From: Leif Biberg Kristensen <leif@solumslekt.org>
To: pgsql-sql@postgresql.org
Subject: Re: replace " with nothing
Date: Wed, 11 May 2011 23:37:17 +0200
Message-ID: <201105112337.17609.leif@solumslekt.org> (raw)
In-Reply-To: <20110511212533.GB4796@rice.edu>
References: <1305145780.1954.4.camel@tony1.localdomain>
<201105112311.08016.leif@solumslekt.org>
<20110511212533.GB4796@rice.edu>
On Wednesday 11 May 2011 23:25:34 Ross J. Reedstrom wrote:
> On Wed, May 11, 2011 at 11:11:07PM +0200, Leif Biberg Kristensen wrote:
> > although it's a little above me why you would want to select firstname in
> > the first place when you proceed to replace it with nothing.
>
> Nah, he's replacing double-quote-character " with nothing.
Yeah, I noticed just a few seconds after I had pressed the "Send" button.
> An attempt to protect against little Bobby Tables, I assume. (see:
> http://xkcd.com/327/ aka SQL injection attacks, but not as fun)
One of my favorite XKCD's. Being a diehard Gentoo user, there's only one that
beats it:
<http://xkcd.com/456/;
regards, Leif
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-sql@postgresql.org
Cc: leif@solumslekt.org
Subject: Re: replace " with nothing
In-Reply-To: <201105112337.17609.leif@solumslekt.org>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox