Re: Protection from SQL injection - Mailing list pgsql-hackers

From Andrew Sullivan
Subject Re: Protection from SQL injection
Date
Msg-id 20080501154703.GD6482@commandprompt.com
Whole thread Raw
In response to Re: Protection from SQL injection  (Tom Lane <tgl@sss.pgh.pa.us>)
Responses Re: Protection from SQL injection
List pgsql-hackers
On Thu, May 01, 2008 at 11:26:21AM -0400, Tom Lane wrote:
> 
> 1. Inexpensive to implement;
> 2. Unlikely to break most applications;
> 3. Closes off a fairly large class of injection attacks.
> 
> The cost/benefit ratio looks pretty good (unlike the idea that started
> this thread...)

That's a much more elegant way of putting what I thought.  Thanks,
Tom.

A

-- 
Andrew Sullivan
ajs@commandprompt.com
+1 503 667 4564 x104
http://www.commandprompt.com/


pgsql-hackers by date:

Previous
From: Tom Lane
Date:
Subject: Re: Protection from SQL injection
Next
From: Simon Riggs
Date:
Subject: Re: Internal design of MERGE, with Rules