Received: from mail.postgresql.org (webmail.postgresql.org [216.126.85.28])
	by mail.postgresql.org (8.11.1/8.11.1) with SMTP id f16F22x94354
	for <pgsql-interfaces@postgresql.org>;
	Tue, 6 Feb 2001 10:02:02 -0500 (EST)
	(envelope-from pgsql-interfaces-owner@postgresql.org)
Received: from news.tht.net (news.hub.org [216.126.91.242])
	by mail.postgresql.org (8.11.1/8.11.1) with ESMTP id f16DUMx77581
	for <pgsql-interfaces@postgresql.org>;
	Tue, 6 Feb 2001 08:30:22 -0500 (EST)
	(envelope-from news@news.tht.net)
Received: (from news@localhost) by news.tht.net (8.11.1/8.11.1) id
 f16DLnM18022
	for pgsql-interfaces@postgresql.org;
	Tue, 6 Feb 2001 08:21:49 -0500 (EST) (envelope-from news)
From: "CMVV" <cmvilaverde@mail.telepac.pt>
X-Newsgroups: comp.databases.postgresql.interfaces
Subject: pl/perl and security
Date: Tue, 6 Feb 2001 13:22:59 -0000
Organization: Hub.Org Networking Services (http://www.hub.org)
Lines: 20
Message-ID: <95otpc$hj4$1@news.tht.net>
X-Complaints-To: scrappy@hub.org
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 5.00.2615.200
X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2615.200
To: pgsql-interfaces@postgresql.org
X-Archive-Number: 200102/32
X-Sequence-Number: 985

Hi,

I have discovered that in pl/perl we cannot make use of file handling.
The README file in ../pl/plperl give us an hint with an example of a
badfunc().
What are the security reasons to do so, since with postgresql extensions
(functions) written in C language we can do anything with flat files ?
Can this security issue with pl/perl be overrided ?
If so, how can i hack it ?
It will be so nice to manage files from server-based functions written in
pl/perl.
Thanx

Hugo Longo