Re: [GENERAL] javascript and postgres

2009-02-24 Thread John R Pierce
野村 wrote: > Web pages have username and password with basic, digest or ldap > authorization. So if I createuser with same user and password, and if > there is md5 or something to encode password, I wonder javascript > connects to postgres securely. > for that to work, irregardless of security a

Re: [GENERAL] javascript and postgres

2009-02-24 Thread 野村
thanks for replies. Craig Ringer wrote: >This is a really, really, REALLY bad idea. I agree. John R Pierce wrote: > if you mean client side Javascript running on the end users web browser, > no, it should NOT be allowed to connect to a database server directly. Web pages have username and passwo

Re: [GENERAL] javascript and postgres

2009-02-23 Thread Scott Marlowe
On Mon, Feb 23, 2009 at 11:54 PM, Craig Ringer wrote: > 野村 wrote: >> Hello all. >> >> My javascript connects with postgres using php. >> php responds with XML for my select request. >> I wonder is there any way to access to postgres directly? > > Nothing stops you passing SQL snippets from JavaScr

Re: [GENERAL] javascript and postgres

2009-02-23 Thread John R Pierce
野村 wrote: > Hello all. > > My javascript connects with postgres using php. > php responds with XML for my select request. > I wonder is there any way to access to postgres directly? > if you mean client side Javascript running on the end users web browser, no, it should NOT be allowed to connec

Re: [GENERAL] javascript and postgres

2009-02-23 Thread Craig Ringer
野村 wrote: > Hello all. > > My javascript connects with postgres using php. > php responds with XML for my select request. > I wonder is there any way to access to postgres directly? Nothing stops you passing SQL snippets from JavaScript into your PHP code, which then dispatches then to the server