anton/matekasse
2
1
Fork 2
Code Issues 8 Pull requests Projects Releases Packages Wiki Activity

Mehr SQL Injektionkram

Browse source
This commit is contained in:
2000-Trek 2023-07-14 20:58:44 +02:00
parent 1110ec9508
commit 61e68722ca
1 changed files with 4 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
main.py
View file

@ -133,10 +133,10 @@ def remove_user():
users = c.fetchall()
if users != []:
user_name = users[0][1]
c.execute(f"DELETE FROM tags WHERE userid={user_id}")
db_log.info(f"Deleted all tags from user {user_id}")
c.execute(f"DELETE FROM users WHERE id={user_id}")
db_log.info(f"Deleted user {user_id}")
c.execute(f"DELETE FROM tags WHERE userid=?", [user_id])
db_log.info(f"Deleted all tags from user ?", [user_id])
c.execute(f"DELETE FROM users WHERE id=?", [user_id])
db_log.info(f"Deleted user ?", [user_id])
conn.commit()
socketio.emit("update", "update")
return f'<p><p><a href="/list">user and tag list</a> | <a href="/documentation">Documentation</a></p> <p>Deleted user {escape(user_name)}</p><a href="/list">return to the tags and user list</a></p>'