Re: Correct escaping of untrusted data - Mailing list pgsql-general

> Is the 7.4.x multibyte support bombproof? How would we avoid problems
> like this:
>
http://groups.google.com/groups?hl=en&lr=&ie=UTF-8&c2coff=1&safe=off&edition=us&selm=20020502171830J.t-ishii%40sra.co.jp

    Well, maybe using UTF-8 encoding would fix this ?

> update tablea set data=3-? where a=1;

    Add parentheses :

> update tablea set data=3-(?) where a=1;

    Or do it in your program... but you can't do this if you have a db field
or function instead of the 3.