From: CMVV <cmvilaverde@mail.telepac.pt>
To: pgsql-interfaces@postgresql.org
Subject: pl/perl and security
Date: Tue, 6 Feb 2001 13:22:59 -0000
Message-ID: <95otpc$hj4$1@news.tht.net> (raw)
Hi,
I have discovered that in pl/perl we cannot make use of file handling.
The README file in ../pl/plperl give us an hint with an example of a
badfunc().
What are the security reasons to do so, since with postgresql extensions
(functions) written in C language we can do anything with flat files ?
Can this security issue with pl/perl be overrided ?
If so, how can i hack it ?
It will be so nice to manage files from server-based functions written in
pl/perl.
Thanx
Hugo Longo
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-interfaces@postgresql.org
Cc: cmvilaverde@mail.telepac.pt
Subject: Re: pl/perl and security
In-Reply-To: <95otpc$hj4$1@news.tht.net>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox