LBRYFoundation/pool
1
0
Fork 0
mirror of https://github.com/LBRYFoundation/pool.git synced 2025-08-23 17:37:25 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

stratum: be more strict with user string fields

Browse source
This commit is contained in:
Tanguy Pruvot 2018-03-13 17:44:33 +01:00
parent 669ab6bb0f
commit 3624f2c44d
1 changed files with 12 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

16
stratum/db.cpp
View file

@ -43,11 +43,19 @@ void db_close(YAAMP_DB *db)
char *db_clean_string(YAAMP_DB *db, char *string)
{
string[1000] = 0;
char tmp[1024];
char escaped[512] = { 0 };
char *c = string;
unsigned long ret = mysql_real_escape_string(&db->mysql, tmp, string, strlen(string));
strcpy(string, tmp);
size_t i, len = strlen(string);
for (i = 0; i < len && i < sizeof(escaped); i++) {
bool isdigit = (c[i] >= '0' && c[i] <= '9');
bool isalpha = (c[i] >= 'a' && c[i] <= 'z') || (c[i] >= 'A' && c[i] <= 'Z');
bool issepch = (c[i] == '=' || c[i] == ',' || c[i] == ';' || c[i] == '.');
bool isextra = (c[i] == '/' || c[i] == '-' || c[i] == '_');
if (!isdigit && !isalpha && !issepch && !isextra) { c[i] = '\0'; break; }
}
mysql_real_escape_string(&db->mysql, escaped, string, strlen(string));
strcpy(string, escaped);
return string;
}