to_tsquery, plainto_... avoiding bad input, injections. Is there a builtin function for this ? Escaping?

Поиск
Список
Период
Сортировка
От Mohamed
Тема to_tsquery, plainto_... avoiding bad input, injections. Is there a builtin function for this ? Escaping?
Дата
Msg-id 861fed220901071107m6cbebf8cl20b0cb3e01648ded@mail.gmail.com
обсуждение исходный текст
Ответы Re: to_tsquery, plainto_... avoiding bad input, injections. Is there a builtin function for this ? Escaping?
Список pgsql-general
Hi, I am wondering whether or not there exists any built in function for making sure a query/textinput is not harmful or one that escapes them. If not, what kind of things should I watch out for ?

As of now, I get errors on the quote ( ' ) if it is entered in an input and in to_tsquery also on space. What other tokens should I be careful about? How should I handle these ? How do I escape them ?

When fulltext indexing my text, is there any risk that the text being indexed could be harmful if it contains certain characters ?

/ Moe

В списке pgsql-general по дате отправления:

Предыдущее
От: Kirk Strauser
Дата:
Сообщение: Re: FreeBSD and large shared_buffers a no-go?
Следующее
От: Karsten Hilbert
Дата:
Сообщение: Re: encoding of PostgreSQL messages