Re: to_tsquery, plainto_... avoiding bad input, injections. Is there a builtin function for this ? Escaping?
От
Mohamed
Тема
Re: to_tsquery, plainto_... avoiding bad input, injections. Is there a builtin function for this ? Escaping?
Дата
Msg-id
861fed220901080052k5880f1fbkb440a54f7b3761c0@mail.gmail.com
Ответ на
Список
Дерево обсуждения
to_tsquery, plainto_... avoiding bad input, injections. Is there a builtin function for this ? Escaping? Mohamed <mohamed5432154321@gmail.com>
Re: to_tsquery, plainto_... avoiding bad input, injections. Is there a builtin function for this ? Escaping? Mohamed <mohamed5432154321@gmail.com>
Re: to_tsquery, plainto_... avoiding bad input, injections. Is there a builtin function for this ? Escaping? Reg Me Please <regmeplease@gmail.com>
Re: to_tsquery, plainto_... avoiding bad input,
injections. Is there a builtin function for this ? Escaping? Christopher Swingley <cswingle@gmail.com>
Re: to_tsquery, plainto_... avoiding bad input, injections. Is there a builtin function for this ? Escaping? Mohamed <mohamed5432154321@gmail.com>
Re: to_tsquery, plainto_... avoiding bad input, injections. Is there a builtin function for this ? Escaping? "Will Rutherdale (rutherw)" <rutherw@cisco.com>
..... any one?
On Wed, Jan 7, 2009 at 8:07 PM, Mohamed <mohamed5432154321@gmail.com> wrote:
Hi, I am wondering whether or not there exists any built in function for making sure a query/textinput is not harmful or one that escapes them. If not, what kind of things should I watch out for ?As of now, I get errors on the quote ( ' ) if it is entered in an input and in to_tsquery also on space. What other tokens should I be careful about? How should I handle these ? How do I escape them ?When fulltext indexing my text, is there any risk that the text being indexed could be harmful if it contains certain characters ?/ Moe
В списке pgsql-general по дате отправления
От: Reg Me Please
Дата: