stz184 53b323640f Fixes viktorstrate/photoview#71 ...

In order to prevent SQL injections and , reveal information about the database tables avoid passing MySQL functions as GQL sorting parameters, I refactored the FormatSQL() function.
Additionally, the old approach with using regex to filter the orderBy parameter was not effective and prevented using column.table annotations.

2020-10-13 18:27:28 +03:00

1.1 KiB

Raw Blame History

View Raw