On Sat, Apr 26, 2008 at 9:58 PM, Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us> wrote:
> IIRC there was some discussion recently of providing a mode in which
> the server would reject PQexec strings containing more than one query.
> I didn't care for it much at the time, but I think it would provide
> most of the benefit of these suggestions with far less compatibility
> or performance hit.
And I trust (SQL) code review more than tying the hands of the programmers.
But I've always had the luxury of working with developers who liked me
as a DBA and were willing to do things my way, as far as the DB was
In response to
pgsql-sql by date
|Next:||From: Thomas Mueller||Date: 2008-04-27 07:08:30|
|Subject: Re: Protection from SQL injection|
|Previous:||From: Tom Lane||Date: 2008-04-27 03:58:40|
|Subject: Re: Protection from SQL injection |