Re: Wierd "ProgrammingError" with "E" string prefix
James Henstridge <[email protected]>
| Newsgroups | gmane.comp.python.db.psycopg.devel |
|---|---|
| Message-ID | <[email protected]> |
On Wed, Mar 4, 2009 at 1:20 PM, Karsten Hilbert <[email protected]> wrote: > On Wed, Mar 04, 2009 at 09:52:51AM -0800, Tim Roberts wrote: > >> Of course, there are exceptions. General-purpose applications like >> phpMyAdmin and pgAdmin certainly have to worry about this kind of thing. > Another example as a not-so-general purpose app is the > database bootstrapper for GNUmed which is written in Python. Are you dealing with untrusted data in that program though? Normal string substitution would seem applicable in this case, if you're letting the user pick table names or similar. James.