Skip site navigation (1) Skip section navigation (2)

Re: javascript and postgres

From: 野村 <nomura(at)ir-alt(dot)co(dot)jp>
To: pgsql-general(at)postgresql(dot)org
Cc: John R Pierce <pierce(at)hogranch(dot)com>
Subject: Re: javascript and postgres
Date: 2009-02-24 10:55:29
Message-ID: 20090224190228.F6B1.NOMURA@ir-alt.co.jp (view raw or flat)
Thread:
Lists: pgsql-general
thanks for replies.

Craig Ringer wrote:
>This is a really, really, REALLY bad idea.
I agree. 

John R Pierce wrote:
> if you mean client side Javascript running on the end users web browser,
> no, it should NOT be allowed to connect to a database server directly.
Web pages have username and password with basic, digest or ldap
authorization. So if I createuser with same user and password, and if
there is md5 or something to encode password, I wonder javascript
connects to postgres securely.

As John said, I meant client side Javascript.

regards


In response to

Responses

pgsql-general by date

Next:From: Albe LaurenzDate: 2009-02-24 12:07:15
Subject: Re: restore single table
Previous:From: Michael AkindeDate: 2009-02-24 10:18:09
Subject: Re: Large object loading stalls

Privacy Policy | About PostgreSQL
Copyright © 1996-2014 The PostgreSQL Global Development Group