Postgres queries failing on quoted entities

[atanas-bird]

There is a bug when using LightRag with Postgres. If there are entities between quotes, the query fails. Example, if you have a node Newspaper "Weekend" and you query with the word newspaper the query fails. If you remove the quotes from Newspaper "Weekend" in the graph edit mode, the query works. Is there a way to escape the quotes in query mode?

[ismaildasci]

the issue is special characters in entity names arent being properly escaped before building the sql query.

you have a few options:

1. use parameterized queries instead of string concatenation. this prevents both the quote issue and sql injection.

2. for postgres specifically, you can use dollar-quoted strings which handle embedded quotes.

3. sanitize entity names before inserting by escaping double quotes and single quotes properly.

4. as a workaround until fixed, preprocess your data to remove or replace quotes from entity names before ingestion.

5. check the lightrag source where queries are built and add proper escaping. look for where entity names are interpolated into sql strings.

the root cause is likely in the query building logic. if you can share which file or function builds the postgres queries, i can suggest a more specific fix.

you might also want to open an issue on the repo if this isnt already tracked - its a security concern too since unescaped user input in sql queries can lead to injection.