Re: [HACKERS] Database names with spaces

> Bruce Momjian <maillist@candle.pha.pa.us> writes:
> > Looks like a bug.  Added to TODO list.
> 
> >> I see a todo item
> >> * Views with spaces in view name fail when referenced
> >> 
> >> I have another one for you:
> >> * Databases with spaces in name fail to be created and destroyed despite
> >> responses to the contrary.
> 
> IIRC, createdb and destroydb use "cp -r" and "rm -r" respectively.
> Lack of careful quoting in the system calls is probably what's
> causing the problem here.
> 
> However, I wonder if it wouldn't be a better idea to forbid funny
> characters in things that will become Unix filenames.  In particular,
> something like CREATE DATABASE "../../../something" could have real
> bad consequences...

I just tried it:
test=> create database "../../pg_hba.conf"test-> \gERROR:  Unable to locate path '../../pg_hba.conf'        This may be
dueto a missing environment variable in the server
 

Seems we are safe.

--  Bruce Momjian                        |  http://www.op.net/~candle maillist@candle.pha.pa.us            |  (610)
853-3000+  If your life is a hard drive,     |  830 Blythe Avenue +  Christ can be your backup.        |  Drexel Hill,
Pennsylvania19026