Tom Lane wrote: > Bruce Momjian <[EMAIL PROTECTED]> writes: > >> I think Tom's fix adequately addresses the security concerns. Exactly > >> what is wrong with writing to the current working directory? > > > Because it could be run from a directory where others have write > > permission. > > In which case, they could also change the findoidjoins script itself. > I think your fix is *less* secure than what you replaced. > > However, I've already wasted more than enough time on this issue... > I'm done arguing about it.
As far as I know, my method is the only secure method. If I am wrong I would like to know. -- Bruce Momjian | http://candle.pha.pa.us [EMAIL PROTECTED] | (610) 359-1001 + If your life is a hard drive, | 13 Roberts Road + Christ can be your backup. | Newtown Square, Pennsylvania 19073 ---------------------------(end of broadcast)--------------------------- TIP 9: the planner will ignore your desire to choose an index scan if your joining column's datatypes do not match
