Re: replace " with nothing

From: Leif Biberg Kristensen <leif(at)solumslekt(dot)org>
To: pgsql-sql(at)postgresql(dot)org
Subject: Re: replace " with nothing
Date: 2011-05-11 21:37:17
Message-ID: 201105112337.17609.leif@solumslekt.org
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-sql

On Wednesday 11 May 2011 23:25:34 Ross J. Reedstrom wrote:
> On Wed, May 11, 2011 at 11:11:07PM +0200, Leif Biberg Kristensen wrote:
> > although it's a little above me why you would want to select firstname in
> > the first place when you proceed to replace it with nothing.
>
> Nah, he's replacing double-quote-character " with nothing.

Yeah, I noticed just a few seconds after I had pressed the "Send" button.

> An attempt to protect against little Bobby Tables, I assume. (see:
> http://xkcd.com/327/ aka SQL injection attacks, but not as fun)

One of my favorite XKCD's. Being a diehard Gentoo user, there's only one that
beats it:

<http://xkcd.com/456/>

regards, Leif

In response to

Browse pgsql-sql by date

  From Date Subject
Next Message Grzegorz Szpetkowski 2011-05-11 23:19:33 CROSS JOIN ordering
Previous Message Ross J. Reedstrom 2011-05-11 21:25:34 Re: replace " with nothing