Re: contrib: hack for psycopg2 performance

On Wed, May 12, 2010 at 01:26:53PM +0100, Daniele Varrazzo wrote:

> > Because *Params offers a quantitative advantage (speed) and
> > a qualitative advantage (*ridding* oneself of SQL injection).
> 
> Do we have a measure of the speed advantage?

Not really (beyond the one the OP posted). Common
(PostgreSQL) wisdom holds that it is advantageous when
dealing with significant amounts of truly binary data (such
as bytea) - which I am (medical documents).

> About ridding of the SQL injection, I think psycopg is already doing
> its best by trusting the libpq. It there was a problem - a bug, a
> weakness - we obviously should look for a solution, but it doesn't
> seem we are in this situation.

Again, I was talking about a difference in quality of safety
(cannot happen) rather than quantity (is unlikely to
happen).

Karsten
-- 
GPG key ID E4071346 @ wwwkeys.pgp.net
E167 67FD A291 2BEA 73BD  4537 78B9 A9F9 E407 1346