PL/Perl - Perl Procedural Language
PL/Perl
Perl
PL/Perl is a loadable procedural language that enables you to write
PostgreSQL functions in the Perl programming language.
To install PL/Perl in a particular database, use
createlang plperl dbname>.
If a language is installed into template1>, all subsequently
created databases will have the language installed automatically.
Users of source packages must specially enable the build of
PL/Perl during the installation process. (Refer to the installation
instructions for more information.) Users of binary packages
might find PL/Perl in a separate subpackage.
PL/Perl Functions and Arguments
To create a function in the PL/Perl language, use the standard syntax:
CREATE FUNCTION funcname (argument-types) RETURNS return-type AS '
# PL/Perl function body
' LANGUAGE plperl;
The body of the function is ordinary Perl code.
Arguments and results are handled as in any other Perl subroutine:
Arguments are passed in @_, and a result value
is returned with return> or as the last expression
evaluated in the function.
For example, a function returning the greater of two integer values
could be defined as:
CREATE FUNCTION perl_max (integer, integer) RETURNS integer AS '
if ($_[0] > $_[1]) { return $_[0]; }
return $_[1];
' LANGUAGE plperl;
If an SQL null value is passed to a function, the argument value
will appear as undefined> in Perl. The above function
definition will not behave very nicely with null inputs (in fact,
it will act as though they are zeroes). We could add
STRICT> to the function definition to make
PostgreSQL do something more reasonable:
if a null value is passed, the function will not be called at all,
but will just return a null result automatically. Alternatively,
we could check for undefined inputs in the function body. For
example, suppose that we wanted perl_max with
one null and one non-null argument to return the non-null argument,
rather than a null value:
CREATE FUNCTION perl_max (integer, integer) RETURNS integer AS '
my ($a,$b) = @_;
if (! defined $a) {
if (! defined $b) { return undef; }
return $b;
}
if (! defined $b) { return $a; }
if ($a > $b) { return $a; }
return $b;
' LANGUAGE plperl;
As shown above, to return an SQL null value from a PL/Perl
function, return an undefined value. This can be done whether the
function is strict or not.
Composite-type arguments are passed to the function as references
to hashes. The keys of the hash are the attribute names of the
composite type. Here is an example:
CREATE TABLE employee (
name text,
basesalary integer,
bonus integer
);
CREATE FUNCTION empcomp(employee) RETURNS integer AS '
my ($emp) = @_;
return $emp->{''basesalary''} + $emp->{''bonus''};
' LANGUAGE plperl;
SELECT name, empcomp(employee) FROM employee;
There is currently no support for returning a composite-type result
value.
Because the function body is passed as an SQL string literal to
CREATE FUNCTION, you have to escape single
quotes and backslashes within your Perl source, typically by
doubling them as shown in the above example. Another possible
approach is to avoid writing single quotes by using Perl's
extended quoting operators (q[],
qq[], qw[]).
Data Values in PL/Perl
The argument values supplied to a PL/Perl function's code are
simply the input arguments converted to text form (just as if they
had been displayed by a SELECT statement).
Conversely, the return> command will accept any string
that is acceptable input format for the function's declared return
type. So, the PL/Perl programmer can manipulate data values as if
they were just text.
Database Access from PL/Perl
Access to the database itself from your Perl function can be done via
an experimental module DBD::PgSPI
(also available at CPAN>
mirror sites). This module makes available a
DBI>-compliant database-handle named
$pg_dbh that can be used to perform queries
with normal DBI> syntax.
PL/Perl itself presently provides only one additional Perl command:
elog
PL/Perl
elog> level, msg
Emit a log or error message. Possible levels are
DEBUG>, LOG>, INFO>,
NOTICE>, WARNING>, and ERROR>.
ERROR> raises an error condition: further execution
of the function is abandoned, and the current transaction is
aborted.
Trusted and Untrusted PL/Perl
Normally, PL/Perl is installed as a trusted> programming
language named plperl>. In this setup, certain Perl
operations are disabled to preserve security. In general, the
operations that are restricted are those that interact with the
environment. This includes file handle operations,
require, and use (for
external modules). There is no way to access internals of the
database server process or to gain OS-level access with the
permissions of the server process,
as a C function can do. Thus, any unprivileged database user may
be permitted to use this language.
Here is an example of a function that will not work because file
system operations are not allowed for security reasons:
CREATE FUNCTION badfunc() RETURNS integer AS '
open(TEMP, ">/tmp/badfile");
print TEMP "Gotcha!\n";
return 1;
' LANGUAGE plperl;
The creation of the function will succeed, but executing it will not.
Sometimes it is desirable to write Perl functions that are not
restricted. For example, one might want a Perl function that
sends mail. To handle these cases, PL/Perl can also be installed
as an untrusted> language (usually called
PL/PerlU). In this case the full Perl language is
available. If the createlang program is used to
install the language, the language name plperlu
will select the untrusted PL/Perl variant.
The writer of a PL/PerlU> function must take care that the function
cannot be used to do anything unwanted, since it will be able to do
anything that could be done by a user logged in as the database
administrator. Note that the database system allows only database
superusers to create functions in untrusted languages.
If the above function was created by a superuser using the language
plperlu>, execution would succeed.
Missing Features
The following features are currently missing from PL/Perl, but they
would make welcome contributions.
PL/Perl functions cannot call each other directly (because they
are anonymous subroutines inside Perl). There's presently no
way for them to share global variables, either.
PL/Perl cannot be used to write trigger functions.
DBD::PgSPI or similar capability
should be integrated into the standard
PostgreSQL distribution.