Martijn van Oosterhout wrote: > However, there is a solution: send the paramters seperate from the > query. In fact, postgres has been able to do that for a while now but > not all interfaces have been made to use it. My guess is that those > other databases you've used were already doing this so didn't see the > issue. I don't know if DBD:Pg does this though, maybe it needs to be > triggered somehow. Actually, this is the case already. When a parameter is explicitly typed as bytea, then libpq's PQexecPrepared is used and the binary contents are passed outside of the query. -- Daniel PostgreSQL-powered mail user agent and storage: http://www.manitou-mail.org