Re: Protection from SQL injection

Поиск
Список
Период
Сортировка
От Scott Marlowe
Тема Re: Protection from SQL injection
Дата
Msg-id dcc563d10804261721l68d7dcd1u329d796a8aa8a9b4@mail.gmail.com
обсуждение исходный текст
Ответ на Re: Protection from SQL injection  (Thomas Kellerer <spam_eater@gmx.net>)
Ответы Re: Protection from SQL injection  (Tom Lane <tgl@sss.pgh.pa.us>)
Список pgsql-sql
On Sat, Apr 26, 2008 at 3:32 PM, Thomas Kellerer <spam_eater@gmx.net> wrote:
> Thomas Mueller wrote on 26.04.2008 18:32:
>
> > Literals can still be used when using query tools, or in applications
> considered 'safe'.
> >
>  I fail to see how the backend could distinguish between a query sent by a
> query tool and a query sent by an "application".

Wouldn't it be much simpler to have a version of the libpq client lib
that only understands prepared queries?


В списке pgsql-sql по дате отправления:

Предыдущее
От: Thomas Kellerer
Дата:
Сообщение: Re: Protection from SQL injection
Следующее
От: Tom Lane
Дата:
Сообщение: Re: Protection from SQL injection