[GENERAL] Security implications of untrusted triggers

2006-01-12 Thread Joshua Kramer
Or more specifically, what are the security implications of a trigger written in an untrusted language - PL/PerlU? With a standard stored procedure, you have the possibility of an SQL-injection attack. Is this possible with a trigger function, if it is defined as a trigger? I am writing a

[GENERAL] Stored Procedure: PL/Perl or PL/SQL?

2005-12-29 Thread Joshua Kramer
Greetings all, I'm working to integrate an accounting system (http://www.linuxcanada.com) with another application. Fortunately, both use PG, so integration should be easy. I want to be able to insert invoices, and invoice line items, into the accounting system. As you might expect, this requi

Re: FW: Re[2]: [GENERAL] new beginner to postgresql. Looking at it

2005-12-28 Thread Joshua Kramer
You might also try Quasar Accounting, which is GPL and has graphical client frontends for both Linux and Windows. http://www.linuxcanada.com And yes, it does run on PG. On Tue, 27 Dec 2005, Pamela wrote: I would prefer using linux. I have worked in a limited capacity with both linux and

[GENERAL] Trigger Behavior in Transactions

2005-12-24 Thread Joshua Kramer
Greetings, Where in the documentation can I find information on the low-level behavior of triggers that fire as a result of insert/update statements inside of transactions? Do the triggers fire at the point the transaction is COMMITted? Or as soon as the statements are encountered? (If th