Search Postgresql Archives

Re: HIPPA (was Re: Anyone know ...)

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

To: Kenneth Downs <ken@xxxxxxxxxx>
Subject: Re: HIPPA (was Re: Anyone know ...)
From: Kevin Hunter <hunteke@xxxxxxxxxxx>
Date: Fri, 09 Mar 2007 13:42:35 -0500
Cc: Ron Johnson <ron.l.johnson@xxxxxxx>, PostgreSQL General List <pgsql-general@xxxxxxxxxxxxxx>
In-reply-to: <45F198F0.1010006@xxxxxxxxxx>
References: <45F0B6CE.7000006@xxxxxxxxxx> <45F0C8AE.7010006@xxxxxxxxxx> <45F0DEBF.9070007@xxxxxxx> <45F15C3B.90905@xxxxxxxxxx> <20070309152511.GJ4883@xxxxxxxxxxxxxxxxxx> <45F18525.3010002@xxxxxxxxxx> <45F191E5.4020307@xxxxxxx> <45F198F0.1010006@xxxxxxxxxx>
User-agent: Thunderbird 2.0b2 (Macintosh/20070116)

What about an SQL injection bug that allows for increased privileges?
Um, web programming 101 is that you escape quotes on user-suppliedinputs. That ends SQL injection.

Pardon my naivete (I'm fairly new to web/DB programming) . . . is thisthe current standard method of protection from SQL injection? How doesit compare to SQL preparation with bound variables?


Kevin

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Follow-Ups:
- Re: HIPPA (was Re: Anyone know ...)
  - From: Kenneth Downs

References:
- Anyone know a good opensource CRM that actually installs with Posgtres?
  - From: Bradley Kieser
- Re: Anyone know a good opensource CRM that actually installs with Posgtres?
  - From: Kenneth Downs
- HIPPA (was Re: Anyone know ...)
  - From: Ron Johnson
- Re: HIPPA (was Re: Anyone know ...)
  - From: Kenneth Downs
- Re: HIPPA (was Re: Anyone know ...)
  - From: Karsten Hilbert
- Re: HIPPA (was Re: Anyone know ...)
  - From: Kenneth Downs
- Re: HIPPA (was Re: Anyone know ...)
  - From: Ron Johnson
- Re: HIPPA (was Re: Anyone know ...)
  - From: Kenneth Downs

Prev by Date: Re: PostgreSQL to Oracle
Next by Date: Re: Sw to generate ER model
Previous by thread: Re: HIPPA (was Re: Anyone know ...)
Next by thread: Re: HIPPA (was Re: Anyone know ...)
Index(es):
- Date
- Thread

[Index of Archives] [Postgresql Jobs] [Postgresql Admin] [Postgresql Performance] [Linux Clusters] [PHP Home] [PHP on Windows] [Kernel Newbies] [PHP Classes] [PHP Books] [PHP Databases] [Postgresql & PHP] [Yosemite]