It is annoying to have to repeat these explanations so much.
Any serious objection to removing the VW UI from Solr proper and replacing
it with a standalone app?
I mean, Solr should have PHP, python, Java, and ruby example apps, right?
-- Jack Krupansky
-----Original Message-----
From: Iwan Hanjoyo
Sent: Monday, December 03, 2012 8:28 PM
To: solr-user@lucene.apache.org
Subject: Re: How to change Solr UI
Note that Velocity _can_ be used for user-facing code, but be very sure
you
secure your Solr. If you allow direct access, a user can easily enter
something like http://
<solr>/update?commit=true&stream.body=<delete><query>*:*</query></delete>.
And all your documents will be gone.
Hi Erickson,
Thank you for the input.
I'll notice and filter out this url.
* http://
<solr>/update?commit=true&stream.body=<delete><query>*:*</query></delete>
Kind regards,
Hanjoyo
