Tag: PostgreSQL

Feed: Planet PostgreSQL. Postgres has not global variables for PLpgSQL. This week I worked for one customer who had emulation of global variables based on temporary tables.Depends on usage, this implementation can be very slow - more due often using temporary tables, a pg_class, pg_attribute tables can bloat, and these functions are slower and slower. So don't use it. There are alternative, much better solution, based on custom configuration variables:Original code: CREATE OR REPLACE FUNCTION public.setvar(_varname text, _value text) RETURNS void LANGUAGE plpgsql 1 AS $function$ 2 begin 3 create temporary table if not exists variables(varname text unique, value text); ... Read More

Feed: Planet PostgreSQL. 17 May 2019 Last month I was invited to give a keynote talk at FOSS4G North America in San Diego. I have been speaking about open source economics at FOSS4G conferences more-or-less every two years, since 2009, and I look forward to revisting the topic regularly: the topic is every-changing, just like the technology. In 2009, the central pivot of thought about open source in the economy was professional open source firms in the Red Hat model. Since they we’ve taken a ride through a VC-backed “open core” bubble and are now grappling with an environment where ... Read More

Feed: Planet PostgreSQL. PoWA 4 is available in beta. New remote mode! The new remote mode is the biggest feature introduced in PoWA 4, though there have been other improvements. I’ll describe here what this new mode implies and what changed in the UI. If you’re interested in more details about the rest of the changes in PoWA 4, I’ll soon publish other articles for that. For the most hurried people, feel free to directly go on the v4 demo of PoWA, kindly hosted by Adrien Nayrat. No credential needed, just click on “Login”. Why is a remote mode important ... Read More

Feed: Planet PostgreSQL. © xkcd.com under the Creative Commons License 2.5Functions defined as SECURITY DEFINER are a powerful, but dangerous tool in PostgreSQL.The documentation warns of the dangers:Because a SECURITY DEFINER function is executed with the privileges of the user that owns it, care is needed to ensure that the function cannot be misused. For security, search_path should be set to exclude any schemas writable by untrusted users. This prevents malicious users from creating objects (e.g., tables, functions, and operators) that mask objects intended to be used by the function.This article describes such an attack, in the hope to alert ... Read More

Feed: Planet MySQL; Author: The Pythian Group; Percona Live provides the open source database community with an opportunity to discover and discuss the latest open source trends, technologies, and innovations. The conference includes the best and brightest innovators and influencers in the open source database industry. This year, Percona Live is being held at the Hyatt Regency in Austin, Texas from May 28-30, 2019. Pythian is proud to be a Silver Sponsor this year, with a full force of our technical experts speaking on a variety of subjects and technologies. These are sessions you won’t want to miss! If you’re ... Read More

Feed: AWS Government, Education, & Nonprofits Blog. Author: publicsector. A guest post by Shane Riddell, Technical Fellow, ellucian®With cyberattacks on the rise against higher education institutions, it is critical to detect vulnerabilities in the Docker images that may run your applications. This involves not just vulnerability scanning of the applications, but of the OS packages installed in a Docker image as well. Figure 1 ECR CVE Monitor Architecture Overview The ecr-cve-monitor project is an open-source proof-of-concept designed to fill the OS/package vulnerability scanning space for Docker images stored in Amazon Elastic Container Registry (ECR). It’s based on Clair and Klar, ... Read More

Feed: Planet PostgreSQL. This is the 4th and last part in the series Benchmarking Managed PostgreSQLCloud Solutions. At the time of this writing, Microsoft Azure PostgreSQL was at version 10.7, newer than the two contenders: Amazon Aurora PostgreSQL at version 10.6and Google Cloud SQL for PostgreSQL at version 9.6. Microsoft decided to run Azure PostgreSQLon Windows: postgres=> select version(); version ------------------------------------------------------------ PostgreSQL 10.7, compiled by Visual C++ build 1800, 64-bit (1 row) For this particular test that didn’t work out too well, and I will hazard to guess that Microsoft is well aware of the limitations, the reason why under ... Read More

Feed: Planet PostgreSQL. Most businesses have databases of previous customers, and data analysts will frequently be asked to join arbitrary data to the customer tables in order to provide analysis ... Read More

Feed: Microsoft Azure Blog. Author: Parikshit Savjani. In Craig Kerstiens‘s blog post, “A health check playbook for your Postgres database” he emphasizes the need for periodic checks for your Postgres databases to ensure it’s healthy and performing well. Most Postgres database administrators and community members would usually bookmark or save such articles so they can revisit them and reuse the queries shared in the article to run checks against their databases. The common challenge with this approach is, you end up with many saved archives, and searching through them when you need it is time consuming and less productive. A ... Read More

Feed: Planet PostgreSQL. PREVIOUS POST Usually, the PostgreSQL Community releases minor patches on the Thursday of the second week of the second month of each quarter. This can vary depending on the nature of the fixes. For example, if the fixes include critical fixes as a postgres community response to security vulnerabilities or bugs that might affect data integrity. The previous minor release happened on February 14, 2019. In this case, the fysnc failure issue was corrected, along with some other enhancements and fixes. The latest minor release, published on May 9, 2019, has some security fixes and bug fixes ... Read More