Re: [go-nuts] Re: General question: complex search form and query params

2018-03-04 Thread matthewjuran
> > Unless I'm misunderstanding something, that kind of string concatenation > looks dangerous to me. This approach may be error prone so testing is important but I believe the database/sql placeholders avoid any SQL injection. Here the caller also has responsibility to validate the input (su

Re: [go-nuts] Re: General question: complex search form and query params

2018-03-03 Thread Benjamin Thomas
Unless I'm misunderstanding something, that kind of string concatenation looks dangerous to me. I'v been doing a bit of digging... Turns out there is a DSL that looks like what I'm looking for: the Lucene query syntax . Some variant of