Querying Collections from dbus

[Jeff Mitchell]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Ian Monroe wrote:
> On Thu, Feb 19, 2009 at 6:35 AM, Jeff Mitchell <mitchell at kde.org> wrote:
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>>
>> Maximilian Kossick wrote:
>>> In Amarok 1.x series external applications depended on Amarok's
>>> database schema. At least one popular application broke when a major
>>> update to the schema occured. External applications should access
>>> official interfaces which are (hopefully) designed to stay backwards
>>> compatible. And there's the script console for debugging purposes.
>>>
>>> On Wed, Feb 18, 2009 at 12:13 PM, Casey Link <unnamedrambler at gmail.com> wrote:
>>>>> A simple SQL pass-through method is a really bad idea imo.
>>>> Any particular reason?
>> Also, a malicious script that does a massive DELETE or even DROP.
>>
>> Using something like an XML schema that Max suggested, we could filter
>> out dangerous commands if we felt it a good idea.]
> 
> A malicious script could just delete your home directory rather then
> run some D-Bus commands, lol. :)

Fair enough.  But there is also the case of something that is
accidentally malicious -- i.e. a script with a DELETE that has improper
syntax.  :-)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)

iEYEARECAAYFAkmewj8ACgkQANYdqNCuGCXNCQCfdIlD+BaeuOWp/hw8U/QjLCIH
kWkAoOYFXdaAcEUD3qUp/q7QhKVmacqt
=1jHL
-----END PGP SIGNATURE-----