Normally no, but in this case yes. It's a bare-bones project and the code is constructing a DB query from a set of known inputs, so null and undefined get treated as null, strings get quotes around them, and everything else is passed through.
For further actions, you may consider blocking this person and/or reporting abuse
Normally no, but in this case yes. It's a bare-bones project and the code is constructing a DB query from a set of known inputs, so
nullandundefinedget treated asnull, strings get quotes around them, and everything else is passed through.