Angel,

Sample from my logs (In Spanish)
...
HINT:  Use '' para escribir comillas en cadenas, o use la sintaxis de escape de 
cadenas (E'\\').
WARNING:  uso no estandar de \\ en un literal de cadena
LINE 1: ..., messageblk,blocksize, physmessage_id) VALUES (1,'Received:...
...

Well, you can get rid of these log messages by setting escape_strings_warning = off.

However, the reason why we added the warning is that we figured out in 2006 that \\ escapes are a SQL injection vulnerability (this goes for MySQL as well). It's possible by version 8.5 (2010) PostgreSQL will stop supporting them.

As such, it would be nice to see DBMail gradual migrate away from the use of \\ escapes.

--Josh
_______________________________________________
DBmail mailing list
[email protected]
https://mailman.fastxs.nl/mailman/listinfo/dbmail

Reply via email to