Prevent possible SQL injection in Post model

dingoblog / dingo

Blog engine written in Go

MIT License

284 stars 34 forks source link

Prevent possible SQL injection in Post model #52

Closed bentranter closed 8 years ago

bentranter commented 8 years ago

Closes #51.

Prevents SQL injection in the Post model. I've still go to comb through the other files in the model package because I'm pretty sure this vulnerability exists elsewhere, but I wanted to make this PR to see what you guys think about using the strategy to prevent this possible security flaw.

dinever commented 8 years ago

This is a pretty good solution. Thanks for the contribution @bentranter! 😸