jenkins-bot has submitted this change and it was merged.
Change subject: Slightly more robuse unauthorized db checker
......................................................................
Slightly more robuse unauthorized db checker
Change-Id: I9b706d6a79d3b80d85a52653791b49e73754f7f1
---
M quarry/web/sqlactions.py
1 file changed, 1 insertion(+), 1 deletion(-)
Approvals:
Yuvipanda: Looks good to me, approved
jenkins-bot: Verified
diff --git a/quarry/web/sqlactions.py b/quarry/web/sqlactions.py
index 993dcac..0f05182 100644
--- a/quarry/web/sqlactions.py
+++ b/quarry/web/sqlactions.py
@@ -4,7 +4,7 @@
be considered 'authoritative'. Will probably always be
easily cirumventible by dedicated trolls, but should keep
the merely clueless out"""
- if 'information_schema' in sql:
+ if 'information_schema' in sql.lower():
# According to springle hitting this db can fuck
# things up for everyone, and it isn't easy to
# restrict access to this from mysql
--
To view, visit https://gerrit.wikimedia.org/r/151009
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: merged
Gerrit-Change-Id: I9b706d6a79d3b80d85a52653791b49e73754f7f1
Gerrit-PatchSet: 1
Gerrit-Project: analytics/quarry/web
Gerrit-Branch: master
Gerrit-Owner: Yuvipanda <[email protected]>
Gerrit-Reviewer: Yuvipanda <[email protected]>
Gerrit-Reviewer: jenkins-bot <>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
