implementing-search-filter

The fragment is intended to build product-search queries. It contains no apparent malware or obfuscation, but the SQL builder has a clear SQL injection vulnerability because multiple command-line-controlled values are interpolated directly into SQL. The PostgreSQL branch also contains a syntax error that prevents execution. Use parameterized queries, validate filter types and ranges, and correct the incomplete search_vector assignment.