Re: Stably escaping an identifier

2025-06-15 Thread Tom Lane
Phillip Diffley writes: > Is there a reliable way to determine if an identifier has already been > escaped, or alternatively is there a function that will stably escape an > identifier such that the identifier will not change if the function is > called repeatedly? This is impossible in general,

Stably escaping an identifier

2025-06-15 Thread Phillip Diffley
I am in a situation where I need to run dynamically generated queries with identifiers from an untrusted source. For example SELECT * FROM WHERE = $1; We can use format('%I', ) to escape the identifier and avoid a security vulnerability, but if the provided identifier is already escaped, this in

Re: pg_restore ERROR: permission denied to change default privileges

2025-06-15 Thread Adrian Klaver
On 6/15/25 08:15, Adrian Klaver wrote: On 6/15/25 01:06, Rachel Roch wrote: 14 Jun 2025, 16:21 by adrian.kla...@aklaver.com: Isn't fgrep -F redundant? As I understand it fgrep = grep -F You have the wrong end of the stick. ;-) Don't think so, the -F is redundant. It is redundant for

Re: pg_restore ERROR: permission denied to change default privileges

2025-06-15 Thread Adrian Klaver
On 6/15/25 01:06, Rachel Roch wrote: 14 Jun 2025, 16:21 by adrian.kla...@aklaver.com: Isn't fgrep -F redundant? As I understand it fgrep = grep -F You have the wrong end of the stick. ;-) Don't think so, the -F is redundant. Try grep -F then fgrep and then fgrep -F on the same file.

Re: pg_restore ERROR: permission denied to change default privileges

2025-06-15 Thread Rachel Roch
14 Jun 2025, 16:21 by adrian.kla...@aklaver.com: > > Isn't fgrep -F redundant? As I understand it fgrep = grep -F > You have the wrong end of the stick. ;-) As per Grep 3.8 release notes (https://lists.gnu.org/archive/html/info-gnu/2022-09/msg1.html): "The egrep and fgrep commands, whic