diff options
| author | Erich Eckner <git@eckner.net> | 2019-07-12 08:58:12 +0200 |
|---|---|---|
| committer | Erich Eckner <git@eckner.net> | 2019-07-12 08:58:25 +0200 |
| commit | a3e28233b6827fdac52b434ac9d1fc89a34813cb (patch) | |
| tree | c5e000140b8b8cc8aa8686730b8be59b36ef8530 | |
| parent | 3254fd4b2f1150ddfd0b3c5a92a5b05f632f7f77 (diff) | |
| download | archweb32-a3e28233b6827fdac52b434ac9d1fc89a34813cb.tar.xz | |
buildmaster/log.php: append "%" to search parameters - they were stripped for security reasons in init.php
| -rw-r--r-- | buildmaster/log.php | 6 |
1 files changed, 4 insertions, 2 deletions
diff --git a/buildmaster/log.php b/buildmaster/log.php index 2810d7f..e339db7 100644 --- a/buildmaster/log.php +++ b/buildmaster/log.php @@ -15,9 +15,11 @@ require_once BASE . "/lib/mysql.php"; ); $join = " LEFT" . mysql_join_ssh_log_build_slaves(); if (array_key_exists("action", $_GET)) - $filter .= " AND `ssh_log`.`action` LIKE from_base64(\"" . base64_encode($_GET["action"]) . "\")"; + $filter .= " AND `ssh_log`.`action` LIKE from_base64(\"" . base64_encode($_GET["action"] . "%") . "\")"; + if (array_key_exists("parameters", $_GET)) + $filter .= " AND `ssh_log`.`parameters` LIKE from_base64(\"" . base64_encode($_GET["parameters"] . "%") . "\")"; if (array_key_exists("slave", $_GET)) - $filter .= " AND `build_slaves`.`name` LIKE from_base64(\"" . base64_encode($_GET["slave"]) . "\")"; + $filter .= " AND `build_slaves`.`name` LIKE from_base64(\"" . base64_encode($_GET["slave"] . "%") . "\")"; } elseif (array_key_exists("show", $_GET) && ($_GET["show"] == "command")) { $to_show = "command"; |