Re: Escaping strings for inclusion into SQL queries

> Florian Weimer <Florian(dot)Weimer(at)rus(dot)uni-stuttgart(dot)de> writes:
>
> > We therefore suggest that a string escaping function is included in a
> > future version of PostgreSQL and libpq. A sample implementation is
> > provided below, along with documentation.
>
> We have now released a description of the problems which occur when a
> string escaping function is not used:
>
> http://cert.uni-stuttgart.de/advisories/apache_auth.php
>
> What further steps are required to make the suggested patch part of
> the official libpq library?

Will be applied soon. I was waiting for comments before adding it to
the patch queue.

--
Bruce Momjian | http://candle.pha.pa.us
pgman(at)candle(dot)pha(dot)pa(dot)us | (610) 853-3000
+ If your life is a hard drive, | 830 Blythe Avenue
+ Christ can be your backup. | Drexel Hill, Pennsylvania 19026