Re: How does one make the following psql statement sql-injection resilient?

Поиск
Список
Период
Сортировка
От David G. Johnston
Тема Re: How does one make the following psql statement sql-injection resilient?
Дата
Msg-id CAKFQuwYkryOa9YbNcRhecBW-NekwOoq4V0haGpYR6m5MS9qxDQ@mail.gmail.com
обсуждение исходный текст
Ответ на Re: How does one make the following psql statement sql-injection resilient?  ("David G. Johnston" <david.g.johnston@gmail.com>)
Список pgsql-general
On Thu, Mar 19, 2015 at 12:46 PM, David G. Johnston <david.g.johnston@gmail.com> wrote:
On Thu, Mar 19, 2015 at 12:43 PM, Alvaro Herrera <alvherre@2ndquadrant.com> wrote:
David G. Johnston wrote:

> Except that server "COPY" only is documented to accept a "query" that
> begins with either SELECT or VALUES :(
>
> I hereby voice my desire for EXECUTE to be usable as well.

Feel free to submit a patch ...

​I get your point though if anyone else wants this before 2017 they shouldn't count on me.

​While I lack in C language skills I do possess wiki editing skills...ToDo item added.

​David J.

В списке pgsql-general по дате отправления:

Предыдущее
От: Jason Dusek
Дата:
Сообщение: Re: regclass and format('%I')
Следующее
От: Matija Lesar
Дата:
Сообщение: Unexpected array_remove results