[TYPO3-english] RealURL and concat in alias_field

[Rik Willems]

Hi Ries,

Thanks for your comment. I will change that.

I was confused by a comment that said this will be put straight in the 
select query. That's why I asked about safety. After sending the message 
I thought of the fact that it would be put in the select part of the 
query, so no user input would be inserted.

Thx again,

Rik

Op 25-10-2010 20:01, Ries van Twisk schreef:
> Rick,
>
> double quotes within a SQL query denotes field and table names,
> you need to use single quotes.
>
> For example : "concat(first_name, ' ', last_name)",
>
> I't save to use (no more less save then just using title for example).
>
> Ries van Twisk
> --------------------------------------------------------------------------------------------------------------------------------
>
> Certified TYPO3 Integrator / TYPO3 Developer
> TYPO3 Glassfish JasperReports JasperETL Flex Blaze-DS WebORB PostgreSQL
> DB-Architect
> email: ries at vantwisk.nl web: http://www.rvantwisk.nl/ skype:
> callto://r.vantwisk
>
>
> On Oct 25, 2010, at 12:22 PM, Rik Willems wrote:
>
>> Hi all,
>>
>> Just a short question. For a project I'd like to use first_name and
>> last_name fields as part of an url through RealURL. I found the
>> following snippet for that.
>>
>> Is this safe to use?
>>
>>
>> ==
>> 'user' => array(
>> array(
>> 'GETvar' => 'tx_feuserlisting_pi1[showUid]',
>> 'lookUpTable' => array(
>> 'table' => 'fe_users',
>> 'id_field' => 'uid',
>> 'alias_field' => 'concat(first_name, " ", last_name)',
>> 'addWhereClause' => ' AND NOT deleted',
>> #'languageGetVar' => 'L',
>> #'languageExceptionUids' => '',
>> #'languageField' => 'sys_language_uid',
>> #'transOrigPointerField' => 'l18n_parent',
>> 'useUniqueCache' => 1,
>> 'useUniqueCache_conf' => array(
>> 'strtolower' => 1,
>> 'spaceCharacter' => '-',
>> ),
>> 'autoUpdate' => 1,
>> ),
>> ),
>> ),
>> ==
>>
>> thx!
>>
>> Rik
>> _______________________________________________
>> TYPO3-english mailing list
>> TYPO3-english at lists.typo3.org
>> http://lists.typo3.org/cgi-bin/mailman/listinfo/typo3-english
>