Magnus Hagander <mag...@hagander.net> writes:
> +             PGresult *res = ExecuteSqlQueryForSingleRow(fout, "SELECT 
> pg_is_in_recovery()");

That function call needs to be schema-qualified for security.

                        regards, tom lane


-- 
Sent via pgsql-hackers mailing list (pgsql-hackers@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-hackers

Reply via email to