NYCPHP Meetup

NYPHP.org

[nycphp-talk] Search function

John Campbell jcampbell1 at gmail.com
Fri Sep 19 18:17:00 EDT 2008


On Fri, Sep 19, 2008 at 6:07 PM, (Margaret) Michele Waldman
<mmwaldman at optonline.net> wrote:
> Would instr get_file_contents be too slow?

This is a really bad idea in general... Is there a reason Google's
site search won't work?

If you do something like exec(grep), make sure you know how to escape
everything properly.  It is possible someone could wreck the site with
a specially crafted query.

-John C.



More information about the talk mailing list