On Monday 21 April 2008, Bogdan-Andrei Iancu wrote:
> Hi Dan,
>
> Right, this is one more reason for having in the DB API a clear
> distinction between the string-like and blob-like types.

SQL injection can happen with any of blob, text, char, varchar if not 
escaped. There is no distinction between the 2 regarding this issue.

-- 
Dan

_______________________________________________
Devel mailing list
Devel@lists.openser.org
http://lists.openser.org/cgi-bin/mailman/listinfo/devel

Reply via email to