Updates

package-shared/functions/backend/db/runQuery.js

@@ -20,6 +20,7 @@ const addDbEntry = require("./addDbEntry");
 const updateDbEntry = require("./updateDbEntry");
 const deleteDbEntry = require("./deleteDbEntry");
 const parseDbResults = require("../parseDbResults");
+const trimSql = require("../../../utils/trim-sql");
 
 /** ****************************************************************************** */
 /** ****************************************************************************** */
@@ -89,10 +90,7 @@ async function runQuery({
      */
     try {
         if (typeof query === "string") {
-            const formattedQuery = query
-                .replace(/\n|\r|\n\r|\r\n/gm, " ")
-                .replace(/ {2,}/g, " ")
-                .trim();
+            const formattedQuery = trimSql(query);
 
             /**
              * Input Validation
@@ -101,10 +99,9 @@ async function runQuery({
              */
             if (
                 readOnly &&
-                (formattedQuery.match(
+                formattedQuery.match(
                     /^alter|^delete|information_schema|databases|^create/i
-                ) ||
-                    !formattedQuery.match(/^select|^\( ?select/i))
+                )
             ) {
                 throw new Error("Wrong Input!");
             }