Skip site navigation (1) Skip section navigation (2)

Peripheral Links

Header And Logo

PostgreSQL
| The world's most advanced open source database.

Site Navigation

Search archives
  Advanced Search

Re: Protecting a web app from Postgresql injection


  • From: "A. Kretschmer" <andreas(dot)kretschmer(at)schollglas(dot)com>
  • To: pgsql-novice(at)postgresql(dot)org
  • Subject: Re: Protecting a web app from Postgresql injection
  • Date: Thu, 31 Jan 2008 06:53:53 +0100
  • Message-id: <20080131055353.GA27047@a-kretschmer.de> <text/plain>

am  Wed, dem 30.01.2008, um 13:48:59 -0800 mailte Mary Anderson folgendes:
> Hi all,
>    I have a web app I would like to protect against postgreSQL 
> injection.  What characters should I be on the lookout for?  Any Any 
> suggestions for enhancing the security of my app are welcome.

The best way to protect against SQL-Injection are prepared statements,
read more about this: 

http://www.postgresql.org/docs/current/static/sql-prepare.html


Andreas
-- 
Andreas Kretschmer
Kontakt:  Heynitz: 035242/47150,   D1: 0160/7141639 (mehr: -> Header)
GnuPG-ID:   0x3FFF606C, privat 0x7F4584DA   http://wwwkeys.de.pgp.net



Home | Main Index | Thread Index

Privacy Policy | About PostgreSQL
Copyright © 1996 – 2012 PostgreSQL Global Development Group