[courier-users] [Fwd: Re: authmysql vs apostrophe]

2008-03-14 Thread Matt Comer
Sorry, sent this direct instead of to the list. Original Message Subject: Re: [courier-users] authmysql vs apostrophe From:Matt Comer [EMAIL PROTECTED] Date:Fri, March 14, 2008 11:19 am To: Martin Strand [EMAIL PROTECTED]

Re: [courier-users] [Fwd: Re: authmysql vs apostrophe]

2008-03-14 Thread Martin Strand
It should be up to authmysql to escape its input in order to prevent SQL injection. I doubt escaping differs much between different rdbms, but authmysql only supports mysql so that's not an issue. Postfix is using the same table and does not have a problem with apostrophes. I'll just add