Postgres User wrote:
im trying to allow the client to pass a varchar param into my
function, and want to avoid any parsing of the parameter inside the
function, or code to build a sql string.
if the function can use this code, it will be compiled and optimized
(unlike a dynamic sql stirng)
select * from mytable where fielda ~ p_param
No, you should never let users specify raw regex. at best they can
hog down your server. Regex is a state engine and you can create
endless loops.
Maybe we can see the overall picture of your query?
Regards
Tino
---------------------------(end of broadcast)---------------------------
TIP 2: Don't 'kill -9' the postmaster
