[Zope] Mysql get/set blob

Paul Winkler pw_lists at slinkp.com
Sun Nov 21 18:13:15 EST 2004


On Sun, Nov 21, 2004 at 02:36:36PM -0800, David Siedband wrote:
> I was thinking eval() combined with some sort of checking to make sure 
> that the string being evaluated is in fact a valid dictionary...  Seems 
> like pickling is a more secure way to store dictionaries.

yeah, eval() should really be avoided unless you have some way
to guarantee that the string you feed it cannot contain
anything malicious.

-- 

Paul Winkler
http://www.slinkp.com


More information about the Zope mailing list