View Single Post

   
  #27 (permalink)  
Old 05-02-2008, 05:06 AM
Josh Berkus
 
Posts: n/a
Default Re: Protection from SQL injection


> (I sort of like the
> suggestion up-thread, myself, which is to have a GUC that disables
> multi-statement commands. *That'd probably cover a huge number of
> cases, and combined with some sensible quoting rules in client
> libraries, would quite possibly be enough.)


MySQL did this already.

--
--Josh

Josh Berkus
PostgreSQL @ Sun
San Francisco

--
Sent via pgsql-hackers mailing list (pgsql-hackers@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-hackers

Reply With Quote