On Sun, Jan 20, 2013 at 4:59 PM, Tom Lane <tgl@sss.pgh.pa.us> wrote:
> Magnus Hagander <magnus@hagander.net> writes:
>> + PGresult *res = ExecuteSqlQueryForSingleRow(fout, "SELECT pg_is_in_recovery()");
>
> That function call needs to be schema-qualified for security.
Applied and backpatched, with that fix and a sentence in the
documentation added.
--Magnus HaganderMe: http://www.hagander.net/Work:http://www.redpill-linpro.com/