Ivan Sergio Borgonovo <mail@xxxxxxxxxxxxxxx> writes: > I may sound naive but having a way to protect the DB from this kind > of injections looks as a common problem, I'd thought there was > already a common solution. Use prepared statements. regards, tom lane