Bruce Momjian <pgman@candle.pha.pa.us> writes:
>> You can't securely do
>> echo $PASSWORD | backend
>> or
>> echo $PASSWORD > allegedly-secure-temp-file
> This is secure. echo is a shell builtin, and does not invoke a separate
> process with arguments.
echo is a builtin in ksh and derivatives, but I don't think it's safe
to assume it is a builtin everywhere...
regards, tom lane