...and last but not least: 4) you don't protect the database against SQL injections at all. DISCLAIMER: I'm author of ngx_postgres. Best regards, Piotr Sikora < piotr.sikora at frickle.com >