This commit is contained in:
Benjamin Toby 2025-02-12 11:55:36 +01:00
parent 95318307fe
commit e6702c7f82
5 changed files with 5 additions and 11 deletions

View File

@ -68,8 +68,7 @@ function runQuery(_a) {
* *
* @description Input Validation * @description Input Validation
*/ */
if (readOnly && if (readOnly && formattedQuery.match(/^alter|^delete|^create/i)) {
formattedQuery.match(/^alter|^delete|information_schema|^create/i)) {
throw new Error("Wrong Input!"); throw new Error("Wrong Input!");
} }
if (readOnly) { if (readOnly) {

View File

@ -20,7 +20,7 @@ const createTable_1 = __importDefault(require("./utils/createTable"));
const updateTable_1 = __importDefault(require("./utils/updateTable")); const updateTable_1 = __importDefault(require("./utils/updateTable"));
const dbHandler_1 = __importDefault(require("./utils/dbHandler")); const dbHandler_1 = __importDefault(require("./utils/dbHandler"));
const ejson_1 = __importDefault(require("../utils/ejson")); const ejson_1 = __importDefault(require("../utils/ejson"));
const grab_dir_names_1 = __importDefault(require("@/utils/backend/names/grab-dir-names")); const grab_dir_names_1 = __importDefault(require("../../utils/backend/names/grab-dir-names"));
/** /**
* # Create database from Schema Function * # Create database from Schema Function
* @requires DSQL_DB_CONN - Gobal Variable for Datasquirel Database * @requires DSQL_DB_CONN - Gobal Variable for Datasquirel Database

View File

@ -79,12 +79,7 @@ export default async function runQuery({
* *
* @description Input Validation * @description Input Validation
*/ */
if ( if (readOnly && formattedQuery.match(/^alter|^delete|^create/i)) {
readOnly &&
formattedQuery.match(
/^alter|^delete|information_schema|^create/i
)
) {
throw new Error("Wrong Input!"); throw new Error("Wrong Input!");
} }

View File

@ -8,7 +8,7 @@ import updateTable from "./utils/updateTable";
import dbHandler from "./utils/dbHandler"; import dbHandler from "./utils/dbHandler";
import EJSON from "../utils/ejson"; import EJSON from "../utils/ejson";
import { DSQL_DatabaseSchemaType } from "../types"; import { DSQL_DatabaseSchemaType } from "../types";
import grabDirNames from "@/utils/backend/names/grab-dir-names"; import grabDirNames from "../../utils/backend/names/grab-dir-names";
type Param = { type Param = {
userId?: number | string | null; userId?: number | string | null;

View File

@ -1,6 +1,6 @@
{ {
"name": "@moduletrace/datasquirel", "name": "@moduletrace/datasquirel",
"version": "4.0.5", "version": "4.0.6",
"description": "Cloud-based SQL data management tool", "description": "Cloud-based SQL data management tool",
"main": "dist/index.js", "main": "dist/index.js",
"bin": { "bin": {