[Prev] Thread [Next]  |  [Prev] Date [Next]

Re: PostgreSQL and non-ASCII server encodings? Wietse Venema Tue Mar 27 12:05:59 2007

Victor Duchovni:
> On Mon, Mar 26, 2007 at 02:25:32PM -0400, Wietse Venema wrote:
> > > I would love to do that, but PgSQL won't let me, its query is not an octet
> > > string, it is a string of code-points, from a specified charset, it is
> > > not possible to pass "untyped" 8-bit strings data into a PgSQL query. What
> > > do you suggest?
> > 
> > transparent == the same bit pattern
> This can lead to SQL injection attacks, because we don't know what the

No. The MTA knows the database character set. The MTA does NO BIT
PATTERN CONVERSION.  The MTA does sql quoting in the same character
set as the database.