Re: SQL injection - Mailing list pgsql-general

From Ben
Subject Re: SQL injection
Date
Msg-id Pine.LNX.4.64.0510311011110.23246@localhost.localdomain
Whole thread Raw
In response to SQL injection  (Yonatan Ben-Nes <da@canaan.co.il>)
Responses Re: SQL injection  ("Matthew D. Fuller" <fullermd@over-yonder.net>)
List pgsql-general
Maybe I'm not very creative, but it sure seems to me that if you escape your
strings, make sure your numbers are numbers, and your booleans are actually
booleans, then you're protected....

On Mon, 31 Oct 2005, Yonatan Ben-Nes wrote:

> Any new ideas or comments will be received gladly.
>

pgsql-general by date:

Previous
From: "DEV"
Date:
Subject: replace() and Regular Expressions
Next
From: Dan Sugalski
Date:
Subject: Re: SQL injection