Re: varchar lengths - Mailing list pgsql-general

From Massa, Harald Armin
Subject Re: varchar lengths
Date
Msg-id AANLkTimToFRc9SG0o9A8-i+f78Nu+kXYOPwHsa2SbRaP@mail.gmail.com
Whole thread Raw
In response to Re: varchar lengths  (Arjen Nienhuis <a.g.nienhuis@gmail.com>)
List pgsql-general
Arjen,

> You do need to be wary of malicious users who put a first name of a
>few hundred megabytes.

yes, but if that "my first name is a video" hits the database, it is
allready to late, isn't it?

If it is open to the public, input should be sanitized WAY earlier;
and for an internal application: please compare "number of users
trying to insert a video for their first name" to "number of customers
being annoyed as their name is abbreviated"

Harald

--
GHUM GmbH
Harald Armin Massa
Spielberger Straße 49
70435 Stuttgart
0173/9409607

Amtsgericht Stuttgart, HRB 734971
-
persuadere.
et programmare

pgsql-general by date:

Previous
From: Grzegorz Jaśkiewicz
Date:
Subject: Re: Reclaiming space
Next
From: William Temperley
Date:
Subject: Triggers and locking