0

Will my queries be safe from SQL injections if I use plpgsql functions only to validate identifiers and values, instead of executing queries.
Here are the example functions:
CREATE OR REPLACE FUNCTION validate_identifier(identi TEXT)
RETURNS TEXT AS
$func$
BEGIN
RETURN quote_ident(identi);
...