<html><body><div style="color:#000; background-color:#fff; font-family:arial, helvetica, sans-serif;font-size:10pt"><div><span>would be great to have that on Github...</span></div><div><span><br></span></div><div><br><blockquote style="border-left: 2px solid rgb(16, 16, 255); margin-left: 5px; padding-left: 5px;"><div style="font-family: arial, helvetica, sans-serif; font-size: 10pt;"><div style="font-family: times new roman, new york, times, serif; font-size: 12pt;"><font size="2" face="Arial"><hr size="1"><b><span style="font-weight:bold;">From:</span></b> Ruslan Zakirov <ruz@bestpractical.com><br><b><span style="font-weight: bold;">To:</span></b> Nifty apps in a Jiffy <jifty-devel@lists.jifty.org><br><b><span style="font-weight: bold;">Sent:</span></b> Tuesday, August 30, 2011 7:09 PM<br><b><span style="font-weight: bold;">Subject:</span></b> Re: [jifty-devel] jifty-dbi 0.71: Unknown operator 'REGEXP'<br></font><br>On Tue, Aug 30, 2011 at
8:20 PM, Thomas Sibley <<a ymailto="mailto:trs@bestpractical.com" href="mailto:trs@bestpractical.com">trs@bestpractical.com</a>> wrote:<br>> On 08/30/2011 10:23 AM, Stanislav Sinyagin wrote:<br>>> Obviously line 1284 in lib/Jifty/DBI/Collection.pm produces that.<br>>><br>>> It will be great to have a workaround which allows non-ANSI SQL operators.<br>><br>> Perhaps a different key? Or a refactoring the operator check into the<br>> handle class, so it can be db-specific?<br>><br>> I'm not sure what the best solution is at the moment.<br><br>That check was implemented to prevent SQL injections and It's possible<br>to loose granularity to:<br><br>/^(=|<|>|!=|<>|<=|>=|[a-z_\s]+)$/ix<br><br>Or a little bit more precise:<br><br>/^(=|<|>|!=|<>|<=|>=|((IS\s+)?(NOT\s+)?)[a-z_]+)$/ix<br><br><br>I think it covers security pretty well and gives freedom.<br><br>> Thomas<br>>
_______________________________________________<br>> jifty-devel mailing list<br>> <a ymailto="mailto:jifty-devel@lists.jifty.org" href="mailto:jifty-devel@lists.jifty.org">jifty-devel@lists.jifty.org</a><br>> <a href="http://lists.jifty.org/cgi-bin/mailman/listinfo/jifty-devel" target="_blank">http://lists.jifty.org/cgi-bin/mailman/listinfo/jifty-devel</a><br>><br><br><br><br>-- <br>Best regards, Ruslan.<br>_______________________________________________<br>jifty-devel mailing list<br><a ymailto="mailto:jifty-devel@lists.jifty.org" href="mailto:jifty-devel@lists.jifty.org">jifty-devel@lists.jifty.org</a><br><a href="http://lists.jifty.org/cgi-bin/mailman/listinfo/jifty-devel" target="_blank">http://lists.jifty.org/cgi-bin/mailman/listinfo/jifty-devel</a><br><br><br></div></div></blockquote></div></div></body></html>