mirror/php-phpbb
1
0
Fork 0
mirror of https://github.com/phpbb/phpbb.git synced 2025-07-29 04:50:51 +02:00
Code Issues Releases Wiki Activity

[ticket/security/235] Remove non trailing wildcards from search keywords

Browse Source 
Database indexes are only used if wildcards are used at the end.
SECURITY-235
This commit is contained in:
Derky
2019-04-25 21:51:04 +02:00
parent 56060caa4c
commit fd195fba21
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
phpBB/phpbb/search/fulltext_native.php
View File

@@ -305,6 +305,11 @@ class fulltext_native extends \phpbb\search\base
}
}
// Remove non trailing wildcards from each word to prevent a full table scan (it's now using the database index)
$match = '#\*(?!$)\b#';
$replace = '$1';
$keywords = preg_replace($match, $replace, $keywords);
// set the search_query which is shown to the user
$this->search_query = $keywords;