How do you efficiently search through millions of names in Postgres and Ecto? This blog post dives into Postgres’ ILIKE and SIMILARITY operators and their important caveats.
Also included: The most in-depth explanation of how Postgres calculates the SIMILARITY score ever!
Enjoyed reading it!
Regarding:
SET pg_trgm.similarity_threshold = 0.3;
Sadly, at the time of writing, we were not able to find a solution that allows us to configure this threshold for an
Ecto.Repo(tips are more than welcome).
You could do:
query_args = ["SET pg_trgm.similarity_threshold = 0.3", []]
config :my_app, MyApp.Repo,
username: "postgres",
password: "postgres",
database: "demo_dev",
hostname: "localhost",
pool_size: 10,
after_connect: {Postgrex, :query!, query_args}
The above is an adjusted excerpt from the ebook “The Little Ecto Cookbook” by Dashbit, where they showed how to set a particular schema for a repo.
Thank you! Oh that’s so cool! I’ll update the blog post tomorrow! thanks so much! 
We’ve published a new article, “Oban Starts Where Tasks End,” to answer the question, “why do we need background jobs when we have tasks?”
This article will focus on two intertwined languages: Elixir and Erlang.
Cross Site Scripting (XSS) Patterns in Phoenix
If you’ve ever been involved with a pentest on an Elixir application, you know someone calling “raw/1” directly on user input is rare, along with bypassing the view/template/render pattern to render HTML. The author of Sobelow, Griffin Byatt, mentions this in his ElixirConf talk, ElixirConf 2017 - Plugging the Security Holes in Your Phoenix Application It’s a fantastic talk, he gives the example of file upload leading to XSS. I close out this blog post with that example, and hope you find it useful in ensuring the security of your own apps.
Thanks for the helpful information. I will be putting this to use.
Nice find and while you are at it there is also @moduletag which allows you to do the same but at the module level. I use this tagging to segment my unit tests from their integration and system tests siblings.
Nice series. Is this something you could also leverage for Facebook Workplace?
This epic article of 4500 words covers everything there is to know about efficient full-text search with Postgres and Ecto. It explains how Postgres’ full-text search works and how you can use indexes to speed up your search. It also covers search modifiers, query testing, extracting headlines, and so much more!
I fell off the writing wagon a couple years ago, after my first child was born, but I’m trying to hop back on! Here’s a rundown of a method I’ve been using to handle combinatorial explosions of query parameters in my Phoenix applications.
In this blog post, I share how to create a reproducible development environment for Elixir with Nix. Let me know what you think
Today’s article explains how to simulate a bad internet connection when developing locally by adding latency, jitter, and package loss to your connection. It’s crucial to test your app under these circumstances before deploying it. Otherwise, especially users on a mobile connection will have a bad UX when using your site.
Securing Elixir/Phoenix Applications: 5 Tips to Get Started
Hey everyone, this article consists of five recommendations:
Hope it’s useful in your work!
How to serve the webfinger protocol using phoenix:
Learn how to build a Roles and Permissions (RAP) system for Phoenix! Not all your users should have access to all your data. A RAP helps you to set up user groups and control which data they can access through permissions.
Thanks for the post, Peter!
It was very timely for me, as I’ve been working on an authorization library over the last few days and took this as an opportunity to integrate it with your RAP example. I wrote up some thoughts and added the modified modules in a gist. It was a great opportunity to see how the auth library I’m working on might integrate with the permissions architecture you presented. Would love to hear your (or anyone else’s) feedback, if you find time to take a look.
Looking forward to part 2!
This is so cool!!! Amazing work! 
Do you have a thread here where we could discuss this? I have a few thoughts 
Thank you so much for saying so! And yes, I posted a feedback thread here.
Elixir/Phoenix Security: Introduction to Cross Site Request Forgery (CSRF)
This post covers how a CSRF attack works, and the defaults Phoenix gives you to discourage writing vulnerable code.
© Copyright Elixir Forum | Terms | Privacy & Cookies
