Re: [HACKERS] Disallowing multiple queries per PQexec()

Поиск
Список
Период
Сортировка
От Andreas Karlsson
Тема Re: [HACKERS] Disallowing multiple queries per PQexec()
Дата
Msg-id 5bb41454-9773-c6c8-3cf3-29e07d030f00@proxel.se
обсуждение исходный текст
Ответ на Re: [HACKERS] Disallowing multiple queries per PQexec()  (Bruce Momjian <bruce@momjian.us>)
Ответы Re: [HACKERS] Disallowing multiple queries per PQexec()  (Andres Freund <andres@anarazel.de>)
Список pgsql-hackers
On 02/28/2017 03:13 PM, Bruce Momjian wrote:
> I might have added that one; the text is:
>
>     Consider disallowing multiple queries in PQexec()
>     as an additional barrier to SQL injection attacks
>
> and it is a "consider" item.  Should it be moved to the Wire Protocol
> Changes / v4 Protocol section or removed?

A new protocol version wont solve the breakage of the C API, so I am not 
sure we can ever drop this feature other than by adding a new function 
something in the protocol to support this.

Andreas



В списке pgsql-hackers по дате отправления:

Предыдущее
От: Andrew Dunstan
Дата:
Сообщение: Re: [HACKERS] btree_gin and btree_gist for enums
Следующее
От: Aleksander Alekseev
Дата:
Сообщение: Re: [HACKERS] [POC] hash partitioning