Ejegg has submitted this change and it was merged.
Change subject: Escape paging IDs
......................................................................
Escape paging IDs
This allows us to use unsafe or non-numeric column data for paging.
Change-Id: I9c052e43fee85785f6c4139f5008a83ba8d174f1
---
M database/db.py
1 file changed, 3 insertions(+), 2 deletions(-)
Approvals:
Ejegg: Verified; Looks good to me, approved
diff --git a/database/db.py b/database/db.py
index 159bb9f..278afb3 100644
--- a/database/db.py
+++ b/database/db.py
@@ -95,10 +95,11 @@
if lastId is not None:
del query.where[-1]
lastId = result[pageIndex]
+ query.params['lastId'] = lastId
if dir == 'ASC':
- query.where.append("%s > %s" % (pageIndex, lastId))
+ query.where.append("%s > %%(lastId)s" % (pageIndex))
else:
- query.where.append("%s < %s" % (pageIndex, lastId))
+ query.where.append("%s < %%(lastId)s" % (pageIndex))
def last_insert_id(self):
--
To view, visit https://gerrit.wikimedia.org/r/282308
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: merged
Gerrit-Change-Id: I9c052e43fee85785f6c4139f5008a83ba8d174f1
Gerrit-PatchSet: 4
Gerrit-Project: wikimedia/fundraising/tools
Gerrit-Branch: master
Gerrit-Owner: Awight <[email protected]>
Gerrit-Reviewer: Ejegg <[email protected]>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
