is it dangerous to change sql safe_characters ?

[Herwin Weststrate]

On 30-07-15 14:51, d tbsky wrote:
> Hi Alan:
>
>    ok. then I will give up the idea. I am curious is "\" dangerous?

Say we have a logging function that writes succesful authentications to
a database:

  INSERT INTO logging (timestamp, username)
  VALUES (now(), '%{User-Name}%')

With using the username "foo\" the query would become:

  INSERT INTO logging (timestamp, username)
  VALUES (now(), 'foo\')

Now the last "'" is escaped and the query generates a syntax error.

-- 
Herwin Weststrate