Postgres Pro
Downloads
Home   >   mailing lists

Re: Security Issues: Allowing Clients to Execute SQL in the Backend. - Mailing list pgsql-general

From Hello World
Subject Re: Security Issues: Allowing Clients to Execute SQL in the Backend.
Date
Msg-id CAB8jeL=2gvA6uLu1gpvYjL94qnJdX1wsxPzc3LM51NuPbJK-WA@mail.gmail.com
Whole thread Raw
In response to Re: Security Issues: Allowing Clients to Execute SQL in the Backend.  (Albe Laurenz <laurenz.albe@wien.gv.at>)
Responses Re: Security Issues: Allowing Clients to Execute SQL in the Backend.  (Albe Laurenz <laurenz.albe@wien.gv.at>)
List pgsql-general
Tree view
Hello,

Thank you very much.

Denial of service is indeed a problem. Is there a way to limit the execution time of a request?

I'm using libpq to communicate with the server.

PS. I've just taken a look, it seems I could do some asynchronous queries, time them, then cancel them if they take too long.

http://www.postgresql.org/docs/8.4/static/libpq-cancel.html

pgsql-general by date:

Previous
From: Albe Laurenz
Date:
Subject: Re: Security Issues: Allowing Clients to Execute SQL in the Backend.
Next
From: Willy-Bas Loos
Date:
Subject: importing a messy text file