| From: | "Sander Steffann" <sander(at)steffann(dot)nl> |
|---|---|
| To: | "Jay O'Connor" <joconnor(at)cybermesa(dot)com>, "Tom Lane" <tgl(at)sss(dot)pgh(dot)pa(dot)us> |
| Cc: | <pgsql-general(at)postgresql(dot)org> |
| Subject: | Re: plpython? (Was: Re: Damn triggers and NEW) |
| Date: | 2003-06-18 21:06:40 |
| Message-ID: | 003d01c335dd$83c360d0$64c8a8c0@10ww.steffann.nl |
| Views: | Whole Thread | Raw Message | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-general |
Hi,
> Yes. I can't see that we have any other alternative. The existing
> plpython won't work at all with newer Python installations, and while
> it'd still work with older ones, it has exactly the same security holes
> that prompted the Python folk to pull rexec. That means it's foolish
> to pretend that it can still be considered a trusted language. So
> I feel we cannot just leave it sit there. Either somebody does the
> legwork to convert it into an untrusted language that doesn't use rexec,
> or it goes. And I don't think any of the core team has the time to do
> that legwork. If there's no plpython user with the commitment to fix
> it, it's history :-(. Any volunteers out there?
Not that I have time to do this, but I realy _need_ plpython in my current
project. So if nobody else will do it I'll have to make/find time... I also
don't have much experience with integrating Python and C, so I would have to
learn that.
I think it would be better if someone with more experience and time would do
this, but if nobody else is available I'll do it.
Sander.
| From | Date | Subject | |
|---|---|---|---|
| Next Message | scott.marlowe | 2003-06-18 21:09:44 | Re: A creepy story about dates. How to prevent it? |
| Previous Message | Yusuf | 2003-06-18 20:58:32 | Performance differences using varchar, char and text |