add comment about sql injection
This commit is contained in:
parent
86114e4eb9
commit
221a3f2748
@ -75,6 +75,7 @@ class KnexContentsAccessor implements ContentAccessor{
|
|||||||
query = query.from("contents");
|
query = query.from("contents");
|
||||||
}
|
}
|
||||||
if(word !== undefined){
|
if(word !== undefined){
|
||||||
|
//don't worry about sql injection.
|
||||||
query = query.where('title','like',`%${word}%`);
|
query = query.where('title','like',`%${word}%`);
|
||||||
}
|
}
|
||||||
if(content_type !== undefined){
|
if(content_type !== undefined){
|
||||||
|
Loading…
Reference in New Issue
Block a user