Re: SQL injection attack
Karsten Hilbert <[email protected]> Wed, 24 May 2006 12:51:01 +0200
| Newsgroups | gmane.comp.python.db.pypgsql.user |
|---|---|
| Message-ID | <[email protected]> |
On Wed, May 24, 2006 at 02:21:16PM +1000, Andrew McNamara wrote: > Should pyPgSQL attempt to mitigate this, or just count on Postgresql to > "fix" it?: AFAICT they fixed it already but the fix involves client code having to be modified, so, yes, pyPgSQL needs to be released compiled against an updated libpq to take advantage of that fix. Which may still leave some "application" code having to be fixed, too. Karsten -- GPG key ID E4071346 @ wwwkeys.pgp.net E167 67FD A291 2BEA 73BD 4537 78B9 A9F9 E407 1346 ------------------------------------------------------- All the advantages of Linux Managed Hosting--Without the Cost and Risk! Fully trained technicians. The highest number of Red Hat certifications in the hosting industry. Fanatical Support. Click to learn more http://sel.as-us.falkag.net/sel?cmd=lnk&kid=107521&bid=248729&dat=121642