SQL injection vulnerabilities in PostgreSQL
Posted Jun 8, 2006 8:57 UTC (Thu) by
philips (guest, #937)
Parent article:
SQL injection vulnerabilities in PostgreSQL
UTF-8 was specifically designed to avoid such problems: all non ASCII characters have byte representation using non-ASCII only characters. And convieniently, all standard control symbols - like single quote, double quote, slash, back slash, percent, space - are in ASCII range.
From all my long experience, UTF-8 can be very inconvinient to handle/etc, but still it saved (and still saves) me from many internationalization headaches: I have to live permanently with three locales.
(
Log in to post comments)