PL/Perl - Perl Procedural Language
  
   PL/Perl
  
  
   Perl
  
  
   PL/Perl is a loadable procedural language that enables you to write
   PostgreSQL functions in the Perl programming language.
  
  
   To install PL/Perl in a particular database, use
   createlang plperl dbname>.
  
  
   
    If a language is installed into template1>, all subsequently
    created databases will have the language installed automatically.
   
  
  
   
    Users of source packages must specially enable the build of
    PL/Perl during the installation process (refer to the installation
    instructions for more information).  Users of binary packages
    might find PL/Perl in a separate subpackage.
   
  
 
  PL/Perl Functions and Arguments
  
   To create a function in the PL/Perl language, use the standard syntax:
CREATE FUNCTION funcname (argument-types) RETURNS return-type AS '
    # PL/Perl function body
' LANGUAGE plperl;
   The body of the function is ordinary Perl code.
  
  
   Arguments and results are handled as in any other Perl subroutine:
   Arguments are passed in @_, and a result value
   is returned with return> or as the last expression
   evaluated in the function.  For example, a function returning the
   greater of two integer values could be defined as:
CREATE FUNCTION perl_max (integer, integer) RETURNS integer AS '
    if ($_[0] > $_[1]) { return $_[0]; }
    return $_[1];
' LANGUAGE plperl;
  
  
   If an SQL null value is passed to a function, the argument value
   will appear as undefined> in Perl.  The above function
   definition will not behave very nicely with null inputs (in fact,
   it will act as though they are zeroes).  We could add
   STRICT> to the function definition to make
   PostgreSQL do something more reasonable:
   if a null value is passed, the function will not be called at all,
   but will just return a null result automatically.  Alternatively,
   we could check for undefined inputs in the function body.  For
   example, suppose that we wanted perl_max with
   one null and one non-null argument to return the non-null argument,
   rather than a null value:
CREATE FUNCTION perl_max (integer, integer) RETURNS integer AS '
    my ($a,$b) = @_;
    if (! defined $a) {
        if (! defined $b) { return undef; }
        return $b;
    }
    if (! defined $b) { return $a; }
    if ($a > $b) { return $a; }
    return $b;
' LANGUAGE plperl;
  
  
   As shown above, to return an SQL null value from a PL/Perl
   function, return an undefined value.  This can be done whether the
   function is strict or not.
  
  
   Composite-type arguments are passed to the function as references
   to hashes.  The keys of the hash are the attribute names of the
   composite type.  Here is an example:
CREATE TABLE employee (
    name text,
    basesalary integer,
    bonus integer
);
CREATE FUNCTION empcomp(employee) RETURNS integer AS '
    my ($emp) = @_;
    return $emp->{''basesalary''} + $emp->{''bonus''};
' LANGUAGE plperl;
SELECT name, empcomp(employee) FROM employee;
  
  
   There is currently no support for returning a composite-type result
   value.
  
  
   
    Because the function body is passed as an SQL string literal to
    CREATE FUNCTION, you have to escape single
    quotes and backslashes within your Perl source, typically by
    doubling them as shown in the above example.  Another possible
    approach is to avoid writing single quotes by using Perl's
    extended quoting operators (q[],
    qq[], qw[]).
   
  
 
 
  Data Values in PL/Perl
  
   The argument values supplied to a PL/Perl function's script are
   simply the input arguments converted to text form (just as if they
   had been displayed by a SELECT statement).
   Conversely, the return> command will accept any string
   that is acceptable input format for the function's declared return
   type.  So, the PL/Perl programmer can manipulate data values as if
   they were just text.
  
 
 
  Database Access from PL/Perl
  
   Access to the database itself from your Perl function can be done via
   an experimental module DBD::PgSPI
   (also available at CPAN>
   mirror sites). This module makes available a
   DBI>-compliant database-handle named
   $pg_dbh that can be used to perform queries
   with normal DBI> syntax.
  
  
   PL/Perl itself presently provides only one additional Perl command:
   
    
     
      elog
      PL/Perl
     
     elog> level, msg
     
      
       Emit a log or error message. Possible levels are
       DEBUG>, LOG>, INFO>,
       NOTICE>, WARNING>, and ERROR>.
       ERROR> raises an error condition: further execution
       of the function is abandoned, and the current transaction is
       aborted.
      
     
    
   
  
 
 
  Trusted and Untrusted PL/Perl
  
   Normally, PL/Perl is installed as a trusted> programming
   language named plperl>.  In this setup, certain Perl
   operations are disabled to preserve security.  In general, the
   operations that are restricted are those that interact with the
   environment. This includes file handle operations,
   require, and use (for
   external modules).  There is no way to access internals of the
   database backend process or to gain OS-level access with the
   permissions of the PostgreSQL user ID,
   as a C function can do.  Thus, any unprivileged database user may
   be permitted to use this language.
  
  
   Here is an example of a function that will not work because file
   system operations are not allowed for security reasons:
CREATE FUNCTION badfunc() RETURNS integer AS '
    open(TEMP, ">/tmp/badfile");
    print TEMP "Gotcha!\n";
    return 1;
' LANGUAGE plperl;
   The creation of the function will succeed, but executing it will not.
  
  
   Sometimes it is desirable to write Perl functions that are not
   restricted --- for example, one might want a Perl function that
   sends mail.  To handle these cases, PL/Perl can also be installed
   as an untrusted> language (usually called
   PL/PerlU).  In this case the full Perl language is
   available.  If the createlang program is used to
   install the language, the language name plperlu
   will select the untrusted PL/Perl variant.
  
  
   The writer of a PL/PerlU> function must take care that the function
   cannot be used to do anything unwanted, since it will be able to do
   anything that could be done by a user logged in as the database
   administrator.  Note that the database system allows only database
   superusers to create functions in untrusted languages.
  
  
   If the above function was created by a superuser using the language
   plperlu>, execution would succeed.
  
 
 
  Missing Features
  
   The following features are currently missing from PL/Perl, but they
   would make welcome contributions:
   
    
     
      PL/Perl functions cannot call each other directly (because they
      are anonymous subroutines inside Perl).  There's presently no
      way for them to share global variables, either.
     
    
    
     
      PL/Perl cannot be used to write trigger functions.
     
    
    
     
      DBD::PgSPI or similar capability
      should be integrated into the standard
      PostgreSQL distribution.