Extensible Database Backends

Quicksearch

Syndicate This Blog

ATOM 1.0 feed

Comments

Janese about cmot died on April 17th 2011

Fri, 20.05.2011 12:46

Hey, youre the goto expret. T hanks for hanging out here.

Storm about cmot died on April 17th 2011

Fri, 20.05.2011 04:58

That's a mold-bareker. Great t hinking!

Fritz Keller about cmot died on April 17th 2011

Sun, 08.05.2011 23:53

Dear Diana. What sad news I go t today with your email to me. I personally knew Adrian as a really nice person, he [...]

Stephan about cmot died on April 17th 2011

Tue, 03.05.2011 23:35

Dear Diana We actually have n ever met but please neverthele ss receive my condolences. I h ave known Adrian for man [...]

Fabian about cmot died on April 17th 2011

Mon, 02.05.2011 10:46

Oh no! It is so sad to read th is. I always liked Adrian's bl og and found it one of the mos t valuable on Planet Debian...

Thursday, June 24. 2010

Extensible Database Backends

I very much like that it is so easy to extend PostgreSQL in various ways, including adding server-side languages (for triggers and other stored procedures) as dynamically loadable modules. But somehow the thought that some people actually seem to use PHP as a server-side language, or consider making it possible to use JavaScript, makes me very afraid (recent discussion on the general pg mailing list.) Should PostgreSQL have a “taint” flag like the kernel?

(Admittedly JS is a side effect of also enabling Lua and Scheme, which may make more sense.)

Posted by Adrian von Bidder in Tech at 12:38 | Comments (3) | Trackbacks (0)

< Multiple Interfaces, Same IP | SuperMicro BMC / IPMI: Can I Get In? >

Comments

Display comments as (Linear | Threaded)

While I agree that the pure thought of using PHP inside PostgreSQL is a sign of very severe mental disease, I don't think the same about EcmaScript. Once you learn to avoid the bad parts of JavaScript, it turns out to be a very elegant language. Besides that there's no other scripting language on the planet with that much money behind it to make it faster.

#1 Thomas Koch (Homepage) on 2010-06-24 13:08 (Reply)

A definite *yes*. or at least a clear way of making that distinction in marking them. As with all popular scripting languages they finally go down the drain because of it shear size of their code base or by there complexity in balancing functionality against security. Maybe its time for a security based meta language? Until that time, mark it if tainted that way.

#2 Wil van lierop on 2010-06-24 19:54 (Reply)

Note that extensions are loaded in the connection subprocess, that is, an unstable module will not pull the entire database down, but rather just the current session.

#3 Simon on 2010-06-24 23:53 (Reply)

Add Comment

Name
Email
Homepage
In reply to
Comment	E-Mail addresses will not be displayed and will only be used for E-Mail notifications. To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly. Enter the string from the spam-prevention image above:
	Remember Information? Subscribe to this entry
Submitted comments will be subject to moderation before being displayed.