Re: [SECURITY] DoS attack on backend possible (was: Re:

Поиск
Список
Период
Сортировка
От Alvar Freude
Тема Re: [SECURITY] DoS attack on backend possible (was: Re:
Дата
Msg-id 2762930000.1029671721@gnarzelwicht.delirium-arts.de
обсуждение исходный текст
Ответ на Re: [SECURITY] DoS attack on backend possible (was: Re:  (ngpg@grymmjack.com)
Ответы Re: [SECURITY] DoS attack on backend possible
Список pgsql-hackers
Hi,

-- ngpg@grymmjack.com wrote:

>  What about checking the input for backslash, quote,
> and double quote (\'")?  If you are not taking care of those in input
> then  crashing the backend is going to be the least of your worries.

with Perl and *using placeholders and bind values*, the application
developer has not to worry about this. So, usually I don't check the
values in my applications (e.g. if only values between 1 and 5 are
allowed and under normal circumstances only these are possible), it's the
task of the database (check constraint).


Ciao Alvar


--
** ODEM ist für den poldi Award nominiert! http://www.poldiaward.de/
** http://www.poldiaward.de/index.php?display=detail&cat=audi&item=24
** http://odem.org/
** Mehr Projekte: http://alvar.a-blast.org/




В списке pgsql-hackers по дате отправления:

Предыдущее
От: Peter Eisentraut
Дата:
Сообщение: Re: Open 7.3 items
Следующее
От: Þórhallur Hálfdánarson
Дата:
Сообщение: Re: Remove implicit unique index creation on SERIAL columns?