Martijn van Oosterhout wrote:
> However, there is a solution: send the paramters seperate from the
> query. In fact, postgres has been able to do that for a while now but
> not all interfaces have been made to use it. My guess is that those
> other databases you've used were already doing this so didn't see the
> issue. I don't know if DBD:Pg does this though, maybe it needs to be
> triggered somehow.
Actually, this is the case already. When a parameter is explicitly
typed as bytea, then libpq's PQexecPrepared is used and the binary
contents are passed outside of the query.
--
Daniel
PostgreSQL-powered mail user agent and storage: http://www.manitou-mail.org