On 5/29/2010 1:05 PM, Dennis Gearon wrote:
> Is it possible to create a complex schema object in one transaction,
I'm not sure i understand what you mean by schema object????

> using prepared statements to protect(somewaht) against SQL injection?
>    

In short no

Prepared statements do  not protect from SQL injection.  Prepared 
statements are used to skip the planning stage of the query.

There are really only two ways to block SQL injection   parameterized 
queries or  check/remove command characters from the query sent to the DB


> Example: A 'family tree object' (having obvious relationships) consisting of:
>
> Table grandparent
> Table parent
> table childA
> table childB
>
> If I have all the information for each 'sub-object' in the 'family tree 
> object', but of course, the primary, integer, sequence keys.
>
> So, using a script language, the procedure I'm doing now is creating one 
> node, getting the id with another query (because of a (reported and actual) 
> bug in the Doctrine ORM), and then creating the next level down.
>
> My application has nothing to do with family trees, actually, just an example.
>
>
> each of the (relevant) primary keys is a BIGSERIL, sequence backed, BIGINT.
>
>    

I do not understand what you are trying to do here, please clarify????







All legitimate Magwerks Corporation quotations are sent in a .PDF file 
attachment with a unique ID number generated by our proprietary quotation 
system. Quotations received via any other form of communication will not be 
honored.

CONFIDENTIALITY NOTICE: This e-mail, including attachments, may contain legally 
privileged, confidential or other information proprietary to Magwerks 
Corporation and is intended solely for the use of the individual to whom it 
addresses. If the reader of this e-mail is not the intended recipient or 
authorized agent, the reader is hereby notified that any unauthorized viewing, 
dissemination, distribution or copying of this e-mail is strictly prohibited. 
If you have received this e-mail in error, please notify the sender by replying 
to this message and destroy all occurrences of this e-mail immediately.
Thank you.

<<attachment: justin.vcf>>

-- 
Sent via pgsql-general mailing list (pgsql-general@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-general

Reply via email to