note 118281 added to solrutils.queryphrase

You need to be careful allowing users to use raw queries if you index sensitive information. Cross domain search timing attacks can be used to extract information from an index [1] if your form does not have XSRF protection. If you allow raw queries it can also allow users to DOS your application by inputting slow queries. [1] https://www.idontplaydarts.com/2015/09/cross-domain-timing-attacks-against-lucene/ ---- Server IP: 72.52.91.14 Probable Submitter: 66.249.82.92 (proxied: 124.171.44.192) ---- Manual Page -- http://php.net/manual/en/solrutils.queryphrase.php Edit -- https://master.php.net/note/edit/118281 Del: integrated -- https://master.php.net/note/delete/118281/integrated Del: useless -- https://master.php.net/note/delete/118281/useless Del: bad code -- https://master.php.net/note/delete/118281/bad+code Del: spam -- https://master.php.net/note/delete/118281/spam Del: non-english -- https://master.php.net/note/delete/118281/non-english Del: in docs -- https://master.php.net/note/delete/118281/in+docs Del: other reasons-- https://master.php.net/note/delete/118281 Reject -- https://master.php.net/note/reject/118281 Search -- https://master.php.net/manage/user-notes.php