gnh1201/reasonableframework
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update database.php

Browse Source
This commit is contained in:
Namhyeon Go 2020-02-22 19:16:38 +09:00 committed by GitHub
parent 8a2a3def51
commit 91d3a550fb
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 7 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
system/database.php
View File

@ -288,7 +288,7 @@ if(!is_fn("get_bind_to_sql_insert")) {
$setfixeds = get_array(get_value_in_array("setfixeds", $options, false));
$setignores = get_array(get_value_in_array("setignores", $options, false));
$setwheres = get_array(get_value_in_array("setwheres", $options, false));
// safemode_off (default: false)
$safemode_off = array_key_equals("safemode_off", $options, true);
@ -322,10 +322,12 @@ if(!is_fn("get_bind_to_sql_insert")) {
}
// preventing incident query
$num_conditions = sum($num_keys, $num_wheres);
if($num_conditions == 0 && $safemode_off !== true) {
write_common_log("suspicious incident query. blocked. (safemode=1)", "system/database");
return false;
if($num_duplicates > 0)
$num_conditions = array_sum(array($num_keys, $num_wheres));
if($num_conditions == 0 && $safemode_off !== true) {
write_common_log("suspicious incident query. blocked. (safemode=1)", "system/database");
return false;
}
}
// check ignores