3 ms·
am not sure exactly what operations xmysql allows but in the context of PostgREST (which is similar) the advantage over your method is that it does not allow "a
by ruslan_talpa 9y ago
am not sure exactly what operations xmysql allows but in the context of PostgREST (which is similar) the advantage over your method is that it does not allow "any query", thus, you can safely expose this api to the open web, while in the method you propose, i can run this query (i need zero db permissions) and kill your db
SELECT
crypt(
encode(digest(gen_random_bytes(1024), 'sha512'), 'base64'),
gen_salt('bf', 20)
)
FROM generate_series(1, 1000000)