protect psycopg script from sql injection?

Path	csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!feeder.erje.net!eu.feeder.erje.net!newsfeed.xs4all.nl!newsfeed3.news.xs4all.nl!xs4all!newsgate.cistron.nl!newsgate.news.xs4all.nl!post.news.xs4all.nl!not-for-mail
Return-Path	<laurent.celati@gmail.com>
X-Original-To	python-list@python.org
Delivered-To	python-list@mail.python.org
X-Spam-Status	OK 0.073
X-Spam-Evidence	'H': 0.86; 'S': 0.00; 'subject:script': 0.09; 'python': 0.11; 'archive': 0.14; "'bad": 0.16; 'context:': 0.16; 'url:file': 0.16; 'url:py': 0.16; 'please?': 0.24; 'script': 0.25; 'coded': 0.31; 'url:python': 0.33; 'subject:from': 0.34; 'could': 0.34; 'charset:us-ascii': 0.36; 'subject:?': 0.36; 'list': 0.37; 'thank': 0.38; 'to:addr:python-list': 0.38; 'to:addr:python.org': 0.39; 'mailing': 0.39; 'how': 0.40; 'tell': 0.60; 'you.': 0.62; 'protect': 0.79; 'why?': 0.91
Date	Wed, 25 Jun 2014 14:43:53 -0700 (PDT)
From	dandrigo <laurent.celati@gmail.com>
To	python-list@python.org
Subject	protect psycopg script from sql injection?
MIME-Version	1.0
Content-Type	text/plain; charset=us-ascii
Content-Transfer-Encoding	7bit
X-BeenThere	python-list@python.org
X-Mailman-Version	2.1.15
Precedence	list
List-Id	General discussion list for the Python programming language <python-list.python.org>
List-Unsubscribe	<https://mail.python.org/mailman/options/python-list>, <mailto:python-list-request@python.org?subject=unsubscribe>
List-Archive	<http://mail.python.org/pipermail/python-list/>
List-Post	<mailto:python-list@python.org>
List-Help	<mailto:python-list-request@python.org?subject=help>
List-Subscribe	<https://mail.python.org/mailman/listinfo/python-list>, <mailto:python-list-request@python.org?subject=subscribe>
Newsgroups	comp.lang.python
Message-ID	<mailman.11246.1403733858.18130.python-list@python.org> (permalink)
Lines	20
NNTP-Posting-Host	2001:888:2000:d::a6
X-Trace	1403733858 news.xs4all.nl 2956 [2001:888:2000:d::a6]:59471
X-Complaints-To	abuse@xs4all.nl
Xref	csiph.com comp.lang.python:73595

Show key headers only | View raw

Hello,

I coded this following python script via psycopg;

web_service_test.py
<http://python.6.x6.nabble.com/file/n5062113/web_service_test.py>  

1/ When i execute it, the result is 'bad resquest'. Could you tell me why? 

2/ Could you tell me how to protect this script from SQL injections please? 

Thank you. 





--
View this message in context: http://python.6.x6.nabble.com/protect-psycopg-script-from-sql-injection-tp5062113.html
Sent from the Python - python-list mailing list archive at Nabble.com.

Back to comp.lang.python | Previous | Next | Find similar | Unroll thread

Thread

protect psycopg script from sql injection? dandrigo <laurent.celati@gmail.com> - 2014-06-25 14:43 -0700

csiph-web