Hacker News Reader

That kind of issue has nothing to do with Mongodb. He could even use RethinkDb.

That is wildly inaccurate. RethinkDB provides client drivers that model the rethinkdb queries in Javascript, so data and query are not combined into some horrible JSON query language (MongoDB) or horrible string based language (SQL). Input data is treated as is. No part of it will ever be interpreted as a query unless you decide to eval() your input data.

Get informed: http://rethinkdb.com

Yes, but you can also pass the payload to the filter function and allow injecting custom conditions.

r.table('users').filter(<here>).run(conn, callback);

of course if you use the chainable syntax

r.table('users').filter(r.row("age").eq(30)).run(conn, callback);

you can prevent it but that's not the point. It has nothing to do with Mongodb.

Reply on news.ycombinator.com