Re: Feature request: Settings to disable comments and multiple statements in a connection

2025-06-07 Thread Tom Lane
Glen K writes: >> I don't believe that this would move the needle on SQL-injection >> safety by enough to be worth doing. An injection attack is normally >> trying to break out of a quoted string, not a comment. > If 90% of injection attacks make use of comments (together with quoted string > e

Re: Feature request: Settings to disable comments and multiple statements in a connection

2025-06-07 Thread Adrian Klaver
On 6/7/25 14:56, Adrian Klaver wrote: On 6/7/25 14:18, Glen K wrote:  I don't believe that this would move the needle on SQL-injection safety by enough to be worth doing.  An injection attack is normally trying to break out of a quoted string, not a comment. Yes, SQL injections frequently invo

Re: Feature request: Settings to disable comments and multiple statements in a connection

2025-06-07 Thread Adrian Klaver
On 6/7/25 14:18, Glen K wrote: I don't believe that this would move the needle on SQL-injection safety by enough to be worth doing.  An injection attack is normally trying to break out of a quoted string, not a comment. Yes, SQL injections frequently involve escaping quoted strings, but if yo

Re: Feature request: Settings to disable comments and multiple statements in a connection

2025-06-07 Thread Glen K
> I don't believe that this would move the needle on SQL-injection safety by enough to be worth doing. An injection attack is normally trying to break out of a quoted string, not a comment. Yes, SQL injections frequently involve escaping quoted strings, but if you do a search for SQL injection e

How to use cert authentication with pg_dump in windows

2025-06-07 Thread Andrus
Hi! Postgres 17 server certificate is issued by RapidSsl for server.mydomain.com PostgreSQL 17 client certificate is created using this tutorial[1]. pg_hba.conf first line contains: hostssl all varukoopia ::/0 cert Trying to use it on Windows Server: set PGSSLCERT=client.crt set PGSSLKEY=

Re: Regarding fillfactor use case for only delete ops

2025-06-07 Thread Ron Johnson
On Sat, Jun 7, 2025 at 7:53 AM Laurenz Albe wrote: > On Fri, 2025-06-06 at 09:59 -0400, Ron Johnson wrote: > > On Fri, Jun 6, 2025 at 8:57 AM Laurenz Albe > wrote: > > > On Fri, 2025-06-06 at 14:10 +0530, Durgamahesh Manne wrote: > > > > Can we generate a fill factor for tables that have delete

Re: Regarding fillfactor use case for only delete ops

2025-06-07 Thread Laurenz Albe
On Fri, 2025-06-06 at 09:59 -0400, Ron Johnson wrote: > On Fri, Jun 6, 2025 at 8:57 AM Laurenz Albe wrote: > > On Fri, 2025-06-06 at 14:10 +0530, Durgamahesh Manne wrote: > > > Can we generate a fill factor for tables that have delete ops ? > > > > > > Does the fill factor really work and help to