Re: Exposed psql?
As soon as it became clear how this worked I was screaming "why would you run SQL statements that way?". *Especially* because the part of this doing the scripting is a PHP script, and you could just use a prepared statement with that rather than risking any shenanigans at all the the CL psql command !