| From: | Scott Marlowe <smarlowe(at)g2switchworks(dot)com> |
|---|---|
| To: | Jan Wieck <JanWieck(at)Yahoo(dot)com> |
| Cc: | Merlin Moncure <mmoncure(at)gmail(dot)com>, "howachen(at)gmail(dot)com" <howachen(at)gmail(dot)com>, pgsql general <pgsql-general(at)postgresql(dot)org> |
| Subject: | Re: pgsql vs mysql |
| Date: | 2006-07-11 17:08:47 |
| Message-ID: | 1152637727.6540.76.camel@state.g2switchworks.com |
| Views: | Raw Message | Whole Thread | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-general |
On Tue, 2006-07-11 at 11:04, Jan Wieck wrote:
> On 6/30/2006 1:07 PM, Merlin Moncure wrote:
>
> > * mysql has a few features here and there which are nice...just to
> > name a few, flush tables with lock, multiple insert, etc
> The multiple insert stuff is not only non-standard, it also encourages
> the bad practice of using literal values directly in the SQL string
> versus prepared statements with place holders.
I thought it was in the SQL 99 standard...
> It is bad practice
> because it introduces SQL injection risks since the responsibility of
> literal value escaping is with the application instead of the driver.
agreed, however.
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Paul Tilles | 2006-07-11 17:11:16 | doesn't recognize "!=-" (not equal to a negative value) |
| Previous Message | Jan Wieck | 2006-07-11 17:07:43 | Re: Notes on converting from MySQL 5.0.x to PostgreSQL |