Merge pull request #1663 from OmniLayer/staging

Staging
OmniLayer · Jul 30, 2018 · 96362c8 · 96362c8
2 parents ec93e8e + 71ce3e8
commit 96362c8
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/api/search_service.py b/api/search_service.py
@@ -20,6 +20,14 @@ def search():
       query = re.sub(r'\W+', '0', request.args.get('query') ) # strip and get query
   else:
       return jsonify({ 'status': 400, 'data': 'No query found in request' })
+
+
+  if query[:2] in ['0x','0X']:
+    return jsonify({ 'status': 400, 'data': 'Invalid search query prefix.' })
+
+  if len(query) < 3:
+    return jsonify({ 'status': 400, 'data': 'Search query to short.' })
+
   ROWS=dbSelect("select * from transactions t, txjson txj where t.txhash ~* \'" + str(query) + "\' and t.txdbserialnum=txj.txdbserialnum")
 
   response = []