Re: Problem with accesing Oracle from plperlu functionwhen using remote pg client.

Поиск
Список
Период
Сортировка
От Jonah H. Harris
Тема Re: Problem with accesing Oracle from plperlu functionwhen using remote pg client.
Дата
Msg-id 36e682920903161425p50a78c55raa21e48c24f83049@mail.gmail.com
обсуждение исходный текст
Ответ на Re: Problem with accesing Oracle from plperlu functionwhen using remote pg client.  (Heikki Linnakangas <heikki.linnakangas@enterprisedb.com>)
Список pgsql-hackers
On Mon, Mar 16, 2009 at 5:22 PM, Heikki Linnakangas <heikki.linnakangas@enterprisedb.com> wrote:
Hmm, I wonder if you could do something malicious with it. Like, run a query along the lines of "SELECT $$ (HOST=10.0.0.123) $$, connect()... " to divert the connection to another server.

Not any more malicious than a connection string in and of itself.   It's only used as a hierarchical name-value pair string, nothing is executed from it.

--
Jonah H. Harris, Senior DBA
myYearbook.com

В списке pgsql-hackers по дате отправления:

Предыдущее
От: Heikki Linnakangas
Дата:
Сообщение: Re: Problem with accesing Oracle from plperlu functionwhen using remote pg client.
Следующее
От: Robert Haas
Дата:
Сообщение: Re: small but useful patches for text search