|
|
|
|
|
by gopher
6169 days ago
|
|
I think of something like a comment or an abstract; security is not an issue here because input validation and escaping is done elsewhere. Basically, I think of a string like "ham, egg." which should result in "ham" and "egg", and "Ветчина, яйцо." should also result in "Ветчина" and "яйцо". The challenge is that you cannot whitelist all possible characters as there are (imho) too many charsets. |
|
However, that does nothing to eliminate words like 'in' and 'of' in a query, which you may want to do. It isn't very practical at all, I think, and you probably want to look at more practical ways to list possible delimiters, etc... Although the above could help you determine what charset you're using.