jonathan'

runQuery_ $ sqlSelect "users" $ do
  sqlWhere $ "name = '"<?> "Jonathan" <+> "'"
  sqlResult "id"

will execute a query select id from users where name='$1'
'Jonathan' part will not be used at all. But I'll get id of user with name '$1' if there is one.

Probably no one would use strings like that - but we actually hit this issue with filtering on time:

sqlWhere $ "time >= (NOW() - interval '"<?> durationSecs <+>" seconds'"