Textpattern Support Forum

What is the thinking behind using asy_wondertag under version TXP 4.2.0, unless it handles internal characters differently than TXP’s tags within tags capability.

Your example code:

<txp:if_article_section name=“list”>
<txp:asy_wondertag><txp:article_custom form=“myform” limit=“999” where=“title like(’<txp:title />%’) and section<>‘list’” sort=“Title asc” /></txp:asy_wondertag>
</txp:if_article_section>

Gocom wrote:

where='Title like(''<txp:title />%'') and Section<>''list'''

Thanks for correct code.

It opens too many injection possiblities and isn’t exactly user friendly.

You rights, it is necessary yet to do additional verification to avoid possible sql injections.

In the future, if it to plug in a core, then it is possible to do option same as

• Allow PHP in pages?
• Allow PHP in articles?
• Allow raw PHP?

wet wrote:

Strange: We use tags to abstract SQL, then we add attributes to tags to unveil a fraction of the previously abstracted SQL.

It’s two ways and they can complement each other. IMHO, 95% queries can decide abstract SQL, but other 5% deciding through abstract SQL is impossible.

Bloke wrote:

IMHO, 95% queries can decide abstract SQL

… and for everything else there’s smd_query, which has the advantage of being able to paginate articles, unlike article_custom ;-)

smd_query – great plugin! Thank you for its creation.
I use smd_query for implementation of difficult sql queries with “group by”, “union”, “subquery” and “free queries to external tables”, but for other very simple queries to article I use patched article_custom.

article_custom uses standart TxP form, for example, the same forms I use from other plugins(rss_unlimited_categories, aks_rss).

Some features which it is difficult to decide with smd_query (it’s only my IMHO)

• Not support standart TxP form (possibly, it quite and it is not needed for smd_query)
• There is not support of prefixes to the tables of TXP (or I did not find how to use this possibility)

Other ideas on plugin smd_query I will describe in the forum of its support. Thank you once again for good plugin.