| Lists: | pgsql-hackers |
|---|
| From: | Sir Mordred The Traitor <mordred(at)s-mail(dot)com> |
|---|---|
| To: | pgsql-hackers(at)postgresql(dot)org |
| Subject: | Little note to php coders |
| Date: | 2002-10-08 09:58:34 |
| Message-ID: | 3da2ac4a.e76ca34e@s-mail.com |
| Views: | Raw Message | Whole Thread | Download mbox | Resend email |
| Lists: | pgsql-hackers |
Check out this link, if you need something to laugh at:
http://www.postgresql.org/idocs/index.php?1'
Keeping in mind, that there are bunch of overflows in PostgreSQL(really?),
it is
very dangerous i guess. Right?
________________________________________________________________________
This letter has been delivered unencrypted. We'd like to remind you that
the full protection of e-mail correspondence is provided by S-mail
encryption mechanisms if only both, Sender and Recipient use S-mail.
Register at S-mail.com: http://www.s-mail.com
| From: | "Nigel J(dot) Andrews" <nandrews(at)investsystems(dot)co(dot)uk> |
|---|---|
| To: | Sir Mordred The Traitor <mordred(at)s-mail(dot)com> |
| Cc: | pgsql-hackers(at)postgresql(dot)org |
| Subject: | Re: Little note to php coders |
| Date: | 2002-10-08 10:11:17 |
| Message-ID: | Pine.LNX.4.21.0210081106380.3248-100000@ponder.fairway2k.co.uk |
| Views: | Raw Message | Whole Thread | Download mbox | Resend email |
| Lists: | pgsql-hackers |
On Tue, 8 Oct 2002, Sir Mordred The Traitor wrote:
> Check out this link, if you need something to laugh at:
> http://www.postgresql.org/idocs/index.php?1'
>
> Keeping in mind, that there are bunch of overflows in PostgreSQL(really?),
> it is
> very dangerous i guess. Right?
I'm not sure what list this really fits onto so I've left as hackers.
The old argument about data validation and whose job it is. However, is there a
reason why all CGI parameters aren't scanned and rejected if they contain
any punctuation. I was going to say if they contain anything non alphanumeric
but then I'm not sure about internationalisation and that test.
--
Nigel J. Andrews
| From: | Vince Vielhaber <vev(at)michvhf(dot)com> |
|---|---|
| To: | Sir Mordred The Traitor <mordred(at)s-mail(dot)com> |
| Cc: | pgsql-hackers(at)postgresql(dot)org |
| Subject: | Re: Little note to php coders |
| Date: | 2002-10-08 10:34:39 |
| Message-ID: | Pine.BSF.4.40.0210080634010.39487-100000@paprika.michvhf.com |
| Views: | Raw Message | Whole Thread | Download mbox | Resend email |
| Lists: | pgsql-hackers |
On Tue, 8 Oct 2002, Sir Mordred The Traitor wrote:
> Check out this link, if you need something to laugh at:
> http://www.postgresql.org/idocs/index.php?1'
>
> Keeping in mind, that there are bunch of overflows in PostgreSQL(really?),
> it is
> very dangerous i guess. Right?
Don't see what you're complaining about. I get teh 7.2.1 admin guide.
Vince.
--
==========================================================================
Vince Vielhaber -- KA8CSH email: vev(at)michvhf(dot)com http://www.pop4.net
56K Nationwide Dialup from $16.00/mo at Pop4 Networking
http://www.camping-usa.com http://www.cloudninegifts.com
http://www.meanstreamradio.com http://www.unknown-artists.com
==========================================================================
| From: | Robert Treat <xzilla(at)users(dot)sourceforge(dot)net> |
|---|---|
| To: | "Nigel J(dot) Andrews" <nandrews(at)investsystems(dot)co(dot)uk> |
| Cc: | Sir Mordred The Traitor <mordred(at)s-mail(dot)com>, pgsql-hackers(at)postgresql(dot)org |
| Subject: | Re: Little note to php coders |
| Date: | 2002-10-08 13:27:40 |
| Message-ID: | 1034083660.6801.1.camel@camel |
| Views: | Raw Message | Whole Thread | Download mbox | Resend email |
| Lists: | pgsql-hackers |
This is one of the reasons I usually recommend running with magic quotes
on, it provides a bit of insurance for those spots where your data
validation is not up to snuff.
Robert Treat
On Tue, 2002-10-08 at 06:11, Nigel J. Andrews wrote:
> On Tue, 8 Oct 2002, Sir Mordred The Traitor wrote:
>
> > Check out this link, if you need something to laugh at:
> > http://www.postgresql.org/idocs/index.php?1'
> >
> > Keeping in mind, that there are bunch of overflows in PostgreSQL(really?),
> > it is
> > very dangerous i guess. Right?
>
> I'm not sure what list this really fits onto so I've left as hackers.
>
> The old argument about data validation and whose job it is. However, is there a
> reason why all CGI parameters aren't scanned and rejected if they contain
> any punctuation. I was going to say if they contain anything non alphanumeric
> but then I'm not sure about internationalisation and that test.
>
>
> --
> Nigel J. Andrews
>
>
> ---------------------------(end of broadcast)---------------------------
> TIP 3: if posting/reading through Usenet, please send an appropriate
> subscribe-nomail command to majordomo(at)postgresql(dot)org so that your
> message can get through to the mailing list cleanly