Re: SQL injection, php and queueing multiple statement

From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
To: Yasuo Ohgaki <yohgaki(at)ohgaki(dot)net>
Cc: pgsql-general(at)postgresql(dot)org
Subject: Re: SQL injection, php and queueing multiple statement
Date: 2008-11-11 13:10:49
Message-ID: 14534.1226409049@sss.pgh.pa.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

Yasuo Ohgaki <yohgaki(at)ohgaki(dot)net> writes:
> It would be nice to have API like PQquerySingle that allows only a single SQL
> statement at a time.

We have one (the "extended query" protocol).

regards, tom lane

In response to

Browse pgsql-general by date

  From Date Subject
Next Message Tom Lane 2008-11-11 13:22:36 Re: Very slow queries w/ NOT IN preparation (seems like a bug, test case)
Previous Message Richard Huxton 2008-11-11 12:46:20 Re: merge 2 dumps