From: | Pavel Stehule <pavel(dot)stehule(at)gmail(dot)com> |
---|---|
To: | Marc Balmer <marc(at)msys(dot)ch> |
Cc: | pgsql-hackers(at)postgresql(dot)org |
Subject: | Re: Suggesting a libpq addition |
Date: | 2010-12-05 10:01:46 |
Message-ID: | AANLkTinpOM5fQF7bRFNWTdgK8qWZ1kOSsCeZOwfvPEuj@mail.gmail.com |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-hackers |
2010/12/5 Marc Balmer <marc(at)msys(dot)ch>:
> I am suggesting adding a function to libpq:
>
> PGresult *PQvexec(PGconn *conn, const char *fmt, ...);
>
> It behaves similar to PQexec, but it allows for printf style varargs and
> does connection re-establishing if the connection fails (it can be
> discussed if this already to much magic, maybe remove this part). It
> has been carefully designed to handle memory the right way. We use this
> since a long time.
>
> What do you think?
>
It's depend on implementation, but it can be a great security hole -
see SQL injection
Regards
Pavel Stehule
>
> --
> Sent via pgsql-hackers mailing list (pgsql-hackers(at)postgresql(dot)org)
> To make changes to your subscription:
> http://www.postgresql.org/mailpref/pgsql-hackers
>
>
From | Date | Subject | |
---|---|---|---|
Next Message | Magnus Hagander | 2010-12-05 10:10:01 | Re: Suggesting a libpq addition |
Previous Message | Stefan Kaltenbrunner | 2010-12-05 09:47:37 | Re: profiling connection overhead |