Re: Best practices for protect applications agains Sql injection. - Mailing list pgsql-general

From pepone.onrez
Subject Re: Best practices for protect applications agains Sql injection.
Date
Msg-id 198501d60801231453hd42fb74o9f191a2ec031e28@mail.gmail.com
Whole thread Raw
In response to Re: Best practices for protect applications agains Sql injection.  (brian <brian@zijn-digital.com>)
List pgsql-general
Thanks all you, i will use prepared queries for all my functions after now.

BTW i using Qt-4 postgres drivers from c++  not php. I launch this question because i read that each day more are more applications are compromised with this class of attacks.

Thanks again.

On Jan 23, 2008 9:45 PM, brian <brian@zijn-digital.com> wrote:
pepone.onrez wrote:
> Hi all
>
> I interesting in the protect my applications that use postgresql as is
> database backend from Sql Injections attacks, can any recommend me best
> pratices or references to protected postgres from this kind of malicious
> users.
>

What are you using on the application side? For instance, with PHP, you
might want to look into the PEAR MDB2 package (specifically, the
prepared statements).

brian

---------------------------(end of broadcast)---------------------------
TIP 5: don't forget to increase your free space map settings

pgsql-general by date:

Previous
From: Tom Hart
Date:
Subject: Re: ascii to utf-8
Next
From: Tom Hart
Date:
Subject: Re: ascii to utf-8