25 Sep
2007
25 Sep
'07
11:34 p.m.
Hi,
In order to properly fix the issues with escaping of single quote
characters, I'd like to propose adding the following methods in
*.api.XWiki:
public List searchDocuments(String wheresql, List whereParams)
throws XWikiException
public List searchDocuments(String wheresql, int nb, int start,
List whereParams) throws XWikiException
The idea is to allow parametrized HQL queries in XWiki documents
hence removing the issues with SQL escaping (For example this will
allow solving http://jira.xwiki.org/jira/browse/XWIKI-1768).
Here's my +1
Thanks
-Vincent
26 Sep
26 Sep
8:32 a.m.
+1
How is the list going to be used? Something like:
" where doc.web = {0} and obj.className = {1}"?
We need to make sure we don't double escape content, as in several
places we have manually replaced % and ', so all the documents and
java code should be checked.
On 9/26/07, Vincent Massol <vincent(a)massol.net> wrote:
Hi,
In order to properly fix the issues with escaping of single quote
characters, I'd like to propose adding the following methods in
*.api.XWiki:
public List searchDocuments(String wheresql, List whereParams)
throws XWikiException
public List searchDocuments(String wheresql, int nb, int start,
List whereParams) throws XWikiException
The idea is to allow parametrized HQL queries in XWiki documents
hence removing the issues with SQL escaping (For example this will
allow solving http://jira.xwiki.org/jira/browse/XWIKI-1768).
Here's my +1
Thanks
-Vincent
Sergiu
--
http://purl.org/net/sergiu
8:46 a.m.
On Sep 26, 2007, at 8:32 AM, Sergiu Dumitriu wrote:
+1
How is the list going to be used? Something like:
" where doc.web = {0} and obj.className = {1}"?
Like any paramtrized HQL query with ? or :name:
Actually this signature for search() already exists in the non-api
XWiki class.
We need to make sure we don't double escape
content, as in several
places we have manually replaced % and ', so all the documents and
java code should be checked.
Yep, which is why I have also modified the Utils.SQLFilter() method
to only escape if it's not been already escaped.
Thanks
-Vincent
On 9/26/07, Vincent Massol <vincent(a)massol.net>
wrote:
Hi,
In order to properly fix the issues with escaping of single quote
characters, I'd like to propose adding the following methods in
*.api.XWiki:
public List searchDocuments(String wheresql, List whereParams)
throws XWikiException
public List searchDocuments(String wheresql, int nb, int start,
List whereParams) throws XWikiException
The idea is to allow parametrized HQL queries in XWiki documents
hence removing the issues with SQL escaping (For example this will
allow solving http://jira.xwiki.org/jira/browse/XWIKI-1768).
Here's my +1
Thanks
-Vincent
Sergiu
--
http://purl.org/net/sergiu
_______________________________________________
devs mailing list
devs(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/devs 
8:34 a.m.
+1
Vincent Massol wrote:
Hi,
In order to properly fix the issues with escaping of single quote
characters, I'd like to propose adding the following methods in
*.api.XWiki:
public List searchDocuments(String wheresql, List whereParams)
throws XWikiException
public List searchDocuments(String wheresql, int nb, int start,
List whereParams) throws XWikiException
The idea is to allow parametrized HQL queries in XWiki documents
hence removing the issues with SQL escaping (For example this will
allow solving http://jira.xwiki.org/jira/browse/XWIKI-1768).
Here's my +1
Thanks
-Vincent
_______________________________________________
devs mailing list
devs(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/devs
8:46 a.m.
+1
2007/9/26, Anca Paula Luca <ancapaula.luca(a)xwiki.com>om>:
+1
Vincent Massol wrote:
--
Thomas Mortagne
Hi,
In order to properly fix the issues with escaping of single quote
characters, I'd like to propose adding the following methods in
*.api.XWiki:
public List searchDocuments(String wheresql, List whereParams)
throws XWikiException
public List searchDocuments(String wheresql, int nb, int start,
List whereParams) throws XWikiException
The idea is to allow parametrized HQL queries in XWiki documents
hence removing the issues with SQL escaping (For example this will
allow solving http://jira.xwiki.org/jira/browse/XWIKI-1768).
Here's my +1
Thanks
-Vincent
_______________________________________________
devs mailing list
devs(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/devs
_______________________________________________
devs mailing list
devs(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/devs
8:53 a.m.
+1
On 9/25/07, Vincent Massol <vincent(a)massol.net> wrote:
Hi,
In order to properly fix the issues with escaping of single quote
characters, I'd like to propose adding the following methods in
*.api.XWiki:
public List searchDocuments(String wheresql, List whereParams)
throws XWikiException
public List searchDocuments(String wheresql, int nb, int start,
List whereParams) throws XWikiException
The idea is to allow parametrized HQL queries in XWiki documents
hence removing the issues with SQL escaping (For example this will
allow solving http://jira.xwiki.org/jira/browse/XWIKI-1768).
Here's my +1
Thanks
-Vincent
_______________________________________________
devs mailing list
devs(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/devs
28 Sep
28 Sep
9:26 a.m.
+1
Vincent Massol a écrit :
Hi,
In order to properly fix the issues with escaping of single quote
characters, I'd like to propose adding the following methods in
*.api.XWiki:
public List searchDocuments(String wheresql, List whereParams)
throws XWikiException
public List searchDocuments(String wheresql, int nb, int start,
List whereParams) throws XWikiException
The idea is to allow parametrized HQL queries in XWiki documents
hence removing the issues with SQL escaping (For example this will
allow solving http://jira.xwiki.org/jira/browse/XWIKI-1768).
Here's my +1
Thanks
-Vincent
_______________________________________________
devs mailing list
devs(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/devs
--
Ludovic Dubost
Blog: http://www.ludovic.org/blog/
XWiki: http://www.xwiki.com
Skype: ldubost GTalk: ldubost
AIM: nvludo Yahoo: ludovic
6251
days inactive
6254
days old
6 comments
6 participants
participants (6)
-
Anca Paula Luca -
Ludovic Dubost -
Marta Girdea -
Sergiu Dumitriu -
Thomas Mortagne -
Vincent Massol