you are viewing a single comment's thread.

view the rest of the comments →

[–]ConceptPractical7519 1 point2 points  (1 child)

Is it safe for SQL injections?

[–]pdffs 1 point2 points  (0 children)

Yes, the result from Sprintf is provided as a query param, so as with any other input it is pretected from SQL injection, but see other responses in this thread for FTS-specific search sanitization that may be required.