Search Postgresql Archives

Re: How does one make the following psql statement sql-injection resilient?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Subject: Re: How does one make the following psql statement sql-injection resilient?
From: "David G. Johnston" <david.g.johnston@xxxxxxxxx>
Date: Thu, 19 Mar 2015 12:46:10 -0700
Cc: Andy Colson <andy@xxxxxxxxxxxxxxx>, "pgsql-general@xxxxxxxxxxxxxx" <pgsql-general@xxxxxxxxxxxxxx>
In-reply-to: <20150319194327.GM3636@alvh.no-ip.org>

On Thu, Mar 19, 2015 at 12:43 PM, Alvaro Herrera <alvherre@xxxxxxxxxxxxxxx> wrote:

David G. Johnston wrote:

> Except that server "COPY" only is documented to accept a "query" that
> begins with either SELECT or VALUES :(
>
> I hereby voice my desire for EXECUTE to be usable as well.

Feel free to submit a patch ...

I get your point though if anyone else wants this before 2017 they shouldn't count on me.

David J.

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Follow-Ups:
- Re: How does one make the following psql statement sql-injection resilient?
  - From: David G. Johnston

References:
- How does one make the following psql statement sql-injection resilient?
  - From: David G. Johnston
- Re: How does one make the following psql statement sql-injection resilient?
  - From: Andy Colson
- Re: How does one make the following psql statement sql-injection resilient?
  - From: Andy Colson
- Re: How does one make the following psql statement sql-injection resilient?
  - From: David G. Johnston
- Re: How does one make the following psql statement sql-injection resilient?
  - From: Alvaro Herrera
- Re: How does one make the following psql statement sql-injection resilient?
  - From: David G. Johnston
- Re: How does one make the following psql statement sql-injection resilient?
  - From: David G. Johnston
- Re: How does one make the following psql statement sql-injection resilient?
  - From: Alvaro Herrera

Prev by Date: Re: How does one make the following psql statement sql-injection resilient?
Next by Date: Re: regclass and format('%I')
Previous by thread: Re: How does one make the following psql statement sql-injection resilient?
Next by thread: Re: How does one make the following psql statement sql-injection resilient?
Index(es):
- Date
- Thread

[Index of Archives] [Postgresql Jobs] [Postgresql Admin] [Postgresql Performance] [Linux Clusters] [PHP Home] [PHP on Windows] [Kernel Newbies] [PHP Classes] [PHP Books] [PHP Databases] [Postgresql & PHP] [Yosemite]