Search Postgresql Archives

Re: to_tsquery, plainto_... avoiding bad input, injections. Is there a builtin function for this ? Escaping?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



..... any one?

On Wed, Jan 7, 2009 at 8:07 PM, Mohamed <mohamed5432154321@xxxxxxxxx> wrote:
Hi, I am wondering whether or not there exists any built in function for making sure a query/textinput is not harmful or one that escapes them. If not, what kind of things should I watch out for ?

As of now, I get errors on the quote ( ' ) if it is entered in an input and in to_tsquery also on space. What other tokens should I be careful about? How should I handle these ? How do I escape them ?

When fulltext indexing my text, is there any risk that the text being indexed could be harmful if it contains certain characters ?

/ Moe


[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Postgresql Jobs]     [Postgresql Admin]     [Postgresql Performance]     [Linux Clusters]     [PHP Home]     [PHP on Windows]     [Kernel Newbies]     [PHP Classes]     [PHP Books]     [PHP Databases]     [Postgresql & PHP]     [Yosemite]
  Powered by Linux