On Monday, November 2, 2015 at 5:34:17 PM UTC-8, Dave S wrote:
>
>
>
> On Monday, November 2, 2015 at 4:50:16 PM UTC-8, Alex Glaros wrote:
>>
>> works great Niphlod
>>
>> regarding what I meant, IS_INT_IN_RANGE(-1e100, 1e100) User types in a 
>> role name.  No matter what  range I make illegal, malicious user can enter 
>> integer outside the range, so an integer could conceivably be entered
>>
>>
> I don't understand this at all.  User entry of 1e100+1 gets accepted, 
> despite the validator?
>

Or are you saying that only a few values are valid, and that being in range 
isn't enough of a check?  In that case, would an IS_IN_SET() be a better 
test?

 
> /dps
>
>

-- 
Resources:
- http://web2py.com
- http://web2py.com/book (Documentation)
- http://github.com/web2py/web2py (Source code)
- https://code.google.com/p/web2py/issues/list (Report Issues)
--- 
You received this message because you are subscribed to the Google Groups 
"web2py-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to web2py+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to