From a3e28233b6827fdac52b434ac9d1fc89a34813cb Mon Sep 17 00:00:00 2001 From: Erich Eckner Date: Fri, 12 Jul 2019 08:58:12 +0200 Subject: buildmaster/log.php: append "%" to search parameters - they were stripped for security reasons in init.php --- buildmaster/log.php | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/buildmaster/log.php b/buildmaster/log.php index 2810d7f..e339db7 100644 --- a/buildmaster/log.php +++ b/buildmaster/log.php @@ -15,9 +15,11 @@ require_once BASE . "/lib/mysql.php"; ); $join = " LEFT" . mysql_join_ssh_log_build_slaves(); if (array_key_exists("action", $_GET)) - $filter .= " AND `ssh_log`.`action` LIKE from_base64(\"" . base64_encode($_GET["action"]) . "\")"; + $filter .= " AND `ssh_log`.`action` LIKE from_base64(\"" . base64_encode($_GET["action"] . "%") . "\")"; + if (array_key_exists("parameters", $_GET)) + $filter .= " AND `ssh_log`.`parameters` LIKE from_base64(\"" . base64_encode($_GET["parameters"] . "%") . "\")"; if (array_key_exists("slave", $_GET)) - $filter .= " AND `build_slaves`.`name` LIKE from_base64(\"" . base64_encode($_GET["slave"]) . "\")"; + $filter .= " AND `build_slaves`.`name` LIKE from_base64(\"" . base64_encode($_GET["slave"] . "%") . "\")"; } elseif (array_key_exists("show", $_GET) && ($_GET["show"] == "command")) { $to_show = "command"; -- cgit v1.2.3