</para>

<para>

The same effect can behad by declaring one or more output parameters as

The same effect can beobtained by declaring one or more output parameters as

polymorphic types. In this case the

special <literal>$0</literal> parameter is not used; the output

parameters themselves serve the same purpose. For example:

malicious users from creating objects that mask objects used by the

function. Particularly important in this regard is the

temporary-table schema, which is searched first by default, and

is normally writable by anyone. A secure arrangement can behad

is normally writable by anyone. A secure arrangement can beobtained

by forcing the temporary schema to be searched last. To do this,

write <literal>pg_temp</><indexterm><primary>pg_temp</><secondary>securing functions</></> as the last entry in <varname>search_path</>.

This function illustrates safe usage: