Re: design, plpgsql and sql injection in dynamically generated sql

On Tue, 18 Aug 2009 12:38:49 +0200
Pavel Stehule <pavel.stehule@gmail.com> wrote:

> some unsafe function:

I suspected something similar.

I think many would appreciate if you put these examples here
http://www.okbob.blogspot.com/2008/06/execute-using-feature-in-postgresql-84.html
and substitute the int example there with the text one.

thanks

--
Ivan Sergio Borgonovo
http://www.webthatworks.it