diff options
author | Ted Trask <ttrask01@yahoo.com> | 2015-06-01 16:16:35 -0400 |
---|---|---|
committer | Ted Trask <ttrask01@yahoo.com> | 2015-06-01 16:16:35 -0400 |
commit | 52ae74a76253d6f2580c4002f5c7c0c0a78ae32b (patch) | |
tree | c66935ec84c7dbbe04d4c81dfd8a5a19e6e9ce79 | |
parent | ea783ac7b89df62e8581143c046feb6ddd644e1a (diff) | |
download | acf-provisioning-52ae74a76253d6f2580c4002f5c7c0c0a78ae32b.tar.bz2 acf-provisioning-52ae74a76253d6f2580c4002f5c7c0c0a78ae32b.tar.xz |
Provide SQL escape function to scripts
-rw-r--r-- | config/update_device_params.lua | 2 | ||||
-rw-r--r-- | provisioning-model.lua | 1 |
2 files changed, 2 insertions, 1 deletions
diff --git a/config/update_device_params.lua b/config/update_device_params.lua index ee7034a..25048da 100644 --- a/config/update_device_params.lua +++ b/config/update_device_params.lua @@ -11,7 +11,7 @@ local function findip(mac) if not mac or mac == "" then return nil end - local ipaddr = functions.getselectresponse("SELECT ip FROM provisioning_requests WHERE mac~*'"..mac.."'") + local ipaddr = functions.getselectresponse("SELECT ip FROM provisioning_requests WHERE mac~*'"..functions.escape(mac).."'") if ipaddr and ipaddr[1] then return ipaddr[1].ip end diff --git a/provisioning-model.lua b/provisioning-model.lua index 2d08f0b..65fc87f 100644 --- a/provisioning-model.lua +++ b/provisioning-model.lua @@ -500,6 +500,7 @@ end functions = { getselectresponse=getselectresponse, runsqlcommand=runsqlcommand, + escape=provdb.escape, get_device=get_device, get_device_params=get_device_params, set_device_params=set_device_params, |