feature suggestion and return to pgsql-general :-)

From: Dennis Gearon <gearond(at)sbcglobal(dot)net>
To: pgsql-general(at)postgresql(dot)org
Subject: feature suggestion and return to pgsql-general :-)
Date: 2009-04-24 04:53:19
Message-ID: 632529.70966.qm@web82107.mail.mud.yahoo.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general


Hi guys, I am back after a long time of doing other kinds of work. Don't know if anybody remembers me - not a biggee.

I am again working on a design of a web application for myself. Security seems MUCH more of an issue, EVERY day.

So I had these to suggestions/feature requests.

To prevent SQL injection, have either permissions-per-role, or DB wide, or DB instance configurable with defalaults and over ride configuration, blah blah, the following.

A flag/permission to allow ONLY prepared queries
A flag/permission to allow ONLY UDF/procedures.

These may be mutually exclusive?

But a way to set a database to absolutely be strongly sql injection proof.

Comments?

Dennis Gearon

Signature Warning
----------------
EARTH has a Right To Life

I agree with Bolivian President Evo Morales

# The right to life: "The right for no ecosystem to be eliminated by the irresponsible acts of human beings."

# The right of biosystems to regenerate themselves: "Development cannot be infinite. There's a limit on everything."

# The right to a clean life: "The right for Mother Earth to live without contamination, pollution. Fish and animals and trees have rights."

# The right to harmony and balance between everyone and everything: "We are all interdependent."

See the movie - 'Inconvenient Truth'
See the movie - 'Syriana'

Responses

Browse pgsql-general by date

  From Date Subject
Next Message Dhaval Shah 2009-04-24 07:05:50 Question regarding pam_pgsql [looking for a BSD License pam_pgsql]
Previous Message Scott Marlowe 2009-04-24 02:28:43 Re: need help for PostgreSQL consistency check mechanism