Postgres Pro
Downloads
Home   >   mailing lists

Thread: pgsql: Remove libpq's PQescapeIdentifier(), not safe from injection

pgsql: Remove libpq's PQescapeIdentifier(), not safe from injection

From
momjian@postgresql.org (Bruce Momjian)
Date:
Log Message:
-----------
Remove libpq's PQescapeIdentifier(), not safe from injection attacks.

Modified Files:
--------------
    pgsql/doc/src/sgml:
        libpq.sgml (r1.212 -> r1.213)
        (http://developer.postgresql.org/cvsweb.cgi/pgsql/doc/src/sgml/libpq.sgml.diff?r1=1.212&r2=1.213)
    pgsql/src/interfaces/libpq:
        exports.txt (r1.12 -> r1.13)
        (http://developer.postgresql.org/cvsweb.cgi/pgsql/src/interfaces/libpq/exports.txt.diff?r1=1.12&r2=1.13)
        fe-exec.c (r1.187 -> r1.188)
        (http://developer.postgresql.org/cvsweb.cgi/pgsql/src/interfaces/libpq/fe-exec.c.diff?r1=1.187&r2=1.188)
        libpq-fe.h (r1.130 -> r1.131)
        (http://developer.postgresql.org/cvsweb.cgi/pgsql/src/interfaces/libpq/libpq-fe.h.diff?r1=1.130&r2=1.131)