<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: waiting for 8.4</title>
	<atom:link href="http://www.depesz.com/index.php/2008/04/02/waiting-for-84-3/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.depesz.com/index.php/2008/04/02/waiting-for-84-3/</link>
	<description></description>
	<lastBuildDate>Thu, 29 Jul 2010 21:40:44 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0</generator>
	<item>
		<title>By: dynamic SQL parameters in PL/PgSQL functions &#171; imitatio creatio</title>
		<link>http://www.depesz.com/index.php/2008/04/02/waiting-for-84-3/comment-page-1/#comment-29553</link>
		<dc:creator>dynamic SQL parameters in PL/PgSQL functions &#171; imitatio creatio</dc:creator>
		<pubDate>Mon, 08 Mar 2010 13:23:07 +0000</pubDate>
		<guid isPermaLink="false">http://www.depesz.com/?p=1189#comment-29553</guid>
		<description>[...] course depesz wrote about it. And I did read it; But still (by routine) I was using something [...]</description>
		<content:encoded><![CDATA[<p>[...] course depesz wrote about it. And I did read it; But still (by routine) I was using something [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: jdbo</title>
		<link>http://www.depesz.com/index.php/2008/04/02/waiting-for-84-3/comment-page-1/#comment-25704</link>
		<dc:creator>jdbo</dc:creator>
		<pubDate>Thu, 03 Apr 2008 02:07:46 +0000</pubDate>
		<guid isPermaLink="false">http://www.depesz.com/?p=1189#comment-25704</guid>
		<description>That&#039;s a wonderful addition - but is there any possibility of this being made even more flexible in regards to the assigned parameters?  

For example, I can imagine a function that would create (and then execute) a few different variations on a query - with each variation using different parameters.

Right now, each query variation would require a distinct EXECUTE USING statement that explicitly notes the parameters being passed in.  

However, if there was some way to pass the parameters as an array (or other complex variable, perhaps a record), then EXECUTE using becomes a much more general-purpose tool, further encouraging its use.

While this treads near the &quot;dangerous waters&quot; territory of SQL queries and parameters being passed around between functions, I think that everything that can be done to encourage safe avodiance of SQL injection (which EXECUTE functionality is oh-so-vulnerable to) as an improvement.</description>
		<content:encoded><![CDATA[<p>That&#8217;s a wonderful addition &#8211; but is there any possibility of this being made even more flexible in regards to the assigned parameters?  </p>
<p>For example, I can imagine a function that would create (and then execute) a few different variations on a query &#8211; with each variation using different parameters.</p>
<p>Right now, each query variation would require a distinct EXECUTE USING statement that explicitly notes the parameters being passed in.  </p>
<p>However, if there was some way to pass the parameters as an array (or other complex variable, perhaps a record), then EXECUTE using becomes a much more general-purpose tool, further encouraging its use.</p>
<p>While this treads near the &#8220;dangerous waters&#8221; territory of SQL queries and parameters being passed around between functions, I think that everything that can be done to encourage safe avodiance of SQL injection (which EXECUTE functionality is oh-so-vulnerable to) as an improvement.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Chris</title>
		<link>http://www.depesz.com/index.php/2008/04/02/waiting-for-84-3/comment-page-1/#comment-25699</link>
		<dc:creator>Chris</dc:creator>
		<pubDate>Wed, 02 Apr 2008 17:17:42 +0000</pubDate>
		<guid isPermaLink="false">http://www.depesz.com/?p=1189#comment-25699</guid>
		<description>This is long overdue. I&#039;m glad to see a lot of progress already into the 8.4 branch with 8.3 having been released so recently. Kudos!</description>
		<content:encoded><![CDATA[<p>This is long overdue. I&#8217;m glad to see a lot of progress already into the 8.4 branch with 8.3 having been released so recently. Kudos!</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: darh&#124;blog</title>
		<link>http://www.depesz.com/index.php/2008/04/02/waiting-for-84-3/comment-page-1/#comment-25697</link>
		<dc:creator>darh&#124;blog</dc:creator>
		<pubDate>Wed, 02 Apr 2008 15:32:59 +0000</pubDate>
		<guid isPermaLink="false">http://www.depesz.com/?p=1189#comment-25697</guid>
		<description>[...] version of PostgreSQL. Depesz is blogging about new and existing features, like the latest - &quot;placeholders&quot; in stored procedures for safer and cleaner code.   Posted by Denis Arh Comments: (0) Trackbacks: [...]</description>
		<content:encoded><![CDATA[<p>[...] version of PostgreSQL. Depesz is blogging about new and existing features, like the latest &#8211; &quot;placeholders&quot; in stored procedures for safer and cleaner code.   Posted by Denis Arh Comments: (0) Trackbacks: [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Russ Brown</title>
		<link>http://www.depesz.com/index.php/2008/04/02/waiting-for-84-3/comment-page-1/#comment-25694</link>
		<dc:creator>Russ Brown</dc:creator>
		<pubDate>Wed, 02 Apr 2008 14:23:14 +0000</pubDate>
		<guid isPermaLink="false">http://www.depesz.com/?p=1189#comment-25694</guid>
		<description>Just wanted to thank you for this line of blogging: I&#039;m very much enjoying it. Apart from beginning able to see the new features (even the small ones) with examples, it&#039;s nice knowing that progress is being made towards 8.4 on such a regular basis (and so soon).

Thanks!</description>
		<content:encoded><![CDATA[<p>Just wanted to thank you for this line of blogging: I&#8217;m very much enjoying it. Apart from beginning able to see the new features (even the small ones) with examples, it&#8217;s nice knowing that progress is being made towards 8.4 on such a regular basis (and so soon).</p>
<p>Thanks!</p>
]]></content:encoded>
	</item>
</channel>
</rss>
