diff options
| -rw-r--r-- | wqflask/wqflask/search_results.py | 6 |
1 files changed, 5 insertions, 1 deletions
diff --git a/wqflask/wqflask/search_results.py b/wqflask/wqflask/search_results.py index ca40f849..25f69f3f 100644 --- a/wqflask/wqflask/search_results.py +++ b/wqflask/wqflask/search_results.py @@ -10,6 +10,7 @@ import time import math import datetime import collections +import re from pprint import pformat as pf @@ -64,7 +65,10 @@ views.py). else: self.and_or = "and" self.search_terms = kw['search_terms_and'] - if "http:" in self.search_terms: + search = self.search_terms + # check for dodgy search terms + regex = re.compile("http:|href|sql|select",re.IGNORECASE) + if regex.match(search): self.search_term_exists = False return else: |