add comment about sql injection
This commit is contained in:
parent
86114e4eb9
commit
221a3f2748
@ -75,6 +75,7 @@ class KnexContentsAccessor implements ContentAccessor{
|
||||
query = query.from("contents");
|
||||
}
|
||||
if(word !== undefined){
|
||||
//don't worry about sql injection.
|
||||
query = query.where('title','like',`%${word}%`);
|
||||
}
|
||||
if(content_type !== undefined){
|
||||
|
Loading…
Reference in New Issue
Block a user