Re: SQL injection - Mailing list pgsql-general

From Jim C. Nasby
Subject Re: SQL injection
Date
Msg-id 20051101221110.GL20349@pervasive.com
Whole thread Raw
In response to Re: SQL injection  (Martijn van Oosterhout <kleptog@svana.org>)
List pgsql-general
On Tue, Nov 01, 2005 at 11:00:26PM +0100, Martijn van Oosterhout wrote:
> It's a pity the protocol doesn't have a single shot prepare/bind
> command which would allow you to send the values out-of-line (no
> quoting issues) but still provide them at the planning/optimising stage
> to get good plans. Ah well, can't have everything.

Is there any reason that couldn't be added? Sounds like it might make a
good newbie TODO...
--
Jim C. Nasby, Sr. Engineering Consultant      jnasby@pervasive.com
Pervasive Software      http://pervasive.com    work: 512-231-6117
vcard: http://jim.nasby.net/pervasive.vcf       cell: 512-569-9461

pgsql-general by date:

Previous
From: "Jim C. Nasby"
Date:
Subject: Re: SQL injection
Next
From: "Jim C. Nasby"
Date:
Subject: Re: PostgreSQL on 64-bit operating systems