# Is it possible to POST something destructive to /\_search? **URL:** \ **Category:** Elasticsearch\ **Created:** [June 25, 2013, 4:30pm UTC](https://discuss.elastic.co/t/is-it-possible-to-post-something-destructive-to--search/12541 "2013-06-25T16:30:12Z")\ **Posts on this page:** 2\ **Page:** 1
**Author:** ![Steinar\_Bang](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/steinar_bang/32/122285_2.png) [@Steinar\_Bang](https://discuss.elastic.co/u/Steinar_Bang)\ **Post date:** [June 25, 2013, 4:30pm UTC](https://discuss.elastic.co/t/is-it-possible-to-post-something-destructive-to--search/12541/1 "2013-06-25T16:30:12Z")
If I have an index [http://localhost:9200/mydatarecords/](http://localhost:9200/mydatarecords/) is it then possible to POST something to [http://localhost:9200/mydatarecords/\_search](http://localhost:9200/mydatarecords/_search) that can modify documents in that index? The reason I am asking is that I am wondering, whether I can allow any and all possible values to be POSTed to the \_search URL, or whether I should look at what's POSTed and yank things that unintentionally could modify the data in the index? Thanks! - Steinar -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out). ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 6, 2017, 2:29am UTC](https://discuss.elastic.co/t/is-it-possible-to-post-something-destructive-to--search/12541/2 "2017-07-06T02:29:32Z")
Closed on July 6, 2017, 2:29am UTC