[Pypgsql-users] SQL injection attack

[Andrew M. <an...@ob...>]

Should pyPgSQL attempt to mitigate this, or just count on Postgresql to
"fix" it?:

    http://www.postgresql.org/about/news.561
    http://www.newsforge.com/article.pl?sid=06/05/23/2141246

    >>> from pyPgSQL import PgSQL
    >>> PgSQL.PgQuoteString("\xbf\x27")
    "'\xbf\\''"

-- 
Andrew McNamara, Senior Developer, Object Craft
http://www.object-craft.com.au/