Diff
Not logged in

Differences From:

File src/admin.c part of check-in [007d1ce44f] - Rename admin_sql_page.c to admin.c. Refactor the strxform functions into SQL functions. Refactor the db_generic_query_view() routine. Fix multiple security vulnerabilities. Bring the code closer into compliance with style guidelines. by drh on 2008-02-07 15:08:02. [view]

To:

File src/admin.c part of check-in [138177c30e] - correction to the 'warning' text in admin_sql_page() by stephan on 2008-02-08 16:27:25. Also file src/admin.c part of check-in [373e42de1d] - Merge two branches that were created within one second of one another. There is a race condition in the anti-forking logic that allowed this fork to occur. by drh on 2008-02-08 17:27:16. [view]

@@ -64,11 +64,10 @@
     return;
   }
   style_header("Admin SQL");
   @ <hr/><h2>SQL:</h2>
-  @ <span class='achtung'>You can enter arbitrary SQL here, to execute
-  @ against the repo database.
-  @ With great power comes great responsibility...</span><br/>
+  @ You can enter only SELECT statements here, and some SQL-side functions
+  @ are also restricted.<br/>
   @ <form action='' method='post'>
   @ <textarea style='border:2px solid black' name='sql'
   @  cols='80' rows='5'>%h(zSql)</textarea>
   @ <br/><input type='submit' name='sql_submit'/> <input type='reset'/>