# Sanitize querystring query

**URL:** <https://discuss.elastic.co/t/sanitize-querystring-query/78144>\
**Category:** Elasticsearch\
**Created:** [March 10, 2017, 1:03pm UTC](https://discuss.elastic.co/t/sanitize-querystring-query/78144 "2017-03-10T13:03:42Z")\
**Posts on this page:** 10\
**Page:** 1

<div class="post-metadata">

**Author:** ![Garito](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/garito/32/8854_2.png) [@Garito](https://discuss.elastic.co/u/Garito)\
**Post date:** [March 10, 2017, 1:03pm UTC](https://discuss.elastic.co/t/sanitize-querystring-query/78144/1 "2017-03-10T13:03:42Z")

</div>

Hi!  
Could you, please, help me on sanitizing the query? I prefer python

Thanks!

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [March 10, 2017, 2:59pm UTC](https://discuss.elastic.co/t/sanitize-querystring-query/78144/2 "2017-03-10T14:59:24Z")

</div>

What is the question?

---

<div class="post-metadata">

**Author:** ![Garito](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/garito/32/8854_2.png) [@Garito](https://discuss.elastic.co/u/Garito)\
**Post date:** [March 10, 2017, 3:16pm UTC](https://discuss.elastic.co/t/sanitize-querystring-query/78144/3 "2017-03-10T15:16:35Z")

</div>

I'm asking for a python code that sanitizes the user input before parse it to the querystring query

For instance, using this query:  
+  
will fail

I don't know if this query has any security concern but will be nice if the sanitization process could have this in mind

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [March 10, 2017, 3:37pm UTC](https://discuss.elastic.co/t/sanitize-querystring-query/78144/4 "2017-03-10T15:37:18Z")

</div>

Why not using a `simple_query_string` query instead?

---

<div class="post-metadata">

**Author:** ![Garito](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/garito/32/8854_2.png) [@Garito](https://discuss.elastic.co/u/Garito)\
**Post date:** [March 10, 2017, 4:01pm UTC](https://discuss.elastic.co/t/sanitize-querystring-query/78144/5 "2017-03-10T16:01:23Z")

</div>

> [@dadoonet](#):
>
> simple\_query\_string

As soon as I can migrate my servers to 5.x  
But this will solve my problem and I plan to upgrade'em soon

Thanks David!!!

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [March 10, 2017, 4:12pm UTC](https://discuss.elastic.co/t/sanitize-querystring-query/78144/6 "2017-03-10T16:12:07Z")

</div>

`simple_query_string` exists in previous versions as well. Which one are you running?

---

<div class="post-metadata">

**Author:** ![Garito](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/garito/32/8854_2.png) [@Garito](https://discuss.elastic.co/u/Garito)\
**Post date:** [March 11, 2017, 2:21am UTC](https://discuss.elastic.co/t/sanitize-querystring-query/78144/7 "2017-03-11T02:21:29Z")

</div>

Using 1.7

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [March 11, 2017, 5:21am UTC](https://discuss.elastic.co/t/sanitize-querystring-query/78144/8 "2017-03-11T05:21:33Z")

</div>

This query exists in 1.7: [https://www.elastic.co/guide/en/elasticsearch/reference/1.7/query-dsl-simple-query-string-query.html](https://www.elastic.co/guide/en/elasticsearch/reference/1.7/query-dsl-simple-query-string-query.html)

---

<div class="post-metadata">

**Author:** ![Garito](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/garito/32/8854_2.png) [@Garito](https://discuss.elastic.co/u/Garito)\
**Post date:** [March 11, 2017, 11:32am UTC](https://discuss.elastic.co/t/sanitize-querystring-query/78144/9 "2017-03-11T11:32:15Z")

</div>

Wow! Nice!  
I will bet that I was checked this out but will lost like a champ

I'll try it, thanks a lot!!!!!!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 8, 2017, 11:32am UTC](https://discuss.elastic.co/t/sanitize-querystring-query/78144/10 "2017-04-08T11:32:27Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.