Querying Collections from dbus

[Ian Monroe]

On Thu, Feb 19, 2009 at 6:35 AM, Jeff Mitchell <mitchell at kde.org> wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Maximilian Kossick wrote:
>> In Amarok 1.x series external applications depended on Amarok's
>> database schema. At least one popular application broke when a major
>> update to the schema occured. External applications should access
>> official interfaces which are (hopefully) designed to stay backwards
>> compatible. And there's the script console for debugging purposes.
>>
>> On Wed, Feb 18, 2009 at 12:13 PM, Casey Link <unnamedrambler at gmail.com> wrote:
>>>> A simple SQL pass-through method is a really bad idea imo.
>>> Any particular reason?
>
> Also, a malicious script that does a massive DELETE or even DROP.
>
> Using something like an XML schema that Max suggested, we could filter
> out dangerous commands if we felt it a good idea.]

A malicious script could just delete your home directory rather then
run some D-Bus commands, lol. :)

Ian