to escape or not to - Mailing list pgsql-novice

From Jean-Yves F. Barbier
Subject to escape or not to
Date
Msg-id 20110622154907.621ed4e1@anubis.defcon1
Whole thread Raw
Responses Re: to escape or not to
List pgsql-novice
Hi list,

As of '39.5: plpgsql-statements', it is said that using '$n' instead of a named
variable is prefered and less sensitive to a SQL injection.

Does it really mean if I use $n I don't have to 'quote_xxxxxx' any of these
variables?

JY
--
The 80's -- when you can't tell hairstyles from chemotherapy.

pgsql-novice by date:

Previous
From: Leon Starr
Date:
Subject: How to trap error: nextval: reached maximum value of sequence
Next
From: "Jean-Yves F. Barbier"
Date:
Subject: change to session_user in a security definer function