Re: Your FAQ page :-)

From: Josh Berkus <josh(at)agliodbs(dot)com>
To: "Magnus Hagander" <mha(at)sollentuna(dot)net>
Cc: pgsql-www(at)postgresql(dot)org
Subject: Re: Your FAQ page :-)
Date: 2006-05-23 17:41:45
Message-ID: 200605231041.45327.josh@agliodbs.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-www

Magnus,

> The wording I have for the bugtraq post (out in a couple of minutes) is:
> * If application always sends untrusted strings as out-of-line
> parameters,
>   instead of embedding them into SQL commands, it is not vulnerable.
> This is
>   only available in PostgreSQL 7.4 or later.

Fixed. I love CMSes, even when they're buggy. ;-)

--
Josh Berkus
PostgreSQL @ Sun
San Francisco

In response to

Responses

Browse pgsql-www by date

  From Date Subject
Next Message Tom Lane 2006-05-23 17:46:03 Re: Your FAQ page :-)
Previous Message Magnus Hagander 2006-05-23 17:33:15 Re: Your FAQ page :-)