summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorTed Trask <ttrask01@yahoo.com>2015-06-01 16:16:35 -0400
committerTed Trask <ttrask01@yahoo.com>2015-06-01 16:16:35 -0400
commit52ae74a76253d6f2580c4002f5c7c0c0a78ae32b (patch)
treec66935ec84c7dbbe04d4c81dfd8a5a19e6e9ce79
parentea783ac7b89df62e8581143c046feb6ddd644e1a (diff)
downloadacf-provisioning-52ae74a76253d6f2580c4002f5c7c0c0a78ae32b.tar.bz2
acf-provisioning-52ae74a76253d6f2580c4002f5c7c0c0a78ae32b.tar.xz
Provide SQL escape function to scripts
-rw-r--r--config/update_device_params.lua2
-rw-r--r--provisioning-model.lua1
2 files changed, 2 insertions, 1 deletions
diff --git a/config/update_device_params.lua b/config/update_device_params.lua
index ee7034a..25048da 100644
--- a/config/update_device_params.lua
+++ b/config/update_device_params.lua
@@ -11,7 +11,7 @@ local function findip(mac)
if not mac or mac == "" then
return nil
end
- local ipaddr = functions.getselectresponse("SELECT ip FROM provisioning_requests WHERE mac~*'"..mac.."'")
+ local ipaddr = functions.getselectresponse("SELECT ip FROM provisioning_requests WHERE mac~*'"..functions.escape(mac).."'")
if ipaddr and ipaddr[1] then
return ipaddr[1].ip
end
diff --git a/provisioning-model.lua b/provisioning-model.lua
index 2d08f0b..65fc87f 100644
--- a/provisioning-model.lua
+++ b/provisioning-model.lua
@@ -500,6 +500,7 @@ end
functions = {
getselectresponse=getselectresponse,
runsqlcommand=runsqlcommand,
+ escape=provdb.escape,
get_device=get_device,
get_device_params=get_device_params,
set_device_params=set_device_params,