News for hackers. Stuff that matters.
Re:Writing a full-text search engine using Bloom filters by al2o3cr on Tuesday December 24, 2013 @11:07AM (#6959856)
The motto of PHP devs is apparently "FKIN ESCAPING, HOW DOES IT WORK?". Use escapeshellarg, kids.
Re:Writing a full-text search engine using Bloom filters by code_duck on Tuesday December 24, 2013 @11:52AM (#6960086)
I didn't intend for this to represent the entire code for the search function. I've never written a php page that did something unsafe with user input. After all, '$terms' is not not $_GET['terms'] in my silly example. It's not defined.
Re:Writing a full-text search engine using Bloom filters by mcguire on Tuesday December 24, 2013 @01:36PM (#6960538)
escapeshellarg misses some cases. You need to use escapeshellarg_fixed.
Re:Writing a full-text search engine using Bloom filters by jrockway on Tuesday December 24, 2013 @08:05PM (#6961796)
real_escapeshellarg_fixed, you mean.