Correct, as the vulnerability exists within the 'SQL' language as well. The only difference is that enabling plpgsql by default changes it from a leak to a full blown flood.
How does it make any difference at all?
-Neil
---------------------------(end of broadcast)--------------------------- TIP 8: explain analyze is your friend
