Received: from maia.hub.org (maia-3.hub.org [200.46.204.243]) by mail.postgresql.org (Postfix) with ESMTP id 8E48A1337B80 for ; Wed, 11 May 2011 18:37:28 -0300 (ADT) Received: from mail.postgresql.org ([200.46.204.86]) by maia.hub.org (mx1.hub.org [200.46.204.243]) (amavisd-maia, port 10024) with ESMTP id 95886-05 for ; Wed, 11 May 2011 21:37:20 +0000 (UTC) X-Greylist: from auto-whitelisted by SQLgrey-1.7.6 Received: from mail46.e.nsc.no (mail46.e.nsc.no [193.213.115.46]) by mail.postgresql.org (Postfix) with ESMTP id 20D8B1337B83 for ; Wed, 11 May 2011 18:37:19 -0300 (ADT) Received: from balapapa.localnet (168.173.16.62.customer.cdi.no [62.16.173.168]) (authenticated bits=0) by mail46.nsc.no (8.14.4/8.14.4) with ESMTP id p4BLbHxY005796 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT) for ; Wed, 11 May 2011 23:37:18 +0200 (MEST) From: Leif Biberg Kristensen To: pgsql-sql@postgresql.org Subject: Re: replace " with nothing Date: Wed, 11 May 2011 23:37:17 +0200 User-Agent: KMail/1.13.7 (Linux/2.6.38-gentoo-r4; KDE/4.6.2; x86_64; ; ) References: <1305145780.1954.4.camel@tony1.localdomain> <201105112311.08016.leif@solumslekt.org> <20110511212533.GB4796@rice.edu> In-Reply-To: <20110511212533.GB4796@rice.edu> MIME-Version: 1.0 Content-Type: Text/Plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <201105112337.17609.leif@solumslekt.org> X-Virus-Scanned: Maia Mailguard 1.0.1 X-Spam-Status: No, hits=-1.9 tagged_above=-5 required=5 tests=BAYES_00=-1.9 X-Spam-Level: X-Archive-Number: 201105/81 X-Sequence-Number: 35365 On Wednesday 11 May 2011 23:25:34 Ross J. Reedstrom wrote: > On Wed, May 11, 2011 at 11:11:07PM +0200, Leif Biberg Kristensen wrote: > > although it's a little above me why you would want to select firstname in > > the first place when you proceed to replace it with nothing. > > Nah, he's replacing double-quote-character " with nothing. Yeah, I noticed just a few seconds after I had pressed the "Send" button. > An attempt to protect against little Bobby Tables, I assume. (see: > http://xkcd.com/327/ aka SQL injection attacks, but not as fun) One of my favorite XKCD's. Being a diehard Gentoo user, there's only one that beats it: regards, Leif