VladPolskiy/postgres-web
1
0
Fork 0
mirror of https://github.com/postgres/pgweb.git synced 2025-08-13 13:12:42 +00:00
Code Issues Packages Projects Releases Wiki Activity

Trap integer overflow errors in search query

Browse Source 
This just caused a database error to leak through to the user, but also
flooded the logs.
This commit is contained in:
Magnus Hagander
2016-11-09 23:00:07 +01:00
parent d9c8c089cb
commit 5cef3c44f0
1 changed files with 6 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
pgweb/search/views.py
View File

@ -251,13 +251,18 @@ def search(request):
}, RequestContext(request))
# perform the query for general web search
curs.execute("SELECT * FROM site_search(%(query)s, %(firsthit)s, %(hitsperpage)s, %(allsites)s, %(suburl)s)", {
try:
curs.execute("SELECT * FROM site_search(%(query)s, %(firsthit)s, %(hitsperpage)s, %(allsites)s, %(suburl)s)", {
'query': query,
'firsthit': firsthit - 1,
'hitsperpage': hitsperpage,
'allsites': allsites,
'suburl': suburl
})
except ProgrammingError:
return render_to_response('search/sitesearch.html', {
'search_error': 'Error executing search query.'
}, RequestContext(request))
hits = curs.fetchall()
conn.close()