Re: [HACKERS] Database names with spaces

> Bruce Momjian <maillist(at)candle(dot)pha(dot)pa(dot)us> writes:
> > Looks like a bug. Added to TODO list.
>
> >> I see a todo item
> >> * Views with spaces in view name fail when referenced
> >>
> >> I have another one for you:
> >> * Databases with spaces in name fail to be created and destroyed despite
> >> responses to the contrary.
>
> IIRC, createdb and destroydb use "cp -r" and "rm -r" respectively.
> Lack of careful quoting in the system calls is probably what's
> causing the problem here.
>
> However, I wonder if it wouldn't be a better idea to forbid funny
> characters in things that will become Unix filenames. In particular,
> something like CREATE DATABASE "../../../something" could have real
> bad consequences...

I just tried it:

test=> create database "../../pg_hba.conf"
test-> \g
ERROR: Unable to locate path '../../pg_hba.conf'
This may be due to a missing environment variable in the server

Seems we are safe.

--
Bruce Momjian | http://www.op.net/~candle
maillist(at)candle(dot)pha(dot)pa(dot)us | (610) 853-3000
+ If your life is a hard drive, | 830 Blythe Avenue
+ Christ can be your backup. | Drexel Hill, Pennsylvania 19026