protect psycopg script from sql injection?

Path	csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!news.mixmin.net!weretis.net!feeder4.news.weretis.net!ecngs!feeder2.ecngs.de!217.188.199.168.MISMATCH!takemy.news.telefonica.de!telefonica.de!newsfeed.xs4all.nl!newsfeed4.news.xs4all.nl!xs4all!post.news.xs4all.nl!not-for-mail
Return-Path	<laurent.celati@gmail.com>
X-Original-To	python-list@python.org
Delivered-To	python-list@mail.python.org
X-Spam-Status	OK 0.080
X-Spam-Evidence	'H': 0.84; 'S': 0.00; 'filename:fname piece:py': 0.07; 'subject:script': 0.09; 'python': 0.11; "'bad": 0.16; 'url:file': 0.16; 'url:py': 0.16; 'please?': 0.24; 'script': 0.25; 'message-id:@mail.gmail.com': 0.30; 'coded': 0.31; 'url:python': 0.33; 'subject:from': 0.34; 'could': 0.34; 'received:google.com': 0.35; 'subject:?': 0.36; 'thank': 0.38; 'to:addr:python-list': 0.38; 'to:addr:python.org': 0.39; 'how': 0.40; 'tell': 0.60; 'you.': 0.62; 'content-type:application/octet-stream': 0.65; 'protect': 0.79; 'why?': 0.91
DKIM-Signature	v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to:content-type; bh=QGX1S6CFqzFRWJrjYwu1IL/QBuW/tSXlDIoniJqzv5o=; b=pCP4eEHFymFuo9OkKpOZ9jUs53obs4GcyPVi3zUt8KySJU+1YeJVkiBTqfmY1/qreZ ef8BOt6VeKKJDLCkFFF1h6wYzObeua/EFpT6XiTHssKBvMAlctQPmr7DXm37+tLdPqSI 24macfFZxDC40AO3un26wY32w1z8bt/ByUF0rFwk4Luvwwir+Y9rI2PsQV9u72Oj70Ps d5h0orZgYxo8agq/SAqXrEAOBDIUAbQ4hAofTmWtRtnl0wv1T8xrxZJDaQSEkkLVW7F9 SSmgd8yfNwj0hXMM3QfFpgrG1Pbsi20jb2a6MMLvnnOxTQVK2QZfimt2eEPtG3J3N7nY zuqA==
MIME-Version	1.0
X-Received	by 10.224.169.20 with SMTP id w20mr14549369qay.2.1403733506942; Wed, 25 Jun 2014 14:58:26 -0700 (PDT)
Date	Wed, 25 Jun 2014 23:58:26 +0200
Subject	protect psycopg script from sql injection?
From	celati Laurent <laurent.celati@gmail.com>
To	python-list@python.org
Content-Type	multipart/mixed; boundary=089e015386500a7e8b04fcb02d4d
X-BeenThere	python-list@python.org
X-Mailman-Version	2.1.15
Precedence	list
List-Id	General discussion list for the Python programming language <python-list.python.org>
List-Unsubscribe	<https://mail.python.org/mailman/options/python-list>, <mailto:python-list-request@python.org?subject=unsubscribe>
List-Archive	<http://mail.python.org/pipermail/python-list/>
List-Post	<mailto:python-list@python.org>
List-Help	<mailto:python-list-request@python.org?subject=help>
List-Subscribe	<https://mail.python.org/mailman/listinfo/python-list>, <mailto:python-list-request@python.org?subject=subscribe>
Newsgroups	comp.lang.python
Message-ID	<mailman.11245.1403733516.18130.python-list@python.org> (permalink)
Lines	104
NNTP-Posting-Host	2001:888:2000:d::a6
X-Trace	1403733516 news.xs4all.nl 2976 [2001:888:2000:d::a6]:58346
X-Complaints-To	abuse@xs4all.nl
Xref	csiph.com comp.lang.python:73594

Show key headers only | View raw

[Multipart message — attachments visible in raw view] - view raw

Hello,

I coded this following python script via psycopg;

web_service_test.py
<http://python.6.x6.nabble.com/file/n5062113/web_service_test.py>

1/ When i execute it, the result is 'bad resquest'. Could you tell me why?

2/ Could you tell me how to protect this script from SQL injections please?

Thank you.

Back to comp.lang.python | Previous | Next | Find similar | Unroll thread

Thread

protect psycopg script from sql injection? celati Laurent <laurent.celati@gmail.com> - 2014-06-25 23:58 +0200

csiph-web