Take the tour ×  Having been confronted with some bold claims
about PostgreSQL's insecurity (while hailing MySQL's security)
I'd like to get someone else's opinion:    • "PostgreSQL is
insecure because of multiselects" - I'd assume `multiselects`
are what I'd call `subselects`, but I might be wrong. Current
MySQL versions support subselects, but according to [1] some
libraries might not support or might have disabled them. Could
that be the reason for the claim or am I overlooking something
here?   • "SQL injections are the easiest to exploit with
PostgreSQL" - IMHO SQL injections are an application / library
problem and are simply valid SQL queries, so there is no real
difference between databases, right?!   • "I love PostgreSQL for
getting root permissions as it has so many security holes" -
first I'd assume PostgreSQL's security track record is about as
good as MySQL's (couldn't really find much on this)? Secondly
running PostgreSQL as root is simply a stupid idea. Or is there
anything valid in this?  I'd