Differences From:
File
src/admin.c
part of check-in
[007d1ce44f]
- Rename admin_sql_page.c to admin.c. Refactor the strxform functions into
SQL functions. Refactor the db_generic_query_view() routine. Fix multiple
security vulnerabilities. Bring the code closer into compliance with
style guidelines.
by
drh on
2008-02-07 15:08:02.
[view]
To:
File
src/admin.c
part of check-in
[138177c30e]
- correction to the 'warning' text in admin_sql_page()
by
stephan on
2008-02-08 16:27:25.
Also file
src/admin.c
part of check-in
[373e42de1d]
- Merge two branches that were created within one second of one another.
There is a race condition in the anti-forking logic that allowed this
fork to occur.
by
drh on
2008-02-08 17:27:16.
[view]
@@ -64,11 +64,10 @@
return;
}
style_header("Admin SQL");
@ <hr/><h2>SQL:</h2>
- @ <span class='achtung'>You can enter arbitrary SQL here, to execute
- @ against the repo database.
- @ With great power comes great responsibility...</span><br/>
+ @ You can enter only SELECT statements here, and some SQL-side functions
+ @ are also restricted.<br/>
@ <form action='' method='post'>
@ <textarea style='border:2px solid black' name='sql'
@ cols='80' rows='5'>%h(zSql)</textarea>
@ <br/><input type='submit' name='sql_submit'/> <input type='reset'/>