Comments on: Acts As Suggest plugin http://programmingzen.com/2007/02/08/acts-as-suggest-plugin/ Meditations on programming, startups, and technology Thu, 10 May 2012 04:53:17 +0000 hourly 1 http://wordpress.org/?v= By: ittays http://programmingzen.com/2007/02/08/acts-as-suggest-plugin/#comment-179 ittays Wed, 30 Nov -0001 00:00:00 +0000 http://72.52.169.158/~antonioc/2007/02/08/acts-as-suggest-plugin/#comment-179 It's rarely known that if you follow your search with the word 'info', Google tries to snippet the Wiki information. It’s rarely known that if you follow your search with the word ‘info’, Google tries to snippet the Wiki information.

]]> By: Antonio Cangiano http://programmingzen.com/2007/02/08/acts-as-suggest-plugin/#comment-180 Antonio Cangiano Wed, 30 Nov -0001 00:00:00 +0000 http://72.52.169.158/~antonioc/2007/02/08/acts-as-suggest-plugin/#comment-180 Thanks ittays, that's a cool tip. Thanks ittays, that’s a cool tip.

]]> By: Hsiu-Fan Wang http://programmingzen.com/2007/02/08/acts-as-suggest-plugin/#comment-181 Hsiu-Fan Wang Wed, 30 Nov -0001 00:00:00 +0000 http://72.52.169.158/~antonioc/2007/02/08/acts-as-suggest-plugin/#comment-181 Just wanted to post a comment to say this is totally awesome, despite the fact that no one else seems to have noticed :) Just wanted to post a comment to say this is totally awesome, despite the fact that no one else seems to have noticed :)

]]> By: Zach Dennis http://programmingzen.com/2007/02/08/acts-as-suggest-plugin/#comment-182 Zach Dennis Wed, 30 Nov -0001 00:00:00 +0000 http://72.52.169.158/~antonioc/2007/02/08/acts-as-suggest-plugin/#comment-182 This is pretty sweet Antonio... I agree with Hsiu-fan. Great work! This is pretty sweet Antonio… I agree with Hsiu-fan. Great work!

]]> By: Benjamin Curtis http://programmingzen.com/2007/02/08/acts-as-suggest-plugin/#comment-183 Benjamin Curtis Wed, 30 Nov -0001 00:00:00 +0000 http://72.52.169.158/~antonioc/2007/02/08/acts-as-suggest-plugin/#comment-183 Posted at <a href='http://www.agilewebdevelopment.com/plugins/acts_as_suggest'>agilewebdevelopment.com/plugins/acts_as_suggest</a> Posted at agilewebdevelopment.com/plugins/acts_as_suggest

]]> By: Antonio Cangiano http://programmingzen.com/2007/02/08/acts-as-suggest-plugin/#comment-184 Antonio Cangiano Wed, 30 Nov -0001 00:00:00 +0000 http://72.52.169.158/~antonioc/2007/02/08/acts-as-suggest-plugin/#comment-184 Thanks Ben. Given the amount of interest, I'll work further on it. ;-) Thanks Ben. Given the amount of interest, I’ll work further on it. ;-)

]]> By: Alex Wayne http://programmingzen.com/2007/02/08/acts-as-suggest-plugin/#comment-185 Alex Wayne Wed, 30 Nov -0001 00:00:00 +0000 http://72.52.169.158/~antonioc/2007/02/08/acts-as-suggest-plugin/#comment-185 There is a bunch of code in the plugin that look ripe for SQL injection. like: <typo:code lang="ruby" class="small">search_results = self.find(:all, :conditions => "#{fields} = '#{word}'")</typo:code> That should be converted to this <typo:code lang="ruby" class="small">search_results = self.find(:all, :conditions => ["#{fields} = ?", word])</typo:code> at the very least, since @word@ will probably be defined by some random user. Also the building of the conditions query when there is more than 1 column needs to updated to fit that method as well. Seems like a nifty plugin though! I'll keep an eye on it. Probably gonna put it to use in our search on "MagneticWorld":http://magneticworld.com soon. There is a bunch of code in the plugin that look ripe for SQL injection.

like:

search_results = self.find(:all, :conditions => “#{fields} = ‘#{word}’”)

That should be converted to this

search_results = self.find(:all, :conditions => ["#{fields} = ?", word])

at the very least, since @word@ will probably be defined by some random user. Also the building of the conditions query when there is more than 1 column needs to updated to fit that method as well.

Seems like a nifty plugin though! I’ll keep an eye on it. Probably gonna put it to use in our search on “MagneticWorld”:http://magneticworld.com soon.

]]> By: Antonio Cangiano http://programmingzen.com/2007/02/08/acts-as-suggest-plugin/#comment-186 Antonio Cangiano Wed, 30 Nov -0001 00:00:00 +0000 http://72.52.169.158/~antonioc/2007/02/08/acts-as-suggest-plugin/#comment-186 You're obviously right Alex, I've fixed that. You’re obviously right Alex, I’ve fixed that.

]]> By: Arash http://programmingzen.com/2007/02/08/acts-as-suggest-plugin/#comment-187 Arash Wed, 30 Nov -0001 00:00:00 +0000 http://72.52.169.158/~antonioc/2007/02/08/acts-as-suggest-plugin/#comment-187 Will this be able to suggest based on another index, such as a ferret index? Will this be able to suggest based on another index, such as a ferret index?

]]> By: Antonio Cangiano http://programmingzen.com/2007/02/08/acts-as-suggest-plugin/#comment-188 Antonio Cangiano Wed, 30 Nov -0001 00:00:00 +0000 http://72.52.169.158/~antonioc/2007/02/08/acts-as-suggest-plugin/#comment-188 Hi Arash, I plan to move this plugin to rubyforge soon. At that point, I'll work on expanding it to support further options, like Ferret. Hi Arash,

I plan to move this plugin to rubyforge soon. At that point, I’ll work on expanding it to support further options, like Ferret.

]]>