Re: Is there a better way to do this? - Mailing list pgsql-general

From Michael Glaesemann
Subject Re: Is there a better way to do this?
Date
Msg-id 9D95DE49-0A71-41C3-990C-A8DD6FF7E6A1@seespotcode.net
Whole thread Raw
In response to Re: Is there a better way to do this?  (Michael Glaesemann <grzm@seespotcode.net>)
List pgsql-general
On Aug 28, 2007, at 17:46 , Michael Glaesemann wrote:

> I'm sure others could provide more cogent explanations, but those
> are my initial thoughts.

Thinking about this a little bit more: pushing interpolation/
concatenation to the furthest extreme you get to using eval-like
construct, which is generally not considered something you want to
do. Not quite that far you get SQL-injection (to bring the point a
little closer to home). Now, granted you don't need to worry about
these types of things in the specific example you provided, but these
are related to the more general "it's bad practice" statement.

Michael Glaesemann
grzm seespotcode net



pgsql-general by date:

Previous
From: Ron Johnson
Date:
Subject: Re: Install on 32 or 64 bit Linux?
Next
From: "Andrej Ricnik-Bay"
Date:
Subject: Re: Install on 32 or 64 bit Linux?