Re: [GENERAL] Are new connection/security features in order, givenconnection pooling?

Поиск
Список
Период
Сортировка
От John R Pierce
Тема Re: [GENERAL] Are new connection/security features in order, givenconnection pooling?
Дата
Msg-id 8baeae93-9e1e-e757-ee11-3fcd7d3dc204@hogranch.com
обсуждение исходный текст
Ответ на Re: [GENERAL] Are new connection/security features in order, givenconnection pooling?  (Guyren Howe <guyren@gmail.com>)
Список pgsql-general
On 1/11/2017 12:49 AM, Guyren Howe wrote:
> would prevent an SQL injection from wrecking havoc.

sql injection is quite easy to avoid.   always make parameterized
queries, never use client supplied data to assemble a query with string
concatenation.

voila, no injection possible.

--
john r pierce, recycling bits in santa cruz



В списке pgsql-general по дате отправления: