Re: Wierd "ProgrammingError" with "E" string prefix
Karsten Hilbert <[email protected]>
| Newsgroups | gmane.comp.python.db.psycopg.devel |
|---|---|
| Message-ID | <[email protected]> |
On Wed, Mar 04, 2009 at 04:37:20PM -0500, James Henstridge wrote: > >> Of course, there are exceptions. General-purpose applications like > >> phpMyAdmin and pgAdmin certainly have to worry about this kind of thing. > > Another example as a not-so-general purpose app is the > > database bootstrapper for GNUmed which is written in Python. > > Are you dealing with untrusted data in that program though? Sort of, yes. It reads some table names from a config file. > Normal string substitution would seem applicable in this case, It works just fine with normal/manual string substitution, no problems at all. Karsten -- GPG key ID E4071346 @ wwwkeys.pgp.net E167 67FD A291 2BEA 73BD 4537 78B9 A9F9 E407 1346