SQL QUERY ERROR , alpha-index

That's true; thus why we don't have any critical data on this system . However, if I understand regular expressions, using the "\" would discount the trailing character; which is "|". So I would imagine there might be a way to ignore some of the break down mechanism within the regular expression. I haven't done a lot of testing with it so I'm not sure of the feasibility or what good it would do at this point.

thanks for pointing out this,
but actually not possible
-- you see \ will not give you : \|
-- it will give you |\|

thus again breaking the query, but will disallow this character too

-- anyway inserting a character | every ONE character makes impossible to build a valid query by adding something at the alpha-index letter=....

i will disallow this character too,
if you have any further information or suggestions about security please don't hesitate to write

Regards

Georgios,

The pipe character (|) is commonly used as a separator for the alpha-index.
Will this change affect that?

Ken

Hello, Ken

the pipe character is used as display seperator, and is not related to OR seperator inside the SQL Query 's regular Expression

and there are no changes to the existing SQL query,

just some more code to makes sure that query can not be broken by adding quotes or slashes to the URL variable "&letter=somestring"