Configurable SQL injection mechanisms #160
wesleykendall
started this conversation in
Ideas
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
When using
pgtrigger.ignore
orpgtrigger.schema
, variables are inject into the SQL, meaning an additional SQL statement to set variables is prepending before every SQL statement.The rationale of this original approach was to avoid any extra surprise queries at all costs, especially for users with poor DB latencies. On the other hand, SQL is now prepended with a statement to set a variable, which fills the SQL log and also does add an overhead to every statement (albeit largely negligible)
I'm planning to spin out the SQL injection and variable setting logic into its own library since this approach is used by other libraries. I will make the variable injection configurable in this library, meaning users of pgtrigger will be able to configure how some of these dynamic features work
Beta Was this translation helpful? Give feedback.
All reactions