Postgres Pro
Downloads
Home   >   mailing lists

Re: design, plpgsql and sql injection in dynamically generated sql - Mailing list pgsql-general

From Ivan Sergio Borgonovo
Subject Re: design, plpgsql and sql injection in dynamically generated sql
Date
Msg-id 20090818125929.42c8046d@dawn.webthatworks.it
Whole thread Raw
In response to Re: design, plpgsql and sql injection in dynamically generated sql  (Pavel Stehule <pavel.stehule@gmail.com>)
Responses Re: design, plpgsql and sql injection in dynamically generated sql  (Pavel Stehule <pavel.stehule@gmail.com>)
List pgsql-general
Tree view 
On Tue, 18 Aug 2009 12:38:49 +0200
Pavel Stehule <pavel.stehule@gmail.com> wrote:

> some unsafe function:

I suspected something similar.

I think many would appreciate if you put these examples here
http://www.okbob.blogspot.com/2008/06/execute-using-feature-in-postgresql-84.html
and substitute the int example there with the text one.

thanks

--
Ivan Sergio Borgonovo
http://www.webthatworks.it

pgsql-general by date:

Previous
From: Sam Mason
Date:
Subject: Re: 2 versions of Postgres on the same machine
Next
From: Sam Mason
Date:
Subject: Re: Best database model for canvassing (and analysing) opinion