Horton

Re: partial indexes not used on parameterized queries?

Simon Riggs <simon@2ndquadrant.com>

View thread
From: Simon Riggs <simon@2ndquadrant.com>
To: Dirk Lutzebäck <lutzeb@aeccom.com>
Cc: pgsql-bugs@postgresql.org, Sven Geisler <sgeisler@aeccom.com>
Date: 2006-07-10T12:29:37Z
Lists: pgsql-bugs 
On Mon, 2006-07-10 at 13:35 +0200, Dirk Lutzebäck wrote:

> In any case I would see this as a security problem because you cannot
> control sql code injection easily (as with using DBD::Pg) if you have
> to pass parameters in the SQL string to use partial indexes.

That's not what I said. I see no security problem as a result of this
behaviour.

-- 
  Simon Riggs
  EnterpriseDB          http://www.enterprisedb.com