From cc1f323d3203271bdc3b34fb072e2d13350f55ba Mon Sep 17 00:00:00 2001 From: eliott Date: Sat, 5 Apr 2008 00:14:04 -0400 Subject: Added AurJson query length limit. Set a limit on the length of the query argument for searching. A search of zero length returns a considerably sized result set. Signed-off-by: eliott Signed-off-by: Loui Chang --- web/lib/aurjson.class.php | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/web/lib/aurjson.class.php b/web/lib/aurjson.class.php index be92c25..953f5ab 100644 --- a/web/lib/aurjson.class.php +++ b/web/lib/aurjson.class.php @@ -82,6 +82,10 @@ class AurJSON { * @return mixed Returns an array of package matches. **/ private function search($keyword_string) { + if (strlen($keyword_string) < 2) { + return $this->json_error('Query arg too small'); + } + $keyword_string = mysql_real_escape_string($keyword_string, $this->dbh); $query = sprintf( "SELECT Name,ID FROM Packages WHERE ( Name LIKE '%%%s%%' OR Description LIKE '%%%s%%' ) AND DummyPkg=0", -- cgit v1.2.3-54-g00ecf