oqapi/webgui
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Added prequery statements to SQLReport and per-dbLink allowed keywords.

Browse source
This commit is contained in:
Martin Kamerbeek 2006-02-02 13:23:32 +00:00
parent 929df9cbf9
commit 72b999b0ea
10 changed files with 218 additions and 68 deletions
Download patch file Download diff file Expand all files Collapse all files

26
lib/WebGUI/i18n/English/Asset_SQLReport.pm
View file

@ -54,9 +54,10 @@ while the second question mark will contain the form variable "field1".
},
'4 description' => {
message => q|This is a standard SQL query. If you are unfamiliar with SQL then you'll likely not want to use this wobject.<br>
A question mark ? in the query represents a placeholder. Note that the ? is not enclosed in quotation marks, even when the placeholder represents a string. |,
lastUpdated => 1119841649,
message => q|<p>This is a standard SQL query. If you are unfamiliar with SQL then you'll likely not want to use this wobject.</p>
<p>A question mark ? in the query represents a placeholder. Note that the ? is not enclosed in quotation marks, even when the placeholder represents a string.</p>
<p>The keywords that are allowed are defined in the database link properties. The allowed keywords for the WebGUI database are SELECT, DESCRIBE and SHOW.</p>|,
lastUpdated => 1119841650,
},
'14 description' => {
@ -277,7 +278,24 @@ will always be false for query5.
message => q|Add another query|,
lastUpdated => 1031514049
},
'Prequery not allowed' => {
message => q|<b>Debug:</b> Prequery statement is not allowed: |,
lastUpdated => 0,
},
'Prequery error' => {
message => q|<b>Debug:</b> An error occured in prequery|,
lastUpdated => 0,
},
'Prequery statements' => {
message => q|Prequery statements|,
lastUpdated => 0,
},
'Prequery statements description' => {
message => q|<p>Prequery statements are sql statements executed before the real query. You can use prequery statements for instance to set variables that you want to use in the real query. For example:</p>
<blockquote>set @myVariable := 1</blockquote>
<p>The prequery statements are seperated from each other by returns and cannot use placeholders. You can use macro's within the prequery statements, however. Please note that prequery statements are only visible in the query they belong to and that you can only use statements that are allowed by the database link.</p>|,
lastUpdated => 0,
},
};
1;

10
lib/WebGUI/i18n/English/WebGUI.pm
View file

@ -3849,6 +3849,16 @@ Message Boards hold forums for users. There are many different Wobjects in WebG
message => q|unknown user|,
lastUpdated => 1135205716,
},
'allowed keywords' => {
message => q|Allowed keywords|,
lastUpdated => 0,
},
'allowed keywords description' => {
message => q|You can enter the statements that are allowed for this databaselink. A safe (read-only) choice is SELECT, DESCRIBE and SHOW. The different keywords should be seperated from each other by whitespace.|,
lastUpdated => 0,
},
};