This is the point! On one hand I need to evaluate data from a client

on the other hand I'd like to filter out things like "rm -rf /", "drop

table users" etc. To me it looks like a contradiction impossible to

circumvent. So I ask if there's anything like "best practices" or even

better something like a concept of access rights or prepared

statements in clojure?. AFAIK there isn't any. So this problem must be

solved on the host platforms (database, operating system etc). To me

this looks much like a wheel-reinventing...

Or you can just use something like XML or a custom language for data transfer, which also avoids trying your clients to Clojure. I've never understood why anyone would use prn/read for data transfer, other than extreme laziness.