Re: SQL injection

From: "Jim C(dot) Nasby" <jnasby(at)pervasive(dot)com>
To: Alex Turner <armtuk(at)gmail(dot)com>
Cc: Yonatan Ben-Nes <da(at)canaan(dot)co(dot)il>, pgsql-general(at)postgresql(dot)org
Subject: Re: SQL injection
Date: 2005-11-01 15:09:18
Message-ID: 20051101150918.GK20349@pervasive.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

On Mon, Oct 31, 2005 at 10:13:20PM -0500, Alex Turner wrote:
> I didn't think query plans were cached between sessions, in which case
> prepeared statements aren't worth much for most HTTP based systems
> (not counting luckily re-using the same connection using pgpool)...
>
> Please correct me if I'm mistaken - I like being wrong ;)

No, you're right, but if you're not using connection pooling you clearly
don't care about performance anyway...
--
Jim C. Nasby, Sr. Engineering Consultant jnasby(at)pervasive(dot)com
Pervasive Software http://pervasive.com work: 512-231-6117
vcard: http://jim.nasby.net/pervasive.vcf cell: 512-569-9461

In response to

Responses

Browse pgsql-general by date

  From Date Subject
Next Message Jim C. Nasby 2005-11-01 15:15:04 Re: A Not Join
Previous Message Jan Wieck 2005-11-01 15:02:38 Re: Oracle 10g Express - any danger for Postgres?