Assuming I want to implemante a search engine, is it dangerous to let the user into a
LIKE. For example :
SELECT user FROM table WHERE user LIKE "[user input]"
In this case, I assume user will be allowed to type characters such as
We also assume that we properly escape injection characters such as
I'm thinking about possible Mysql DDOS if the database contain a large amount of user. Is there other(s) risk ?