Re: Re: lo wrappers - still working on it

Поиск
Список
Период
Сортировка
От Scott Holmes
Тема Re: Re: lo wrappers - still working on it
Дата
Msg-id 200107041638.JAA01794@scotts.mynetwork.net
обсуждение исходный текст
Ответ на Re: Re: lo wrappers - still working on it  (Tom Lane <tgl@sss.pgh.pa.us>)
Ответы Re: Re: lo wrappers - still working on it  (Tom Lane <tgl@sss.pgh.pa.us>)
Список pgsql-general
> If you are intent on installing such a security hole into your
> system, you can define ALLOW_DANGEROUS_LO_FUNCTIONS in config.h
> when you build the server.  But God help you if any unfriendlies
> get access to your database.
>
>             regards, tom lane

That doesn't sound the least bit encouraging and as the application is for
legal case management and this particular functionality is for maintaining
legal documents, allowing such security holes is a bad idea.  I'm now
wondering if the PHP functions suffer from the same security risks.

Are there any issues like this using the client side libpq.dll?  Is it
necessary to install the entire postgresql client package on the NTs or can I
get by with just libpq.dll?  I note that it imports from only WSOCK32.dll and
KERNEL32.dll, but as I've mentioned, my knowledge of C is minimal.


В списке pgsql-general по дате отправления:

Предыдущее
От: Philip Molter
Дата:
Сообщение: Re: Determining scan types
Следующее
От: "Chuck Shunk"
Дата:
Сообщение: Remote queries