Skip site navigation (1) Skip section navigation (2)

Re: hyperlinks stored in pgsql

From: Andreas <maps(dot)on(at)gmx(dot)net>
To: pgsql-novice(at)postgresql(dot)org
Subject: Re: hyperlinks stored in pgsql
Date: 2006-09-09 02:57:46
Message-ID: (view raw, whole thread or download thread mbox)
Lists: pgsql-novice

operationsengineer1(at)yahoo(dot)com schrieb:
> i'm wondering if there are any issues i should be
> aware of when storing "active" hyperlink data in my
> db.

You are mixing something up.
A hyperlink or any form of URL is just a string. It's as such not magic 
or active as long it gets interpreted as an URL and tossed to a suitable 

You find a "hyperlink" datatype in MS-Access. Thats still just a simple 
varchar where Access has the additional information that it should throw 
it to the program that is registered as your web-browser in your 
operating system.
Access doesn't even check wether the inserted text conforms with the 
rules for hyperlinks. You could store poems in such hyperlink columns 
and still IE won't hop anywhere if you click on the nicely blue 
underlined text.

Anyway ... this data type might be useful in Access does provide an data 
manipulation interface in sense of forms or "tables" which are in 
essence forms, too.

PostgreSQL is a storage engine that can keep your hyperlink-strings 
ready but it doesn't have an interpreting interface.
So PostgreSQL shows no data where you could click on and it has no idea 
about the client's environment like his favourite browser.

So store URLs in varchars and let the client software interpret the data 
as "active" hyperlink.

> right now, i'm storing text like ""
> in the db.  when i display the data, it displays as
> text and the usuer has to copy and paste it to the
> address bar and press enter to view the link.

Where and how is the data displayd?
If you type an SQL query into psql you shouldn't wonder that the 
textmode output is not clickable.

If you have a more comfortable program to view the data, you might be 
able to tell it this column holds URLs.
There's a good chance you even don't need the "http://" in front of the 
You might run into trouble with some brain dead web servers that won't 
accept  ""  but require   "".
And there are URLs that won't work with the "www." like "".

> i'd like to enter 
> "<a href=""> domain</a>"

If your client interface is a web-application where some script language 
like PHP pulls data out of the DBMS and processes it dynamically to HTML 
  then and just then will those HTML-link-tags be of any use.

In this case you store the domain "" probaply with 
additional info like the description and an alt-text in varchars.
On runtime you let a script assemble the complete link-tag and integrate 
it in the HTML output.

"" + "online dictionary" + "click here for wisdom" +  scripting
<a href="" alt="click here for wisdom" 
target="_blank">online dictionary</a>

> somehow i think this is might be a security risk, but
> i can't recall for sure.

The DBMS couldn't care less if the stored data is just a domain or a 
complete HTML tag.

In response to

pgsql-novice by date

Next:From: Richard Broersma JrDate: 2006-09-09 04:10:01
Subject: Re: Progress and Questions
Previous:From: Merlin MoncureDate: 2006-09-09 00:39:26
Subject: Re: [NOVICE] Insert Only Postgresql

Privacy Policy | About PostgreSQL
Copyright © 1996-2017 The PostgreSQL Global Development Group