add comment about sql injection
This commit is contained in:
		
							parent
							
								
									86114e4eb9
								
							
						
					
					
						commit
						221a3f2748
					
				
					 1 changed files with 1 additions and 0 deletions
				
			
		| 
						 | 
				
			
			@ -75,6 +75,7 @@ class KnexContentsAccessor implements ContentAccessor{
 | 
			
		|||
                query = query.from("contents");
 | 
			
		||||
            }
 | 
			
		||||
            if(word !== undefined){
 | 
			
		||||
                //don't worry about sql injection.
 | 
			
		||||
                query = query.where('title','like',`%${word}%`);
 | 
			
		||||
            }
 | 
			
		||||
            if(content_type !== undefined){
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
		Loading…
	
	Add table
		
		Reference in a new issue