diff options
author | Bruce Momjian <bruce@momjian.us> | 2007-01-06 21:58:22 +0000 |
---|---|---|
committer | Bruce Momjian <bruce@momjian.us> | 2007-01-06 21:58:22 +0000 |
commit | 147f2e916c16590b2c9762ec370f226c0e4ae043 (patch) | |
tree | f8f2bff436c6e225d3fdf8d27e89937993257a12 /doc/src | |
parent | f0f4a6d781b695e3b0c3f426ababf68e65d7bf5b (diff) |
Add:
> o Consider parsing the -c string into individual queries so each
> is run in its own transaction
>
> o Consider disallowing multiple queries in PQexec() as an
> additional barrier to SQL injection attacks
Diffstat (limited to 'doc/src')
-rw-r--r-- | doc/src/FAQ/TODO.html | 14 |
1 files changed, 8 insertions, 6 deletions
diff --git a/doc/src/FAQ/TODO.html b/doc/src/FAQ/TODO.html index 0f0c98f4d91..4d1a64da60f 100644 --- a/doc/src/FAQ/TODO.html +++ b/doc/src/FAQ/TODO.html @@ -8,7 +8,7 @@ <body bgcolor="#FFFFFF" text="#000000" link="#FF0000" vlink="#A00000" alink="#0000FF"> <h1><a name="section_1">PostgreSQL TODO List</a></h1> <p>Current maintainer: Bruce Momjian (<a href="mailto:bruce@momjian.us">bruce@momjian.us</a>)<br/> -Last updated: Sat Jan 6 15:00:41 EST 2007 +Last updated: Sat Jan 6 16:33:48 EST 2007 </p> <p>The most recent version of this document can be viewed at<br/> <a href="http://www.postgresql.org/docs/faqs.TODO.html">http://www.postgresql.org/docs/faqs.TODO.html</a>. @@ -669,6 +669,8 @@ first. because setting the transaction isolation level must be the first statement of a transaction. </p> + </li><li>Consider parsing the -c string into individual queries so each + is run in its own transaction </li></ul> </li><li>pg_dump <ul> @@ -721,12 +723,12 @@ first. held on the server waiting for them to be requested by libpq. One complexity is that a statement like SELECT 1/col could error out mid-way through the result set. - </p><ul> - <li>Fix SSL retry to avoid useless repeated connection attempts and + <li>Fix SSL retry to avoid useless repeated connection attempts and ensuing misleading error messages - </li></ul> + </li><li>Consider disallowing multiple queries in PQexec() as an + additional barrier to SQL injection attacks </li></ul> -</li></ul> +</p></ul> <h1><a name="section_10">Triggers</a></h1> <ul> @@ -1298,6 +1300,6 @@ first. </li><li>Teodor is Teodor Sigaev <<a href="mailto:teodor@sigaev.ru">teodor@sigaev.ru</a>> </li><li>Tom is Tom Lane <<a href="mailto:tgl@sss.pgh.pa.us">tgl@sss.pgh.pa.us</a>> of Red Hat </li></ul> - +</li></ul></li></ul> </body> </html> |