LWN.net Logo

SQL injection vulnerabilities in PostgreSQL

SQL injection vulnerabilities in PostgreSQL

Posted Jun 8, 2006 8:57 UTC (Thu) by philips (guest, #937)
Parent article: SQL injection vulnerabilities in PostgreSQL

UTF-8 was specifically designed to avoid such problems: all non ASCII characters have byte representation using non-ASCII only characters. And convieniently, all standard control symbols - like single quote, double quote, slash, back slash, percent, space - are in ASCII range.

From all my long experience, UTF-8 can be very inconvinient to handle/etc, but still it saved (and still saves) me from many internationalization headaches: I have to live permanently with three locales.


(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds