summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorErich Eckner <git@eckner.net>2019-07-12 08:58:12 +0200
committerErich Eckner <git@eckner.net>2019-07-12 08:58:25 +0200
commita3e28233b6827fdac52b434ac9d1fc89a34813cb (patch)
treec5e000140b8b8cc8aa8686730b8be59b36ef8530
parent3254fd4b2f1150ddfd0b3c5a92a5b05f632f7f77 (diff)
downloadarchweb32-a3e28233b6827fdac52b434ac9d1fc89a34813cb.tar.xz
buildmaster/log.php: append "%" to search parameters - they were stripped for security reasons in init.php
-rw-r--r--buildmaster/log.php6
1 files changed, 4 insertions, 2 deletions
diff --git a/buildmaster/log.php b/buildmaster/log.php
index 2810d7f..e339db7 100644
--- a/buildmaster/log.php
+++ b/buildmaster/log.php
@@ -15,9 +15,11 @@ require_once BASE . "/lib/mysql.php";
);
$join = " LEFT" . mysql_join_ssh_log_build_slaves();
if (array_key_exists("action", $_GET))
- $filter .= " AND `ssh_log`.`action` LIKE from_base64(\"" . base64_encode($_GET["action"]) . "\")";
+ $filter .= " AND `ssh_log`.`action` LIKE from_base64(\"" . base64_encode($_GET["action"] . "%") . "\")";
+ if (array_key_exists("parameters", $_GET))
+ $filter .= " AND `ssh_log`.`parameters` LIKE from_base64(\"" . base64_encode($_GET["parameters"] . "%") . "\")";
if (array_key_exists("slave", $_GET))
- $filter .= " AND `build_slaves`.`name` LIKE from_base64(\"" . base64_encode($_GET["slave"]) . "\")";
+ $filter .= " AND `build_slaves`.`name` LIKE from_base64(\"" . base64_encode($_GET["slave"] . "%") . "\")";
} elseif (array_key_exists("show", $_GET) &&
($_GET["show"] == "command")) {
$to_show = "command";