Postgres User wrote:
> im trying to allow the client to pass a varchar param into my
> function, and want to avoid any parsing of the parameter inside the
> function, or code to build a sql string.
>
> if the function can use this code, it will be compiled and optimized
> (unlike a dynamic sql stirng)
>
> select * from mytable where fielda ~ p_param
No, you should never let users specify raw regex. at best they can
hog down your server. Regex is a state engine and you can create
endless loops.
Maybe we can see the overall picture of your query?
Regards
Tino
