> Florian Weimer <[EMAIL PROTECTED]> writes:
>
> > We therefore suggest that a string escaping function is included in a
> > future version of PostgreSQL and libpq. A sample implementation is
> > provided below, along with documentation.
>
> We have now released a description of the problems which occur when a
> string escaping function is not used:
>
> http://cert.uni-stuttgart.de/advisories/apache_auth.php
>
> What further steps are required to make the suggested patch part of
> the official libpq library?
Will be applied soon. I was waiting for comments before adding it to
the patch queue.
--
Bruce Momjian | http://candle.pha.pa.us
[EMAIL PROTECTED] | (610) 853-3000
+ If your life is a hard drive, | 830 Blythe Avenue
+ Christ can be your backup. | Drexel Hill, Pennsylvania 19026
---------------------------(end of broadcast)---------------------------
TIP 5: Have you checked our extensive FAQ?
http://www.postgresql.org/users-lounge/docs/faq.html
