Re: pgsql vs mysql
От | Joshua D. Drake |
---|---|
Тема | Re: pgsql vs mysql |
Дата | |
Msg-id | 200607110943.00281.jd@commandprompt.com обсуждение исходный текст |
Ответ на | Re: pgsql vs mysql (Jan Wieck <JanWieck@Yahoo.com>) |
Ответы |
Re: pgsql vs mysql
|
Список | pgsql-general |
> The multiple insert stuff is not only non-standard, it also encourages > the bad practice of using literal values directly in the SQL string > versus prepared statements with place holders. It is bad practice > because it introduces SQL injection risks since the responsibility of > literal value escaping is with the application instead of the driver. It is also something that users are clammoring for (and my customers). To the point that I have customers using unions to emulate the behavior. Why? Because it is really, really fast. Joshua D. Drake -- === The PostgreSQL Company: Command Prompt, Inc. === Sales/Support: +1.503.667.4564 || 24x7/Emergency: +1.800.492.2240 Providing the most comprehensive PostgreSQL solutions since 1997 http://www.commandprompt.com/
В списке pgsql-general по дате отправления: