Re: Protection from SQL injection

Поиск
Список
Период
Сортировка
От Scott Marlowe
Тема Re: Protection from SQL injection
Дата
Msg-id dcc563d10804262224l431f0ae3t6c75af94a1ef3876@mail.gmail.com
обсуждение исходный текст
Ответ на Re: Protection from SQL injection  (Tom Lane <tgl@sss.pgh.pa.us>)
Ответы Re: Protection from SQL injection  (Ivan Sergio Borgonovo <mail@webthatworks.it>)
Список pgsql-sql
On Sat, Apr 26, 2008 at 9:58 PM, Tom Lane <tgl@sss.pgh.pa.us> wrote:

>  IIRC there was some discussion recently of providing a mode in which
>  the server would reject PQexec strings containing more than one query.
>  I didn't care for it much at the time, but I think it would provide
>  most of the benefit of these suggestions with far less compatibility
>  or performance hit.

agreed.

And I trust (SQL) code review more than tying the hands of the programmers.

But I've always had the luxury of working with developers who liked me
as a DBA and were willing to do things my way, as far as the DB was
concerned anyway...


В списке pgsql-sql по дате отправления:

Предыдущее
От: Tom Lane
Дата:
Сообщение: Re: Protection from SQL injection
Следующее
От: "Thomas Mueller"
Дата:
Сообщение: Re: Protection from SQL injection