add comment about sql injection
This commit is contained in:
parent
86114e4eb9
commit
221a3f2748
1 changed files with 1 additions and 0 deletions
|
@ -75,6 +75,7 @@ class KnexContentsAccessor implements ContentAccessor{
|
|||
query = query.from("contents");
|
||||
}
|
||||
if(word !== undefined){
|
||||
//don't worry about sql injection.
|
||||
query = query.where('title','like',`%${word}%`);
|
||||
}
|
||||
if(content_type !== undefined){
|
||||
|
|
Loading…
Add table
Reference in a new issue